This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e34382e302f32322d3232203d3e203234343236.roa
File: 3130332e3233362e34382e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: yjA2unv4yMSjoWERnAn04FvnZXehH4DB2Kp6tkDqZcA=
Subject key identifier: DF:44:1B:86:66:45:BE:C1:85:C2:96:E3:FE:24:04:A6:2B:57:76:3A
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 01B63B73C1335D2DE19570B8C13E0A8E38FEF005
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e34382e302f32322d3232203d3e203234343236.roa
Signing time: Tue 20 Jan 2026 01:19:07 +0000
ROA not before: Tue 20 Jan 2026 01:14:07 +0000
ROA not after: Tue 19 Jan 2027 01:19:07 +0000
asID: 24426
IP address blocks: 103.236.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b6:3b:73:c1:33:5d:2d:e1:95:70:b8:c1:3e:0a:8e:38:fe:f0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jan 20 01:14:07 2026 GMT
Not After : Jan 19 01:19:07 2027 GMT
Subject: CN=DF441B866645BEC185C296E3FE2404A62B57763A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:41:00:20:05:7d:73:e0:a3:80:86:76:16:
2b:05:af:b3:dc:88:24:9e:b2:98:2f:08:2f:4a:a2:
84:f2:28:4e:a6:a6:ec:4f:3e:47:79:94:42:3b:bc:
cc:bd:c9:48:03:7a:0b:ee:e0:8b:0e:ed:7d:da:3e:
9f:3e:b1:0b:09:8d:f3:8b:8f:22:bb:71:bf:e3:8e:
dd:5b:29:b2:71:5a:e3:a5:af:04:88:60:04:cc:b4:
99:89:bd:88:33:d8:26:20:c1:c2:20:4a:06:b0:da:
5b:66:07:61:3d:49:d2:59:ac:52:14:bc:7e:b9:75:
5b:ce:5c:61:db:0c:aa:9c:11:79:f2:37:e5:69:eb:
85:b2:fc:e4:4f:5a:7e:97:70:cd:c2:b8:9e:f8:58:
89:52:d2:2f:04:d1:e7:ce:e4:8f:ad:cd:42:60:83:
d0:b4:b4:80:27:f6:c4:6d:78:0b:9f:d1:f5:7b:bd:
7d:a1:d0:99:50:54:eb:ef:f5:2b:dc:c9:20:51:54:
bf:6a:33:b4:97:17:cc:36:ed:f6:78:43:72:34:84:
36:f1:c9:b8:53:95:69:ed:5f:ee:28:5b:41:1a:66:
de:a8:1b:f8:54:f6:c9:4b:74:c0:a5:f0:67:a7:f2:
5c:14:2d:b6:6e:1a:b4:e2:e6:2d:8d:77:6a:99:93:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:1B:86:66:45:BE:C1:85:C2:96:E3:FE:24:04:A6:2B:57:76:3A
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e34382e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:41:44:56:be:52:45:fd:c5:77:3c:5c:ed:31:c5:c9:0b:30:
e3:2b:cb:b4:af:2c:49:85:c9:3e:a2:a2:cc:06:8f:a1:ed:c7:
e4:8c:25:5a:b5:8f:86:43:39:2b:cf:a1:c7:17:e6:9d:9d:4c:
e9:52:4b:d5:b6:d4:84:b3:76:af:67:fb:54:79:50:44:f8:a7:
3e:e9:e6:9f:e7:4f:82:99:b0:e7:77:4d:79:5b:a5:61:ab:83:
06:6b:49:4c:60:57:9c:61:40:86:6c:62:5d:44:9e:a6:15:1f:
71:81:7c:0b:54:b7:8f:41:0a:bb:65:7e:12:4a:ac:3c:d7:1c:
f7:8c:c2:c6:45:7e:9c:f3:b4:b6:7a:72:80:cc:6e:fe:24:7e:
28:61:49:62:80:5e:cf:cb:1d:c2:29:3e:65:3b:a1:e1:1c:c5:
d3:a6:77:8f:e8:98:db:04:fc:b3:05:dd:f9:df:11:cd:9e:57:
a2:c7:e0:2e:76:45:f0:7b:d9:82:8d:62:d7:15:43:1d:6d:f7:
87:b6:08:b0:e8:2a:1c:37:70:46:7b:16:fd:de:2b:ce:ea:43:
91:e3:09:be:3c:4e:f2:9f:c3:15:67:a4:4b:55:6f:4c:91:67:
ed:16:79:1d:bc:ad:9b:7c:9e:f5:97:c1:0e:18:3a:5e:0c:3a:
8c:05:80:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:33 2026 by rpki-client