This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa
File: 3130332e33352e33322e302f32302d3230203d3e203234343236.roa (raw, json)
Hash identifier: B5yBz7TpHaCkdwg9ZSfSm0coNCl2hMts7/cV8VsDskk=
Subject key identifier: 2E:6D:70:58:57:18:13:7F:BD:C4:DD:12:52:AE:E9:88:A2:0F:CF:BE
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 27FF1A22C2C1F96907E3793AFF712E5EA9B0DF40
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa
Signing time: Tue 20 Jan 2026 01:19:07 +0000
ROA not before: Tue 20 Jan 2026 01:14:07 +0000
ROA not after: Tue 19 Jan 2027 01:19:07 +0000
asID: 24426
IP address blocks: 103.35.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ff:1a:22:c2:c1:f9:69:07:e3:79:3a:ff:71:2e:5e:a9:b0:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jan 20 01:14:07 2026 GMT
Not After : Jan 19 01:19:07 2027 GMT
Subject: CN=2E6D70585718137FBDC4DD1252AEE988A20FCFBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:e3:bb:ec:64:cd:08:20:d9:c4:08:14:7a:
3c:7a:b2:84:14:1b:d1:4f:28:83:b9:a6:56:70:d4:
62:40:26:e1:32:c9:bb:66:ee:86:0e:92:5f:54:d7:
84:08:ff:90:a7:fc:64:d0:f0:62:1b:93:05:c7:06:
b8:ff:6b:ce:d0:5b:75:25:d1:46:76:a6:c6:82:4a:
85:46:56:5e:6f:73:1e:65:d4:62:99:d5:ce:7a:e8:
5b:e9:7e:de:b5:58:76:3a:44:a0:3a:0e:15:47:9d:
92:88:cb:d8:b8:73:50:39:ee:d7:ea:9a:c9:22:68:
bd:d8:6f:6d:bd:fb:6b:1d:a4:c8:e1:0d:07:b2:d2:
a6:38:cf:f6:e1:f0:39:16:b6:fb:d6:6d:b8:01:51:
73:27:a9:cf:0d:f1:c4:b5:10:e3:92:89:97:d4:c4:
fe:c2:1e:16:f6:69:d6:b8:f7:ce:b1:f4:1a:12:76:
be:30:52:9e:f3:f2:4b:7c:a1:cd:80:aa:ad:77:cb:
74:4f:f5:e4:73:b0:42:c8:27:f2:18:fc:91:e9:25:
26:bc:70:2d:d3:e4:4a:02:3b:4a:7b:82:9e:7d:c3:
ba:6f:d2:77:76:4a:0c:22:bb:22:75:c2:0a:7c:7a:
9f:82:d2:89:27:1a:ab:fc:cc:18:88:00:fc:77:3f:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6D:70:58:57:18:13:7F:BD:C4:DD:12:52:AE:E9:88:A2:0F:CF:BE
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.35.32.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:96:06:16:6d:20:5e:48:5e:57:00:ab:f4:f7:65:95:e2:7d:
fa:d8:7c:4c:d4:ca:de:86:e7:5c:f0:1c:b4:5e:9e:a0:87:85:
a2:12:4a:9f:16:16:fd:71:48:65:2b:f2:a5:7e:b2:3b:ee:2d:
85:d4:4a:46:c0:f7:88:83:c8:9e:4b:b7:c5:85:28:f9:79:2b:
0b:10:59:4f:4f:db:d9:57:24:69:79:12:68:c8:fa:f8:da:01:
d8:ec:4d:eb:f9:9d:ed:63:9e:79:ef:8d:20:9b:f1:85:d6:cb:
52:4e:72:18:86:06:79:5c:e4:f5:50:19:cb:52:c6:fd:32:6b:
a6:67:e3:ac:3a:1d:15:e1:9c:45:7d:a7:58:fe:1d:2c:ec:e0:
56:d2:1b:f3:d4:eb:ba:ba:20:24:c5:2f:29:10:40:a2:00:a8:
2b:38:02:62:9a:3e:33:4b:d2:b4:6d:1a:c1:26:66:76:1a:ba:
b3:25:52:ed:4a:93:9a:87:51:2d:3b:70:a1:5c:76:fc:23:74:
1d:60:9c:72:09:28:20:2e:d9:55:92:cc:34:df:2d:03:7e:bf:
0a:3e:7d:9b:5c:ee:80:0f:7b:1a:98:b9:98:25:a4:fe:41:28:
76:90:dd:e8:be:72:3c:a4:40:30:f0:cb:2f:90:a3:b4:be:1f:
a9:91:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:32:43 2026 by rpki-client