This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232302e302f32322d3234203d3e20313331333134.roa
File: 3130332e3230302e3232302e302f32322d3234203d3e20313331333134.roa (raw, json)
Hash identifier: EMW00fnBuKVnoiTvKKxsVDW2WHDg0xhGk6Oa1ZO6SRw=
Subject key identifier: DC:E5:8E:88:E7:D1:66:45:F1:04:71:E4:06:8E:24:18:CF:AB:28:35
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 12477EE3D4658DD564808CB8DC874497B073EE4B
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232302e302f32322d3234203d3e20313331333134.roa
Signing time: Tue 20 Jan 2026 01:19:13 +0000
ROA not before: Tue 20 Jan 2026 01:14:13 +0000
ROA not after: Tue 19 Jan 2027 01:19:13 +0000
asID: 131314
IP address blocks: 103.200.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:47:7e:e3:d4:65:8d:d5:64:80:8c:b8:dc:87:44:97:b0:73:ee:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: Jan 20 01:14:13 2026 GMT
Not After : Jan 19 01:19:13 2027 GMT
Subject: CN=DCE58E88E7D16645F10471E4068E2418CFAB2835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:4d:a6:c9:63:3b:a1:b1:b8:0d:bc:92:e5:
79:da:ec:65:26:d8:be:e3:73:0a:d0:97:10:0d:c8:
84:14:af:80:07:19:b1:e1:42:09:ce:45:de:e1:9d:
e3:2f:42:8c:0f:9e:35:e0:5d:80:70:2a:22:b0:f3:
64:6a:52:cd:65:e5:ff:9d:6d:26:b4:52:2e:2b:8b:
6b:08:09:59:dd:4a:3d:ca:8b:17:6c:85:68:69:fb:
3b:c5:e9:e9:2f:6b:9b:8d:6b:7a:86:e8:69:c2:9e:
f5:dc:39:7c:54:a9:dd:41:1f:40:2d:0e:59:96:13:
85:46:c6:00:ff:ee:fe:54:47:5f:a4:b5:77:e5:26:
e3:87:cd:c3:4e:35:ce:c1:e5:75:8f:a2:bc:04:71:
cf:b3:3a:21:0d:0b:8f:38:c4:14:9a:59:bd:74:cd:
0a:61:24:2c:0b:c2:1c:b0:42:b5:78:28:02:37:91:
f4:ee:06:86:b8:fd:99:a7:d8:90:a6:f0:68:5d:74:
a8:f3:12:16:27:56:b4:6f:23:94:92:8f:27:ee:2e:
d0:54:64:de:5f:d9:34:0d:1c:66:a1:18:d2:ac:d1:
bd:95:be:52:dc:2e:53:13:54:72:3e:56:d1:ed:5f:
7a:38:4d:1c:65:22:de:18:4f:9e:c7:8c:6d:15:9e:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E5:8E:88:E7:D1:66:45:F1:04:71:E4:06:8E:24:18:CF:AB:28:35
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232302e302f32322d3234203d3e20313331333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.200.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:e3:24:5f:da:97:c2:23:ff:61:a6:0e:66:07:11:a1:c5:ac:
3c:f5:fb:07:8a:d6:8b:68:2f:ab:1f:6a:44:6f:38:a7:f0:17:
c0:60:18:b3:25:40:69:22:d5:74:90:2c:af:3a:20:22:b9:99:
c0:b4:99:c6:9c:30:20:ed:44:31:5f:03:33:81:56:a7:57:e9:
85:ef:7c:ab:a2:ef:f1:80:25:af:2e:10:70:04:d6:86:61:6a:
ea:db:cc:39:25:66:01:b8:64:6e:1d:8f:5e:4f:e9:9d:80:42:
cc:11:00:ba:84:5e:e6:98:26:e9:7f:82:8d:e4:16:9a:28:a1:
28:89:18:bf:87:35:fb:da:33:4e:49:35:6f:d0:e4:68:3a:5a:
2a:76:57:a8:da:cc:c6:85:b6:27:29:46:d9:5f:87:97:87:1e:
68:26:83:84:20:27:44:27:08:d5:b2:e2:ef:d7:04:4d:ed:c6:
06:e4:ed:13:eb:7a:25:9e:05:1d:8e:6d:59:73:d6:f9:61:14:
fa:ec:a7:73:b5:a7:75:0b:d3:0b:e4:c0:59:89:a2:11:c3:ff:
b9:eb:5c:3e:4e:1b:c6:d7:db:38:8f:4f:ad:19:58:7e:0b:20:
9f:5b:32:cc:55:4c:5e:e1:97:50:ce:29:5e:d3:d0:48:ba:09:
ab:49:24:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:20:48 2026 by rpki-client