This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139322e302f32342d3234203d3e20313331333134.roa
File: 3130332e3230312e3139322e302f32342d3234203d3e20313331333134.roa (raw, json)
Hash identifier: OM/Zbo4+rhmJKkNEv9SMrBBMuzephsrrlzSkkgmexNE=
Subject key identifier: 1B:D6:24:14:01:51:7D:56:07:58:5E:26:01:53:0C:6D:6E:FC:EE:B1
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 65CC5E5F7EC2B6634DA4AABDC1132D2931014B0D
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139322e302f32342d3234203d3e20313331333134.roa
Signing time: Tue 20 Jan 2026 01:19:12 +0000
ROA not before: Tue 20 Jan 2026 01:14:12 +0000
ROA not after: Tue 19 Jan 2027 01:19:12 +0000
asID: 131314
IP address blocks: 103.201.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:cc:5e:5f:7e:c2:b6:63:4d:a4:aa:bd:c1:13:2d:29:31:01:4b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: Jan 20 01:14:12 2026 GMT
Not After : Jan 19 01:19:12 2027 GMT
Subject: CN=1BD6241401517D5607585E2601530C6D6EFCEEB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:e7:89:fd:b5:8c:74:6d:02:8c:a1:5e:91:
85:97:e6:56:22:3d:d0:ae:4d:e6:d5:65:1d:3e:23:
9e:56:13:6f:e2:82:4d:93:53:71:25:e9:9a:73:54:
92:9d:ae:1d:7f:7a:37:bd:0d:f5:e5:59:a1:fd:16:
cc:81:de:f7:9a:21:94:04:af:33:a1:cb:11:d6:77:
36:c6:e7:9e:99:08:e6:55:24:9e:d4:05:9d:08:3a:
db:ca:d1:9d:d0:76:9b:d4:39:24:b3:8a:fa:5b:31:
c7:af:f7:e7:d6:ab:44:21:f4:2c:95:a5:16:e3:b8:
3d:ed:ef:d1:94:cd:75:e1:d7:c9:12:1a:82:9f:f8:
15:63:93:af:b6:fd:12:9f:90:06:67:25:f2:58:c8:
e1:cd:88:98:2a:7d:de:cb:10:97:b7:b1:79:ba:0e:
4f:c8:cb:ca:3c:42:12:39:51:7d:a0:74:2e:bf:48:
24:29:fa:da:80:6a:2e:99:9f:6b:9d:2a:70:dd:7d:
53:72:8b:d7:93:bd:19:10:18:35:18:36:f4:19:67:
aa:14:de:b1:a3:5d:42:a8:11:48:36:0d:01:26:83:
53:80:de:4c:51:c1:e0:b5:59:9e:b7:d1:f3:e3:67:
8e:ef:6e:d0:c0:63:10:d8:8b:0f:d2:78:47:9c:e8:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D6:24:14:01:51:7D:56:07:58:5E:26:01:53:0C:6D:6E:FC:EE:B1
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139322e302f32342d3234203d3e20313331333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.201.192.0/24
Signature Algorithm: sha256WithRSAEncryption
51:1d:1c:ed:ef:a5:12:33:f9:28:bb:64:0b:5c:ea:9c:09:04:
88:fd:2b:df:1b:70:09:f2:d2:05:fd:1b:4d:8a:c9:d8:13:de:
64:0e:78:aa:fe:ac:59:28:27:64:bb:94:bb:c1:7f:bd:6f:a2:
bf:f6:38:f8:44:dd:a4:25:fb:46:d0:9e:0c:cc:b4:35:12:56:
ee:ee:41:77:71:37:82:9b:96:66:a6:ab:0d:31:09:42:d3:0a:
b9:37:b1:ab:f0:ee:44:f0:71:8b:79:89:80:a1:15:a1:88:31:
06:b4:60:99:94:e9:af:e1:e0:b8:46:04:b1:a5:6b:36:33:04:
1f:58:d0:51:dd:b3:2e:8a:d5:1d:b3:1f:a4:ce:bb:de:1b:2c:
37:a3:ab:80:5f:61:e8:15:c7:84:5c:6e:c3:25:6b:99:4d:69:
77:3b:13:04:c2:9b:f8:ca:0c:7f:ba:52:44:47:92:3a:63:48:
31:3e:a9:b2:8c:c6:6f:b6:d9:69:f0:91:21:06:9c:d8:96:25:
91:07:ea:ff:5d:00:0b:18:eb:5e:50:31:81:8c:2d:2c:b0:cb:
cf:dd:7e:df:d3:f8:73:b2:bf:2f:b4:6a:cb:42:68:1b:53:f2:
f7:f9:18:90:c8:dc:f2:23:07:56:86:3b:b7:9c:bd:da:de:6f:
37:c5:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:52:51 2026 by rpki-client