This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/3130332e3234382e36342e302f32322d3234203d3e20313734.roa
File: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (raw, json)
Hash identifier: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=
Subject key identifier: B8:2E:A0:27:88:D5:15:12:16:7D:62:32:30:06:39:DB:C8:07:5F:7D
Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242
Certificate serial: 482F5FC045A0C8E0AC2C6F41E63B4817427BB7C9
Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/3130332e3234382e36342e302f32322d3234203d3e20313734.roa
Signing time: Tue 20 Jan 2026 02:27:13 +0000
ROA not before: Tue 20 Jan 2026 02:22:13 +0000
ROA not after: Tue 19 Jan 2027 02:27:13 +0000
asID: 174
IP address blocks: 103.248.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:2f:5f:c0:45:a0:c8:e0:ac:2c:6f:41:e6:3b:48:17:42:7b:b7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242
Validity
Not Before: Jan 20 02:22:13 2026 GMT
Not After : Jan 19 02:27:13 2027 GMT
Subject: CN=B82EA02788D51512167D6232300639DBC8075F7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:66:75:9f:8d:2d:c8:72:9f:07:2d:bb:92:
02:ca:fc:4a:1d:8a:ae:d9:00:70:5d:cc:30:62:63:
41:2f:a3:ad:e7:5c:ec:7d:2d:fd:9f:07:8d:00:17:
f3:84:0a:ff:73:e1:a8:3d:84:e7:e0:cd:bd:7a:8c:
76:74:0c:66:2c:2e:10:9d:5a:29:2c:e3:35:32:2a:
2f:87:9b:da:5f:c5:f9:03:7c:1d:2d:f8:72:35:1a:
cd:93:1f:90:08:a0:2a:ad:2b:da:27:3d:ca:38:93:
11:a5:37:97:a5:3f:0a:a6:8d:4d:11:25:80:a3:ad:
54:4b:f1:23:2c:7b:59:b9:f4:f8:55:b0:6e:df:24:
f3:54:47:e7:df:94:e9:ae:75:3c:bf:14:5f:b6:2e:
c0:16:49:0e:82:b0:d1:90:35:73:b7:b1:fe:eb:13:
13:ad:45:84:f7:78:d3:e9:ca:b0:fb:92:da:ba:dc:
38:36:e0:ba:7f:bb:98:3e:8d:30:f0:9a:75:d6:99:
4a:d5:fd:b2:f6:0f:99:c9:26:94:1c:81:bf:d6:44:
c9:53:75:81:e8:be:0e:d7:b7:49:4a:07:6d:82:1d:
2f:76:32:dc:e1:1b:cb:5c:64:dd:39:98:e2:27:4e:
9f:0a:ce:6e:ca:94:f5:41:e5:b0:de:36:a0:4e:58:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:A0:27:88:D5:15:12:16:7D:62:32:30:06:39:DB:C8:07:5F:7D
X509v3 Authority Key Identifier:
keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/3130332e3234382e36342e302f32322d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.64.0/22
Signature Algorithm: sha256WithRSAEncryption
74:06:b1:54:c6:12:64:4b:12:b5:42:aa:61:13:f5:84:d6:21:
9f:c9:8d:f8:8d:5c:d7:55:de:c1:23:e7:ea:75:9d:b8:5c:3d:
18:54:3a:55:cb:93:ab:c2:c3:67:90:88:bf:14:f5:9c:24:24:
7a:b0:a6:c3:46:d7:08:14:bf:fc:27:c3:4d:3f:e9:8b:79:41:
68:27:e7:83:00:28:da:47:8e:3a:d2:2c:dc:8c:b1:7f:36:b3:
07:8e:54:9f:8f:91:72:5e:d5:15:a2:71:af:53:c2:c8:d6:c2:
94:57:94:90:83:7b:61:6f:f0:67:11:85:f1:b3:de:54:60:66:
9d:23:37:02:54:f0:79:19:9a:71:27:e8:e6:13:33:e8:52:29:
af:76:c9:55:a4:2f:f4:a3:c3:88:9f:22:7d:f5:53:d2:a7:ac:
7e:bd:a7:9e:09:15:e7:8f:bf:8b:3c:f3:84:d0:1d:20:2c:ca:
ca:9a:e0:20:97:03:78:2b:ec:31:92:53:21:9f:b4:57:7a:77:
5a:7f:36:c1:4f:48:12:96:91:f2:9d:3e:7f:c3:e5:a7:ef:d1:
53:3f:91:36:59:b3:73:45:a9:93:7d:90:91:cf:0c:93:67:14:
24:30:5b:bf:b1:10:82:e2:1a:78:0f:75:f7:51:6a:77:b8:1d:
34:08:b0:3a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUSC9fwEWgyOCsLG9B5jtIF0J7t8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0
QzRGRjI0MjAeFw0yNjAxMjAwMjIyMTNaFw0yNzAxMTkwMjI3MTNaMDMxMTAvBgNV
BAMTKEI4MkVBMDI3ODhENTE1MTIxNjdENjIzMjMwMDYzOURCQzgwNzVGN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrtmZ1n40tyHKfBy27kgLK/Eod
iq7ZAHBdzDBiY0Evo63nXOx9Lf2fB40AF/OECv9z4ag9hOfgzb16jHZ0DGYsLhCd
Wiks4zUyKi+Hm9pfxfkDfB0t+HI1Gs2TH5AIoCqtK9onPco4kxGlN5elPwqmjU0R
JYCjrVRL8SMse1m59PhVsG7fJPNUR+fflOmudTy/FF+2LsAWSQ6CsNGQNXO3sf7r
ExOtRYT3eNPpyrD7ktq63Dg24Lp/u5g+jTDwmnXWmUrV/bL2D5nJJpQcgb/WRMlT
dYHovg7Xt0lKB22CHS92MtzhG8tcZN05mOInTp8Kzm7KlPVB5bDeNqBOWIh/AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUuC6gJ4jVFRIWfWIyMAY528gHX30wHwYDVR0j
BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw
MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMjQ0OTk0LzAvMzEzMDMzMmUzMjM0
MzgyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM3MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJn+EAwDQYJKoZIhvcNAQELBQADggEBAHQGsVTGEmRLErVCqmET9YTWIZ/JjfiN
XNdV3sEj5+p1nbhcPRhUOlXLk6vCw2eQiL8U9ZwkJHqwpsNG1wgUv/wnw00/6Yt5
QWgn54MAKNpHjjrSLNyMsX82sweOVJ+PkXJe1RWica9TwsjWwpRXlJCDe2Fv8GcR
hfGz3lRgZp0jNwJU8HkZmnEn6OYTM+hSKa92yVWkL/Sjw4ifIn31U9KnrH69p54J
FeePv4s884TQHSAsysqa4CCXA3gr7DGSUyGftFd6d1p/NsFPSBKWkfKdPn/D5afv
0VM/kTZZs3NFqZN9kJHPDJNnFCQwW7+xEILiGngPdfdRane4HTQIsDo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:54 2026 by rpki-client