This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233322e302f32322d3234203d3e203536303032.roa
File: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (raw, json)
Hash identifier: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=
Subject key identifier: C8:30:51:2A:A2:82:BB:5B:7F:53:C9:9D:78:68:A5:89:3A:BE:ED:27
Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial: 1670675383BD377E6FB627DBF37114DEC9674385
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233322e302f32322d3234203d3e203536303032.roa
Signing time: Tue 20 Jan 2026 02:20:18 +0000
ROA not before: Tue 20 Jan 2026 02:15:18 +0000
ROA not after: Tue 19 Jan 2027 02:20:18 +0000
asID: 56002
IP address blocks: 103.12.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:70:67:53:83:bd:37:7e:6f:b6:27:db:f3:71:14:de:c9:67:43:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Validity
Not Before: Jan 20 02:15:18 2026 GMT
Not After : Jan 19 02:20:18 2027 GMT
Subject: CN=C830512AA282BB5B7F53C99D7868A5893ABEED27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:71:d2:a5:9c:9d:04:a1:ee:32:72:3e:d1:
ab:d5:cf:f9:21:95:f8:fe:d4:f0:c0:80:94:4e:21:
d5:a6:99:f8:f6:fa:5a:95:da:0d:67:87:9a:2d:de:
b9:c8:80:21:85:22:0e:7e:75:81:a4:c4:3f:4d:1a:
99:ba:92:38:3b:7d:9d:74:ed:88:46:4f:df:89:30:
36:f6:e5:73:bf:92:0b:56:72:4e:dc:bb:b9:84:9f:
7b:59:ea:4f:2f:f0:26:9d:1f:38:8a:4d:21:42:84:
5c:7a:d6:84:e3:ab:ff:34:e9:24:8a:df:04:e1:73:
83:c4:0d:26:ba:a7:98:52:26:b4:1b:bf:5d:8a:27:
98:7f:31:c6:18:d4:29:a1:86:a7:76:fe:50:6c:d1:
48:7f:17:8c:e6:cb:6c:ec:b0:ca:f5:0f:4c:4a:3e:
3b:63:dd:f3:a8:62:94:1f:a5:f0:d2:c4:58:ee:c9:
94:04:23:5a:7b:c3:03:5f:eb:e8:39:51:5a:3c:f4:
17:e7:8e:8f:09:2b:5c:7f:8e:07:bc:e8:a0:76:5b:
3d:3f:27:05:c6:39:90:c5:e0:62:c6:db:85:da:47:
81:0b:39:a8:c0:63:de:c2:02:2c:57:9a:b3:27:3b:
5d:68:e3:6e:d5:7e:8a:3c:40:83:38:67:a9:da:3e:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:51:2A:A2:82:BB:5B:7F:53:C9:9D:78:68:A5:89:3A:BE:ED:27
X509v3 Authority Key Identifier:
keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233322e302f32322d3234203d3e203536303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.12.232.0/22
Signature Algorithm: sha256WithRSAEncryption
56:47:6b:39:be:bc:c5:24:1d:eb:f5:47:60:9a:20:1a:6e:c3:
fc:d3:cc:9b:90:7e:8e:bf:af:a3:7d:b0:30:c8:cb:9e:e3:a8:
94:6f:01:63:0e:d3:cc:bc:37:93:68:48:89:74:bc:64:a1:2e:
3d:65:fa:d0:66:b6:5c:d2:ee:19:80:be:58:17:09:cf:e0:ba:
cd:ee:b9:7a:b0:cb:ff:2c:c4:f3:a5:4e:d3:22:38:cb:92:ad:
47:a7:18:1f:f3:5f:25:db:ba:95:7c:98:fe:41:0f:da:b5:84:
c3:b8:04:1c:e6:2b:d1:73:eb:eb:dd:94:6e:aa:88:f3:51:c2:
de:8b:5b:b8:a6:f9:5e:0d:65:ef:8c:3b:37:5d:e3:0b:52:b2:
3a:33:4e:ab:94:ba:1e:f0:ac:99:2b:0f:c3:db:d4:4f:be:8e:
87:1b:6d:34:14:06:32:9f:77:3c:84:c9:52:7e:41:7e:35:45:
db:54:80:f2:cd:f8:11:f8:b6:78:d7:a5:a6:de:71:00:6f:97:
8b:6a:85:9c:27:5f:e6:1b:59:9a:47:31:b8:8a:1b:05:d6:00:
06:f5:a6:f1:af:37:30:71:14:07:66:c4:bd:14:5c:16:bb:c0:
39:5b:02:f1:6a:b4:97:b0:1f:f6:60:b6:1f:1a:c3:5c:c9:03:
1b:6f:ab:a8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUFnBnU4O9N35vtifb83EU3slnQ4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw
N0YxRDhCMDAeFw0yNjAxMjAwMjE1MThaFw0yNzAxMTkwMjIwMThaMDMxMTAvBgNV
BAMTKEM4MzA1MTJBQTI4MkJCNUI3RjUzQzk5RDc4NjhBNTg5M0FCRUVEMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvHHSpZydBKHuMnI+0avVz/kh
lfj+1PDAgJROIdWmmfj2+lqV2g1nh5ot3rnIgCGFIg5+dYGkxD9NGpm6kjg7fZ10
7YhGT9+JMDb25XO/kgtWck7cu7mEn3tZ6k8v8CadHziKTSFChFx61oTjq/806SSK
3wThc4PEDSa6p5hSJrQbv12KJ5h/McYY1Cmhhqd2/lBs0Uh/F4zmy2zssMr1D0xK
Pjtj3fOoYpQfpfDSxFjuyZQEI1p7wwNf6+g5UVo89Bfnjo8JK1x/jge86KB2Wz0/
JwXGOZDF4GLG24XaR4ELOajAY97CAixXmrMnO11o427Vfoo8QIM4Z6naPoNRAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUyDBRKqKCu1t/U8mdeGiliTq+7ScwHwYDVR0j
BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx
QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzUzNzQwOS8wLzMxMzAzMzJlMzEz
MjJlMzIzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzAzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmcM6DANBgkqhkiG9w0BAQsFAAOCAQEAVkdrOb68xSQd6/VHYJogGm7D
/NPMm5B+jr+vo32wMMjLnuOolG8BYw7TzLw3k2hIiXS8ZKEuPWX60Ga2XNLuGYC+
WBcJz+C6ze65erDL/yzE86VO0yI4y5KtR6cYH/NfJdu6lXyY/kEP2rWEw7gEHOYr
0XPr692UbqqI81HC3otbuKb5Xg1l74w7N13jC1KyOjNOq5S6HvCsmSsPw9vUT76O
hxttNBQGMp93PITJUn5BfjVF21SA8s34Efi2eNelpt5xAG+Xi2qFnCdf5htZmkcx
uIobBdYABvWm8a83MHEUB2bEvRRcFrvAOVsC8Wq0l7Af9mC2HxrDXMkDG2+rqA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:32:18 2026 by rpki-client