This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233332e302f32342d3234203d3e203536303032.roa
File: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (raw, json)
Hash identifier: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=
Subject key identifier: 00:8E:D8:9A:6D:23:37:46:B6:B4:49:A9:C7:77:AF:E7:E7:C1:6F:06
Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial: 7BC045F65FB86CBAD30C93EAF2C1694B22F65E1F
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233332e302f32342d3234203d3e203536303032.roa
Signing time: Tue 20 Jan 2026 02:20:18 +0000
ROA not before: Tue 20 Jan 2026 02:15:18 +0000
ROA not after: Tue 19 Jan 2027 02:20:18 +0000
asID: 56002
IP address blocks: 103.12.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c0:45:f6:5f:b8:6c:ba:d3:0c:93:ea:f2:c1:69:4b:22:f6:5e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Validity
Not Before: Jan 20 02:15:18 2026 GMT
Not After : Jan 19 02:20:18 2027 GMT
Subject: CN=008ED89A6D233746B6B449A9C777AFE7E7C16F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:ee:cd:b5:af:5c:16:13:2a:fe:95:3c:1c:
f7:0b:7d:d6:df:b9:36:ba:1a:87:04:a4:44:ea:8b:
ab:ac:2b:b4:2c:ed:ef:e8:f3:5e:bd:6d:12:09:d0:
70:cb:08:4d:81:5f:e8:ca:02:9e:ae:97:96:3f:ac:
f0:04:0e:d2:32:76:a4:ab:f8:00:f1:18:1d:48:47:
d7:5f:b3:ae:1a:5f:b5:87:11:3e:92:13:ec:60:2c:
d3:d4:48:07:d4:50:39:9c:82:e3:36:e9:a2:9d:61:
3f:c4:87:42:3c:32:0c:94:01:c9:38:0a:2b:2e:c2:
3d:74:e3:ba:24:31:94:e5:50:69:c7:36:e9:c4:c0:
c0:7d:73:f1:76:2d:6d:cc:e2:af:33:32:f7:4f:2e:
c1:ce:ed:ef:40:34:ba:ff:34:f1:e3:e7:b6:60:09:
8d:13:a8:17:6b:87:f8:ce:37:8a:8b:27:fc:67:c9:
f4:ad:53:62:e1:28:3b:d2:e6:c4:88:27:38:72:91:
53:f3:33:59:9e:82:1a:1a:ff:ad:bd:12:14:d7:bb:
15:9e:28:02:95:83:af:d2:0e:43:c6:44:f1:81:ba:
67:a1:b0:a7:ae:1d:6a:17:4a:a9:8f:80:68:75:69:
85:34:5d:af:f7:4b:1d:a4:53:2c:2d:7d:4c:6d:16:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8E:D8:9A:6D:23:37:46:B6:B4:49:A9:C7:77:AF:E7:E7:C1:6F:06
X509v3 Authority Key Identifier:
keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233332e302f32342d3234203d3e203536303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.12.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b9:1e:3f:fc:22:c4:40:48:dc:51:0f:44:b3:af:90:09:1f:
7b:c0:a3:a6:64:c2:33:15:06:a1:0d:18:cf:af:31:aa:81:d4:
71:3a:78:08:74:f8:d0:e4:fb:f9:01:d0:be:90:c6:2b:14:91:
17:f4:c6:e3:1a:da:8f:e3:40:64:9a:97:56:bf:09:18:75:c5:
50:6e:35:33:1d:d2:e8:ab:15:f6:a5:2b:ca:80:35:ca:2d:31:
ea:e2:e8:4b:3e:b7:51:a4:f0:3d:56:5a:9b:c9:00:1b:93:62:
c9:ee:d0:c0:10:c0:dc:b4:f3:d2:03:60:40:d8:c5:0a:d6:05:
8c:0e:32:ae:f1:d7:74:01:f6:3e:55:bf:5f:42:63:fd:2a:ec:
44:28:d6:a3:87:15:18:d4:83:fa:f1:46:83:40:f4:ed:aa:5b:
b6:5f:27:f1:33:6d:56:fe:ed:66:d2:8c:dd:c4:81:f5:af:2f:
db:80:27:df:93:97:55:b8:24:54:e8:ec:76:fe:aa:d3:9e:5e:
20:82:86:6e:f0:fc:2b:20:e3:5b:73:e8:24:ad:e3:e0:1e:e7:
22:08:cd:00:f2:5d:c6:cd:58:35:7f:86:00:f0:79:b1:a7:1e:
77:73:62:b7:43:b4:39:0e:59:df:63:04:94:15:34:d9:67:33:
17:57:b8:9f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUe8BF9l+4bLrTDJPq8sFpSyL2Xh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw
N0YxRDhCMDAeFw0yNjAxMjAwMjE1MThaFw0yNzAxMTkwMjIwMThaMDMxMTAvBgNV
BAMTKDAwOEVEODlBNkQyMzM3NDZCNkI0NDlBOUM3NzdBRkU3RTdDMTZGMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsA+7Nta9cFhMq/pU8HPcLfdbf
uTa6GocEpETqi6usK7Qs7e/o8169bRIJ0HDLCE2BX+jKAp6ul5Y/rPAEDtIydqSr
+ADxGB1IR9dfs64aX7WHET6SE+xgLNPUSAfUUDmcguM26aKdYT/Eh0I8MgyUAck4
Cisuwj1047okMZTlUGnHNunEwMB9c/F2LW3M4q8zMvdPLsHO7e9ANLr/NPHj57Zg
CY0TqBdrh/jON4qLJ/xnyfStU2LhKDvS5sSIJzhykVPzM1meghoa/629EhTXuxWe
KAKVg6/SDkPGRPGBumehsKeuHWoXSqmPgGh1aYU0Xa/3Sx2kUywtfUxtFoOZAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUAI7Ymm0jN0a2tEmpx3ev5+fBbwYwHwYDVR0j
BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx
QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzUzNzQwOS8wLzMxMzAzMzJlMzEz
MjJlMzIzMzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzAzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGcM6TANBgkqhkiG9w0BAQsFAAOCAQEAHLkeP/wixEBI3FEPRLOvkAkf
e8CjpmTCMxUGoQ0Yz68xqoHUcTp4CHT40OT7+QHQvpDGKxSRF/TG4xraj+NAZJqX
Vr8JGHXFUG41Mx3S6KsV9qUryoA1yi0x6uLoSz63UaTwPVZam8kAG5Niye7QwBDA
3LTz0gNgQNjFCtYFjA4yrvHXdAH2PlW/X0Jj/SrsRCjWo4cVGNSD+vFGg0D07apb
tl8n8TNtVv7tZtKM3cSB9a8v24An35OXVbgkVOjsdv6q055eIIKGbvD8KyDjW3Po
JK3j4B7nIgjNAPJdxs1YNX+GAPB5saced3Nit0O0OQ5Z32MElBU02WczF1e4nw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:05:49 2026 by rpki-client