This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138342e302f32342d3234203d3e203539303433.roa
File: 3130332e35362e3138342e302f32342d3234203d3e203539303433.roa (raw, json)
Hash identifier: hmhm/J6fR0cLjZz5lcB7aw6zPjy50dHaMavZ+vQXS/E=
Subject key identifier: BA:3F:F9:94:2B:36:DC:4D:F5:33:90:E1:BB:02:AC:E0:49:3A:2A:C2
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 1CA812D0003ECECE94A2D06E21DE929ADCE87DC3
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138342e302f32342d3234203d3e203539303433.roa
Signing time: Tue 20 Jan 2026 02:18:08 +0000
ROA not before: Tue 20 Jan 2026 02:13:08 +0000
ROA not after: Tue 19 Jan 2027 02:18:08 +0000
asID: 59043
IP address blocks: 103.56.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a8:12:d0:00:3e:ce:ce:94:a2:d0:6e:21:de:92:9a:dc:e8:7d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: Jan 20 02:13:08 2026 GMT
Not After : Jan 19 02:18:08 2027 GMT
Subject: CN=BA3FF9942B36DC4DF53390E1BB02ACE0493A2AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:a7:82:b1:b4:62:b9:21:76:4c:01:db:c5:
a0:0b:64:23:e4:5c:f3:c2:86:50:41:e8:b0:00:c4:
8a:16:96:76:1a:dd:5f:32:45:a9:52:58:bc:44:a9:
c4:a2:dd:6e:da:9e:51:11:16:29:ae:91:69:ee:70:
4b:53:35:72:60:87:a1:d0:9c:bb:36:79:a8:16:ca:
dc:99:6a:08:70:15:77:06:13:01:3f:95:c2:1a:00:
88:05:86:a1:99:e1:6e:d6:7f:34:79:0a:38:b2:0f:
b0:23:c8:29:31:71:f1:56:0e:00:de:ac:d6:93:cc:
d3:3e:06:ea:cd:12:98:c8:08:37:c6:e3:ae:d2:dd:
37:aa:8f:2c:c1:f6:98:2e:35:d8:e7:89:f7:b9:4e:
f9:b8:70:ae:98:73:44:1d:da:79:da:07:b7:c2:64:
66:f4:82:af:a2:57:c1:03:e8:6b:30:64:c3:02:5b:
be:89:d6:55:32:5a:5c:84:17:23:30:30:ec:63:6d:
50:1e:2e:14:c5:00:da:42:ed:c3:75:74:b5:b6:31:
8c:2b:72:42:22:7a:e9:50:e9:3e:70:1d:db:94:1b:
61:7d:ea:39:2f:b9:27:9a:e1:41:7d:0a:0b:ac:ec:
39:57:2f:b6:5d:c7:13:b3:5a:a6:78:e6:94:60:eb:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3F:F9:94:2B:36:DC:4D:F5:33:90:E1:BB:02:AC:E0:49:3A:2A:C2
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138342e302f32342d3234203d3e203539303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:5b:8b:3a:7f:a4:96:2f:b9:88:1e:cb:85:65:30:63:83:b6:
96:c2:68:07:b0:cc:d6:c6:dd:06:5c:2a:e1:b2:bc:5b:89:64:
db:d3:2e:8c:4d:0c:de:0f:bb:3a:00:35:f6:6e:cb:af:53:c7:
f7:66:fa:1d:a9:b6:d8:e8:e9:ad:dc:41:b0:51:5b:2e:33:f0:
a6:f8:ec:a4:e4:d4:f4:52:1d:df:22:ab:d8:00:ca:61:07:9f:
1b:49:e9:59:ac:ba:f6:99:3b:41:6f:07:76:d1:b5:fd:29:c7:
65:ee:2a:51:92:c9:5b:d5:21:68:8f:e2:80:40:fe:67:b5:76:
f3:95:c7:8e:1d:1f:fc:9a:cb:53:87:5b:9c:f2:86:03:18:42:
cd:06:3e:1a:65:a1:94:c9:f1:e6:3e:7c:c8:13:c5:57:15:f5:
40:c4:3e:a7:8b:cd:73:39:b0:2d:a8:63:02:8a:79:36:f7:68:
a5:05:e7:97:0d:53:0e:b8:5f:10:32:0e:75:3c:14:0e:3e:e2:
86:a0:7a:7a:d6:9b:9d:36:a6:ba:d6:8f:3d:ef:87:fa:92:97:
68:4f:98:78:b4:15:7c:31:2a:ed:29:14:29:4c:29:3e:8b:1a:
9d:06:86:81:fc:bd:b3:9b:5e:f6:bb:5d:e6:54:e1:84:24:c7:
35:91:c2:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:53 2026 by rpki-client