This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/3130332e35362e32302e302f32322d3232203d3e203539303232.roa
File: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (raw, json)
Hash identifier: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=
Subject key identifier: 90:5E:7D:B2:14:D7:9C:00:3D:D5:2D:6F:5F:DE:C7:F8:B8:2B:99:4E
Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977
Certificate serial: 5101AD389C2E5239FC059E71BE9F86C4DA68EE04
Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/3130332e35362e32302e302f32322d3232203d3e203539303232.roa
Signing time: Tue 20 Jan 2026 02:24:52 +0000
ROA not before: Tue 20 Jan 2026 02:19:52 +0000
ROA not after: Tue 19 Jan 2027 02:24:52 +0000
asID: 59022
IP address blocks: 103.56.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:01:ad:38:9c:2e:52:39:fc:05:9e:71:be:9f:86:c4:da:68:ee:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977
Validity
Not Before: Jan 20 02:19:52 2026 GMT
Not After : Jan 19 02:24:52 2027 GMT
Subject: CN=905E7DB214D79C003DD52D6F5FDEC7F8B82B994E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:82:67:16:0f:2c:40:e8:96:7e:4a:59:c7:
97:42:72:64:94:46:40:09:69:3d:52:da:95:d4:92:
26:f4:10:f6:a8:71:49:31:0b:e2:c7:27:13:10:d7:
8f:90:7c:ad:e1:44:65:88:18:c8:f6:dd:68:ad:f0:
1c:e9:26:fd:15:c1:57:6b:f5:60:84:30:05:a6:00:
59:f8:08:91:b3:c4:d8:4e:02:96:6e:6d:d5:ab:6d:
b3:d8:e2:4b:80:dd:96:f1:89:91:e6:ce:df:23:86:
16:20:0f:03:d5:f1:86:64:86:bc:d5:65:0a:c7:57:
b9:92:86:25:da:7f:75:a7:6f:c8:d6:16:54:e6:03:
3e:a1:b1:12:9c:00:19:e5:a7:d7:4b:8d:50:36:bc:
b6:50:71:7f:64:59:ac:1a:9b:22:de:a0:56:67:a6:
43:e0:81:63:48:43:6c:bb:79:fa:79:19:4b:b9:c5:
2b:59:de:d9:89:db:75:9e:9f:45:6e:be:40:bf:56:
aa:9d:1a:18:af:3d:54:1c:e9:67:b7:77:9c:b7:b2:
cd:4e:58:84:86:d0:02:42:fd:90:09:06:92:6e:08:
73:13:d6:ad:ec:d2:ad:c5:57:36:8a:1c:80:50:98:
5b:b1:e9:f3:41:ed:4f:b5:4e:5c:f2:6c:81:9b:55:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:7D:B2:14:D7:9C:00:3D:D5:2D:6F:5F:DE:C7:F8:B8:2B:99:4E
X509v3 Authority Key Identifier:
keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/3130332e35362e32302e302f32322d3232203d3e203539303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:d1:ce:0f:9d:54:16:28:d1:c1:6c:90:66:bb:f5:e8:78:a8:
ff:02:53:ff:1f:01:5c:b7:3c:96:0e:db:a8:86:69:c6:03:23:
5f:82:72:a9:2b:d7:32:51:ba:b0:e3:52:de:a2:9f:57:d7:c2:
e0:c6:cc:54:d9:31:e2:c0:cc:33:84:35:42:9b:5d:d6:9c:6e:
41:2a:75:88:de:24:80:ef:2d:41:64:69:93:3e:d5:5c:f3:b4:
53:af:76:1e:f0:7b:f4:37:bc:d3:fd:4d:bc:74:33:88:f1:7b:
94:c9:3b:41:72:ff:59:f9:d5:55:83:45:fc:06:50:83:d7:60:
24:96:26:26:6b:ad:98:3b:aa:7b:64:bd:2f:04:42:e9:19:08:
7d:40:13:f9:fa:03:4a:c8:db:72:37:41:f6:4f:e4:38:4b:dc:
8e:d5:07:24:fd:48:c1:62:a9:19:6b:72:10:d9:a7:ba:e1:4c:
b5:b2:d2:b8:82:69:76:10:81:39:63:20:18:e4:31:2c:1f:a6:
1d:5c:ca:eb:0b:3d:d1:97:c5:b6:18:a9:19:7f:00:d6:aa:7b:
78:02:61:67:7a:34:78:9b:2e:ce:12:4e:b9:f3:d0:fa:80:14:
e8:f8:d0:56:85:fa:0e:90:1d:61:f2:2b:05:b0:c9:f9:37:48:
aa:df:60:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:52:01 2026 by rpki-client