This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32322d3234203d3e203633363839.roa
File: 3130332e3230342e37322e302f32322d3234203d3e203633363839.roa (raw, json)
Hash identifier: sg51JJDhwBslIpkPTq56NVKSyz5UpYHI7DrkFm/nlYo=
Subject key identifier: A6:AE:E2:20:96:EA:F2:E7:A9:52:48:08:04:B9:4C:A9:7D:0C:C8:18
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 792959C8859DCDD1098B84CE11539A78268F3D3F
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32322d3234203d3e203633363839.roa
Signing time: Tue 20 Jan 2026 02:16:48 +0000
ROA not before: Tue 20 Jan 2026 02:11:48 +0000
ROA not after: Tue 19 Jan 2027 02:16:48 +0000
asID: 63689
IP address blocks: 103.204.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:29:59:c8:85:9d:cd:d1:09:8b:84:ce:11:53:9a:78:26:8f:3d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:48 2026 GMT
Not After : Jan 19 02:16:48 2027 GMT
Subject: CN=A6AEE22096EAF2E7A952480804B94CA97D0CC818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:44:4c:58:cf:ba:90:29:b8:19:9b:71:3d:
b5:95:2e:76:3a:44:0f:37:b8:28:c9:fa:8d:70:06:
c7:ab:d1:f2:96:13:63:60:2f:37:fb:f4:aa:22:4c:
f1:36:c5:1b:c6:9a:3f:5a:c4:45:4c:88:30:57:0e:
09:45:ad:11:b7:db:6a:94:30:82:ec:c7:75:88:5f:
25:68:11:ff:75:ed:6d:02:f7:17:ac:7b:32:0f:c0:
04:93:59:4f:2e:16:44:d1:d5:2c:87:42:a5:5a:27:
0a:8e:d7:3c:62:14:66:14:c1:e5:07:77:57:56:88:
40:cf:f9:30:8c:1d:ab:e7:75:37:fc:16:f6:5c:1e:
25:20:f3:f2:4e:90:78:54:48:a7:42:80:a8:bb:70:
67:d9:17:68:7a:f4:8c:91:00:c9:8c:65:85:d5:0c:
c3:1c:21:78:ec:4f:7f:b0:40:97:39:79:dc:26:38:
39:85:eb:63:3d:9d:b6:34:23:86:6b:99:30:64:4a:
97:de:62:8a:fd:1f:fe:2c:b9:47:96:1a:cc:30:a9:
2a:30:4a:95:99:e8:f6:e1:44:4e:1d:7a:31:91:52:
0e:53:d3:14:7a:22:7a:1b:b7:66:2d:41:30:20:81:
1f:46:14:29:f0:9e:95:c0:b6:b7:9c:64:32:7c:77:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:E2:20:96:EA:F2:E7:A9:52:48:08:04:B9:4C:A9:7D:0C:C8:18
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32322d3234203d3e203633363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
Signature Algorithm: sha256WithRSAEncryption
45:6e:89:73:bd:cd:1d:21:93:2f:87:1a:3d:fb:f8:21:e5:b2:
ce:85:98:f4:a0:11:e5:e1:28:2e:ad:84:23:8a:73:b4:16:c5:
9e:1d:33:be:24:1c:bf:d5:34:2b:a3:90:45:4c:cb:7c:a9:87:
80:d2:47:ea:f8:de:d9:7b:7c:70:7b:dd:fa:92:83:c0:16:a7:
30:39:f9:94:b8:b1:61:14:d3:d8:c2:5a:71:5e:fd:8a:3c:38:
8b:5d:60:d3:e5:68:ea:5d:8e:f5:77:55:76:c8:96:44:95:3c:
2a:82:5c:84:36:de:4c:d8:38:0c:0f:a9:5c:a7:14:64:f6:65:
08:5e:bd:3e:88:bd:c0:28:0d:aa:26:2e:51:63:4c:11:93:fa:
05:f1:59:f9:b1:33:1f:9d:2f:81:21:a5:03:4a:dd:c7:2a:a9:
b4:e4:5d:fa:e2:09:88:2d:66:2d:86:89:32:47:59:b3:34:6a:
dd:84:33:95:4e:75:ed:5d:16:52:9d:ad:22:3d:be:52:7a:4b:
c4:b5:b5:db:5f:3e:33:ac:c2:b6:81:85:c6:b0:cd:28:37:7d:
84:4c:06:eb:2b:5e:e6:9f:36:0b:e8:86:d5:66:73:ab:ac:60:
8f:6a:32:d8:65:85:dc:7b:d8:86:3a:5f:7d:a1:da:f2:0e:80:
78:d1:85:12
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUeSlZyIWdzdEJi4TOEVOaeCaPPT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3
RkU5MTM0RDAeFw0yNjAxMjAwMjExNDhaFw0yNzAxMTkwMjE2NDhaMDMxMTAvBgNV
BAMTKEE2QUVFMjIwOTZFQUYyRTdBOTUyNDgwODA0Qjk0Q0E5N0QwQ0M4MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGURMWM+6kCm4GZtxPbWVLnY6
RA83uCjJ+o1wBser0fKWE2NgLzf79KoiTPE2xRvGmj9axEVMiDBXDglFrRG322qU
MILsx3WIXyVoEf917W0C9xesezIPwASTWU8uFkTR1SyHQqVaJwqO1zxiFGYUweUH
d1dWiEDP+TCMHavndTf8FvZcHiUg8/JOkHhUSKdCgKi7cGfZF2h69IyRAMmMZYXV
DMMcIXjsT3+wQJc5edwmODmF62M9nbY0I4ZrmTBkSpfeYor9H/4suUeWGswwqSow
SpWZ6PbhRE4dejGRUg5T0xR6Inobt2YtQTAggR9GFCnwnpXAtrecZDJ8d4erAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUpq7iIJbq8uepUkgIBLlMqX0MyBgwHwYDVR0j
BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0
QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDkxNjg2Ny8wLzMxMzAzMzJlMzIz
MDM0MmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMzM2MzgzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfMSDANBgkqhkiG9w0BAQsFAAOCAQEARW6Jc73NHSGTL4caPfv4IeWy
zoWY9KAR5eEoLq2EI4pztBbFnh0zviQcv9U0K6OQRUzLfKmHgNJH6vje2Xt8cHvd
+pKDwBanMDn5lLixYRTT2MJacV79ijw4i11g0+Vo6l2O9XdVdsiWRJU8KoJchDbe
TNg4DA+pXKcUZPZlCF69Poi9wCgNqiYuUWNMEZP6BfFZ+bEzH50vgSGlA0rdxyqp
tORd+uIJiC1mLYaJMkdZszRq3YQzlU517V0WUp2tIj2+UnpLxLW1218+M6zCtoGF
xrDNKDd9hEwG6yte5p82C+iG1WZzq6xgj2oy2GWF3HvYhjpffaHa8g6AeNGFEg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:48 2026 by rpki-client