This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32332d3233203d3e203539303333.roa
File: 3130332e3230342e37322e302f32332d3233203d3e203539303333.roa (raw, json)
Hash identifier: nXylVE3UTL0yTKNu2zHe4Q32JqPgzcWNRXl1o05NzAY=
Subject key identifier: C8:E1:7D:4C:4A:AB:1E:AF:E4:33:6B:22:26:49:FA:99:FF:FC:EC:28
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 248B0B0016CF3BC00A6508AFD89772A42EF9215E
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32332d3233203d3e203539303333.roa
Signing time: Tue 20 Jan 2026 02:16:46 +0000
ROA not before: Tue 20 Jan 2026 02:11:46 +0000
ROA not after: Tue 19 Jan 2027 02:16:46 +0000
asID: 59033
IP address blocks: 103.204.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8b:0b:00:16:cf:3b:c0:0a:65:08:af:d8:97:72:a4:2e:f9:21:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:46 2026 GMT
Not After : Jan 19 02:16:46 2027 GMT
Subject: CN=C8E17D4C4AAB1EAFE4336B222649FA99FFFCEC28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:90:24:e6:92:61:e1:43:89:f7:04:7d:a7:
f3:b9:a7:15:a6:2b:02:2c:50:ac:e0:0a:ce:c4:84:
c3:43:f1:28:d7:24:62:3c:25:a5:83:84:81:97:5a:
0c:a5:ea:14:5c:f7:e3:61:c0:ab:e5:5e:b2:8f:9c:
1f:dc:39:65:a7:da:53:3e:ea:11:65:7f:8e:5a:f7:
1c:17:79:ca:e1:81:17:20:24:35:82:0c:77:21:18:
60:d0:d5:c1:db:94:b3:52:60:af:8a:f1:4c:4f:ce:
36:22:4b:c1:c2:f5:99:92:2e:0a:78:13:0b:16:22:
50:00:b0:a0:a6:ee:4a:2c:92:e8:75:a1:14:8b:de:
87:3e:a9:c5:7b:b0:15:bd:bc:7e:aa:96:db:d9:bc:
62:22:35:71:32:87:7c:5f:e5:3f:28:d5:be:f6:70:
65:53:2d:62:37:16:88:89:e4:7b:28:6e:1b:f2:8c:
e2:65:95:f3:ef:83:04:8f:99:77:48:a6:d5:f4:5a:
63:7c:58:7c:c2:cf:12:e6:5a:05:96:69:b8:56:09:
9c:18:96:e5:fe:0c:a6:26:0e:06:a9:6a:cb:3d:1f:
e6:9f:e1:f3:14:fd:57:c0:2b:7f:b5:e6:44:45:a0:
49:07:8c:76:4e:4b:ce:4d:d9:ee:99:cc:c6:de:e9:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E1:7D:4C:4A:AB:1E:AF:E4:33:6B:22:26:49:FA:99:FF:FC:EC:28
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32332d3233203d3e203539303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:e9:98:a7:80:c1:a5:11:17:04:c4:73:e7:6b:1d:aa:87:84:
36:b8:22:fe:45:63:f2:00:6a:6b:a7:d1:56:17:ea:14:cc:63:
31:2b:d9:5a:90:1a:f2:66:e9:42:1a:91:1b:c9:fd:6f:ff:53:
48:e0:7c:9d:81:ab:31:96:91:95:0e:77:70:4f:f4:f3:35:ba:
f6:34:1c:28:8e:c9:2e:03:64:38:1b:81:7a:e3:7a:d8:5f:b9:
d6:9b:4d:38:26:4a:2c:55:d7:c9:11:c3:9e:a6:47:43:06:a3:
2a:06:e7:f2:8d:0b:1a:2a:ef:fe:09:cb:34:bd:07:48:6e:54:
84:d5:82:b2:32:b9:d7:6d:e7:03:8b:07:c4:a0:74:58:81:6a:
db:b9:19:aa:98:6d:62:df:55:7c:69:54:ed:61:8b:63:b3:34:
ad:d0:f6:3b:af:bf:96:be:48:91:5c:3c:35:68:83:0a:2f:80:
97:63:80:f5:d4:1a:5b:45:08:4f:f7:ce:81:f3:23:6b:5b:36:
be:c0:65:90:c7:ac:3e:81:0c:fe:d6:f6:48:e1:dc:32:3b:50:
9c:c6:f7:6c:b3:50:dc:c4:5a:d0:7d:de:60:07:21:42:00:1f:
0f:63:f1:74:62:46:44:5a:53:f5:06:8c:88:41:ce:41:00:c9:
da:b3:46:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:06 2026 by rpki-client