This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32342d3234203d3e20313332313638.roa
File: 3130332e3230342e37322e302f32342d3234203d3e20313332313638.roa (raw, json)
Hash identifier: mr9Tk1MqwHJsQK5uixFIr6OmA9YLlQSbjFCihO3umbY=
Subject key identifier: AF:FC:6F:98:5E:8D:BB:DE:DB:18:E6:70:19:E0:DB:F4:72:9F:60:FA
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 71398EE0AC87515167E908A085217C1B1574DF71
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32342d3234203d3e20313332313638.roa
Signing time: Tue 20 Jan 2026 02:16:45 +0000
ROA not before: Tue 20 Jan 2026 02:11:45 +0000
ROA not after: Tue 19 Jan 2027 02:16:45 +0000
asID: 132168
IP address blocks: 103.204.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:39:8e:e0:ac:87:51:51:67:e9:08:a0:85:21:7c:1b:15:74:df:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:45 2026 GMT
Not After : Jan 19 02:16:45 2027 GMT
Subject: CN=AFFC6F985E8DBBDEDB18E67019E0DBF4729F60FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:54:2c:fe:dd:85:79:8b:4d:ed:a5:5c:61:
c6:5d:a8:1d:ac:d4:ac:43:b8:57:84:6e:7f:54:21:
b0:ac:2a:2a:d1:22:2e:b7:8b:90:ee:5c:f8:54:e1:
dc:4f:c8:57:93:89:d9:b6:11:10:e1:a1:ce:24:df:
91:0a:7e:e0:e3:46:77:67:f1:f3:53:20:92:3c:cc:
6f:87:94:f7:38:ef:cb:57:83:c0:e6:d3:0f:bb:00:
70:d4:16:e6:8e:05:59:1b:8e:0f:ca:f9:01:92:b0:
b5:64:16:47:e3:1f:72:2e:8f:cb:17:4f:17:73:5c:
1f:9f:8f:68:76:32:8b:59:3b:c8:2f:6d:7e:3a:a1:
5f:c3:68:f8:e1:d4:ad:55:e2:2a:aa:cb:d4:2e:31:
70:3f:21:89:80:4f:91:aa:98:11:16:39:d1:32:f4:
94:af:d7:b9:0d:18:fc:b2:5f:74:d3:f1:c1:9e:47:
77:d7:68:ee:2c:cc:80:6d:3e:48:64:92:00:8d:62:
fb:e8:e8:c5:1b:c5:f2:d2:09:c9:fa:94:fa:c0:96:
e7:a5:08:9b:77:57:6a:ec:12:8d:87:5f:c7:fb:17:
3e:8b:62:1e:c9:74:6d:11:56:54:0e:4c:dd:d3:ca:
1a:1a:45:a6:e4:70:3c:e1:87:6a:17:1f:ee:e4:e3:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FC:6F:98:5E:8D:BB:DE:DB:18:E6:70:19:E0:DB:F4:72:9F:60:FA
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32342d3234203d3e20313332313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:d6:80:f8:2b:dc:9a:b6:cc:e1:48:5c:78:96:11:fd:09:60:
3c:e8:d9:21:b4:c2:70:9a:47:61:11:19:56:9b:ab:a7:67:b0:
26:da:39:8f:63:a8:96:85:3d:89:5a:40:5d:ce:d3:6f:e6:db:
d5:c6:5f:c1:e1:e1:6d:24:82:ca:08:bc:6c:b7:02:b0:92:0d:
35:18:d5:03:c1:97:ae:f5:f8:27:6b:1d:08:02:d0:a9:f3:e2:
19:d7:e7:0c:a8:d0:58:06:e0:d3:7a:ed:62:50:fe:9d:74:b8:
52:e5:e3:55:64:61:04:55:03:9d:be:29:28:fe:84:1f:94:d8:
b4:53:91:fb:23:d7:40:f8:ce:ac:c9:a8:1e:a4:37:12:58:f0:
72:34:e5:f5:f0:48:36:ad:c4:a4:24:d9:b9:80:57:66:c4:31:
3a:de:68:75:2e:db:67:4b:0c:32:da:4e:65:46:d8:9f:3e:b9:
14:65:3a:75:f8:e1:ab:81:d8:3f:4b:11:a1:9e:fa:8b:5f:8e:
9d:bd:f6:1d:01:eb:ec:50:9d:e5:06:6b:f1:e7:79:ca:5f:3c:
01:93:d0:14:e0:1e:a6:44:dc:d0:9f:b3:32:4a:b6:a5:cc:b1:
3f:fb:d8:ba:6c:bc:b9:69:f3:ee:ea:04:4c:b9:3d:38:03:2b:
04:20:19:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:49 2026 by rpki-client