This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32342d3234203d3e20313332313638.roa
File: 3130332e3230342e37342e302f32342d3234203d3e20313332313638.roa (raw, json)
Hash identifier: hqGsr3c/Y/5CnpeO3yxcp93A+hg9bWg5hsmCtX7HHrs=
Subject key identifier: FD:F7:5C:33:AB:FC:37:3E:E9:28:E7:77:4B:2D:87:84:AD:C9:3B:FF
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 499D3309F49F8701668498E294AA48B78FCFB110
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32342d3234203d3e20313332313638.roa
Signing time: Tue 20 Jan 2026 02:16:46 +0000
ROA not before: Tue 20 Jan 2026 02:11:46 +0000
ROA not after: Tue 19 Jan 2027 02:16:46 +0000
asID: 132168
IP address blocks: 103.204.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:9d:33:09:f4:9f:87:01:66:84:98:e2:94:aa:48:b7:8f:cf:b1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:46 2026 GMT
Not After : Jan 19 02:16:46 2027 GMT
Subject: CN=FDF75C33ABFC373EE928E7774B2D8784ADC93BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:27:4e:ac:7a:fc:3a:00:ad:57:89:56:0e:
f4:6b:39:85:02:4d:11:fa:a9:f2:35:97:d1:a6:f2:
23:20:be:7a:16:ac:c9:20:dd:a5:98:e9:35:f5:ba:
40:cc:f6:50:85:97:5d:47:87:84:da:b4:c2:2a:e7:
d0:da:de:eb:fe:ac:0f:05:a8:d1:28:d3:4c:0c:33:
3d:28:93:d6:60:3a:8f:c0:3d:17:04:22:7f:b1:7d:
9d:d6:56:11:92:67:0c:a8:d6:c2:66:5d:ba:06:e3:
01:1c:c4:4f:87:ea:55:e6:68:af:b1:9a:85:73:c4:
13:f9:82:a5:0f:a8:a3:d3:37:47:62:63:a1:c7:95:
d0:3a:9a:88:0b:e9:96:65:e0:f9:59:fb:df:9c:74:
ac:ad:e3:e4:bb:8f:8d:b1:97:95:08:7c:94:7d:f1:
2b:4f:a2:0e:a8:59:97:49:6e:43:f4:2a:a3:c0:3d:
79:f6:6c:0e:dd:93:54:f8:6b:65:2e:3e:a5:e4:a8:
d2:85:f5:e5:7a:bd:85:a0:fe:87:22:24:34:d8:d7:
4b:1b:89:56:4d:c0:58:8e:0d:73:e2:40:e9:a1:8b:
4d:2b:2a:5a:4a:c6:0d:75:6c:d6:43:e9:98:25:ea:
33:41:da:25:1d:be:6d:d7:d9:07:d3:9c:5f:b6:f6:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:5C:33:AB:FC:37:3E:E9:28:E7:77:4B:2D:87:84:AD:C9:3B:FF
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32342d3234203d3e20313332313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.74.0/24
Signature Algorithm: sha256WithRSAEncryption
46:bb:9f:f0:4d:40:73:d0:87:e3:d2:a9:38:97:f2:60:b6:82:
c7:d1:93:e4:86:20:3c:4d:ba:76:3b:3a:66:6f:73:d2:ac:84:
d7:d2:53:e2:15:73:12:82:63:06:ee:88:0d:61:42:ce:e3:3e:
dc:8b:25:56:b9:24:36:10:ef:29:08:91:aa:4e:ca:2a:05:29:
eb:bd:98:a4:5a:24:cf:4f:cb:de:ce:a8:da:39:f2:30:b8:20:
64:2e:01:6b:0d:b2:75:8a:72:ee:96:2d:07:34:82:c2:ec:3f:
e9:0d:e2:c1:8e:77:2e:69:70:c9:20:b1:3a:43:45:70:e6:3e:
70:b1:1a:ba:48:7c:5a:98:78:dc:6e:73:34:43:eb:aa:27:86:
4d:94:1c:bc:80:69:4f:3c:45:6f:2d:6a:f8:e8:df:0a:26:34:
9e:7b:5b:21:d6:f5:bc:da:88:cc:34:ac:c6:5e:b3:f7:f8:87:
cb:4d:e2:a6:33:8d:73:06:35:1c:1f:77:48:5d:12:20:6c:16:
61:05:5f:3a:4d:5b:e4:97:a5:23:b3:12:ae:a9:c1:9c:38:72:
14:55:bf:c6:a4:60:cf:0b:8b:3f:cb:34:31:96:f8:a7:0c:db:
75:a2:16:b3:97:3a:1f:c3:a7:71:3e:94:01:a9:de:07:72:ea:
7c:dd:57:92
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUSZ0zCfSfhwFmhJjilKpIt4/PsRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3
RkU5MTM0RDAeFw0yNjAxMjAwMjExNDZaFw0yNzAxMTkwMjE2NDZaMDMxMTAvBgNV
BAMTKEZERjc1QzMzQUJGQzM3M0VFOTI4RTc3NzRCMkQ4Nzg0QURDOTNCRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPSdOrHr8OgCtV4lWDvRrOYUC
TRH6qfI1l9Gm8iMgvnoWrMkg3aWY6TX1ukDM9lCFl11Hh4TatMIq59Da3uv+rA8F
qNEo00wMMz0ok9ZgOo/APRcEIn+xfZ3WVhGSZwyo1sJmXboG4wEcxE+H6lXmaK+x
moVzxBP5gqUPqKPTN0diY6HHldA6mogL6ZZl4PlZ+9+cdKyt4+S7j42xl5UIfJR9
8StPog6oWZdJbkP0KqPAPXn2bA7dk1T4a2UuPqXkqNKF9eV6vYWg/ociJDTY10sb
iVZNwFiODXPiQOmhi00rKlpKxg11bNZD6Zgl6jNB2iUdvm3X2QfTnF+29hWvAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU/fdcM6v8Nz7pKOd3Sy2HhK3JO/8wHwYDVR0j
BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0
QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5MTY4NjcvMC8zMTMwMzMyZTMy
MzAzNDJlMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjMxMzYzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfMSjANBgkqhkiG9w0BAQsFAAOCAQEARruf8E1Ac9CH49KpOJfy
YLaCx9GT5IYgPE26djs6Zm9z0qyE19JT4hVzEoJjBu6IDWFCzuM+3IslVrkkNhDv
KQiRqk7KKgUp672YpFokz0/L3s6o2jnyMLggZC4Baw2ydYpy7pYtBzSCwuw/6Q3i
wY53LmlwySCxOkNFcOY+cLEaukh8Wph43G5zNEPrqieGTZQcvIBpTzxFby1q+Ojf
CiY0nntbIdb1vNqIzDSsxl6z9/iHy03ipjONcwY1HB93SF0SIGwWYQVfOk1b5Jel
I7MSrqnBnDhyFFW/xqRgzwuLP8s0MZb4pwzbdaIWs5c6H8OncT6UAaneB3LqfN1X
kg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:46 2026 by rpki-client