This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37352e302f32342d3234203d3e20313332313638.roa
File: 3130332e3230342e37352e302f32342d3234203d3e20313332313638.roa (raw, json)
Hash identifier: RD1n5HQuzmHuAhznZ+sHf9BuXExSPzpXO33hmNJBuek=
Subject key identifier: 07:A4:07:F4:3B:1B:7A:D3:F8:40:FA:93:C3:8F:36:ED:EC:79:92:82
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 44C513D28EE5EA7EAD305C4257B1513CE65E5686
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37352e302f32342d3234203d3e20313332313638.roa
Signing time: Tue 20 Jan 2026 02:16:47 +0000
ROA not before: Tue 20 Jan 2026 02:11:47 +0000
ROA not after: Tue 19 Jan 2027 02:16:47 +0000
asID: 132168
IP address blocks: 103.204.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c5:13:d2:8e:e5:ea:7e:ad:30:5c:42:57:b1:51:3c:e6:5e:56:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:47 2026 GMT
Not After : Jan 19 02:16:47 2027 GMT
Subject: CN=07A407F43B1B7AD3F840FA93C38F36EDEC799282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:ac:ad:d1:14:01:00:1b:41:03:e7:98:f7:
44:9b:1e:ff:80:70:1d:cf:8c:f2:f0:eb:8f:dd:7c:
e9:dd:6f:f2:d6:b0:83:12:35:e6:d6:18:09:6d:15:
d7:0b:e9:b4:ac:72:87:66:33:b0:9c:ba:3b:02:59:
56:50:9a:52:16:5f:38:d2:3b:c4:53:89:a3:38:9b:
46:58:ed:e8:c3:d4:18:68:86:cf:aa:e2:3b:74:10:
90:22:21:8b:6c:67:c6:57:f4:71:99:a5:2f:67:fb:
95:bf:b4:d5:36:fe:7f:8b:39:80:ff:52:40:98:01:
e6:d7:13:7d:21:03:60:9e:6d:a4:41:3c:1c:1f:4c:
22:ba:48:e3:ad:de:13:f5:31:47:04:16:91:e5:b5:
68:47:4b:f9:61:5c:39:f3:35:bf:73:77:45:16:bb:
ca:aa:69:1f:42:d1:32:69:c7:ff:7b:23:02:d7:a7:
cd:c9:f5:fc:ee:e9:9e:ff:a1:35:35:b2:12:e8:3c:
4b:b6:62:de:5f:aa:ad:d2:ed:5b:00:4a:1f:d3:fd:
80:6a:cf:17:a5:18:fd:42:80:b6:18:17:04:8e:fb:
1b:81:78:3b:e2:e2:7a:c3:f3:5c:5a:d0:bb:5a:fb:
2c:b6:54:be:bb:84:a9:d2:aa:b7:7b:f8:79:57:52:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A4:07:F4:3B:1B:7A:D3:F8:40:FA:93:C3:8F:36:ED:EC:79:92:82
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37352e302f32342d3234203d3e20313332313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:85:39:62:28:f6:c2:57:39:93:6a:b9:f6:6f:11:49:d2:73:
12:b0:3d:4b:b5:2a:cb:fa:f3:89:b6:b9:81:b8:bb:80:1b:7d:
85:d7:9b:af:28:99:18:bc:5a:5c:98:ef:5b:b3:37:ea:e4:7c:
f6:86:63:ba:7e:43:39:08:79:e0:a7:b9:49:56:73:05:c6:fc:
f4:0a:0a:ef:97:0d:a6:16:d0:20:5d:ce:f4:b8:9a:b1:e8:5d:
13:8f:e3:9a:0b:61:45:1b:1b:94:ac:fb:a7:57:5f:d4:14:d1:
02:74:03:13:be:2d:d5:81:f8:27:be:4f:0a:6a:07:3a:bd:13:
66:d1:9d:7b:bc:91:41:65:67:06:07:0b:34:b0:a4:e9:b1:ff:
6a:2e:c0:bc:8d:bd:cb:06:22:fe:ba:05:3c:6b:9c:7a:95:f0:
aa:ac:5f:fc:88:8e:23:6d:1c:2f:48:df:a1:07:f0:47:a5:f0:
b2:95:ca:68:5f:2d:69:c4:85:e9:16:14:5f:51:74:da:41:f0:
7c:9f:bd:91:3e:a8:43:c3:b5:a8:c3:4c:0c:b1:21:04:0c:c8:
8b:5c:a1:76:81:b2:22:17:b9:57:b7:e5:26:3c:b3:a1:ee:a0:
fd:8f:4a:3b:53:37:f7:e8:1d:85:cd:1d:9a:a0:23:d5:51:91:
2c:ac:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:47 2026 by rpki-client