This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37352e302f32342d3234203d3e203539303333.roa
File: 3130332e3230342e37352e302f32342d3234203d3e203539303333.roa (raw, json)
Hash identifier: s5KW97tYKwLKUJTqUnbbQ3vBncZWFr6grSwyyYXYsH8=
Subject key identifier: 11:0C:05:30:E5:C8:14:3F:54:0F:18:32:0D:0A:A4:33:0B:09:F7:D2
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 527ADBA5869394851E74DD0E43371D420CC9F3B1
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37352e302f32342d3234203d3e203539303333.roa
Signing time: Tue 20 Jan 2026 02:16:44 +0000
ROA not before: Tue 20 Jan 2026 02:11:44 +0000
ROA not after: Tue 19 Jan 2027 02:16:44 +0000
asID: 59033
IP address blocks: 103.204.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7a:db:a5:86:93:94:85:1e:74:dd:0e:43:37:1d:42:0c:c9:f3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:44 2026 GMT
Not After : Jan 19 02:16:44 2027 GMT
Subject: CN=110C0530E5C8143F540F18320D0AA4330B09F7D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:5e:8a:ce:6a:3a:02:e6:dc:53:11:d1:b0:
53:77:55:27:1a:cd:c0:80:76:b8:68:6a:17:f3:e8:
97:a5:13:a6:33:dd:d2:af:17:22:3e:00:ce:95:3c:
55:42:28:d8:b7:7a:fb:29:56:d0:48:43:d6:3e:c8:
c2:6b:8e:c2:10:08:18:6d:aa:71:90:0c:33:09:23:
a0:1a:c6:34:cf:47:a2:a6:13:87:30:19:26:90:8d:
1e:7c:61:20:49:be:9a:bb:12:fb:89:ea:01:a6:c0:
13:cf:d2:e2:21:a6:bf:5e:f5:9f:86:69:86:89:c4:
52:52:71:48:39:ba:a3:f5:c9:7c:72:bd:8a:c5:07:
a0:eb:08:66:d9:97:09:9b:7b:c8:f2:8c:7f:b6:01:
66:75:76:52:af:f8:78:1b:63:79:bf:ba:92:87:94:
57:0a:bd:5c:7e:0d:be:4a:eb:48:90:13:03:9e:e5:
1d:22:04:e5:f5:31:29:d7:0d:2d:3f:ae:95:d5:7a:
1e:22:dc:17:a8:2f:6c:8a:fb:4d:bc:d6:96:89:9b:
2d:c3:1b:a2:ea:cc:9d:48:f9:8b:3a:4c:a4:e2:99:
95:2c:11:29:c8:ad:f8:bc:6c:b7:51:46:9a:41:9d:
10:a2:6a:83:e2:61:81:7b:25:c6:58:4d:ef:d3:89:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:05:30:E5:C8:14:3F:54:0F:18:32:0D:0A:A4:33:0B:09:F7:D2
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37352e302f32342d3234203d3e203539303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.75.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c7:0f:c7:da:10:78:39:4a:9a:29:af:e5:20:1d:97:b8:3e:
39:13:53:3b:fe:84:cd:93:f3:d6:f1:28:d7:bd:ea:24:3a:4c:
7d:53:fe:8a:16:88:89:71:37:6f:be:22:81:b2:ec:e5:e1:de:
a5:3a:65:e0:ab:39:73:65:ea:53:81:f3:b3:e4:8b:cf:b7:ae:
68:9c:5f:34:1e:aa:21:0e:98:f6:9c:db:b7:37:4c:4b:49:7e:
98:41:b3:c3:93:7d:b4:48:3f:55:ca:d3:c9:a8:85:2a:d0:9f:
be:8b:f5:ab:10:b3:97:79:d3:1b:d6:0f:a6:a3:20:a1:14:b2:
cd:33:53:f0:ab:7d:44:02:a3:44:62:84:e3:34:8d:71:e1:a8:
76:1b:9c:f7:78:4a:b1:21:0a:97:91:f4:2a:b5:82:aa:5e:97:
4e:94:0a:99:5c:bc:c5:2e:a2:3d:b6:e6:d8:38:eb:27:08:63:
67:b1:76:a9:4a:10:03:4c:e8:38:3c:4b:b3:ff:a0:ff:db:11:
4c:75:c8:b9:6b:f4:9c:2f:55:1f:85:84:91:81:d4:82:ee:29:
a2:2f:90:59:66:d4:4e:9f:61:a5:1d:1c:6a:b0:7b:c6:24:e4:
0c:e9:49:4e:88:31:65:02:4e:bf:c0:d3:33:d3:39:28:ee:a9:
2b:8a:e4:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:00 2026 by rpki-client