This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32332d3234203d3e203633363839.roa
File: 3130332e39302e35362e302f32332d3234203d3e203633363839.roa (raw, json)
Hash identifier: TyCb1Czyut34AnsigF99iS8N6XWKzXp7FDaOSZSMe8E=
Subject key identifier: 51:24:CA:19:6D:9A:20:FA:53:70:B7:5C:6F:54:9D:B9:25:1C:E4:3F
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 2061803BF818001BECCBA326E34C73A47E6AC561
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32332d3234203d3e203633363839.roa
Signing time: Tue 20 Jan 2026 02:16:44 +0000
ROA not before: Tue 20 Jan 2026 02:11:44 +0000
ROA not after: Tue 19 Jan 2027 02:16:44 +0000
asID: 63689
IP address blocks: 103.90.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:61:80:3b:f8:18:00:1b:ec:cb:a3:26:e3:4c:73:a4:7e:6a:c5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:44 2026 GMT
Not After : Jan 19 02:16:44 2027 GMT
Subject: CN=5124CA196D9A20FA5370B75C6F549DB9251CE43F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5a:b8:97:9e:2e:3a:f1:d7:f5:e8:e7:93:90:
80:6d:76:2d:33:9e:8d:ee:00:22:36:93:28:7e:5e:
00:20:7f:b4:fe:20:f8:f4:65:fc:a9:64:95:b2:1e:
87:87:46:b2:e7:fa:01:3e:b3:0c:02:e9:d7:3b:0b:
c6:88:26:ae:40:f9:9d:d3:9e:58:b3:32:5c:ff:bf:
62:85:3d:59:89:a7:9d:1c:15:28:68:19:9d:a2:97:
cf:ee:2c:0a:8e:f1:ad:1d:6b:df:e9:b4:b8:91:09:
63:72:87:43:01:44:e7:8c:b0:03:54:1a:63:f3:75:
7b:98:c9:2f:1d:4c:b7:b1:5d:dd:60:8a:9c:90:bf:
56:83:dc:3a:ef:46:bd:b3:ca:4f:da:29:b9:a3:ee:
39:5e:6f:70:b6:5f:02:65:38:4f:16:99:47:13:05:
48:95:80:ea:46:40:e7:f2:c5:3c:3d:93:0c:b5:9b:
26:ce:38:f4:e4:7c:89:5c:7f:61:af:a9:e5:78:bd:
44:36:f5:63:c2:43:6a:7a:02:ae:1f:03:ba:76:f9:
0c:3f:b9:f6:48:ff:ab:8f:dd:22:f8:61:54:4d:ae:
51:1c:ad:32:85:b3:ac:83:f4:67:df:15:f8:68:a0:
06:dc:c4:41:3d:f2:0c:e4:53:f2:04:35:76:55:05:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:24:CA:19:6D:9A:20:FA:53:70:B7:5C:6F:54:9D:B9:25:1C:E4:3F
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32332d3234203d3e203633363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.56.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:84:91:a8:8a:6d:9c:be:b1:8c:ed:70:32:0b:a2:eb:b0:56:
61:70:3c:2d:69:ef:9b:b4:34:3e:d3:28:0b:ce:b5:5a:4d:9f:
b3:c8:8a:7b:3e:a5:53:93:38:98:62:01:46:d6:6d:28:56:bc:
47:69:58:27:a3:58:7b:5c:b6:55:a9:72:60:5e:88:c1:ab:1b:
7a:df:ef:ee:d7:ed:ed:ee:d5:51:20:c7:de:9c:db:45:47:61:
46:e0:de:90:5c:32:03:1f:df:2f:65:2e:27:34:63:12:44:d1:
8d:fe:2c:83:35:86:22:00:bb:fa:37:a8:4c:1c:c3:93:6f:81:
69:be:49:47:7e:5d:f2:6d:95:cb:2c:66:0a:d1:c3:77:d6:88:
24:5a:d6:4b:2f:46:70:08:ce:44:c3:53:3d:ab:48:86:21:30:
23:3e:5f:e2:39:89:67:12:5a:a5:1f:09:ff:4f:bc:fc:54:ae:
ca:66:d2:82:14:7f:5f:4d:27:36:a2:34:0e:01:b4:2f:a3:bc:
f8:e8:88:d9:83:76:db:87:99:d1:7b:5a:32:e3:5c:82:1c:10:
f3:54:98:ca:0b:f4:16:d5:d8:09:83:96:f3:45:fd:30:9e:d4:
ea:1e:cd:f5:20:ea:df:39:97:30:f3:8f:2b:55:f3:73:57:39:
0d:ff:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:05 2026 by rpki-client