This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32342d3234203d3e20313332313638.roa
File: 3130332e39302e35362e302f32342d3234203d3e20313332313638.roa (raw, json)
Hash identifier: EWEuTPZIjpWLZWhWcvuBcl0gIax/+BYfoyyTu3rxpKY=
Subject key identifier: 97:2E:8A:AD:8B:B0:EE:48:50:C2:D2:CF:17:E2:AC:CD:02:CD:C4:A2
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 11FC35AB9AE914295E7093D4A61C0C972B30AB73
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32342d3234203d3e20313332313638.roa
Signing time: Tue 20 Jan 2026 02:16:48 +0000
ROA not before: Tue 20 Jan 2026 02:11:48 +0000
ROA not after: Tue 19 Jan 2027 02:16:48 +0000
asID: 132168
IP address blocks: 103.90.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:fc:35:ab:9a:e9:14:29:5e:70:93:d4:a6:1c:0c:97:2b:30:ab:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:48 2026 GMT
Not After : Jan 19 02:16:48 2027 GMT
Subject: CN=972E8AAD8BB0EE4850C2D2CF17E2ACCD02CDC4A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:f2:d2:4a:0e:1a:f5:3d:ca:51:60:dd:a8:
b5:29:37:94:db:c7:aa:54:8c:01:93:13:c5:5f:a8:
5b:6a:ef:f9:82:b2:ac:70:df:85:ba:be:60:5e:df:
bf:c4:e9:48:27:ce:27:eb:a4:81:72:fd:15:74:b9:
9f:f7:ba:8e:d3:b7:4f:8a:55:d4:02:9b:f5:4d:84:
fd:df:9b:05:7a:60:1d:17:94:11:6c:c9:5c:45:b8:
f8:89:cd:b4:3a:5a:56:d6:eb:97:c3:a9:7d:99:05:
95:89:32:0c:3b:bb:5c:9c:7f:9f:30:74:2b:09:9c:
7a:9f:42:09:4b:04:04:2d:60:6a:0b:6f:d0:01:8f:
17:e1:03:7c:88:62:31:57:2d:d8:99:74:d5:8f:5e:
40:60:e6:14:64:fe:65:09:bc:2f:60:46:33:1b:b3:
29:29:ab:ad:7b:38:99:02:3e:c2:c3:7a:c8:b0:9c:
0a:c1:cc:76:6e:b7:0b:fe:64:c1:bb:57:09:5b:c0:
2b:de:40:aa:6c:26:9e:15:28:a8:57:c2:c7:48:2f:
c8:6d:c1:88:b3:39:fa:27:8d:07:c1:53:9f:01:33:
a3:35:91:33:10:00:c0:82:ab:49:e2:47:e7:26:a4:
0a:9c:a7:0f:0a:e0:b3:40:18:6b:0d:31:fd:f7:9b:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:8A:AD:8B:B0:EE:48:50:C2:D2:CF:17:E2:AC:CD:02:CD:C4:A2
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32342d3234203d3e20313332313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0e:9f:62:cd:51:ac:95:ad:f0:f8:c3:12:b5:c4:db:a1:a2:
5b:41:e5:bc:7f:73:95:16:89:76:25:84:0e:60:cc:0f:a5:47:
d0:fb:cb:a4:07:c7:29:b8:14:f2:ee:32:ca:52:32:64:e0:db:
72:c9:9d:e8:25:26:ff:4d:44:e5:eb:9c:c9:6c:a1:ad:c6:f3:
45:0e:60:5c:01:68:95:08:88:5f:33:2b:ed:47:55:7e:6d:bd:
6f:e3:5a:0e:ab:55:1b:49:2e:48:f6:dc:b2:dd:b9:24:c6:e2:
13:9e:bd:74:e0:61:55:fd:49:54:21:81:80:02:33:da:97:f9:
01:74:71:b3:09:d5:80:42:29:d1:b4:88:27:0c:5a:33:9b:22:
43:8e:ea:bd:27:1c:f2:c8:0d:b4:e1:c1:ed:5a:c5:86:30:85:
9a:2e:0b:70:56:74:ef:49:00:eb:28:1d:e4:f8:49:2f:cc:f3:
ad:a4:d3:d3:fd:27:97:85:2d:63:28:b4:c8:f8:ee:fd:14:3d:
4b:0a:80:ee:f4:7a:36:22:ee:1c:cf:0b:82:90:c2:b0:b5:1c:
12:bc:76:19:72:4e:fa:3f:f8:b7:80:8d:67:5d:5c:3e:ed:2d:
b4:31:2e:5d:f1:40:a4:88:f0:ea:ae:43:02:26:9a:f0:57:78:
e3:aa:04:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:44 2026 by rpki-client