This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132332e302f32342d3234203d3e203539303635.roa
File: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (raw, json)
Hash identifier: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=
Subject key identifier: 37:40:BB:7A:F4:2D:87:B0:D9:AF:AA:D3:1F:F8:94:F9:15:77:DB:B7
Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A
Certificate serial: 260131CFDDD1D7DC30584B6B3A0BFED1CEBE9D5A
Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132332e302f32342d3234203d3e203539303635.roa
Signing time: Tue 20 Jan 2026 02:12:02 +0000
ROA not before: Tue 20 Jan 2026 02:07:02 +0000
ROA not after: Tue 19 Jan 2027 02:12:02 +0000
asID: 59065
IP address blocks: 103.59.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 13:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:01:31:cf:dd:d1:d7:dc:30:58:4b:6b:3a:0b:fe:d1:ce:be:9d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A
Validity
Not Before: Jan 20 02:07:02 2026 GMT
Not After : Jan 19 02:12:02 2027 GMT
Subject: CN=3740BB7AF42D87B0D9AFAAD31FF894F91577DBB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1d:57:9b:0f:a3:a0:5e:06:3b:8c:d0:82:12:
b6:1f:38:ab:5b:a3:ff:91:db:38:b4:00:7f:69:5c:
d6:ae:e9:48:04:e6:29:07:43:f0:30:10:f6:c8:31:
b6:b5:27:5f:43:20:f2:8a:12:71:2c:46:ec:97:f7:
36:bf:a3:93:fe:45:1d:fa:79:46:97:33:a5:74:bc:
06:40:a0:87:f7:11:b3:22:44:e9:7d:cc:ab:8f:3c:
9c:d5:50:79:15:4f:15:6a:0f:26:42:c6:03:d8:a6:
a8:96:07:e9:3c:d1:9b:42:8d:d6:97:25:65:fa:ac:
ba:30:25:8f:91:f6:0d:e5:6b:14:c0:91:91:87:15:
3e:7b:c1:3d:06:ca:6d:23:3b:dc:ad:5f:6b:14:18:
40:92:d3:4a:62:8c:ff:2b:5e:4f:bb:42:0d:74:69:
70:c7:09:12:30:5d:7e:6b:33:47:ba:53:33:14:d8:
a7:0e:de:2a:91:41:03:01:09:df:55:77:b5:0c:35:
e2:43:62:6e:51:40:03:92:c5:1d:51:1d:96:0d:92:
4d:8c:d2:b7:18:94:cd:13:1d:6a:35:07:1b:c6:28:
92:1a:dd:ad:83:d7:63:9f:79:0a:9e:c2:5e:22:0e:
6b:12:7d:c6:f5:f6:42:08:07:eb:5f:15:23:da:7b:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:40:BB:7A:F4:2D:87:B0:D9:AF:AA:D3:1F:F8:94:F9:15:77:DB:B7
X509v3 Authority Key Identifier:
keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132332e302f32342d3234203d3e203539303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.59.123.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0d:7e:72:33:9c:2d:c3:6d:76:f5:ad:bc:13:e5:ec:cb:71:
32:3b:35:a4:76:8d:eb:a6:49:1a:55:a4:13:1a:fa:78:26:c8:
fa:f7:6e:d7:52:87:7c:44:6f:1f:ef:ca:87:f5:45:99:3b:5e:
7c:02:b3:22:2a:b0:1b:4a:1b:8c:56:e4:7d:90:a5:5c:c0:b2:
a9:2f:a0:80:8f:5a:9e:3c:ee:25:56:99:87:c6:94:ab:40:79:
2a:63:43:f2:01:9a:b9:e0:33:82:36:3d:8f:b0:aa:6b:cb:19:
89:9a:80:4b:21:92:ae:00:5f:fe:2c:c9:c0:59:0a:f3:73:ea:
7e:c5:a7:47:70:e6:4c:d4:3d:c5:2c:f6:dc:bf:85:ae:b2:f3:
32:59:cf:fb:d0:b6:53:9b:a2:08:6b:f4:f2:34:e5:c6:8b:d1:
15:93:2e:16:ab:15:55:a5:3f:5b:32:6d:89:30:4e:62:30:33:
26:fa:80:6b:28:bb:58:9d:20:af:93:9a:7d:e3:a1:b4:e3:35:
f9:11:be:da:f9:09:dd:c2:0d:5a:10:e2:e6:ee:0b:8b:dc:36:
43:6e:2e:bf:01:7a:13:d5:47:a4:a8:48:b7:70:7c:d1:7c:ab:
7b:f8:68:ab:96:a1:da:98:44:2d:5e:99:d6:74:5f:05:f3:db:
a0:ed:9b:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:16:02 2026 by rpki-client