This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32342e302f32322d3234203d3e203538383334.roa
File: 3130332e32372e32342e302f32322d3234203d3e203538383334.roa (raw, json)
Hash identifier: jmGttyKDTF+7iCDm1TewED/BSWAF/MWIPWAG0KA4FeY=
Subject key identifier: BB:ED:F1:BA:B2:16:FE:C8:66:12:CA:A4:96:9D:21:AA:CF:5F:0C:DF
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 536B4968D55A6EADD52B8F6D90B36E8A6ACD6D2F
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32342e302f32322d3234203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:07 +0000
ROA not before: Tue 20 Jan 2026 02:08:07 +0000
ROA not after: Tue 19 Jan 2027 02:13:07 +0000
asID: 58834
IP address blocks: 103.27.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6b:49:68:d5:5a:6e:ad:d5:2b:8f:6d:90:b3:6e:8a:6a:cd:6d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:07 2026 GMT
Not After : Jan 19 02:13:07 2027 GMT
Subject: CN=BBEDF1BAB216FEC86612CAA4969D21AACF5F0CDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:b5:8c:f2:e8:c0:45:96:44:4c:6d:30:bb:
ec:22:93:cf:bd:03:e4:f6:73:42:0d:3c:65:37:3b:
59:91:8a:9d:ae:2a:24:d3:40:eb:af:29:3a:4f:0d:
1b:ff:eb:5f:c7:28:8b:b1:c0:ba:b7:f1:76:c7:f7:
f8:d0:29:74:40:c9:59:4c:ed:bb:f2:65:92:81:93:
11:33:6b:60:2f:3f:32:46:ae:23:b0:14:b2:e9:73:
78:a3:8a:b1:ba:96:cb:61:3f:ed:dd:78:b8:55:f6:
c8:aa:27:31:e1:ac:31:03:37:cf:8e:4a:25:df:90:
37:df:da:ec:9d:c0:04:84:6a:41:c8:d3:7f:45:7b:
b0:86:a2:bd:7f:3a:d5:c9:2b:2b:29:67:28:52:a0:
79:b7:5f:e2:79:c3:43:8a:81:8f:ef:98:fb:a8:ae:
2d:60:9d:ac:f6:0a:b3:d3:f0:12:8d:5d:77:5c:86:
b2:3c:a2:0f:74:12:0e:ad:bb:5e:af:2a:e8:e5:d5:
36:22:21:08:cc:66:10:99:93:b0:ae:86:75:32:11:
b4:4c:b1:44:fe:cc:34:36:43:62:0a:55:ec:de:55:
fb:58:af:27:a4:c6:6f:81:a8:b0:9a:37:de:d1:18:
8c:9d:bf:16:fe:4b:41:46:08:16:30:a2:88:f8:7b:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:ED:F1:BA:B2:16:FE:C8:66:12:CA:A4:96:9D:21:AA:CF:5F:0C:DF
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32342e302f32322d3234203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.24.0/22
Signature Algorithm: sha256WithRSAEncryption
42:ba:3b:dd:38:0f:9c:43:d8:66:06:91:4e:b4:12:fc:6d:6f:
7b:27:fd:b3:46:d2:4e:7c:7b:d2:08:d8:3a:68:bd:1b:56:a9:
97:41:b8:b2:3f:9b:3d:ce:4e:75:94:f6:4a:d4:6e:23:2c:c2:
5a:a3:0f:7d:f2:85:ff:19:cb:fc:8a:0e:46:c0:e7:c1:07:8f:
5a:cf:2e:20:f6:83:6a:db:7f:a0:11:5f:a9:7a:cd:ae:e2:be:
31:bd:b7:4d:9a:30:8a:4c:88:39:23:24:bb:83:0c:b3:ef:0e:
00:b9:72:b5:64:9e:2f:3d:65:74:bb:ec:e4:35:6c:b8:c5:b4:
94:ca:46:0a:10:eb:a7:67:47:56:ed:98:ee:45:78:73:90:27:
e8:f3:ef:30:17:45:1d:89:ef:bc:f3:b6:60:ad:51:3c:3c:f6:
43:28:be:6a:17:22:d8:27:82:f0:f6:6a:2e:39:dc:11:c6:cc:
7a:8a:39:14:e8:9b:12:f8:d0:8a:00:f2:bc:1c:b7:22:65:19:
2c:5f:41:ea:3b:b0:ef:16:67:00:fc:a7:0f:c6:00:eb:34:b0:
e4:40:3b:7c:a0:09:03:57:e8:26:07:6c:3c:22:e6:1b:2f:7e:
52:77:42:22:3d:3f:fd:69:25:08:1f:07:ed:de:3a:3c:99:19:
03:dd:66:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:24 2026 by rpki-client