This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36382e302f32322d3234203d3e20313531323936.roa
File: 3130332e37312e36382e302f32322d3234203d3e20313531323936.roa (raw, json)
Hash identifier: jQm71q4usHyZ9nJvSyXcTJ5XN9QvxSzUc33cqUIvKFA=
Subject key identifier: F7:52:28:8A:73:A9:0A:EA:EA:B9:D9:C1:61:9E:AC:83:1E:D7:8B:EE
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 651536E0616470CE6182EE0B85550DE03EF3B3EF
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36382e302f32322d3234203d3e20313531323936.roa
Signing time: Tue 20 Jan 2026 02:18:05 +0000
ROA not before: Tue 20 Jan 2026 02:13:05 +0000
ROA not after: Tue 19 Jan 2027 02:18:05 +0000
asID: 151296
IP address blocks: 103.71.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:15:36:e0:61:64:70:ce:61:82:ee:0b:85:55:0d:e0:3e:f3:b3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Jan 20 02:13:05 2026 GMT
Not After : Jan 19 02:18:05 2027 GMT
Subject: CN=F752288A73A90AEAEAB9D9C1619EAC831ED78BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:fc:36:e0:78:b6:49:96:76:50:4b:dc:da:
d6:f9:06:fd:d3:79:60:15:93:0b:21:6f:27:09:8e:
6e:b3:08:73:96:db:7c:85:b1:31:cf:6c:d9:34:ac:
2a:72:c8:84:15:c9:58:0a:d9:8c:62:a1:f6:83:89:
d3:01:f4:9d:4e:44:6f:47:1f:7d:3d:4f:6d:80:fb:
fa:ba:2d:37:fe:8f:9e:26:ec:eb:79:18:90:7f:9f:
21:ea:17:95:61:2d:f6:ac:d7:23:ec:b6:12:b1:90:
44:80:3c:d0:16:9d:5f:84:07:41:da:75:05:28:34:
31:fd:9f:22:4e:4e:2c:d3:dc:0a:91:3d:24:3a:11:
96:e0:58:96:60:05:77:45:75:1a:89:dc:14:ef:d7:
3c:5a:47:f8:e8:30:9e:cb:3b:a8:d5:fc:c9:3f:f1:
77:23:c6:92:4e:c0:c7:8a:d0:8c:45:ee:e5:ed:29:
72:89:5f:22:b5:bf:90:67:7c:09:23:9b:1f:ac:b4:
3c:75:1f:cf:13:15:24:ab:c5:00:53:9c:9f:5e:3e:
4d:4f:e9:7b:46:02:47:f3:35:fd:18:10:22:af:5b:
a7:b8:43:19:78:ec:11:6c:47:c8:c1:bc:1a:d4:d9:
d8:17:33:79:59:8b:36:ab:01:e1:09:5c:9e:dc:fa:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:52:28:8A:73:A9:0A:EA:EA:B9:D9:C1:61:9E:AC:83:1E:D7:8B:EE
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36382e302f32322d3234203d3e20313531323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.68.0/22
Signature Algorithm: sha256WithRSAEncryption
12:ca:4b:8f:c9:82:3e:93:11:9f:70:eb:ee:af:58:0a:c3:f5:
ea:8c:68:fc:2c:7b:b7:11:74:63:97:02:eb:c9:fa:01:16:4a:
4c:92:a9:42:88:64:b1:11:1f:ba:a6:fa:92:b4:3a:72:65:a8:
d4:61:f4:5a:55:f1:97:a5:83:27:c3:a2:36:22:35:d5:ee:77:
7b:ef:cf:04:81:04:95:d3:68:41:81:57:06:e8:65:a3:a3:06:
e4:03:06:79:c0:eb:63:dc:92:f7:e9:dc:ac:fa:50:9e:c1:eb:
40:de:c4:23:43:20:53:7f:bc:cd:b2:c2:c4:bd:81:fc:36:69:
63:ac:64:4e:57:c7:a9:b0:df:dc:9f:bb:7c:46:4e:12:b2:23:
ee:f2:c8:02:b7:16:74:57:05:c0:2f:e5:48:33:f8:f9:ae:d6:
df:02:af:a3:2a:f4:28:fb:8e:8e:8d:d4:33:b4:78:03:71:43:
4c:0d:e1:52:dd:22:bd:50:9d:16:32:30:cb:a5:de:95:58:ae:
af:64:4b:e4:da:25:1f:3b:18:2e:7b:c0:4a:1e:03:26:74:d0:
47:41:e7:f7:3f:d8:c9:8f:e5:54:bd:b1:a3:c1:78:b0:2f:a4:
29:22:c8:bc:3e:92:eb:4d:74:52:88:b8:3a:31:6a:a0:e3:39:
84:c0:db:a9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUZRU24GFkcM5hgu4LhVUN4D7zs+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjAxMjAwMjEzMDVaFw0yNzAxMTkwMjE4MDVaMDMxMTAvBgNV
BAMTKEY3NTIyODhBNzNBOTBBRUFFQUI5RDlDMTYxOUVBQzgzMUVENzhCRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk5Pw24Hi2SZZ2UEvc2tb5Bv3T
eWAVkwshbycJjm6zCHOW23yFsTHPbNk0rCpyyIQVyVgK2YxiofaDidMB9J1ORG9H
H309T22A+/q6LTf+j54m7Ot5GJB/nyHqF5VhLfas1yPsthKxkESAPNAWnV+EB0Ha
dQUoNDH9nyJOTizT3AqRPSQ6EZbgWJZgBXdFdRqJ3BTv1zxaR/joMJ7LO6jV/Mk/
8XcjxpJOwMeK0IxF7uXtKXKJXyK1v5BnfAkjmx+stDx1H88TFSSrxQBTnJ9ePk1P
6XtGAkfzNf0YECKvW6e4Qxl47BFsR8jBvBrU2dgXM3lZizarAeEJXJ7c+ss1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU91IoinOpCurqudnBYZ6sgx7Xi+4wHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDg4MTAyNS8wLzMxMzAzMzJlMzcz
MTJlMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzkzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmdHRDANBgkqhkiG9w0BAQsFAAOCAQEAEspLj8mCPpMRn3Dr7q9YCsP1
6oxo/Cx7txF0Y5cC68n6ARZKTJKpQohksREfuqb6krQ6cmWo1GH0WlXxl6WDJ8Oi
NiI11e53e+/PBIEEldNoQYFXBuhlo6MG5AMGecDrY9yS9+ncrPpQnsHrQN7EI0Mg
U3+8zbLCxL2B/DZpY6xkTlfHqbDf3J+7fEZOErIj7vLIArcWdFcFwC/lSDP4+a7W
3wKvoyr0KPuOjo3UM7R4A3FDTA3hUt0ivVCdFjIwy6XelViur2RL5NolHzsYLnvA
Sh4DJnTQR0Hn9z/YyY/lVL2xo8F4sC+kKSLIvD6S6010Uoi4OjFqoOM5hMDbqQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:50 2026 by rpki-client