This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e20313338343537.roa
File: 3130332e36312e36302e302f32342d3234203d3e20313338343537.roa (raw, json)
Hash identifier: SROnoFoF/ukVVZs5Ay/Atw5dQb/RCEAjU3JookV0pbM=
Subject key identifier: D9:CC:D3:F7:B6:43:96:71:DD:C4:78:05:B3:05:47:E9:80:95:2D:3D
Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial: 417EF1ACF3B3A7C74534DE9DF1F00BACDBFC9F79
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e20313338343537.roa
Signing time: Tue 20 Jan 2026 02:15:38 +0000
ROA not before: Tue 20 Jan 2026 02:10:38 +0000
ROA not after: Tue 19 Jan 2027 02:15:38 +0000
asID: 138457
IP address blocks: 103.61.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 08:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7e:f1:ac:f3:b3:a7:c7:45:34:de:9d:f1:f0:0b:ac:db:fc:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Validity
Not Before: Jan 20 02:10:38 2026 GMT
Not After : Jan 19 02:15:38 2027 GMT
Subject: CN=D9CCD3F7B6439671DDC47805B30547E980952D3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:0e:59:5f:4c:2a:19:bf:8c:05:1b:46:8a:
9b:b3:48:b2:0a:a2:48:f4:02:1d:f9:16:51:d0:50:
f0:80:28:6f:9d:f8:b5:ae:00:a1:d2:29:33:8e:43:
4b:47:c6:1a:ca:11:52:5e:82:ba:10:74:b5:9d:35:
21:6b:10:02:7b:f3:8c:45:26:ea:32:fa:89:b0:db:
81:79:59:1d:06:5d:96:cc:bd:a0:58:64:46:cb:ac:
9a:8c:32:75:1b:08:04:8a:64:4d:ad:60:9d:21:23:
41:0b:7b:a5:ac:62:9a:42:26:c7:2a:67:46:e9:0c:
80:1a:74:d1:0e:2f:b3:ec:4c:6b:cd:95:78:8b:c7:
37:0b:03:56:e5:b0:2f:f0:18:75:0d:01:27:7a:e5:
3f:f9:21:91:ed:14:41:f3:ea:59:48:3e:23:07:17:
61:20:71:51:ff:63:d6:b8:b5:48:89:f4:60:c1:4d:
e0:83:d2:d3:46:7b:97:39:1b:7f:69:77:37:19:70:
fe:d4:75:aa:01:75:c5:cd:86:85:88:37:9c:e8:de:
4a:97:c3:1c:c0:4b:79:ec:a1:f7:1e:07:2d:57:d6:
05:57:a8:bd:0c:ff:b3:e4:5f:eb:0f:48:f8:46:2d:
1c:e6:35:a8:7e:d3:16:27:ce:24:1b:8f:bc:d6:20:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CC:D3:F7:B6:43:96:71:DD:C4:78:05:B3:05:47:E9:80:95:2D:3D
X509v3 Authority Key Identifier:
keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e20313338343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.60.0/24
Signature Algorithm: sha256WithRSAEncryption
36:45:4f:6c:c5:fe:09:e5:d7:cc:58:42:80:b2:ea:87:43:77:
08:fb:93:72:03:19:b9:03:57:64:64:ab:70:c8:13:67:09:69:
30:1b:8c:a6:31:39:2f:93:95:4a:4f:37:e8:08:e7:d2:1b:d9:
ae:0d:48:be:f0:32:de:33:b0:e4:51:94:bd:b0:3b:fb:d1:21:
10:82:90:20:a2:55:4d:a0:6b:c2:6a:1c:35:93:93:51:20:b2:
57:41:af:d4:0e:84:ae:41:5c:5f:1d:c6:ef:ea:6b:a7:f3:1b:
5a:56:7c:f2:50:d5:de:fb:d5:df:26:0d:b6:07:73:a9:6b:ea:
f4:55:2b:29:0a:b9:c8:af:db:b3:0d:55:82:57:04:ec:30:52:
3d:8d:1d:8f:06:92:11:99:a4:b7:ae:3f:ea:52:a8:12:10:dc:
01:b9:99:66:6d:73:ad:36:e9:d8:6b:b9:f0:bf:c3:60:6a:c8:
04:b7:b8:b2:f9:33:49:07:39:8e:ac:34:fd:9f:60:9f:c7:a0:
18:82:12:f8:1d:2a:74:29:9b:32:10:b9:a0:77:86:3b:da:17:
ea:15:e5:a2:4e:00:51:49:63:8b:0e:22:c4:54:73:5a:3b:2d:
c9:aa:94:b6:26:ad:8c:91:fa:e0:7d:ff:8f:c4:8f:a7:8b:cd:
b5:92:9b:f6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUQX7xrPOzp8dFNN6d8fALrNv8n3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD
OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzhaFw0yNzAxMTkwMjE1MzhaMDMxMTAvBgNV
BAMTKEQ5Q0NEM0Y3QjY0Mzk2NzFEREM0NzgwNUIzMDU0N0U5ODA5NTJEM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6Q5ZX0wqGb+MBRtGipuzSLIK
okj0Ah35FlHQUPCAKG+d+LWuAKHSKTOOQ0tHxhrKEVJegroQdLWdNSFrEAJ784xF
Juoy+omw24F5WR0GXZbMvaBYZEbLrJqMMnUbCASKZE2tYJ0hI0ELe6WsYppCJscq
Z0bpDIAadNEOL7PsTGvNlXiLxzcLA1blsC/wGHUNASd65T/5IZHtFEHz6llIPiMH
F2EgcVH/Y9a4tUiJ9GDBTeCD0tNGe5c5G39pdzcZcP7UdaoBdcXNhoWIN5zo3kqX
wxzAS3nsofceBy1X1gVXqL0M/7PkX+sPSPhGLRzmNah+0xYnziQbj7zWIBkzAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU2czT97ZDlnHdxHgFswVH6YCVLT0wHwYDVR0j
BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy
RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTc1NjE2Mi8wLzMxMzAzMzJlMzYz
MTJlMzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzUzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGc9PDANBgkqhkiG9w0BAQsFAAOCAQEANkVPbMX+CeXXzFhCgLLqh0N3
CPuTcgMZuQNXZGSrcMgTZwlpMBuMpjE5L5OVSk836Ajn0hvZrg1IvvAy3jOw5FGU
vbA7+9EhEIKQIKJVTaBrwmocNZOTUSCyV0Gv1A6ErkFcXx3G7+prp/MbWlZ88lDV
3vvV3yYNtgdzqWvq9FUrKQq5yK/bsw1VglcE7DBSPY0djwaSEZmkt64/6lKoEhDc
AbmZZm1zrTbp2Gu58L/DYGrIBLe4svkzSQc5jqw0/Z9gn8egGIIS+B0qdCmbMhC5
oHeGO9oX6hXlok4AUUljiw4ixFRzWjstyaqUtiatjJH64H3/j8SPp4vNtZKb9g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:58 2026 by rpki-client