This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e2038303735.roa
File: 3130332e36312e36312e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier: 3TQHQ46hBwChI3jRqd1ONuNaYSMHNCRbqwYF16k+72w=
Subject key identifier: 86:91:62:B3:5E:DE:2F:42:41:FA:DA:AD:8C:66:F1:3A:F8:34:C2:61
Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial: 27227FDEA3A7115FD91F8C69B2E21D6A93DD3F2D
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e2038303735.roa
Signing time: Tue 20 Jan 2026 02:15:39 +0000
ROA not before: Tue 20 Jan 2026 02:10:39 +0000
ROA not after: Tue 19 Jan 2027 02:15:39 +0000
asID: 8075
IP address blocks: 103.61.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 14:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:22:7f:de:a3:a7:11:5f:d9:1f:8c:69:b2:e2:1d:6a:93:dd:3f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Validity
Not Before: Jan 20 02:10:39 2026 GMT
Not After : Jan 19 02:15:39 2027 GMT
Subject: CN=869162B35EDE2F4241FADAAD8C66F13AF834C261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:bb:db:4b:a5:08:16:31:66:45:9e:f6:b1:
b0:4d:64:0b:52:ab:08:66:c5:e0:59:a0:b0:ca:d9:
1e:47:b1:72:37:ae:5a:f9:c9:5f:cc:1d:4a:2e:79:
1e:4e:73:02:59:a6:47:19:0f:36:b1:1a:02:60:d5:
b0:5b:21:5f:e8:05:cb:83:47:d6:8a:27:ea:c0:52:
87:71:c6:d5:85:57:97:9c:26:e5:11:d8:34:e2:8c:
ac:8d:70:9c:31:75:0b:6e:14:95:8b:12:c6:32:72:
a0:13:bb:e3:33:5e:9a:bc:28:73:25:a8:78:c8:2d:
66:ea:99:05:0d:ce:1e:56:1d:1f:41:c9:2f:c8:ab:
61:a7:ce:4a:ef:87:af:92:f8:7c:ff:13:7b:70:1f:
1f:b8:11:e6:80:42:38:1c:81:d2:c0:ea:a5:d1:8a:
30:5b:54:4f:1d:10:36:0f:eb:87:f1:70:05:5f:a0:
c9:8f:65:c0:a7:5a:cf:9c:33:ef:b8:a1:58:ef:23:
5b:ff:46:e3:62:c0:d2:b0:cf:0a:17:be:ab:f9:a9:
0e:bb:f6:68:cd:61:40:cd:07:61:bd:ed:45:f4:fa:
7a:a1:51:2b:2c:6c:de:33:d9:6a:b0:11:c7:1d:e6:
74:c9:a5:3c:69:af:ed:57:ab:0c:df:a7:50:6d:70:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:91:62:B3:5E:DE:2F:42:41:FA:DA:AD:8C:66:F1:3A:F8:34:C2:61
X509v3 Authority Key Identifier:
keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e2038303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.61.0/24
Signature Algorithm: sha256WithRSAEncryption
78:61:64:5b:33:34:fe:0f:6a:70:43:7a:84:4d:fb:98:d0:15:
c6:64:7c:7c:96:7e:99:56:35:04:62:d6:f4:b8:95:b4:c5:9b:
b1:50:75:9e:99:1b:d9:61:00:1d:bf:db:0c:ff:4b:af:c3:53:
0d:3c:f9:ee:82:5f:6b:d0:96:44:51:7d:ee:bc:d8:00:08:d1:
f1:98:1f:a7:be:c9:a0:b7:92:8e:18:97:26:26:89:05:14:53:
39:2e:40:0e:d6:de:05:11:8b:c6:01:43:b3:21:09:77:64:61:
2c:87:a4:9c:13:1a:a1:44:b7:74:c1:e7:06:86:b3:35:f9:02:
7a:41:e2:65:0b:72:3e:d3:0d:21:64:6d:42:61:1e:59:31:27:
b1:ac:2b:ac:39:91:4c:3c:de:ba:2a:a4:22:59:f4:ef:b3:dc:
9c:0d:b5:b0:79:5a:ec:3e:e1:6e:c0:fe:96:af:33:7b:ee:c6:
a6:3f:ed:3f:d8:f5:93:2a:d7:77:5a:ef:03:66:fc:8b:0b:c6:
5f:36:68:2a:ac:a5:aa:64:5c:dc:1f:03:af:cb:8d:51:4b:50:
3a:8b:ba:09:3e:26:9b:62:d6:43:d1:86:39:15:4c:a4:db:1d:
b8:2e:1d:6f:2e:75:f5:dc:77:62:f4:cc:a5:f1:ad:fa:b7:b3:
d4:79:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:00:30 2026 by rpki-client