This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e32352e3135362e302f32342d3234203d3e203539303637.roa
File: 3130332e32352e3135362e302f32342d3234203d3e203539303637.roa (raw, json)
Hash identifier: Fhm18jMP0LneDzpdDN9bxE/6o0W++vH4PjTwSu3QXws=
Subject key identifier: F2:40:54:2E:08:E2:56:E0:52:1E:80:82:BA:FC:B4:A1:5F:CC:09:A7
Certificate issuer: /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial: 71227804557407A3E480AB395872F25AC9CB1046
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e32352e3135362e302f32342d3234203d3e203539303637.roa
Signing time: Tue 20 Jan 2026 02:15:31 +0000
ROA not before: Tue 20 Jan 2026 02:10:31 +0000
ROA not after: Tue 19 Jan 2027 02:15:31 +0000
asID: 59067
IP address blocks: 103.25.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:22:78:04:55:74:07:a3:e4:80:ab:39:58:72:f2:5a:c9:cb:10:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
Validity
Not Before: Jan 20 02:10:31 2026 GMT
Not After : Jan 19 02:15:31 2027 GMT
Subject: CN=F240542E08E256E0521E8082BAFCB4A15FCC09A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:82:12:f3:ae:f8:3f:15:58:ad:4d:46:0e:
11:2a:7f:21:c4:de:a0:dc:0f:e3:df:d8:6b:06:05:
a6:f9:27:86:48:8e:e2:c5:60:8b:6c:5c:2a:88:71:
7c:54:b9:4d:d5:e3:f5:21:76:eb:69:91:b7:d0:72:
38:5b:52:fa:ed:b4:6a:93:28:6c:7e:5a:a4:68:b8:
f6:22:f3:a0:84:84:ec:9b:05:16:f3:df:91:96:2a:
c3:c6:13:4f:b0:9a:54:e5:a6:f2:cc:82:d6:93:4e:
3f:5e:88:09:3e:2b:98:75:29:4f:fd:cc:4b:ae:02:
48:1b:74:f4:99:d5:00:09:e7:04:37:f9:17:a2:3c:
49:bd:f0:4f:ba:8c:16:50:bc:8c:f7:50:08:4b:54:
18:fa:2d:d6:5c:c4:79:da:1e:83:c7:2d:26:73:1c:
c1:59:44:7e:aa:f4:9a:95:ff:6b:11:6b:b9:7e:ff:
ae:a7:39:25:c7:43:77:57:68:cf:35:a5:42:5f:7f:
19:76:64:d5:03:2a:12:58:75:81:64:3d:08:1d:65:
65:c9:d6:a7:81:33:d6:b6:fe:55:86:be:7e:d2:87:
1d:c1:fd:95:32:f9:0b:70:0b:22:f7:54:3b:bd:89:
e5:b1:6e:b8:02:20:0d:05:8c:31:9b:ec:29:d3:8d:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:40:54:2E:08:E2:56:E0:52:1E:80:82:BA:FC:B4:A1:5F:CC:09:A7
X509v3 Authority Key Identifier:
keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e32352e3135362e302f32342d3234203d3e203539303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.156.0/24
Signature Algorithm: sha256WithRSAEncryption
92:89:5c:5c:2e:c4:92:33:20:54:fb:d8:2d:4e:ca:0c:6f:7f:
5a:58:55:f6:d3:e4:7c:d5:e7:34:f1:6f:f3:7c:cd:ea:9e:ab:
75:b4:09:b0:40:a7:fc:46:9f:94:f5:5a:07:52:21:72:6c:e8:
d2:c4:b1:37:d5:7e:3b:1f:ed:b3:bd:47:3a:00:9b:94:01:f6:
46:ef:c4:1f:e8:74:e7:cd:05:91:b3:e2:55:37:c3:ce:bb:cb:
bb:34:df:99:df:5c:88:95:66:02:51:56:ca:db:95:25:da:dc:
75:e8:67:87:fa:50:d3:ca:a3:1f:25:14:5a:71:01:29:63:af:
53:cb:bc:77:c5:7d:a4:6d:c8:77:47:e8:e6:3e:58:3b:42:30:
c6:f9:76:27:f4:a9:b3:99:cb:d3:c2:64:8a:9c:06:3e:c1:94:
ae:54:c2:95:47:c2:49:aa:20:59:2d:37:10:79:fe:86:58:0c:
07:97:5b:ac:95:70:b5:92:eb:05:0b:0f:00:10:fb:17:f4:43:
52:05:f9:88:3d:6b:2d:01:f7:90:d6:fd:f0:d5:5e:87:d0:ea:
ea:27:a8:b5:54:d0:0c:3b:cf:c8:3d:f3:20:e0:b9:e1:61:28:
83:f5:ad:66:65:5d:db:1f:a1:60:9d:85:99:a1:38:3f:a1:38:
6c:17:28:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:08:20 2026 by rpki-client