This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e3235352e3134302e302f32332d3233203d3e203539303637.roa
File: 3130332e3235352e3134302e302f32332d3233203d3e203539303637.roa (raw, json)
Hash identifier: 0pufc7/8qoYUfAmwuaik++UnUtWz2+V3vbRti8a+0CY=
Subject key identifier: A6:EA:89:CB:18:5D:6B:B1:16:6B:CE:76:D1:20:47:64:AF:1A:0C:2A
Certificate issuer: /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial: 0C135D769AE252938F45A1E20D7FC11F542D4321
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e3235352e3134302e302f32332d3233203d3e203539303637.roa
Signing time: Tue 20 Jan 2026 02:15:31 +0000
ROA not before: Tue 20 Jan 2026 02:10:31 +0000
ROA not after: Tue 19 Jan 2027 02:15:31 +0000
asID: 59067
IP address blocks: 103.255.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 08:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:13:5d:76:9a:e2:52:93:8f:45:a1:e2:0d:7f:c1:1f:54:2d:43:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
Validity
Not Before: Jan 20 02:10:31 2026 GMT
Not After : Jan 19 02:15:31 2027 GMT
Subject: CN=A6EA89CB185D6BB1166BCE76D1204764AF1A0C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:bc:6b:8d:21:4c:6b:e0:50:08:e5:52:0d:
40:ca:f8:e2:03:66:3e:9d:9c:73:8c:bb:7e:87:51:
9c:74:1e:21:ed:36:53:01:38:a0:83:f8:8e:f0:00:
63:0d:55:6b:4c:08:42:40:9f:28:c4:0f:b8:7a:d4:
81:5a:77:06:94:ca:bd:49:9a:f6:59:3e:af:6d:ca:
d8:31:6a:a7:4d:83:28:a3:64:6e:7d:47:b1:c5:bd:
16:4f:a8:94:27:23:f5:ef:af:e3:ef:74:e0:f6:7e:
42:b8:68:44:e5:a3:9a:36:9c:89:b5:94:87:ed:bb:
55:4c:50:5a:86:b1:d4:18:f3:cd:d0:71:35:50:4a:
90:98:1d:35:b4:90:6c:40:43:ec:c6:c2:2b:69:b3:
4d:d4:40:a2:f2:1a:bb:cb:4f:f3:c6:c1:e5:fa:f9:
8d:38:ea:50:d8:a6:33:66:13:4c:c0:f3:ff:0c:0f:
c9:09:4b:27:97:c6:bc:2c:86:ff:fb:e3:a4:a6:56:
b0:d2:71:a3:91:b0:f5:88:fe:85:bc:39:c9:0c:02:
5c:f1:d9:c0:24:b0:9a:44:d6:fd:ac:e8:21:3a:d6:
80:6b:7a:27:21:95:a0:f7:21:b6:6c:a1:d6:e5:21:
4a:34:6e:32:90:dd:31:15:40:7c:6c:a2:3f:5d:ee:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:89:CB:18:5D:6B:B1:16:6B:CE:76:D1:20:47:64:AF:1A:0C:2A
X509v3 Authority Key Identifier:
keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e3235352e3134302e302f32332d3233203d3e203539303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.140.0/23
Signature Algorithm: sha256WithRSAEncryption
32:22:ae:9b:18:65:d1:f5:59:e9:40:b2:18:71:30:87:b2:c1:
ac:0a:b7:b7:05:08:12:73:5f:0f:8f:8e:61:6a:fd:75:4e:c8:
d5:bd:5c:76:13:6b:3f:16:a0:bb:ef:d8:1a:45:16:82:e3:92:
a2:ae:82:39:f3:7f:5c:76:ca:05:28:e1:01:80:cf:f8:4c:71:
6b:48:4c:6b:ca:ae:b8:dd:d6:2f:3f:23:67:34:9c:5a:b5:7e:
e8:14:b8:67:f2:03:81:68:05:15:04:7a:e3:40:9a:86:7c:7e:
a1:04:ab:c5:eb:2c:06:d9:11:5a:28:54:90:a2:34:02:f5:c2:
0b:ba:c3:fe:e3:6f:b2:40:02:0f:da:b0:ad:40:72:22:ab:9a:
f2:65:37:56:ee:5e:dd:80:c6:36:6e:3a:3a:cc:b1:26:4a:55:
4f:68:d4:1b:11:cd:d2:50:85:5e:ad:f7:2b:25:c7:34:36:f4:
a6:51:03:bc:30:e7:ea:c9:40:36:08:70:a3:83:a5:6f:f8:82:
8f:80:e7:07:e5:ba:84:87:52:d1:74:f3:51:df:40:86:0e:e7:
01:0c:28:8c:90:f5:ca:9d:ef:81:17:54:80:5c:f5:38:51:cf:
d0:4b:7e:04:97:e8:41:b3:d8:3a:72:c1:bd:a3:8d:e4:96:51:
ce:b1:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:40:46 2026 by rpki-client