This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/3130332e39362e31312e302f32342d3234203d3e20313331353637.roa
File: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (raw, json)
Hash identifier: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=
Subject key identifier: 38:39:04:3C:D2:07:AD:34:AE:70:DD:57:EA:1A:F4:C6:EC:7D:8F:36
Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B
Certificate serial: 60BB4E51543628E56B56E482982A3CC0B94C01A0
Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/3130332e39362e31312e302f32342d3234203d3e20313331353637.roa
Signing time: Tue 20 Jan 2026 02:27:19 +0000
ROA not before: Tue 20 Jan 2026 02:22:19 +0000
ROA not after: Tue 19 Jan 2027 02:27:19 +0000
asID: 131567
IP address blocks: 103.96.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 01:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:bb:4e:51:54:36:28:e5:6b:56:e4:82:98:2a:3c:c0:b9:4c:01:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B
Validity
Not Before: Jan 20 02:22:19 2026 GMT
Not After : Jan 19 02:27:19 2027 GMT
Subject: CN=3839043CD207AD34AE70DD57EA1AF4C6EC7D8F36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:6b:cc:31:5d:08:6a:07:fc:cd:ba:1d:d2:c3:
cc:52:c1:6e:ca:a5:99:4c:6f:8b:9d:b5:79:04:6e:
a7:8e:fa:b7:c0:bd:f0:74:80:f0:8a:b1:79:a9:b5:
aa:55:0a:5e:c7:09:da:5b:d6:3f:86:99:26:a0:a6:
2d:c7:a1:15:88:bb:f2:eb:49:6d:97:5b:96:44:b2:
b8:3c:02:38:31:23:e7:e3:f4:2b:dd:20:71:2c:f9:
ad:67:a6:8e:2b:cf:8d:1b:51:56:d6:7b:88:e7:71:
37:4d:18:01:ef:b4:50:12:a0:07:00:56:72:40:20:
e5:7d:42:26:0c:d4:23:fb:1e:9f:a7:97:0d:e8:07:
64:da:ae:86:e6:aa:a8:84:96:9d:05:07:74:ef:3a:
31:a3:e5:2b:2a:5d:db:ce:70:4c:22:89:17:8b:82:
fd:4e:a8:43:16:33:ea:d0:8c:88:49:c6:17:f6:a9:
0c:cf:25:ea:7a:0c:f3:3e:7c:ed:1b:00:c6:c2:9b:
f3:11:93:30:38:87:f3:f5:29:eb:27:53:0b:c2:5b:
2a:c8:ee:fe:cc:fd:27:2a:8f:ee:e2:cf:ab:32:dd:
87:93:9b:0d:20:39:e9:af:4d:44:eb:4e:20:38:77:
57:1d:1c:36:bc:06:37:a1:a1:c2:c7:32:ed:3d:5b:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:04:3C:D2:07:AD:34:AE:70:DD:57:EA:1A:F4:C6:EC:7D:8F:36
X509v3 Authority Key Identifier:
keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/3130332e39362e31312e302f32342d3234203d3e20313331353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.11.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3f:05:bf:95:9b:d7:03:18:a5:73:17:e7:93:dc:c2:92:c5:
a7:72:41:b7:07:6b:2e:44:36:a8:c9:7d:78:9a:7c:e5:e8:c4:
a6:30:5d:4e:36:d4:c0:55:5f:97:16:67:b1:cf:78:a6:13:e0:
5b:b3:40:9e:ee:58:dc:ca:93:6f:f3:af:48:f3:4d:fc:14:9d:
bb:60:17:0e:aa:d9:f7:de:fc:8b:52:22:06:85:90:e1:bb:fd:
9b:46:e9:27:04:f9:ed:b6:a6:7b:60:f7:ff:8d:5b:32:05:8f:
e2:e5:b2:10:54:47:c5:0d:dc:c7:f6:f2:05:b3:86:18:2d:b9:
5d:71:36:f7:74:b6:74:84:b4:0e:65:85:9e:f8:d6:cf:c8:77:
38:bf:e4:bf:ec:04:bb:7e:bb:ab:de:a7:36:d1:b0:fe:bc:5a:
ae:a6:2e:27:38:f5:4a:66:2a:bd:eb:04:f4:50:01:70:23:d2:
d5:47:3a:cf:a0:ec:f8:68:54:1b:a0:80:00:00:5e:2b:c6:12:
c8:7d:65:d3:17:f4:7c:35:59:55:3c:da:ea:c6:99:5a:b6:c3:
cf:ab:24:a5:84:5c:eb:17:ae:57:b7:62:36:33:81:fb:44:6a:
53:79:5c:57:b0:00:32:44:73:2b:f3:fd:30:c3:2b:90:0f:ed:
eb:dd:16:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:43 2026 by rpki-client