This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa
File: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (raw, json)
Hash identifier: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=
Subject key identifier: 44:32:FF:16:14:23:AF:86:64:20:96:2E:B4:5D:AA:95:5E:DE:F8:06
Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140
Certificate serial: 5DD9A82CFD6F7E133AA3BC4E23D70C1622E25351
Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa
Signing time: Tue 20 Jan 2026 02:21:38 +0000
ROA not before: Tue 20 Jan 2026 02:16:38 +0000
ROA not after: Tue 19 Jan 2027 02:21:38 +0000
asID: 131482
IP address blocks: 103.98.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 14:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d9:a8:2c:fd:6f:7e:13:3a:a3:bc:4e:23:d7:0c:16:22:e2:53:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140
Validity
Not Before: Jan 20 02:16:38 2026 GMT
Not After : Jan 19 02:21:38 2027 GMT
Subject: CN=4432FF161423AF866420962EB45DAA955EDEF806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:84:fc:9c:72:4c:9c:ed:66:60:65:55:80:
ae:7b:8d:79:7f:4b:a9:06:05:27:38:f9:7a:19:fe:
ce:cb:4e:cb:bb:6f:36:96:dd:95:2a:0e:ec:8b:da:
91:e7:ae:98:c9:e2:8c:b6:cb:f5:b7:26:ba:3d:ed:
9d:d1:4a:b0:eb:76:a6:2f:d5:4f:f2:24:31:57:3b:
78:29:d9:59:ce:77:fb:b7:90:d3:38:99:b2:64:47:
32:85:7a:2f:e5:76:c8:23:55:16:eb:38:38:df:b4:
94:8d:d7:a3:5c:19:77:3f:73:ad:96:57:ee:67:fb:
54:20:be:6c:f1:6b:0f:45:59:cb:e2:b9:51:7d:51:
b9:77:8d:2b:19:fd:dc:1c:18:4b:20:e4:aa:22:8f:
c6:fc:aa:94:38:86:3b:e4:25:bf:2a:82:d3:a9:1e:
67:0c:e3:82:0a:4b:80:40:14:cc:b1:77:a4:69:b0:
6a:8f:5e:b7:d1:2b:80:23:c8:0e:36:a7:5b:95:fa:
e1:32:5d:e7:47:bf:d3:b1:53:1e:b8:d5:36:44:51:
5c:bb:cb:6d:03:e0:98:8f:d7:ff:e8:76:4a:00:47:
40:b2:03:8e:0f:e9:85:0f:59:35:6e:c2:98:31:0b:
bb:d7:f7:e6:c6:ae:09:fa:dd:14:af:78:8f:84:6d:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:32:FF:16:14:23:AF:86:64:20:96:2E:B4:5D:AA:95:5E:DE:F8:06
X509v3 Authority Key Identifier:
keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.164.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:42:46:e0:18:6f:6b:9e:42:7c:bc:85:91:b5:52:9f:46:27:
85:69:a3:42:ed:f8:29:fc:a7:fa:ad:d2:62:14:d4:48:5d:8e:
b4:de:b7:a5:06:a1:ee:80:91:e0:ff:94:78:b4:da:ff:b8:28:
e4:96:50:4b:93:45:8e:84:25:9f:2c:dd:ce:ef:68:70:ea:7b:
42:b4:dd:da:40:5a:71:80:88:93:e1:d6:61:27:61:77:13:aa:
02:d2:1c:40:20:42:48:ac:44:50:e3:75:33:4f:a8:e2:84:f6:
f9:fa:46:09:df:e7:3b:a5:d8:38:ab:c3:92:d3:ed:5e:15:04:
57:8c:48:50:cb:c1:42:6c:3c:fb:0a:5e:b7:da:06:f0:5b:3b:
39:45:11:3e:5f:aa:97:a2:ed:58:e3:dc:dc:26:ca:ee:61:75:
8a:b1:fc:49:9d:7e:59:c6:ec:b8:8d:37:ed:49:f6:da:94:4c:
e6:30:80:6a:dc:94:8d:68:07:3e:cf:56:58:bc:56:b1:5f:49:
48:99:2e:fe:17:c8:6d:91:d2:76:2e:c6:1e:08:1f:7b:c6:4f:
15:d2:06:66:33:9d:76:9b:34:cb:b4:dd:8c:03:f9:39:9b:3f:
6f:0c:3d:58:60:0d:21:70:1d:bc:2b:28:74:1f:f3:56:53:25:
8b:15:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:44 2026 by rpki-client