This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa
File: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (raw, json)
Hash identifier: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=
Subject key identifier: 4B:FE:4F:3C:D8:13:42:B5:E2:BA:E7:5B:25:C5:C9:DF:2F:95:64:69
Certificate issuer: /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial: 71ADC943F9ACB2CBA809D9DB3AF414349857A3C1
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa
Signing time: Tue 20 Jan 2026 02:21:39 +0000
ROA not before: Tue 20 Jan 2026 02:16:39 +0000
ROA not after: Tue 19 Jan 2027 02:21:39 +0000
asID: 63603
IP address blocks: 103.102.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 08:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ad:c9:43:f9:ac:b2:cb:a8:09:d9:db:3a:f4:14:34:98:57:a3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Validity
Not Before: Jan 20 02:16:39 2026 GMT
Not After : Jan 19 02:21:39 2027 GMT
Subject: CN=4BFE4F3CD81342B5E2BAE75B25C5C9DF2F956469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:92:3d:d2:8d:c4:c5:18:b8:7f:79:4d:cc:
c1:61:fd:d2:86:5a:70:c0:75:2f:82:98:1c:ad:66:
1b:f9:13:63:55:67:9f:52:d6:15:fd:fe:db:85:04:
e4:ee:73:a0:4b:9d:35:0a:f0:77:ab:9e:ca:93:c3:
6f:b6:4b:07:3d:4e:ee:b2:50:be:73:09:82:87:8c:
8d:f5:06:b5:ef:f5:c4:b7:d2:05:dd:19:19:e9:6f:
25:79:27:4e:81:45:67:80:33:0d:b0:e6:22:62:51:
b2:50:3d:fe:5a:d1:56:4c:d4:33:d1:73:41:af:9c:
39:56:aa:8f:d9:c9:0f:2f:11:c9:2a:e9:33:38:20:
25:4f:c7:e0:cc:56:10:09:c3:30:98:64:14:5b:9b:
81:09:30:39:e1:9a:82:70:71:0c:3c:2c:04:d2:8a:
73:db:54:f3:8e:fa:a4:72:80:be:69:05:34:dd:61:
05:b8:43:57:ae:f0:41:46:92:3e:9f:dd:71:e0:50:
35:f3:55:42:7b:08:79:87:63:96:ce:7e:39:8b:29:
68:b6:3e:f4:32:56:5c:5c:d0:66:b6:d3:f8:5b:b7:
45:cc:3d:10:77:ac:bd:26:52:53:85:f8:93:57:ed:
ad:2a:ff:d3:14:db:3f:2a:59:78:33:da:7b:d0:5e:
83:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FE:4F:3C:D8:13:42:B5:E2:BA:E7:5B:25:C5:C9:DF:2F:95:64:69
X509v3 Authority Key Identifier:
keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.197.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2e:6f:d9:8a:b1:78:ea:2e:f8:41:93:9e:c2:8e:65:40:b0:
c7:bb:33:d9:45:1c:2f:d8:a0:1c:56:7b:b0:32:29:7d:7c:91:
d9:d9:82:79:67:71:7b:3e:18:98:5f:7f:31:8f:08:ae:d9:f6:
e4:bc:6a:e7:87:74:a9:e8:f9:68:47:48:6c:80:2f:20:96:a3:
a7:e4:7f:ea:65:b4:a2:2c:89:fc:f8:ea:9d:7f:64:87:a2:28:
10:92:22:eb:e4:93:c3:a4:fb:67:31:95:3d:ff:52:db:77:ba:
3b:16:17:c6:03:95:d1:7a:0f:66:16:ac:ae:bb:b8:f6:a4:d3:
e8:5c:3c:f5:27:a9:7b:8c:6c:92:f5:77:34:3a:57:c3:82:5f:
09:d7:2b:dc:24:e2:0f:30:b8:6c:82:e1:aa:79:69:33:ef:6f:
34:6f:99:eb:4e:89:f1:38:95:19:f8:bd:3a:64:84:2f:7b:82:
3c:7a:82:69:9e:85:91:ae:97:75:96:24:ca:25:ea:aa:6b:f9:
7c:a8:66:b9:4e:9c:84:b6:49:92:58:1c:e6:3f:4b:a0:ab:94:
fe:a3:03:3e:59:c5:35:b1:10:3a:13:27:c2:16:26:ec:60:ae:
d5:dd:76:f1:15:8e:a5:e7:b0:43:d7:34:00:d8:ad:ef:75:f0:
af:89:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:41 2026 by rpki-client