This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa
File: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (raw, json)
Hash identifier: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=
Subject key identifier: FE:1F:1C:C9:55:9B:AF:D5:04:82:51:0D:C0:39:B1:7A:DA:75:AD:AD
Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
Certificate serial: 0F28FD142F597EA21CB825B51EE680D3CBE20ED5
Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa
Signing time: Tue 20 Jan 2026 02:11:57 +0000
ROA not before: Tue 20 Jan 2026 02:06:57 +0000
ROA not after: Tue 19 Jan 2027 02:11:57 +0000
asID: 9392
IP address blocks: 103.122.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:28:fd:14:2f:59:7e:a2:1c:b8:25:b5:1e:e6:80:d3:cb:e2:0e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
Validity
Not Before: Jan 20 02:06:57 2026 GMT
Not After : Jan 19 02:11:57 2027 GMT
Subject: CN=FE1F1CC9559BAFD50482510DC039B17ADA75ADAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:49:a1:b7:7a:c3:3d:dc:99:63:ca:02:4b:
74:53:55:3a:d9:bd:ed:f9:93:b3:99:c1:d2:f8:7f:
47:1f:51:36:6e:8e:d3:92:27:f8:03:c1:b0:22:ae:
df:9f:ca:79:8b:9c:14:f3:15:33:7b:8d:6d:56:cf:
8b:46:04:33:63:0d:6c:84:54:9a:ae:76:b1:0d:63:
ec:fb:30:42:e5:d2:7e:bd:ce:af:b3:af:f2:79:13:
17:cf:cd:b3:96:bd:8e:b0:23:6f:4b:85:56:7f:ee:
88:7d:20:bd:a9:f6:9a:0a:f5:25:78:bb:4d:c7:7e:
16:00:45:a4:fe:ed:fb:15:f7:74:c6:42:73:d6:c5:
e6:2f:80:e8:84:0d:77:32:dc:16:80:c8:df:31:92:
2d:dc:81:37:35:66:15:2c:9e:a6:14:f5:45:52:a1:
56:66:3b:98:c5:3b:8a:06:42:44:72:8c:57:04:66:
6e:a3:71:a5:ba:87:26:07:af:e7:cd:69:60:c5:b0:
0f:dc:32:be:ff:ea:cb:69:21:c8:fc:a9:d2:39:cd:
02:19:df:cc:ae:78:68:71:cc:12:05:d6:28:b8:3f:
84:54:96:ce:1d:1f:e7:83:4b:f3:80:f2:a3:5c:be:
bf:e5:e9:8c:60:06:79:0d:55:29:ea:c7:e4:41:5a:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1F:1C:C9:55:9B:AF:D5:04:82:51:0D:C0:39:B1:7A:DA:75:AD:AD
X509v3 Authority Key Identifier:
keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.240.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4d:1e:b0:fa:5f:88:bf:ce:d8:91:ce:6b:e6:16:ec:43:c0:
b2:a4:64:fb:dd:59:c0:fa:e5:10:5e:db:da:46:20:c7:d2:75:
93:60:11:0b:3a:bc:ed:4d:44:fd:2a:05:c5:00:d2:d1:ed:f1:
09:92:27:bd:53:47:91:2b:9f:ed:4c:1a:b3:9c:87:9b:b2:f9:
95:bc:d1:59:88:06:3a:86:4e:8b:3e:b8:5f:54:f8:e6:55:e1:
a7:63:f0:81:e0:55:89:f3:c3:5d:fc:0d:cf:7c:81:30:07:39:
a9:dd:44:ff:30:f9:d8:cf:57:2b:39:05:4e:4c:e1:db:6b:8b:
64:53:07:d3:78:f3:c9:cd:bc:bf:92:89:74:af:df:12:e2:3f:
44:2b:1f:0a:a1:9f:26:e1:62:26:03:c8:39:d7:24:36:d5:b6:
5f:61:1b:98:44:bc:6b:92:b2:b4:3e:92:82:26:d1:97:d7:bd:
fb:eb:8c:97:94:3d:f9:75:a0:de:a9:9b:6f:36:81:60:e5:ff:
0d:94:2d:6c:ce:d4:02:b1:0c:17:79:c5:df:0d:bd:bd:0a:48:
c6:c2:cd:e4:50:da:a6:d2:de:1a:5d:17:f0:d6:d5:3e:a2:65:
0a:e7:b2:ce:e5:e9:3c:13:15:4a:da:6a:4d:53:a3:a4:dc:ba:
65:03:a7:f4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDyj9FC9ZfqIcuCW1HuaA08viDtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4
QUZEOTYxRTAeFw0yNjAxMjAwMjA2NTdaFw0yNzAxMTkwMjExNTdaMDMxMTAvBgNV
BAMTKEZFMUYxQ0M5NTU5QkFGRDUwNDgyNTEwREMwMzlCMTdBREE3NUFEQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kkmht3rDPdyZY8oCS3RTVTrZ
ve35k7OZwdL4f0cfUTZujtOSJ/gDwbAirt+fynmLnBTzFTN7jW1Wz4tGBDNjDWyE
VJqudrENY+z7MELl0n69zq+zr/J5ExfPzbOWvY6wI29LhVZ/7oh9IL2p9poK9SV4
u03HfhYARaT+7fsV93TGQnPWxeYvgOiEDXcy3BaAyN8xki3cgTc1ZhUsnqYU9UVS
oVZmO5jFO4oGQkRyjFcEZm6jcaW6hyYHr+fNaWDFsA/cMr7/6stpIcj8qdI5zQIZ
38yueGhxzBIF1ii4P4RUls4dH+eDS/OA8qNcvr/l6YxgBnkNVSnqx+RBWpzVAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/h8cyVWbr9UEglENwDmxetp1ra0wHwYDVR0j
BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG
QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4Mjc0MTU3NzcyODAwMi8wLzMxMzAzMzJlMzEz
MjMyMmUzMjM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzkzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGd68DANBgkqhkiG9w0BAQsFAAOCAQEAdE0esPpfiL/O2JHOa+YW7EPA
sqRk+91ZwPrlEF7b2kYgx9J1k2ARCzq87U1E/SoFxQDS0e3xCZInvVNHkSuf7Uwa
s5yHm7L5lbzRWYgGOoZOiz64X1T45lXhp2PwgeBVifPDXfwNz3yBMAc5qd1E/zD5
2M9XKzkFTkzh22uLZFMH03jzyc28v5KJdK/fEuI/RCsfCqGfJuFiJgPIOdckNtW2
X2EbmES8a5KytD6SgibRl9e9++uMl5Q9+XWg3qmbbzaBYOX/DZQtbM7UArEMF3nF
3w29vQpIxsLN5FDaptLeGl0X8NbVPqJlCueyzuXpPBMVStpqTVOjpNy6ZQOn9A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:48 2026 by rpki-client