This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa
File: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (raw, json)
Hash identifier: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=
Subject key identifier: 78:A8:1F:CC:C0:E5:6C:00:C5:52:E5:18:9E:C7:E7:24:0D:37:55:F9
Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
Certificate serial: 415AAD630F465352078BBAA9B5967E0C04B48BE1
Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa
Signing time: Tue 20 Jan 2026 02:11:57 +0000
ROA not before: Tue 20 Jan 2026 02:06:57 +0000
ROA not after: Tue 19 Jan 2027 02:11:57 +0000
asID: 9392
IP address blocks: 103.122.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5a:ad:63:0f:46:53:52:07:8b:ba:a9:b5:96:7e:0c:04:b4:8b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
Validity
Not Before: Jan 20 02:06:57 2026 GMT
Not After : Jan 19 02:11:57 2027 GMT
Subject: CN=78A81FCCC0E56C00C552E5189EC7E7240D3755F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:6c:7f:b2:d4:d9:89:0c:50:d7:20:30:a6:
43:e4:e8:d4:d3:84:8e:29:12:f9:f6:94:0d:c1:73:
5e:27:78:49:0a:a4:cd:46:fe:a8:7d:78:c0:5a:e1:
26:ed:aa:52:57:a1:0a:99:37:3c:db:88:4c:0f:a3:
c3:ce:dc:81:d4:25:d0:4f:69:2f:96:e5:3e:25:1b:
df:7f:66:bb:ad:54:b6:bd:65:5d:88:29:d4:f2:21:
98:76:39:73:bf:1e:81:b4:30:10:9e:24:10:d9:19:
d0:c8:1d:cb:fa:ea:c3:86:78:d3:fe:32:da:f8:04:
f5:ad:54:16:e9:d6:6b:3b:3d:00:48:5d:ef:83:cb:
66:d7:ee:f0:b1:81:49:d8:5e:06:4e:7c:d4:b4:fd:
e6:be:50:ae:09:6a:2a:b4:f3:3f:62:f4:f8:c7:39:
c8:67:21:6e:e6:22:3d:4f:16:fa:92:f6:de:e2:88:
38:74:ea:bc:0e:77:c0:c1:8f:55:aa:8c:8c:ef:70:
3a:a9:ab:78:5a:48:8d:f9:cb:91:53:c9:63:76:13:
e1:57:41:d3:b9:c9:84:5d:0c:0d:22:a9:9b:5c:d4:
10:14:d5:49:e6:da:5a:a0:c6:63:f8:2d:a0:9c:75:
c7:e5:d7:1a:77:13:63:37:cd:29:2d:b6:11:d4:79:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A8:1F:CC:C0:E5:6C:00:C5:52:E5:18:9E:C7:E7:24:0D:37:55:F9
X509v3 Authority Key Identifier:
keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.242.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7d:c2:9a:9d:54:26:55:c8:67:3d:7a:0f:91:49:fb:ee:1e:
d5:f3:af:2b:ba:f5:5e:ed:91:ec:0e:2e:d3:67:11:4b:38:56:
51:8c:60:e7:01:60:d3:59:59:38:19:55:5c:28:a0:f4:5b:98:
3c:1e:77:b4:92:b4:f1:d7:86:97:ae:a8:db:1e:ac:69:72:1f:
90:c2:fa:27:b1:39:ca:8e:8f:80:3f:e7:1a:5b:ad:a2:f3:68:
cb:9a:e4:c7:0f:65:18:e6:a0:3a:2c:ea:77:94:86:b7:9a:c7:
ff:7f:a8:ef:e1:1d:a6:ec:eb:f7:86:2a:37:b1:c0:0f:32:df:
d4:db:82:f7:4c:5e:5a:9e:3a:6b:c3:7a:8d:d0:ee:e0:f3:08:
d5:b7:37:9a:2a:a8:47:ec:79:b2:bd:2a:cf:dc:6e:22:d5:e8:
1d:85:a6:f8:e7:b3:51:70:11:47:58:ab:26:51:8e:84:f5:55:
7a:39:8a:66:64:c7:28:61:a2:3e:07:60:ff:82:69:11:82:de:
f7:0e:ab:13:77:d0:ce:2c:83:fa:62:e1:1d:db:b9:d8:05:79:
89:e6:f9:20:f6:02:5d:70:be:23:22:d6:ed:2b:34:79:d1:65:
81:87:f5:d8:aa:e9:5e:29:7a:3e:8a:e7:db:08:e3:e1:b7:64:
da:7e:c1:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:41 2026 by rpki-client