This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa
File: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (raw, json)
Hash identifier: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=
Subject key identifier: 05:5D:FE:73:0E:31:43:CF:F5:D1:E1:AA:1D:F4:8B:90:C4:37:98:66
Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48
Certificate serial: 331245E049D040B2662C28841D6A7F6D301B9D4C
Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa
Signing time: Tue 20 Jan 2026 02:28:29 +0000
ROA not before: Tue 20 Jan 2026 02:23:29 +0000
ROA not after: Tue 19 Jan 2027 02:28:29 +0000
asID: 131482
IP address blocks: 103.108.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 11:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:12:45:e0:49:d0:40:b2:66:2c:28:84:1d:6a:7f:6d:30:1b:9d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48
Validity
Not Before: Jan 20 02:23:29 2026 GMT
Not After : Jan 19 02:28:29 2027 GMT
Subject: CN=055DFE730E3143CFF5D1E1AA1DF48B90C4379866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:cf:60:25:ac:b3:e8:dc:09:d0:5e:54:4f:
a7:da:12:21:1a:3e:dd:04:88:9b:b0:e0:a4:ac:62:
1f:d2:09:71:95:3a:af:44:d4:67:64:81:8b:dc:2a:
0c:fe:f1:fa:70:b4:4a:60:1f:24:20:d1:c6:6f:1f:
8e:35:20:ba:f6:72:35:a4:48:9a:15:46:e1:25:03:
93:cc:42:30:60:b2:a7:6a:a9:52:70:1c:c5:18:fa:
3e:f4:67:8b:1f:83:2f:03:74:f2:da:fb:0a:9b:7b:
ea:38:40:12:ee:5b:d3:84:d6:33:62:cf:77:06:76:
1d:a3:06:ad:ab:89:5d:1a:ca:63:cc:c3:d9:cb:de:
81:5e:e4:5d:cc:26:92:73:80:a3:1d:a7:42:28:82:
69:b9:6d:81:47:c4:85:bd:35:9d:94:7e:2b:5d:23:
07:94:18:b2:d6:e0:3c:82:77:6c:8c:62:3f:1b:fa:
9b:11:38:85:14:fd:8b:bc:7b:31:32:02:9b:55:99:
84:9d:ce:5f:70:8a:47:f6:d4:5f:ce:4e:13:19:b2:
f1:27:7c:ba:48:21:9c:82:b0:46:91:17:6f:d2:93:
30:82:ef:36:32:06:c4:15:1d:1b:bb:6a:8e:9f:77:
a4:79:94:83:44:aa:c5:00:d0:21:b3:7e:88:06:6a:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5D:FE:73:0E:31:43:CF:F5:D1:E1:AA:1D:F4:8B:90:C4:37:98:66
X509v3 Authority Key Identifier:
keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.160.0/22
Signature Algorithm: sha256WithRSAEncryption
65:cd:82:ee:8a:f0:7b:34:a6:95:fb:9b:cb:9e:7b:be:92:9f:
5c:dc:76:1c:81:68:74:5d:d9:db:d8:e6:00:29:30:8b:90:01:
d5:17:ef:9a:e7:dc:92:61:0d:50:4a:7f:b5:0f:c1:88:e3:e8:
f0:38:1a:64:34:85:49:55:4a:e0:af:0c:90:a5:01:ec:96:c2:
a5:de:e5:9a:43:1b:0a:93:ea:38:59:27:45:84:e8:34:72:2b:
68:c2:04:57:d1:87:09:ff:62:2c:60:26:6b:50:60:0d:4d:76:
1a:36:13:9b:8e:57:ad:75:b3:b2:91:85:cb:3b:cd:a7:72:1d:
26:12:b2:65:da:82:96:60:fc:ef:b7:13:34:46:61:cf:d9:84:
c1:e7:0b:5a:f4:5e:e8:d3:70:61:3a:a8:8c:79:73:41:3c:7f:
43:1b:93:38:b7:83:72:bd:cf:6a:d8:8e:00:68:35:11:03:23:
f9:66:1f:3d:9c:2f:1f:41:6c:10:09:cc:7f:51:f5:8e:9a:22:
77:23:fa:e3:ba:2f:6b:fa:f8:11:fc:45:10:0d:ac:27:70:96:
eb:7f:9f:6f:85:a0:e0:ef:38:e0:69:45:db:c2:7f:fb:8c:75:
f8:45:7e:ff:d0:3f:5c:ae:90:2b:74:9d:f5:c6:20:1f:de:88:
07:c0:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:52 2026 by rpki-client