This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa
File: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (raw, json)
Hash identifier: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=
Subject key identifier: F2:CE:91:F7:F7:38:C8:91:59:14:0D:71:97:11:53:3E:BB:E6:A6:E8
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 7481B5C84CC807F458BF0C55DCEC1248CE5B7AF8
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa
Signing time: Tue 20 Jan 2026 02:18:04 +0000
ROA not before: Tue 20 Jan 2026 02:13:04 +0000
ROA not after: Tue 19 Jan 2027 02:18:04 +0000
asID: 134760
IP address blocks: 103.143.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:81:b5:c8:4c:c8:07:f4:58:bf:0c:55:dc:ec:12:48:ce:5b:7a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: Jan 20 02:13:04 2026 GMT
Not After : Jan 19 02:18:04 2027 GMT
Subject: CN=F2CE91F7F738C89159140D719711533EBBE6A6E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:04:01:d9:ac:dc:93:8f:c1:3b:94:1f:c4:
a2:77:ad:de:f9:9a:39:31:8e:b2:76:09:d9:fb:db:
1e:31:29:72:9f:91:3e:f8:f5:2d:bf:6d:a1:2c:fd:
19:48:b8:3a:85:78:80:be:ed:9c:bc:41:8f:e7:2f:
9a:58:67:8b:53:d7:b1:13:eb:43:03:fe:6a:36:6b:
f2:58:a6:dd:d5:26:c3:9a:5f:83:c6:c0:d6:9b:7c:
e9:5f:16:28:65:46:c1:ed:5e:12:ef:54:2d:24:1e:
07:a2:8b:ef:02:64:c8:8a:b6:be:f3:c9:55:ee:10:
53:59:09:74:6a:9a:49:d1:0e:d1:2b:f1:05:36:87:
fd:1e:e9:d0:2c:89:01:44:4c:05:1d:88:8e:f5:d3:
fd:b8:fb:ac:bf:cc:e1:ba:b3:66:d6:9b:91:14:06:
90:53:dc:e2:83:41:b3:be:c1:3d:9d:d2:6f:42:e4:
83:a6:05:77:d9:4c:eb:58:66:04:bd:e3:db:08:ce:
68:b9:a5:43:78:90:41:ae:f2:d5:c1:ef:ab:a5:9c:
11:3f:9e:34:91:80:e2:f9:ac:61:67:d5:96:48:90:
04:29:65:e8:71:78:0d:f5:30:66:57:e9:af:92:84:
07:c8:6d:06:c0:08:63:5e:20:e6:d6:f2:06:56:8e:
fd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:91:F7:F7:38:C8:91:59:14:0D:71:97:11:53:3E:BB:E6:A6:E8
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.16.0/23
Signature Algorithm: sha256WithRSAEncryption
02:4e:e9:8f:d7:d8:8e:16:95:65:59:08:8f:83:f7:83:08:81:
37:61:af:47:92:3f:85:0b:c8:b7:62:63:66:84:bb:dc:be:67:
df:92:28:2d:16:7b:36:5c:43:23:ab:4d:f2:d4:c5:6a:72:0f:
ec:ea:c4:14:f8:b9:be:a1:d8:c8:38:11:61:7d:7c:58:09:1b:
3c:9c:0a:ee:ab:e2:4a:ca:53:e7:5a:ec:b5:df:a8:3a:3d:de:
09:9c:08:95:6b:51:83:26:b5:46:10:63:6a:7c:44:27:4d:cc:
0c:40:99:59:0b:b7:d0:c6:54:af:3c:10:76:81:0e:9c:b5:56:
a7:73:d4:f8:e6:8c:67:0d:f6:f0:c4:b6:a1:07:4b:1b:99:72:
9b:a9:f0:48:d1:27:24:f0:fb:69:86:f0:ad:0d:25:1d:80:3f:
2e:c1:8c:7c:8a:1b:47:3d:34:fc:cd:33:74:79:2f:18:6f:dc:
84:07:b9:de:01:28:c9:73:17:30:f4:3c:79:79:d0:0c:03:cc:
5e:51:0f:74:c4:9d:63:cf:10:fc:b2:75:28:7b:bc:ac:bf:dc:
c1:e2:21:5a:ef:85:b8:60:9a:91:f2:32:84:57:51:67:80:ce:
34:2b:d9:72:f7:11:b9:3f:5b:8d:89:3d:45:86:65:3b:80:f9:
d9:d1:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:19 2026 by rpki-client