This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3130332e392e31302e302f32342d3234203d3e203538353933.roa
File: 3130332e392e31302e302f32342d3234203d3e203538353933.roa (raw, json)
Hash identifier: ylb16MUF1WIua2wPZcs95Il2YN8FDKEWMl6QFoTh5TQ=
Subject key identifier: 97:A6:91:F5:AF:B6:7D:DE:0C:58:47:C3:F4:6B:18:AE:35:FB:AB:FE
Certificate issuer: /CN=7505D5D0FC8DB66FC48DA4A64839077551466B62
Certificate serial: 2665C062AD2E6595D4006566E582C2284C76D0FF
Authority key identifier: 75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3130332e392e31302e302f32342d3234203d3e203538353933.roa
Signing time: Tue 20 Jan 2026 02:08:21 +0000
ROA not before: Tue 20 Jan 2026 02:03:21 +0000
ROA not after: Tue 19 Jan 2027 02:08:21 +0000
asID: 58593
IP address blocks: 103.9.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:65:c0:62:ad:2e:65:95:d4:00:65:66:e5:82:c2:28:4c:76:d0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7505D5D0FC8DB66FC48DA4A64839077551466B62
Validity
Not Before: Jan 20 02:03:21 2026 GMT
Not After : Jan 19 02:08:21 2027 GMT
Subject: CN=97A691F5AFB67DDE0C5847C3F46B18AE35FBABFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:26:43:f4:a1:47:7d:73:4d:45:7c:a2:11:
36:3c:21:aa:9f:6f:4e:c3:f6:ee:fe:aa:3f:c2:74:
bf:1e:2c:84:d8:fc:3c:9c:06:c6:5a:58:0b:5e:d2:
09:68:0d:98:ca:20:fb:05:64:c3:55:b5:27:b7:ee:
a8:96:a5:ee:9d:ff:ca:45:5e:58:51:72:c1:4b:77:
4e:54:79:e7:5d:b7:84:d8:97:3a:d4:ae:8f:24:82:
3d:0b:74:3a:a3:33:06:aa:73:4a:b0:0f:9c:d7:29:
7f:31:f7:af:c4:44:00:83:19:d5:4c:3a:5a:a6:e0:
ae:95:63:cd:ba:cf:80:ca:5c:73:9e:ee:1d:de:1d:
f9:c3:c3:1a:77:37:aa:5d:72:8b:30:73:d9:81:38:
b6:3e:84:6f:2a:6b:bc:87:59:0d:b2:bf:87:1f:30:
e5:c4:65:9e:2c:88:e3:73:8c:b8:02:41:12:46:76:
b5:9e:2a:42:59:e3:f9:4d:64:6e:1a:17:65:07:8f:
9a:55:74:ac:21:50:09:ca:eb:13:65:33:1d:21:d5:
f9:71:fc:a6:eb:03:bc:48:58:de:24:bf:c2:63:a2:
7a:5c:4f:e8:78:9e:67:63:53:7f:f1:bd:b9:51:27:
29:6c:f9:d8:09:5e:f8:ec:f0:fd:50:a7:38:b8:63:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:91:F5:AF:B6:7D:DE:0C:58:47:C3:F4:6B:18:AE:35:FB:AB:FE
X509v3 Authority Key Identifier:
keyid:75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3130332e392e31302e302f32342d3234203d3e203538353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.9.10.0/24
Signature Algorithm: sha256WithRSAEncryption
99:34:ce:a4:ea:a9:8a:84:3f:d9:07:e0:df:83:93:ef:05:96:
9e:80:09:e0:30:b2:75:bc:29:71:2c:5b:d0:5f:c2:78:4e:e0:
a2:20:69:47:5a:b2:d8:84:0e:a3:9e:61:da:91:7e:40:bb:eb:
8d:e5:85:2d:19:f4:16:8c:18:89:3a:12:c8:8d:8e:e2:83:44:
4f:4e:b8:0e:17:73:3a:98:bc:6e:8b:11:56:d8:de:0c:1d:49:
0c:bb:74:e7:7f:ed:fe:a1:26:c5:ff:95:29:b8:89:e0:fe:0a:
4e:93:e1:c0:cb:3a:3a:17:cb:77:5b:78:81:9c:bf:cf:d7:b6:
dd:c1:22:56:92:eb:eb:f7:c9:d8:9a:0a:48:28:29:35:97:1a:
bc:fe:40:e7:5c:9d:fe:ef:8b:57:ac:35:e8:0b:55:f4:3e:94:
83:e7:55:b8:79:84:c3:e9:5b:89:b0:16:b0:84:3c:40:27:07:
14:8b:fa:71:50:e0:7c:ec:35:49:20:0d:e1:31:d9:59:3d:e8:
7c:db:77:1f:35:5f:67:b9:bd:0c:e1:77:aa:2f:12:93:f2:aa:
b5:a0:18:07:e4:24:fd:b0:96:e7:ff:44:0e:c6:7f:c8:31:3c:
cf:52:1d:96:09:5b:b4:9d:81:b3:c4:a0:37:24:46:40:4a:a9:
d3:33:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:35 2026 by rpki-client