This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa
File: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (raw, json)
Hash identifier: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=
Subject key identifier: F1:A7:B6:C2:9E:7F:D7:E1:4E:DF:02:AD:A0:52:4A:74:92:90:A9:72
Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Certificate serial: 2ED33E2AD132C753CF8DB26925EF59A1AB029F4C
Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa
Signing time: Tue 20 Jan 2026 02:09:30 +0000
ROA not before: Tue 20 Jan 2026 02:04:30 +0000
ROA not after: Tue 19 Jan 2027 02:09:30 +0000
asID: 131541
IP address blocks: 103.103.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d3:3e:2a:d1:32:c7:53:cf:8d:b2:69:25:ef:59:a1:ab:02:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Validity
Not Before: Jan 20 02:04:30 2026 GMT
Not After : Jan 19 02:09:30 2027 GMT
Subject: CN=F1A7B6C29E7FD7E14EDF02ADA0524A749290A972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:67:20:c1:c4:7e:86:b1:e9:a3:2b:5f:4d:
53:95:0c:18:0e:8f:09:c3:ac:29:e4:cc:79:33:ac:
63:c0:7f:1f:ea:9a:16:b0:b7:cf:ae:68:4d:3b:eb:
61:e3:48:72:fb:7a:6d:1d:22:d8:a8:7a:a0:a7:de:
6d:40:47:54:0d:af:85:f1:32:aa:2e:6b:83:2a:a3:
33:88:cf:9c:c8:19:b7:e1:d6:b1:0b:63:45:66:82:
f8:95:73:e6:ce:3d:b2:a4:f7:6f:0b:f4:6f:03:a6:
a2:c8:57:93:86:e3:d3:3b:e5:70:37:de:b0:0f:3e:
78:56:6d:22:e7:52:16:44:ce:f2:9c:f6:4d:cd:aa:
48:a8:a8:67:04:ee:00:8d:61:b0:c1:6d:bb:88:6f:
84:17:62:df:ae:2b:76:67:b9:6d:bf:27:47:a4:16:
72:05:b2:d2:cb:09:bd:91:e8:f8:96:37:13:4f:f4:
07:c0:d8:ce:81:a4:df:f9:4c:3c:34:f5:41:79:f9:
a2:3f:26:9e:a9:e2:9f:d9:59:1d:f4:2f:26:9a:37:
67:bb:15:bc:8a:42:24:0a:eb:de:3e:57:ab:4b:35:
45:65:be:62:f1:0e:24:ad:0c:2a:c7:d1:fc:7d:2f:
75:c5:0c:ac:b7:53:2d:86:f1:62:a7:14:ab:4e:26:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A7:B6:C2:9E:7F:D7:E1:4E:DF:02:AD:A0:52:4A:74:92:90:A9:72
X509v3 Authority Key Identifier:
keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.103.36.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0e:83:00:1f:63:8c:7f:4b:2a:b5:15:ae:8c:7e:3a:85:23:
a1:9a:7f:35:6a:65:7d:86:2c:17:da:86:59:ab:b5:6b:eb:75:
dc:f7:11:d1:46:42:ba:fb:e4:30:32:80:39:8d:1a:61:95:e7:
ac:96:4a:f4:d2:fa:18:d5:1b:10:5b:b7:47:e3:a3:c0:b9:49:
a7:9f:80:1e:57:90:16:9e:05:a2:33:c4:f8:11:bc:03:3f:1e:
7d:6f:eb:02:7e:bf:15:0a:bf:2e:2a:fa:77:a2:16:bd:fe:21:
0b:e0:17:6e:d3:df:51:ca:26:a7:58:d4:6e:10:19:2a:ce:da:
cb:68:05:c0:54:cd:4b:12:6f:da:d3:f2:66:ab:25:92:af:bd:
3b:d7:37:a9:b9:9f:17:a9:cc:60:21:b0:fd:47:9d:15:a6:9e:
60:0b:f7:0c:2a:41:51:cb:42:e3:5e:af:fe:63:c6:df:04:38:
54:aa:10:71:e5:c0:00:6a:eb:6b:93:43:fd:b2:3f:37:e3:47:
ab:cc:5d:59:96:67:ef:0e:81:49:ae:e5:ae:c6:63:0c:9a:09:
ae:de:3f:eb:0e:2b:d7:fc:7a:92:35:c7:08:58:a1:39:76:35:
5a:6b:ee:27:9d:91:49:ca:22:d4:3e:2d:0f:3d:4b:72:b9:3f:
72:c0:cf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:48 2026 by rpki-client