This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa
File: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (raw, json)
Hash identifier: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=
Subject key identifier: B1:96:B2:25:12:2E:B4:51:F3:0D:7A:FE:91:0E:5C:1E:53:BF:D4:E3
Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
Certificate serial: 0438FA099B645186F5504BE0177BDAAC77DF157E
Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa
Signing time: Tue 20 Jan 2026 02:09:40 +0000
ROA not before: Tue 20 Jan 2026 02:04:40 +0000
ROA not after: Tue 19 Jan 2027 02:09:40 +0000
asID: 137806
IP address blocks: 103.114.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 18:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:38:fa:09:9b:64:51:86:f5:50:4b:e0:17:7b:da:ac:77:df:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
Validity
Not Before: Jan 20 02:04:40 2026 GMT
Not After : Jan 19 02:09:40 2027 GMT
Subject: CN=B196B225122EB451F30D7AFE910E5C1E53BFD4E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1a:66:e2:7e:72:32:39:e8:9a:50:06:e3:8b:
bf:ec:5f:8d:d0:8a:ab:e4:00:dc:d5:c9:60:95:2c:
88:0e:2e:d8:97:d6:e6:f4:7a:97:c6:a6:3c:d8:aa:
5e:1c:c6:e5:4a:3d:7b:0f:07:00:03:b9:7b:0f:77:
6e:94:73:56:52:4d:9d:20:f5:fb:6c:09:87:d3:ca:
8b:ef:44:bc:46:ac:28:19:15:ac:87:e0:fe:c9:05:
76:dc:a6:d8:e1:27:53:65:a3:db:ef:8d:16:43:66:
db:09:99:34:e2:a8:64:70:ac:42:92:57:b3:60:de:
eb:31:b3:ec:b4:8e:f9:fe:82:bd:94:bd:5d:a7:ec:
fd:7a:86:f6:82:be:7a:34:3b:0b:e2:ac:2e:8c:3f:
7a:70:2b:e8:26:0c:09:94:ad:0c:f9:bf:4b:19:d0:
bd:43:b3:e1:88:9a:ee:0e:70:db:84:88:80:fe:cf:
d6:0f:a7:1a:3e:e5:f7:d2:31:c0:6c:cc:8e:94:d3:
56:5d:75:41:62:0c:80:b1:0c:c3:85:fc:07:3f:a2:
6b:99:6d:6b:32:96:75:b8:8a:1b:98:5f:c1:4e:2d:
0a:84:ee:64:86:44:d8:c9:91:4d:54:1f:34:94:0b:
f7:c9:03:87:fa:04:ed:b9:c2:5f:87:ff:72:89:0a:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:96:B2:25:12:2E:B4:51:F3:0D:7A:FE:91:0E:5C:1E:53:BF:D4:E3
X509v3 Authority Key Identifier:
keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b7:23:5e:c2:f8:17:61:ca:c7:3a:d6:11:30:36:b5:f0:39:
85:90:f0:5a:0e:1b:ba:17:16:29:0b:7e:4c:ce:f8:48:fe:3d:
06:7a:43:6f:98:c2:b1:72:38:c5:b6:cb:d7:a4:a4:a3:0b:e3:
dc:7d:59:48:15:ee:fb:fe:1c:b6:99:1b:f4:01:31:d9:17:63:
4a:43:c3:0d:35:b3:6f:ab:cc:b0:a9:84:b7:57:e7:be:b0:0a:
26:c8:9a:23:05:69:68:49:38:71:49:a6:77:ed:ae:41:b3:cd:
18:e9:47:1a:21:ce:39:ea:d9:df:e6:61:86:f5:78:d9:1f:a7:
21:a7:9d:d4:af:77:6a:15:a4:b2:30:16:9e:47:91:50:0d:d7:
09:c0:76:98:ff:8e:dc:ea:82:40:a9:21:63:07:9c:27:97:9f:
86:2e:ba:5a:50:d5:73:5f:28:3a:4c:36:99:fb:76:31:4d:30:
a2:c9:e6:06:74:fb:a8:80:84:51:66:0c:9f:c1:f9:05:64:2e:
b8:6e:00:e7:1b:64:f4:96:ec:14:dc:e3:0d:4e:ec:c5:1a:35:
db:63:d0:43:c9:2d:38:b5:a3:07:d8:66:e9:0b:70:c1:6a:f9:
6f:3c:ee:09:e0:09:68:c1:81:80:70:8e:a0:32:c8:d6:31:97:
4d:7c:af:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:53 2026 by rpki-client