This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa
File: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (raw, json)
Hash identifier: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=
Subject key identifier: EB:90:9B:81:15:04:F4:D6:83:BE:FF:C7:02:89:48:FF:79:8E:EF:C6
Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4
Certificate serial: 1886CBE3AA0857183723BB334E61949654BFC1C2
Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa
Signing time: Tue 20 Jan 2026 02:10:56 +0000
ROA not before: Tue 20 Jan 2026 02:05:56 +0000
ROA not after: Tue 19 Jan 2027 02:10:56 +0000
asID: 139138
IP address blocks: 103.150.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:86:cb:e3:aa:08:57:18:37:23:bb:33:4e:61:94:96:54:bf:c1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4
Validity
Not Before: Jan 20 02:05:56 2026 GMT
Not After : Jan 19 02:10:56 2027 GMT
Subject: CN=EB909B811504F4D683BEFFC7028948FF798EEFC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:63:13:07:8f:85:07:41:2f:56:ca:50:7b:
66:9e:6a:13:fa:6a:d5:f6:a8:63:7f:a1:be:f6:7a:
d7:e7:6e:2c:1a:cc:58:14:5c:3d:d8:8d:f2:87:8d:
35:f3:f4:b4:70:b8:6c:12:99:51:28:a5:3c:d6:e0:
0d:71:3e:b1:ad:d7:bf:f9:47:68:48:23:bd:3c:78:
60:7b:e3:bb:ac:78:68:90:a9:2c:24:cb:de:98:23:
b3:9e:6e:2b:85:c5:39:b5:df:05:da:92:83:62:0c:
f0:9c:8c:26:ca:1f:2d:46:db:34:80:59:ec:73:77:
5e:4a:94:82:5c:70:68:6b:a6:5b:ad:60:70:e7:3f:
a9:df:af:58:98:de:22:a9:ca:91:c8:f3:4b:6e:ef:
60:04:30:6c:e0:c8:2a:47:fd:43:bf:ac:21:9b:74:
23:df:b1:48:a1:b8:50:e6:8e:dd:a6:d7:66:24:27:
bf:f0:6f:57:b9:08:29:77:28:f4:9a:c8:fb:79:ce:
38:84:b5:5b:79:b4:13:92:42:70:a0:7b:f0:64:98:
97:e2:3e:de:4c:86:ed:dd:c4:7b:ca:0b:b2:45:e1:
9b:b2:7d:63:b2:09:4a:6f:db:a8:68:54:20:57:55:
9f:18:54:82:61:b9:f2:76:7e:9d:22:68:d4:58:81:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:9B:81:15:04:F4:D6:83:BE:FF:C7:02:89:48:FF:79:8E:EF:C6
X509v3 Authority Key Identifier:
keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a8:98:2e:d9:42:ee:b2:ea:71:ba:37:b6:75:45:46:0d:2f:
e7:eb:56:bc:cf:88:c0:ba:0d:cd:9b:2c:5e:0c:16:ec:d9:04:
b5:f0:c8:e4:66:2a:5f:26:4f:06:94:44:78:d4:4b:db:1b:c3:
f2:60:19:d6:ff:ad:f2:95:ab:cb:3c:fc:d2:20:89:10:e0:99:
85:90:ed:0f:e2:9f:72:d9:1b:e5:48:4d:3d:3a:76:ea:b1:94:
cd:24:46:b4:f4:89:84:e1:76:f0:30:74:b6:8f:7e:c8:c6:81:
60:5e:3e:5c:25:1d:e6:34:d2:53:ee:2a:19:c9:13:f9:1a:eb:
cf:71:6c:8e:07:3f:50:39:bc:09:2e:51:86:b4:9a:10:ef:b8:
35:e0:cc:bc:8f:88:46:50:f7:7b:53:a6:56:25:dc:3a:e0:cd:
98:ae:a3:4b:d4:ef:b7:49:41:03:2e:ac:d3:ef:21:c7:2d:41:
ae:5b:84:4c:d6:ec:85:53:51:8a:ba:61:60:f0:95:1b:a0:2a:
0d:a9:28:b1:76:42:b8:47:6d:2d:ac:e0:46:be:15:12:dc:e9:
68:7d:a3:3d:b0:ef:83:08:b5:40:6e:f0:19:f6:3b:f2:10:64:
34:92:2f:98:d4:30:a8:9d:3a:8f:71:3f:c7:8e:9c:a7:b6:c4:
ec:6a:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:33 2026 by rpki-client