This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138372e302f32342d3234203d3e2034353338.roa
File: 3130332e3135322e3138372e302f32342d3234203d3e2034353338.roa (raw, json)
Hash identifier: o6lFD+f5dTtKS85vpNkoJjfT093vDss7vKbce+n9he8=
Subject key identifier: 0F:90:1B:6D:BB:A0:24:B9:B1:A0:DA:24:B0:04:B7:7F:5B:89:97:4D
Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Certificate serial: 1927959B354F2B1C489BDE97E3758C2FB82A670E
Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138372e302f32342d3234203d3e2034353338.roa
Signing time: Tue 20 Jan 2026 02:18:06 +0000
ROA not before: Tue 20 Jan 2026 02:13:06 +0000
ROA not after: Tue 19 Jan 2027 02:18:06 +0000
asID: 4538
IP address blocks: 103.152.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:27:95:9b:35:4f:2b:1c:48:9b:de:97:e3:75:8c:2f:b8:2a:67:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Validity
Not Before: Jan 20 02:13:06 2026 GMT
Not After : Jan 19 02:18:06 2027 GMT
Subject: CN=0F901B6DBBA024B9B1A0DA24B004B77F5B89974D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:b5:2a:1f:5c:8a:71:17:6d:67:c0:1d:57:
1a:fe:d5:b8:13:16:88:aa:9b:c5:35:96:02:75:fe:
5d:d2:ae:78:de:28:72:98:d8:47:1e:28:49:98:1b:
80:b7:6a:1c:1a:b3:79:1d:29:35:7e:a7:42:10:42:
48:8f:01:89:c1:d8:00:1b:56:fb:1c:d9:3b:9c:19:
ba:5f:53:0f:4b:7c:bf:65:1b:8d:32:c8:5a:b4:2e:
9a:9b:f5:d0:63:24:f7:f9:47:9c:9a:0c:87:87:f9:
63:e9:c8:47:7a:ea:0c:9f:79:7d:c7:f2:66:c1:d8:
71:45:27:c4:6b:e0:c5:be:ce:30:d4:e7:65:db:7c:
46:18:07:95:5c:e2:fd:5c:13:c4:f4:d7:d8:86:3f:
42:ec:b0:77:62:8a:b7:69:f8:85:41:c9:a1:bf:88:
e6:49:c4:61:22:55:d9:85:9d:b2:a4:83:92:4f:7f:
89:c2:f0:17:0a:79:92:9c:64:2d:4a:ee:97:80:f0:
46:ef:40:d0:f7:8d:e3:74:4e:a9:9d:1e:93:93:f6:
07:12:88:f4:c9:28:e1:50:45:46:57:b5:9e:d5:45:
7d:fd:f8:6b:71:78:29:16:17:b1:1c:65:33:f2:91:
75:ea:77:32:92:b4:df:bf:4d:62:46:55:c5:4d:11:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:90:1B:6D:BB:A0:24:B9:B1:A0:DA:24:B0:04:B7:7F:5B:89:97:4D
X509v3 Authority Key Identifier:
keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138372e302f32342d3234203d3e2034353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.187.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8f:fc:45:bd:bc:05:ef:ec:b5:72:fc:3b:26:b6:1e:29:71:
db:49:e9:8a:06:be:e2:79:49:f6:f2:f4:c1:77:a6:1b:6d:c0:
04:12:6f:a6:7c:32:53:01:e1:1e:38:96:cb:a7:4b:61:1a:d8:
a2:ef:20:39:71:31:e5:b8:37:29:f2:bd:22:10:ed:97:b0:a6:
f2:00:37:b3:47:d7:53:1f:f5:e6:ca:4b:90:01:1a:2a:06:45:
75:1f:6d:1d:50:b4:c6:b8:51:f1:87:33:a0:06:1a:24:88:cf:
ad:de:82:19:ad:e6:5a:0a:c1:63:0c:62:97:34:b9:9b:e8:64:
e2:9e:25:dd:01:9f:56:55:08:39:80:a9:d1:79:ab:9c:be:4b:
2c:d7:46:4d:54:b1:67:6e:52:91:78:d0:54:e0:b3:de:ec:24:
b1:e7:a9:eb:5e:e3:fa:85:32:a4:bc:c4:be:eb:fa:3d:81:c7:
d1:d3:e4:bf:17:52:a9:ff:a6:02:de:b6:be:10:f2:dd:a5:a3:
27:96:b1:2d:01:56:e2:db:c7:4b:fc:05:b1:17:40:f7:04:db:
9b:12:46:8f:f5:3e:7b:11:4d:77:bb:94:9a:35:99:ac:17:96:
d7:4e:17:7f:34:2f:92:ed:11:42:cc:54:a5:17:aa:30:6f:82:
2d:47:fa:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:41 2026 by rpki-client