This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133342e302f32342d3234203d3e203535393931.roa
File: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (raw, json)
Hash identifier: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=
Subject key identifier: AA:F5:7E:53:C3:26:E2:B6:7C:7E:E0:F0:53:A3:02:B3:5B:67:23:09
Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial: 70DC096662E74D04525FFA240569826D1E969DBC
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133342e302f32342d3234203d3e203535393931.roa
Signing time: Tue 20 Jan 2026 02:12:02 +0000
ROA not before: Tue 20 Jan 2026 02:07:02 +0000
ROA not after: Tue 19 Jan 2027 02:12:02 +0000
asID: 55991
IP address blocks: 103.43.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:dc:09:66:62:e7:4d:04:52:5f:fa:24:05:69:82:6d:1e:96:9d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Validity
Not Before: Jan 20 02:07:02 2026 GMT
Not After : Jan 19 02:12:02 2027 GMT
Subject: CN=AAF57E53C326E2B67C7EE0F053A302B35B672309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:ae:2a:12:fd:74:6e:33:7e:be:77:48:57:
02:74:47:d0:4f:fd:d5:8a:2e:a7:62:78:11:48:f0:
35:a9:82:38:66:cd:29:5c:f5:d8:96:1c:25:50:f8:
c6:86:4c:20:65:c9:c1:60:95:d2:34:a1:2e:fb:3e:
54:ed:f8:65:bc:da:75:3c:8f:ca:6b:7e:f1:ca:b5:
e4:32:e3:7f:dc:5f:56:4e:83:3f:70:d7:7e:a4:ac:
1c:16:ed:d4:31:83:87:07:e6:ba:66:c7:c9:ea:13:
12:bd:c7:2d:35:66:54:a9:e1:2d:a7:03:45:4a:41:
82:8f:9f:62:ec:bf:08:f2:15:a2:42:4d:4d:f2:39:
3c:fe:49:dc:b1:23:cd:82:37:af:fc:0b:bb:3d:a6:
e4:f9:8a:02:90:d3:93:47:6d:d7:78:39:4d:6d:6f:
39:36:e4:75:c5:69:c6:6d:97:b3:05:17:55:48:ac:
24:f0:fc:c3:55:f0:cf:46:2f:6e:eb:06:c4:d3:2d:
38:a3:41:f5:1a:86:bf:29:26:fa:6b:97:61:a2:0f:
db:c9:a1:a4:04:2f:66:54:be:39:1c:0f:b0:c4:55:
67:96:72:16:7b:b3:e4:cd:b0:23:de:90:ae:88:78:
e6:5e:6f:52:7d:2d:11:b4:ba:3a:12:13:c1:ff:f7:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F5:7E:53:C3:26:E2:B6:7C:7E:E0:F0:53:A3:02:B3:5B:67:23:09
X509v3 Authority Key Identifier:
keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133342e302f32342d3234203d3e203535393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.134.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6d:d2:44:1d:09:05:d4:1c:ca:c8:3e:24:07:e9:64:c2:b7:
ec:e8:8c:d3:dd:35:02:64:49:50:26:d9:07:dd:dd:44:e5:79:
b9:9a:3d:72:b4:ca:3c:78:88:dd:3e:12:6e:7e:2f:19:e3:a8:
3b:2b:2f:e2:b7:cb:be:4a:88:54:0b:fe:ea:fe:c4:dd:81:05:
77:13:82:fc:e5:3f:8a:61:62:a0:d0:1f:79:3b:32:e2:d9:3f:
7e:06:54:a8:25:df:21:9a:e0:1e:99:16:78:c2:8b:43:ec:5b:
a3:b5:d0:49:d5:6c:93:ec:69:7f:f1:e4:bd:63:06:8c:6e:80:
bd:5b:d9:63:b4:16:26:6a:4a:1b:f1:d9:be:80:ed:9e:24:36:
29:53:00:dc:1a:d7:fc:ae:3c:6d:17:1f:a3:df:fb:ab:73:f5:
35:01:57:7a:5d:73:4a:fe:72:66:05:a4:fd:61:15:10:b5:2f:
64:04:8d:bc:f9:db:8b:1c:0d:5a:4d:6f:73:b8:ca:be:c7:ea:
52:9f:b0:3b:bb:ff:28:6b:6e:dd:61:73:49:a8:2e:3c:d5:36:
6c:50:a0:2d:26:54:6c:74:49:a8:f3:5c:c0:dc:85:d1:4b:c3:
bc:52:49:5c:49:2f:12:52:83:4a:04:8e:22:c5:b1:65:70:7a:
21:c6:53:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:37 2026 by rpki-client