This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e203133333335.roa
File: 3130332e3231392e36342e302f32322d3232203d3e203133333335.roa (raw, json)
Hash identifier: Vqr/7jqAG4qam75dZc42K+KH3yBWofvtQeZuXIqgEi0=
Subject key identifier: AE:49:8B:1C:64:C8:C2:78:AE:4D:05:05:92:41:BB:31:8A:CC:CA:DE
Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial: 1C6EA66CF5C63A523D0298933E33918D4963C980
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e203133333335.roa
Signing time: Tue 20 Jan 2026 02:20:21 +0000
ROA not before: Tue 20 Jan 2026 02:15:21 +0000
ROA not after: Tue 19 Jan 2027 02:20:21 +0000
asID: 13335
IP address blocks: 103.219.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:6e:a6:6c:f5:c6:3a:52:3d:02:98:93:3e:33:91:8d:49:63:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Validity
Not Before: Jan 20 02:15:21 2026 GMT
Not After : Jan 19 02:20:21 2027 GMT
Subject: CN=AE498B1C64C8C278AE4D05059241BB318ACCCADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:d1:8a:02:41:e7:b3:cf:9a:15:cd:c6:38:
88:ea:3b:43:bd:ec:5b:00:08:0a:86:ad:21:a3:d3:
1d:ab:80:17:ba:97:56:7e:ec:ac:91:71:1b:71:d3:
b3:c9:a3:55:41:cc:22:cb:a7:d4:ea:b8:47:c6:1e:
d8:44:47:ee:52:3a:1c:86:39:f3:ba:6c:14:f9:56:
21:5d:fd:b1:e2:e1:38:18:f4:4e:bf:73:9f:11:c9:
98:ef:a4:04:03:62:54:e2:1f:05:05:76:ca:d2:26:
92:96:0d:9e:30:7a:c2:5a:40:7c:eb:66:3d:f8:42:
ac:cc:be:31:6a:7a:37:c3:e7:d9:9e:14:7a:e7:8a:
b1:a2:bb:e2:9e:37:93:75:25:24:4c:e4:98:ad:38:
0d:2e:84:28:41:d2:d6:b9:b9:0b:89:8a:df:22:ee:
86:48:bf:57:46:b0:7f:8c:7a:db:eb:91:4c:92:91:
11:00:9e:83:a5:8b:6a:b2:db:f3:0a:18:50:ed:a5:
3c:b1:98:72:ab:dd:8a:e4:bb:62:cb:b3:14:39:4c:
d4:58:73:c3:74:f8:27:30:46:c1:2f:48:b4:94:72:
17:b6:3a:82:1a:2f:fa:15:64:0a:98:0e:d7:50:f9:
30:47:c7:a6:ad:8c:d6:e9:97:cc:d4:16:e1:c0:40:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:49:8B:1C:64:C8:C2:78:AE:4D:05:05:92:41:BB:31:8A:CC:CA:DE
X509v3 Authority Key Identifier:
keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.64.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:7d:17:52:63:82:2c:ff:c2:a5:81:a3:6c:4b:cb:cc:57:a9:
ba:a1:5c:a7:5c:22:34:d3:d0:df:2c:fb:f5:a3:51:d3:77:82:
3b:fb:43:85:95:c3:57:3e:31:63:5d:73:2d:88:bc:ce:6e:ff:
af:1c:83:e3:84:14:a0:f5:ea:e4:b8:ed:c4:02:b6:37:db:23:
83:0c:89:5a:1f:1c:4c:5c:ff:ff:b9:70:d3:3b:24:61:4f:b6:
de:46:fa:eb:b8:9d:0a:53:13:62:7b:d5:1b:ca:8c:33:50:8e:
f1:fd:78:b9:d5:fd:b0:81:35:00:7f:d9:80:41:e8:f3:da:ff:
d2:1d:46:d9:f7:45:31:35:4f:13:00:0c:f7:a1:b7:31:2a:8a:
c8:99:1c:09:1e:b2:23:1c:d8:4d:31:1b:ff:34:c5:38:6b:24:
cc:27:c0:37:8b:0d:24:a5:19:a1:cc:8e:01:22:de:3d:03:ef:
77:ba:8e:fd:c4:e6:d8:a1:9f:f3:14:66:70:87:be:f8:33:7a:
1a:60:f7:13:05:89:e5:d7:62:a8:e6:e7:71:13:29:49:7f:61:
23:94:7a:f3:d6:3a:2a:06:93:72:c7:54:27:1e:4f:fa:a4:1b:
f5:b2:03:1b:31:46:3d:d3:64:d9:88:80:40:4e:fd:11:1e:61:
33:57:cd:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:20:49 2026 by rpki-client