This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa
File: 3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa (raw, json)
Hash identifier: N9Tc/2OS8IhiGhYYyYnHtYWE9HmtpOkkoty46x/owIc=
Subject key identifier: 8D:A3:9B:7F:79:5F:CB:35:32:26:83:DB:1A:32:4A:4D:35:98:D1:12
Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial: 7DAB7B2B8ABE31414F04C32084EF77AFFC3AE9D2
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa
Signing time: Tue 20 Jan 2026 02:20:22 +0000
ROA not before: Tue 20 Jan 2026 02:15:22 +0000
ROA not after: Tue 19 Jan 2027 02:20:22 +0000
asID: 209242
IP address blocks: 103.219.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ab:7b:2b:8a:be:31:41:4f:04:c3:20:84:ef:77:af:fc:3a:e9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Validity
Not Before: Jan 20 02:15:22 2026 GMT
Not After : Jan 19 02:20:22 2027 GMT
Subject: CN=8DA39B7F795FCB35322683DB1A324A4D3598D112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:9c:12:0e:96:50:3e:c2:21:3d:28:16:47:
27:9b:fd:de:68:c8:41:d6:0b:65:88:fe:69:eb:df:
2b:22:5a:58:d8:9e:72:3c:04:86:ac:2e:66:ff:d5:
84:b6:2e:ba:2c:cd:b6:b4:ad:c4:21:3d:6c:5c:02:
fe:52:3f:c7:63:88:10:17:65:5d:e7:62:10:dd:e8:
52:22:6b:3b:21:f3:b8:c3:c2:0a:af:83:d5:b8:94:
f9:37:45:11:7a:dd:34:8d:85:20:21:74:c8:39:6a:
c1:ba:d2:9e:e4:27:cf:ab:eb:ee:bf:89:72:c1:67:
48:bd:fc:8f:34:96:e9:93:12:c8:8f:0b:86:5c:b1:
20:19:b8:80:83:07:29:4c:8d:e1:98:f2:ae:22:79:
37:e5:65:8c:52:59:0e:25:bd:97:e3:cd:22:30:b8:
0f:23:ae:82:44:f0:c6:a4:50:27:04:5d:c2:46:cc:
82:be:54:e7:c5:27:70:4e:b6:26:65:6b:7f:d8:f6:
21:4c:fc:36:2f:89:f3:74:8a:85:8b:83:2a:8d:8e:
21:90:a1:cf:d8:ff:17:12:03:a7:bc:df:2d:ba:1a:
25:32:6c:2d:e4:87:60:8a:5e:44:db:68:21:d9:5b:
c8:20:ad:2d:f5:9c:41:2e:4a:1a:0f:0a:4f:c1:58:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A3:9B:7F:79:5F:CB:35:32:26:83:DB:1A:32:4A:4D:35:98:D1:12
X509v3 Authority Key Identifier:
keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b8:d4:97:6e:b1:45:fa:b3:93:cb:cb:bc:89:d6:5a:8e:e9:
8f:b1:e2:b7:42:dd:3d:84:a8:37:2e:35:0a:68:9e:93:14:d5:
46:ac:b4:c3:e9:1d:e1:67:4f:a7:e7:f0:e3:49:58:d8:40:cc:
56:63:68:00:2c:25:26:b6:74:6b:a3:ed:86:ed:e5:79:00:c0:
a2:6c:fa:20:70:ac:46:52:eb:14:67:15:1d:7e:1c:6e:f3:54:
bf:02:74:39:01:1b:aa:c9:1a:86:ed:6e:6a:04:e3:bf:41:c3:
1f:6c:b6:4e:d7:a2:9e:36:1f:99:2f:20:9f:86:28:69:4f:c6:
75:fd:59:86:d2:3c:f0:45:f6:d2:eb:48:a2:74:8e:a6:60:74:
05:17:5d:c6:39:45:86:bf:d2:e0:35:4e:ce:1c:2b:48:92:4e:
33:b8:6b:ca:b8:b2:41:63:19:14:73:d3:56:ee:43:7b:2a:ce:
9a:18:8a:bb:a0:9f:da:65:a5:8c:09:f8:aa:ef:18:fb:99:12:
6c:bb:7d:fd:83:f1:48:fa:4a:dd:12:4d:20:bc:cf:bb:ba:e2:
69:c4:60:33:23:b5:ad:f3:47:01:64:e6:a7:db:4f:f9:b2:94:
2b:b1:e6:24:22:fb:10:ba:00:f0:9f:d3:76:be:00:7b:25:a2:
49:70:b7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:47 2026 by rpki-client