This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa
File: 3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa (raw, json)
Hash identifier: IKDTZ6kdZDVTYNXgl1yPs6HFhzP/yGvI0ZaGZbH9suM=
Subject key identifier: 50:5A:1F:CC:0C:FF:10:03:07:30:88:C3:1C:3C:7B:72:01:9F:D3:59
Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial: 49CC79908C540F6A5307A3CF8CB107ECCF463F90
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa
Signing time: Tue 20 Jan 2026 02:20:21 +0000
ROA not before: Tue 20 Jan 2026 02:15:21 +0000
ROA not after: Tue 19 Jan 2027 02:20:21 +0000
asID: 211392
IP address blocks: 103.79.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:cc:79:90:8c:54:0f:6a:53:07:a3:cf:8c:b1:07:ec:cf:46:3f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Validity
Not Before: Jan 20 02:15:21 2026 GMT
Not After : Jan 19 02:20:21 2027 GMT
Subject: CN=505A1FCC0CFF1003073088C31C3C7B72019FD359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:ba:58:6e:34:20:00:ab:b8:19:db:df:9a:
cb:da:85:9c:9a:de:da:e9:b9:77:7c:a1:53:7d:d3:
00:84:9a:0c:70:7b:63:a6:46:26:f1:59:df:dc:85:
b9:a4:96:6f:99:30:37:01:9e:0e:01:1d:96:47:0f:
2d:03:d9:0c:e4:92:ec:ac:32:62:b9:20:d8:ba:e5:
16:57:b7:9c:29:eb:cd:d5:d3:5f:a1:0c:81:7a:f3:
ef:d9:6a:b0:57:66:99:08:b3:a8:61:5d:55:61:f3:
30:39:06:e3:52:a5:11:69:09:42:26:e9:23:4f:ca:
47:61:19:a6:a6:2f:f1:48:35:f1:1a:e3:84:a7:da:
57:1e:04:08:dd:94:93:06:ee:1f:5a:12:a4:3d:33:
b3:0d:85:83:42:b2:84:68:8d:9f:e4:8a:02:8d:33:
1b:12:6d:a2:37:a0:65:ac:1e:6b:09:f2:3b:00:aa:
af:7b:65:68:91:23:4d:a7:a5:ab:e6:89:af:f0:f4:
52:61:77:d2:e3:36:ee:3d:ed:18:52:1e:92:f4:a1:
c5:b6:0b:50:02:c8:0d:25:fe:22:3b:36:5f:81:6d:
ce:ac:2d:25:44:b7:d7:3f:56:67:c8:93:88:9d:21:
7c:f8:19:e6:a2:81:b0:1d:9f:74:96:17:c9:37:b9:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5A:1F:CC:0C:FF:10:03:07:30:88:C3:1C:3C:7B:72:01:9F:D3:59
X509v3 Authority Key Identifier:
keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/24
Signature Algorithm: sha256WithRSAEncryption
58:91:f0:52:46:80:d1:3e:3b:33:ef:0b:b0:3b:22:36:40:53:
40:88:6d:83:0c:1f:6e:49:a4:50:73:2b:04:40:63:4d:f5:d8:
90:9e:67:f8:2c:a7:1c:ce:b0:be:33:6e:24:46:24:b8:2b:7b:
53:80:db:45:77:06:48:58:b4:92:6a:6d:a8:72:e9:a6:8e:99:
f7:ab:76:54:0f:d4:95:0b:98:62:05:e0:99:89:f2:39:34:46:
d6:71:06:c6:1b:b9:6a:3e:d7:ab:a7:ec:f5:ae:85:ab:02:62:
6e:2e:dd:a7:39:fb:a1:0d:ac:f2:47:51:b9:6d:45:6d:8c:d4:
23:5f:17:20:b0:26:e2:6f:10:e9:32:92:bf:25:29:d4:d2:63:
4a:39:d8:0f:cc:ff:19:19:dd:f8:94:9a:c8:fd:f8:aa:9d:41:
fe:5a:0f:ec:be:47:1f:68:0f:0e:55:08:ef:e5:c4:68:06:c6:
03:2f:88:68:c4:eb:85:46:76:83:66:95:19:77:31:1c:5f:05:
c8:e4:00:e4:4d:c0:24:26:73:03:10:b1:0d:8b:c5:d6:45:12:
60:4d:09:03:1d:c7:a1:aa:90:13:c6:64:b4:80:06:85:d0:cf:
c8:86:0d:d6:98:4c:bb:34:bc:8c:58:91:f0:a3:49:ea:92:6f:
dc:57:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:10 2026 by rpki-client