This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa
File: 3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa (raw, json)
Hash identifier: rsuWCgFTJM7kwDQugqS8iN58RPhA8LDLNc55i7Mxj8Q=
Subject key identifier: BF:2D:A9:F7:80:16:2C:48:9E:64:3A:27:09:4E:8E:11:EA:8F:0E:70
Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial: 68780BEABA47873CAE36002EBE86E15C7957B9AD
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa
Signing time: Tue 20 Jan 2026 02:20:20 +0000
ROA not before: Tue 20 Jan 2026 02:15:20 +0000
ROA not after: Tue 19 Jan 2027 02:20:20 +0000
asID: 211392
IP address blocks: 103.79.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:78:0b:ea:ba:47:87:3c:ae:36:00:2e:be:86:e1:5c:79:57:b9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Validity
Not Before: Jan 20 02:15:20 2026 GMT
Not After : Jan 19 02:20:20 2027 GMT
Subject: CN=BF2DA9F780162C489E643A27094E8E11EA8F0E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:66:78:5b:a2:ff:68:dc:c7:26:0e:2a:46:
1f:6b:c9:7e:49:aa:83:de:24:c3:84:57:3a:5a:7d:
e1:f6:b4:69:59:19:dc:1f:63:ec:60:43:09:37:d7:
ee:a4:dc:c3:7b:30:ed:67:ad:01:1f:96:b5:31:44:
d9:54:65:1a:28:1f:84:4b:9b:79:f0:16:c0:f2:b9:
bd:d0:4b:af:90:25:b6:56:f4:2b:14:ff:c8:9d:2c:
c7:21:5c:0c:2a:31:d9:e0:a7:b9:26:ce:9e:f4:cb:
7e:c3:09:ed:1f:19:fd:30:bd:72:03:5a:73:3b:a1:
32:9a:e3:bb:15:99:60:70:45:10:20:fd:37:59:0d:
cd:82:48:9f:d1:9e:18:18:2f:1c:0e:01:7a:9b:e1:
5b:f5:90:b5:d9:6c:a8:5d:a3:2d:16:a9:2b:a0:19:
14:11:3b:d7:61:3b:41:10:ef:7d:3a:ae:64:c6:fd:
3b:2c:8b:91:e6:3b:39:72:bc:e3:e6:16:39:37:37:
a6:7b:99:11:59:8b:57:e8:ea:cd:12:fb:a6:5a:7d:
3f:50:59:50:5b:37:88:e8:75:55:9b:33:92:bd:cb:
46:97:3c:d7:51:1b:f7:93:32:7c:4e:eb:92:83:1a:
f9:5a:ff:78:b3:3e:0e:5d:5b:32:ca:c1:19:c1:e7:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2D:A9:F7:80:16:2C:48:9E:64:3A:27:09:4E:8E:11:EA:8F:0E:70
X509v3 Authority Key Identifier:
keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:dd:c5:64:7d:66:b2:b1:e6:e2:d3:b7:96:0b:9a:d3:d6:e8:
37:8d:9c:90:c2:18:8e:61:3a:1a:5b:00:92:00:06:6b:8c:0e:
00:2c:ab:38:57:74:e6:b2:8a:16:d5:b3:82:e7:a1:98:41:5a:
1d:89:db:37:82:20:ef:3c:19:42:75:5f:0d:10:b4:b8:b0:2d:
a6:21:59:4d:84:0e:12:e5:14:70:a0:9a:47:5c:2a:05:0f:2d:
e6:7f:5a:86:53:ed:22:b7:b0:42:ff:65:aa:7e:a8:a5:b4:bf:
ab:12:2f:c1:87:d6:ec:ef:fe:98:1e:ec:56:70:27:7d:35:e1:
72:39:25:fa:25:03:5b:d7:9d:06:58:32:7a:82:9b:bd:d4:42:
1b:93:fe:bc:86:94:2f:92:5a:86:02:dc:ef:d9:3a:5a:8b:d4:
5d:c9:5f:db:26:a5:33:9c:14:69:b1:5e:52:93:d5:35:f5:c2:
77:5a:12:ed:d3:e8:50:e8:05:0f:a6:b2:3c:53:8a:06:3a:a7:
59:a9:f3:0f:3e:ea:b0:98:18:ec:7f:bd:11:80:90:5b:4a:04:
fc:ea:f3:32:d5:94:b7:a6:b8:53:38:34:d1:20:50:f9:5b:0b:
fb:6a:90:f5:9a:de:df:70:ea:b2:68:5b:fd:b1:14:50:20:05:
47:24:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:10 2026 by rpki-client