This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa
File: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (raw, json)
Hash identifier: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=
Subject key identifier: FB:3A:DE:8F:5C:5A:D3:23:CD:F2:65:43:EA:45:0D:2A:03:4D:04:B7
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 61FED2748F164B132F0C1654AE8AB8AE80A6BCFC
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa
Signing time: Tue 20 Jan 2026 02:21:33 +0000
ROA not before: Tue 20 Jan 2026 02:16:33 +0000
ROA not after: Tue 19 Jan 2027 02:21:33 +0000
asID: 151261
IP address blocks: 103.45.129.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:fe:d2:74:8f:16:4b:13:2f:0c:16:54:ae:8a:b8:ae:80:a6:bc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jan 20 02:16:33 2026 GMT
Not After : Jan 19 02:21:33 2027 GMT
Subject: CN=FB3ADE8F5C5AD323CDF26543EA450D2A034D04B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:dc:2c:d8:9d:ec:0b:45:1c:3e:2e:57:79:
2f:82:01:86:d0:fc:8f:d0:38:15:2c:df:a5:70:d7:
06:e5:51:39:c3:9c:ce:ce:44:0f:71:03:93:0c:74:
d2:88:d6:9f:d9:f2:00:22:91:c8:b1:e3:83:cb:04:
0b:8a:c0:6c:84:f8:c5:59:51:37:31:9a:f1:ad:36:
11:26:e2:49:12:1b:0d:8e:0d:de:cd:93:bf:72:29:
38:67:79:7a:f8:c5:0b:c5:4e:1f:0a:81:31:1f:d0:
9e:66:1a:d0:b6:c9:7a:9b:30:72:b8:71:f6:f9:a6:
8c:13:e9:f8:c9:4e:ea:62:1e:93:c9:28:89:35:c8:
2e:be:38:c4:aa:ae:90:53:6a:85:ac:72:13:53:6c:
2e:c4:3c:c2:84:4a:a1:ba:e0:6b:97:5a:b9:2b:ea:
d8:3f:3c:f7:a3:b5:d5:7b:ac:7e:f8:23:1b:c8:c0:
df:19:a2:a3:08:d0:1d:3e:89:bf:36:1c:d3:4c:b0:
b3:f9:a4:0a:9b:39:fa:3d:c1:09:7b:4e:e1:73:e0:
a3:33:0d:92:d7:dd:56:b6:5a:77:b9:8f:28:ff:ab:
73:f5:3f:8e:d1:fa:ae:f7:e9:03:db:2a:3c:d8:9c:
6b:6b:8d:9a:de:29:14:68:eb:ef:7d:44:a2:ef:25:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:DE:8F:5C:5A:D3:23:CD:F2:65:43:EA:45:0D:2A:03:4D:04:B7
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.129.0/24
Signature Algorithm: sha256WithRSAEncryption
12:40:a0:05:1c:9e:10:71:7b:44:2d:81:38:b9:84:e5:25:98:
09:72:12:6f:d8:df:e8:3b:df:03:bb:31:a2:a0:e3:cc:fa:aa:
7e:e5:36:2c:2a:3e:b7:44:21:d1:87:a7:17:c0:b6:0e:57:3f:
a1:bb:b2:4e:68:f7:35:03:85:a4:7e:ed:9b:dd:2d:5c:d9:f1:
92:06:e6:e7:27:63:3c:bb:99:c9:ad:e6:55:30:a9:29:87:95:
bf:62:e4:57:c4:fb:c1:aa:b3:95:db:1b:2a:78:fd:d9:26:a8:
77:6d:90:ab:d6:6e:46:78:58:ab:a9:f3:3f:48:27:bd:42:4b:
ad:d8:e3:4a:7a:48:01:24:1e:8c:08:7d:72:99:7b:a3:72:31:
59:85:1c:7f:02:84:b3:c1:1a:df:dc:1c:90:39:38:0c:b3:c3:
4d:ec:07:fd:4c:76:0c:50:e4:ad:f1:35:05:45:65:2f:7f:e0:
36:ab:49:db:60:1a:44:78:f1:6e:91:95:12:23:73:f5:e2:bf:
51:39:f8:3a:62:19:22:50:58:bd:fb:5a:dd:16:98:29:8a:57:
c8:36:f1:66:ce:41:c3:c0:5e:b8:60:8e:23:96:1b:3c:b3:8e:
a9:74:bd:f0:2d:71:f4:6c:9a:99:0a:7c:ce:41:73:8a:94:4f:
a7:0a:dd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:41 2026 by rpki-client