This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa
File: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (raw, json)
Hash identifier: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=
Subject key identifier: E5:32:DD:4D:2D:FF:2D:7B:21:19:81:17:7B:E8:5F:8C:A6:61:1B:5B
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 554339E0402BD2D0CD6146BBD86DAAF969D163A6
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa
Signing time: Tue 20 Jan 2026 02:21:33 +0000
ROA not before: Tue 20 Jan 2026 02:16:33 +0000
ROA not after: Tue 19 Jan 2027 02:21:33 +0000
asID: 151261
IP address blocks: 103.45.144.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:43:39:e0:40:2b:d2:d0:cd:61:46:bb:d8:6d:aa:f9:69:d1:63:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jan 20 02:16:33 2026 GMT
Not After : Jan 19 02:21:33 2027 GMT
Subject: CN=E532DD4D2DFF2D7B211981177BE85F8CA6611B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:49:21:d1:d3:33:24:5f:c4:bc:2c:97:4e:
f8:12:78:31:70:81:66:be:80:78:c5:a5:c9:84:3f:
b3:05:45:74:3a:d2:a7:29:84:05:29:e4:f9:60:c8:
5f:f0:4a:9b:84:c4:a2:74:ab:76:0c:25:1f:9a:80:
aa:d8:36:04:78:52:25:74:ac:38:ea:64:70:90:b4:
8a:ec:70:55:bb:df:52:5a:a0:5d:90:b3:d1:27:d7:
a3:fc:17:5a:22:cc:df:d8:01:1e:97:a5:64:10:9d:
e7:43:5c:43:65:1c:3f:d4:2b:0b:c4:11:fc:21:0b:
3d:e4:ca:ba:cf:c7:d7:34:f2:c3:e4:34:a0:8e:b4:
e6:37:b9:fa:5c:7d:57:81:31:87:4f:41:57:d0:b4:
05:e8:4f:77:18:de:3f:ef:3d:ac:3b:80:19:f0:e0:
df:37:57:38:23:a5:3d:1b:32:8e:4d:6b:3d:f1:ba:
75:37:e4:3b:5b:c6:5b:2b:fd:5c:ff:b5:df:8b:f1:
64:02:e2:91:0a:e2:d0:83:df:65:bb:2d:99:e3:dc:
e8:2a:6a:7c:cc:32:8f:b0:d5:60:4c:be:0b:84:54:
8f:6b:bf:fa:75:8a:db:da:15:ec:0b:2d:ca:db:fe:
3b:38:3d:d3:ed:cc:12:66:63:5f:99:43:4e:a8:e2:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:32:DD:4D:2D:FF:2D:7B:21:19:81:17:7B:E8:5F:8C:A6:61:1B:5B
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.144.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b6:e7:18:7e:8d:17:b9:26:e9:9e:ec:0e:0e:87:cb:c4:fb:
6b:ed:40:66:78:56:58:01:9d:bf:86:37:b5:a6:17:d0:62:1a:
5a:ef:6e:7d:18:2f:e9:25:90:d1:85:0d:13:a7:25:31:e7:fc:
90:ed:d9:2e:52:a0:f0:e5:e9:9f:2f:73:0e:4f:3f:64:41:83:
c4:4f:7e:a9:fd:f3:39:99:06:5b:d0:ff:56:5b:37:a8:6a:6b:
1e:48:e1:d3:3b:8f:4f:05:d3:ab:1b:8b:31:29:e3:f8:80:36:
32:ef:bc:a9:74:f5:c8:4b:5c:4b:ae:bb:bc:a8:cd:ad:8d:75:
b1:fb:5c:e8:fa:4b:96:a5:d3:a9:78:a0:6b:a7:44:a5:8f:84:
d4:96:ac:6b:c7:77:8d:8b:9b:30:52:5e:d0:e5:bd:23:b7:f8:
6f:84:fb:bd:49:0b:4c:dd:90:a0:81:76:41:86:81:c2:9c:7a:
ee:9c:35:6c:40:ab:76:9e:1a:2a:4b:ab:eb:c5:73:d9:fa:0f:
eb:a9:98:6f:07:67:de:f5:3e:25:d1:92:8e:6f:ae:d9:45:ba:
44:e8:00:4d:50:82:49:62:ec:d7:6f:d0:e7:78:d5:51:79:1e:
ea:17:ae:b2:d9:e6:c5:d9:64:4a:e6:eb:b4:4b:f3:d7:b7:f2:
86:bd:e3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:42:48 2026 by rpki-client