This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa
File: 3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa (raw, json)
Hash identifier: JP55VF7KYTKS5/sVQC9CenTZrXdL8P2f1BqN6bAELNE=
Subject key identifier: C6:16:FA:98:8F:78:56:7F:90:AE:D8:AA:2B:46:79:44:A4:9E:5A:98
Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial: 4ED8EEEF266B5709109423BDBE98B35645E6760F
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa
Signing time: Tue 20 Jan 2026 02:14:12 +0000
ROA not before: Tue 20 Jan 2026 02:09:12 +0000
ROA not after: Tue 19 Jan 2027 02:14:12 +0000
asID: 133033
IP address blocks: 103.248.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d8:ee:ef:26:6b:57:09:10:94:23:bd:be:98:b3:56:45:e6:76:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Validity
Not Before: Jan 20 02:09:12 2026 GMT
Not After : Jan 19 02:14:12 2027 GMT
Subject: CN=C616FA988F78567F90AED8AA2B467944A49E5A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:0c:c5:01:04:82:89:54:7c:ed:19:2b:10:
56:67:3c:3c:74:a2:18:a5:00:3c:7d:12:ce:3b:78:
1d:6d:80:b5:f5:5a:a7:8a:de:55:6d:d0:ec:28:71:
bc:01:a1:f6:cb:5f:f3:b6:2e:01:f0:27:6c:1b:ee:
fe:8e:05:9a:28:0b:ab:ab:30:65:06:a4:db:e1:6d:
49:69:ea:86:c8:18:cd:63:9f:ff:09:5d:7d:99:40:
d1:48:45:b4:69:1d:22:3e:05:cf:50:5e:fa:03:c2:
e9:bf:92:31:ce:cd:d0:45:57:51:09:1a:f0:70:67:
ce:a1:bd:f6:2c:90:09:47:10:b3:90:7d:9f:91:b4:
48:8b:fc:73:b4:40:7a:ec:e1:65:f1:66:82:1e:1d:
bb:78:7c:13:5c:40:fe:c0:f4:6c:cb:ea:b5:6d:f3:
86:bb:66:c8:3d:75:26:3b:4b:06:f6:4c:0b:14:c4:
3a:fd:80:a4:c9:dd:77:89:c7:c9:27:71:a7:83:e6:
39:f3:0f:1f:ea:02:da:bd:1e:4b:8d:62:5e:73:a5:
7c:2c:eb:8e:25:c4:4a:c7:ed:b5:db:35:54:7e:46:
bb:9c:e0:83:89:29:59:d7:9a:9b:6c:a2:69:bd:4e:
4e:2b:87:1a:ba:60:d5:6e:d0:04:cd:60:41:5c:0d:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:16:FA:98:8F:78:56:7F:90:AE:D8:AA:2B:46:79:44:A4:9E:5A:98
X509v3 Authority Key Identifier:
keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.152.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ea:d9:4c:4a:76:b3:59:dc:5c:21:33:e6:df:0c:22:d0:50:
c5:a4:35:f1:f4:88:34:9b:ee:92:c6:cf:bf:92:97:bd:6b:d9:
55:82:43:ec:90:f9:d1:d2:9e:e8:24:3b:ee:9f:9b:0a:d1:d1:
58:6c:a0:94:f7:30:fa:27:3a:6e:3b:fe:c1:2c:8b:f8:2d:91:
57:2b:38:e8:65:3e:40:12:b9:94:49:f9:34:74:bb:8a:94:aa:
6a:b9:93:b1:0d:5d:81:0a:7e:f9:92:77:ed:17:c1:cd:69:36:
f4:1d:96:30:b0:c6:b6:58:5d:ce:c8:52:c5:4f:1c:1b:70:0e:
14:1a:ed:58:d8:69:f8:f2:9b:ae:a2:25:46:e8:a9:00:82:ca:
08:22:17:59:24:46:f2:da:6e:9b:72:5a:07:54:bb:f8:14:1f:
ce:91:7e:2e:79:93:99:1b:ff:57:cc:3f:9b:e8:90:b7:38:b9:
e1:96:a1:b2:8f:50:be:5c:bc:61:ad:21:ce:46:27:96:fc:47:
50:d5:e2:dc:13:1a:af:16:d3:53:d8:7a:a9:56:40:9e:98:11:
90:8c:04:d5:96:ba:c8:d8:5f:a2:ce:ea:18:36:ba:4e:07:9b:
2b:3d:23:1a:94:f9:d6:79:5b:19:44:72:93:8f:43:42:7d:3f:
e1:0b:2f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:48 2026 by rpki-client