This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa
File: 3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa (raw, json)
Hash identifier: OqthX14Z5si5Z7IYFzrZNKv5x092FOwbR0BMAozLLVc=
Subject key identifier: CF:B7:35:91:6C:14:3C:5E:70:2A:7F:82:F4:54:51:3D:55:48:AE:D2
Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial: 6A4CF2A7EA15E3D469FC4A7ECD14BB0A330EBDE1
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa
Signing time: Tue 20 Jan 2026 02:14:12 +0000
ROA not before: Tue 20 Jan 2026 02:09:12 +0000
ROA not after: Tue 19 Jan 2027 02:14:12 +0000
asID: 133033
IP address blocks: 103.248.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4c:f2:a7:ea:15:e3:d4:69:fc:4a:7e:cd:14:bb:0a:33:0e:bd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Validity
Not Before: Jan 20 02:09:12 2026 GMT
Not After : Jan 19 02:14:12 2027 GMT
Subject: CN=CFB735916C143C5E702A7F82F454513D5548AED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:14:14:85:7a:28:d0:14:3f:90:91:2e:e5:
a4:22:33:63:97:cc:f9:de:ba:43:0b:5a:1c:1d:a7:
23:fb:d6:27:d8:a2:d4:14:7e:d7:79:93:dc:54:fb:
b3:e3:26:a5:c5:db:59:a8:30:44:94:10:db:93:53:
ea:b3:01:bb:82:91:12:19:28:38:27:59:02:31:9d:
1c:aa:fc:9c:d9:81:b0:9a:46:a4:34:2c:10:78:32:
7a:c2:44:31:5a:62:bc:83:e7:84:95:83:93:5d:ed:
84:49:ad:d0:a1:e5:87:ed:6c:c2:30:b2:4b:27:be:
90:55:70:db:db:cb:16:64:4d:ff:9b:ea:c6:56:e8:
32:fb:5b:e6:41:52:a4:89:05:e9:ee:f8:83:65:eb:
34:15:d1:8f:d5:30:52:22:e6:ae:56:ed:e4:39:59:
44:0a:96:ee:df:f0:c0:7e:de:a8:1e:f0:c2:07:68:
45:62:d2:46:0e:ab:43:b4:65:cf:ca:34:d3:5c:9e:
ca:47:13:03:21:c5:ab:30:75:3c:4d:ac:07:69:91:
d4:2f:2f:23:88:03:73:01:13:c0:d5:f2:84:c4:a3:
75:70:d4:52:93:0d:63:64:26:fd:ac:e1:1d:ea:37:
4b:1e:92:60:8f:f3:33:eb:9d:2c:c4:74:3d:14:d4:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B7:35:91:6C:14:3C:5E:70:2A:7F:82:F4:54:51:3D:55:48:AE:D2
X509v3 Authority Key Identifier:
keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.154.0/24
Signature Algorithm: sha256WithRSAEncryption
50:42:bb:d6:a4:c2:bd:e6:1f:4b:36:9b:13:e5:4f:cd:74:24:
0a:9b:24:44:fe:23:95:05:8b:50:2a:f8:ae:75:c1:5b:a3:07:
97:86:6d:cb:dd:01:d3:bf:fa:30:63:7a:3c:50:82:24:dc:44:
26:f3:6c:21:c0:3b:88:ca:b8:52:5e:46:b9:3b:9c:d0:b5:2a:
bd:23:70:57:83:ed:7e:91:b8:8f:0d:38:f4:40:95:fe:68:b5:
0b:f2:4e:40:90:04:5f:08:19:1c:fa:a8:6b:d3:8c:11:b5:67:
2d:00:45:94:43:b5:d4:32:48:d2:60:ed:84:36:c4:10:37:c7:
13:7d:47:42:78:19:7e:ca:34:b6:56:c0:c0:16:61:21:5d:bd:
0d:4d:16:c9:c3:08:62:af:40:97:a5:c9:c2:7e:99:ca:89:6d:
79:41:26:be:39:2d:ca:4c:76:96:8d:25:49:90:1c:ed:9f:fa:
76:64:72:76:ee:8f:a8:60:78:fc:98:7e:4e:17:c5:28:62:14:
87:07:9d:2e:15:59:32:bd:ab:c5:da:35:d9:1a:da:e4:79:b3:
a4:18:a3:5c:78:9f:39:76:c7:de:66:c4:40:5b:83:bc:e5:95:
6b:88:51:6e:a4:33:a7:b6:d5:68:a4:cc:7a:35:7e:7e:e6:ec:
a3:40:62:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:42 2026 by rpki-client