This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232392e302f32342d3234203d3e2034383337.roa
File: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=
Subject key identifier: DE:DF:F7:14:4A:C2:BB:B3:18:3B:86:4A:ED:C8:AE:AC:08:76:CD:7E
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 2CD3D7879F094FFDD0DAFA46B3B20381AEFE2F76
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232392e302f32342d3234203d3e2034383337.roa
Signing time: Tue 20 Jan 2026 02:26:10 +0000
ROA not before: Tue 20 Jan 2026 02:21:10 +0000
ROA not after: Tue 19 Jan 2027 02:26:10 +0000
asID: 4837
IP address blocks: 103.24.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d3:d7:87:9f:09:4f:fd:d0:da:fa:46:b3:b2:03:81:ae:fe:2f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Jan 20 02:21:10 2026 GMT
Not After : Jan 19 02:26:10 2027 GMT
Subject: CN=DEDFF7144AC2BBB3183B864AEDC8AEAC0876CD7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:04:e8:21:a1:e4:af:9d:c5:f0:14:b0:7a:
ce:11:c7:25:f7:13:e0:ea:e9:b4:fd:ef:c0:15:50:
2a:cb:b3:74:5e:d6:59:a1:5d:e9:1b:cb:74:23:71:
f9:97:39:d6:a4:cd:30:0a:42:bc:58:3b:64:b6:b9:
e3:1b:8c:c2:33:1e:33:de:26:9d:06:4b:a1:75:ae:
27:59:b4:4e:40:57:d2:43:54:b4:39:bd:8c:eb:87:
21:32:03:34:55:7a:ea:9f:ce:af:d8:b5:f2:93:54:
bf:93:01:77:c6:24:5a:ab:d6:71:79:7b:aa:41:06:
4c:6b:64:7f:5a:02:8c:5d:64:16:70:16:f7:4f:97:
4a:22:2c:43:8f:fb:d0:48:1f:4e:a8:84:cc:fb:63:
cf:df:9f:92:da:b2:fb:93:18:de:2f:b5:53:23:fb:
49:ad:2e:ab:38:3e:14:e0:46:bb:0b:ad:1c:e2:e8:
3f:b0:72:db:00:b9:69:c8:1c:5f:a1:f6:78:e8:f5:
14:d5:7b:a2:5d:d0:47:cd:dc:25:06:6a:22:08:fb:
16:fd:81:a6:9e:08:44:fe:13:7e:f5:ac:c7:4f:cd:
92:30:af:a4:9f:ca:62:a6:91:0b:92:05:f3:54:24:
e8:65:1d:03:5f:05:92:80:fe:ab:04:6c:3e:de:8d:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DF:F7:14:4A:C2:BB:B3:18:3B:86:4A:ED:C8:AE:AC:08:76:CD:7E
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232392e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.229.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f5:ba:c2:13:4f:9f:7c:75:18:f2:ef:bf:b6:3e:6d:43:08:
d1:df:40:f5:af:41:d2:01:bc:48:1b:17:fc:63:89:44:d3:97:
25:57:bb:9e:d4:36:ec:28:14:0c:56:f7:ab:de:27:20:4c:1c:
52:15:62:5a:bc:33:ed:cb:bb:92:ce:99:d2:ac:28:57:0a:6e:
b9:ca:2f:e8:2c:9a:77:f0:f2:8b:dc:38:57:ca:a4:26:4f:0c:
20:96:da:ad:15:e9:07:9d:6e:bb:df:0e:de:16:08:57:db:5e:
ac:07:d5:77:47:4f:9e:30:f5:c3:23:c3:f5:bb:21:1d:6c:f0:
49:71:7e:ed:99:e1:39:2d:ab:5c:19:44:c2:29:b3:39:f4:87:
80:9e:44:6e:e6:fc:4e:de:58:bd:c6:64:b7:52:56:fd:5a:6a:
ec:5a:66:fd:07:7d:00:e1:29:dc:0d:59:63:20:d1:3e:12:af:
bf:a8:ee:1a:8f:f4:96:55:e6:df:72:f7:95:02:24:be:4c:eb:
17:29:b0:c8:13:b4:b3:a8:10:41:8d:dc:cd:98:5f:00:03:f0:
a1:4a:8c:02:e5:e5:73:bd:63:e8:02:f4:e4:31:2f:11:a1:7a:
c5:77:43:6d:05:4e:cc:7f:ff:16:c9:87:85:47:20:ce:31:db:
b9:16:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:00:38 2026 by rpki-client