This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3233312e302f32342d3234203d3e2034383337.roa
File: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=
Subject key identifier: 6A:72:6B:A9:77:9F:ED:54:A5:D4:A0:F0:10:30:67:47:54:45:DE:44
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 2975C84A845A8603AED26F70A0DE29AF12337C8F
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3233312e302f32342d3234203d3e2034383337.roa
Signing time: Tue 20 Jan 2026 02:26:10 +0000
ROA not before: Tue 20 Jan 2026 02:21:10 +0000
ROA not after: Tue 19 Jan 2027 02:26:10 +0000
asID: 4837
IP address blocks: 103.24.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:75:c8:4a:84:5a:86:03:ae:d2:6f:70:a0:de:29:af:12:33:7c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Jan 20 02:21:10 2026 GMT
Not After : Jan 19 02:26:10 2027 GMT
Subject: CN=6A726BA9779FED54A5D4A0F0103067475445DE44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:d8:da:00:09:9c:ca:b1:25:26:40:50:e6:
43:04:b6:ab:45:91:f9:aa:8c:14:d9:f4:36:d6:1c:
64:e6:82:09:72:22:ca:9c:aa:bb:89:87:81:8d:65:
22:ff:60:97:8e:20:60:bb:9c:06:27:55:ca:c6:42:
6e:14:c1:1d:f1:89:79:a6:93:36:f2:54:b5:82:c8:
1a:0f:35:93:a9:8c:e0:99:c0:23:1b:a1:28:97:fb:
c4:4e:a2:da:b8:38:b6:8a:ed:99:a0:34:2b:17:96:
83:93:87:1c:c0:01:41:f1:18:b1:5c:bb:98:3a:52:
8c:1d:9e:c6:9c:89:6e:64:84:09:d3:d7:19:40:8d:
fd:aa:8a:ed:90:72:a8:3a:f6:9c:77:c1:5a:4e:fd:
1b:b3:aa:1a:89:51:36:73:df:6b:05:ef:1b:0e:ac:
44:46:e8:34:f8:b5:f0:91:01:ea:81:8b:3d:f0:d4:
ad:36:e3:d7:52:14:ca:35:3f:34:fd:06:a4:f3:9d:
69:17:17:d0:50:eb:03:bf:78:4a:1f:e3:dd:f8:09:
2b:85:08:6a:56:71:c2:63:44:f8:33:29:18:18:d5:
82:dc:f4:e4:aa:b8:12:55:21:c0:9e:0f:89:da:57:
47:8b:e5:47:0c:79:a1:b8:d2:5d:c2:8a:d1:2e:d2:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:72:6B:A9:77:9F:ED:54:A5:D4:A0:F0:10:30:67:47:54:45:DE:44
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3233312e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.231.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b6:e0:40:1a:73:cf:35:e8:fb:0e:95:7c:2b:77:30:65:d6:
8c:17:58:be:c3:b8:ac:4e:3a:35:52:8b:b8:ee:f3:cb:7c:09:
b8:7a:a4:60:d6:20:86:08:ca:02:b0:aa:46:d6:e7:e9:98:f4:
ce:4c:6c:f9:b9:4a:fd:60:b4:17:3d:fe:cf:e4:e5:6e:b1:67:
7a:72:00:e0:e2:27:b3:0e:99:96:38:83:f7:ea:a7:fd:29:05:
5a:6b:a7:b3:59:aa:3c:98:ed:d4:c8:4d:7d:1c:d4:87:3a:2c:
d0:a0:26:7e:97:47:0f:e5:13:13:69:90:da:51:59:e2:fe:1f:
97:4f:d6:6e:da:26:89:3d:3f:0c:a4:77:f6:af:3b:cf:ff:9e:
78:e0:31:d7:08:63:ff:57:16:b9:fd:cb:9c:0d:8f:ae:5b:af:
fc:68:88:c1:51:6d:cf:31:ba:94:5f:fd:dd:7d:f4:30:e3:df:
2d:5b:7d:7f:dd:bc:a4:cd:1e:78:b3:5c:d5:f6:ba:12:dd:bb:
78:ef:8f:00:6e:1e:c2:b7:3a:dd:6c:95:54:68:57:cb:ca:25:
c3:70:41:0a:c1:07:60:59:80:75:6f:32:4c:78:5d:92:9f:b7:
18:70:cb:db:d6:cd:df:f4:e9:10:91:d4:73:99:64:e6:53:e7:
de:7a:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:01:08 2026 by rpki-client