This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32322d3232203d3e20313337343433.roa
File: 3130332e39372e35362e302f32322d3232203d3e20313337343433.roa (raw, json)
Hash identifier: tT7KABninYg0iamV5ShQ2APc57EUXLuPGm9ml3XoXL4=
Subject key identifier: EA:4C:62:A3:32:D0:BF:44:51:76:CC:AF:93:F9:40:54:8B:61:32:EC
Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial: 7D06D2A9DD69B7DF6C7F7A1A3EAE94EAAC0B2FA3
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32322d3232203d3e20313337343433.roa
Signing time: Tue 20 Jan 2026 02:08:28 +0000
ROA not before: Tue 20 Jan 2026 02:03:28 +0000
ROA not after: Tue 19 Jan 2027 02:08:28 +0000
asID: 137443
IP address blocks: 103.97.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:06:d2:a9:dd:69:b7:df:6c:7f:7a:1a:3e:ae:94:ea:ac:0b:2f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
Validity
Not Before: Jan 20 02:03:28 2026 GMT
Not After : Jan 19 02:08:28 2027 GMT
Subject: CN=EA4C62A332D0BF445176CCAF93F940548B6132EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:9c:2e:64:b1:73:91:fb:3c:5c:8e:84:13:
bb:50:21:4c:5d:d0:79:0d:d4:f9:c0:0b:55:9b:62:
b4:6c:ac:59:3d:96:5f:2a:4a:0e:42:fb:d1:6f:e8:
f5:54:8b:7b:67:c3:e3:18:12:80:53:67:fb:55:3b:
05:44:6b:2a:a7:65:5d:65:0c:3b:af:c3:5b:9b:9d:
bb:d9:34:25:ed:ae:9f:3d:9f:d6:bd:dc:58:87:be:
3a:2e:50:fa:e2:3d:a9:dc:52:33:2c:5d:18:60:7c:
7b:dc:a3:2f:2c:13:b4:c7:bd:68:7c:37:a2:bc:90:
f9:7a:88:c7:3c:df:bd:04:7f:8b:3a:8f:c2:cb:cc:
6e:bc:5d:9f:7f:cb:d5:28:31:be:4c:07:fe:d2:6d:
97:75:7e:6c:53:45:4d:65:5f:1e:da:e9:66:dc:89:
1e:c4:9f:80:6e:c6:15:b5:66:d3:0c:b5:84:01:00:
18:16:ac:09:67:cc:35:79:e9:37:2d:07:43:d8:b0:
65:0e:e1:78:f1:4f:66:85:01:70:9c:a3:d4:41:df:
5d:d7:9e:d1:01:aa:36:39:8e:6c:4c:4f:0d:02:af:
89:67:7e:dd:3a:72:65:fa:b8:2f:0e:40:4d:ea:ea:
07:d9:1c:bb:c2:80:34:42:f8:bf:d9:87:ed:70:46:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:62:A3:32:D0:BF:44:51:76:CC:AF:93:F9:40:54:8B:61:32:EC
X509v3 Authority Key Identifier:
keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32322d3232203d3e20313337343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:db:24:8d:1a:5a:bb:2b:ef:a8:b3:06:da:45:7b:75:fd:93:
b4:e3:0b:d2:f5:cd:38:04:65:84:86:f5:62:50:d1:f5:f8:51:
5e:9f:a3:8a:1c:9f:7d:4f:a6:bd:5f:cb:9d:24:5b:77:c8:8a:
05:95:c3:9e:cd:fc:63:af:60:b6:0f:95:07:b7:e8:74:fe:9d:
f3:78:32:21:29:54:d8:1b:b8:0b:9a:c9:13:96:5b:fd:02:41:
e7:53:0d:8b:62:27:5d:94:5d:d2:4d:ae:a6:e5:19:63:22:94:
74:d0:a1:64:e5:9f:89:98:72:f8:b1:16:0c:7d:ea:b1:dd:2b:
44:b8:4d:72:5c:17:4f:a5:74:2e:9c:a5:6a:b7:6a:3b:36:0a:
5d:e4:ef:1a:d4:8f:b9:6e:08:09:e4:5b:b2:32:85:17:c1:74:
73:8d:66:8e:ba:10:23:96:52:f2:64:8c:70:d4:7e:cb:14:e9:
87:8d:48:c7:ba:57:c1:ca:78:31:ee:e5:20:fa:34:37:d6:21:
a8:75:98:d7:be:0a:f0:2b:3e:23:03:cf:65:61:ce:f9:6c:14:
f4:3b:8e:50:bf:4b:f1:11:b1:60:db:4c:cf:d6:a6:f5:65:61:
2e:2c:b4:f7:c1:75:fe:3c:c0:75:a9:a9:bf:eb:b2:42:4c:e4:
c7:76:9e:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:40:11 2026 by rpki-client