This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32342d3234203d3e20313337343433.roa
File: 3130332e39372e35362e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier: Usfk3vKW8a6sdncccfCTAd6Pdzalj50eZ7FYBMBrLaI=
Subject key identifier: 79:EF:8B:9C:92:37:52:12:3E:85:90:0E:07:63:57:BF:0E:4C:C6:D1
Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial: 0F37C13AED0DDAAB01C06A2A2EC2691DFC63E3FB
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32342d3234203d3e20313337343433.roa
Signing time: Tue 20 Jan 2026 02:08:27 +0000
ROA not before: Tue 20 Jan 2026 02:03:27 +0000
ROA not after: Tue 19 Jan 2027 02:08:27 +0000
asID: 137443
IP address blocks: 103.97.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:37:c1:3a:ed:0d:da:ab:01:c0:6a:2a:2e:c2:69:1d:fc:63:e3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
Validity
Not Before: Jan 20 02:03:27 2026 GMT
Not After : Jan 19 02:08:27 2027 GMT
Subject: CN=79EF8B9C923752123E85900E076357BF0E4CC6D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:d7:9c:91:29:9b:69:55:22:6b:29:19:c1:
a4:be:68:62:50:b8:f5:f6:be:30:5f:25:3b:2c:07:
0d:34:9e:3b:79:65:b2:cf:4d:10:b6:36:01:3d:20:
60:d0:00:c3:ae:e0:ea:b8:40:15:0c:5a:05:d2:ff:
99:20:93:a0:26:bd:ea:37:54:eb:36:13:80:4d:26:
fe:e0:48:aa:e5:76:98:a4:e7:a6:58:49:9c:2e:e6:
8d:60:60:30:95:eb:79:2d:f5:0f:2f:67:ca:8a:1c:
13:2f:de:a2:88:d2:1f:ac:a1:a4:7e:a1:b3:2e:4f:
ac:7b:c2:e1:2d:63:a9:c4:63:57:0e:75:3a:74:c2:
fc:b1:8c:89:bd:c9:e8:88:e8:48:f8:d9:31:63:6d:
73:e7:16:c6:ef:25:26:00:87:8d:90:89:b6:51:5b:
54:52:10:a4:71:0b:73:8c:c6:8e:40:89:ff:e7:30:
1a:a3:9f:62:70:a0:7b:45:69:0f:38:2e:31:80:cd:
48:05:e1:68:b9:8d:f2:7e:87:ba:96:25:9e:3d:d0:
d0:b3:44:2b:5b:99:1e:23:92:c4:12:ff:67:3f:f7:
d9:2c:99:bc:2e:01:15:05:ae:64:6f:34:ef:09:6d:
6c:21:f8:a6:cd:83:a9:7d:a8:88:68:d4:ce:b9:2b:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EF:8B:9C:92:37:52:12:3E:85:90:0E:07:63:57:BF:0E:4C:C6:D1
X509v3 Authority Key Identifier:
keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32342d3234203d3e20313337343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3a:87:78:99:c2:56:1f:2e:3d:8f:f3:a8:30:a5:8b:49:39:
c6:a1:50:96:59:eb:74:de:2e:85:35:21:52:0f:0e:ad:bf:c0:
ed:90:73:e7:49:d1:9d:cd:eb:21:7e:f0:2b:10:2e:8e:28:b5:
b7:73:ba:30:80:d0:36:69:3f:ab:52:52:9a:47:8d:fd:c4:92:
e1:52:70:4e:47:21:ef:c6:22:a7:23:fe:27:84:c7:3e:c2:59:
c4:17:1d:a8:43:da:cc:7c:ec:51:4f:cd:08:2e:3e:9b:73:1d:
1e:bb:a0:9a:7a:8c:fb:ae:ee:4b:12:ae:1d:94:ea:2c:08:41:
74:3a:1f:30:13:68:b1:96:1a:ae:82:5f:2e:53:ff:a4:b3:64:
5f:09:b6:a2:4f:32:51:c8:33:62:43:31:1a:d0:7f:7f:ef:9c:
7c:cf:fc:6c:6d:94:55:fe:69:78:cf:83:81:36:65:af:42:1a:
d3:82:e7:04:fd:82:86:d1:7e:72:cf:d1:9f:52:54:b8:b7:03:
14:6b:0e:e3:aa:85:2b:73:0d:4f:b4:12:51:58:66:1e:04:59:
70:4a:c5:44:ac:d1:a4:2b:8e:98:2c:d9:f0:1c:10:5c:b0:04:
3c:fb:b1:60:d6:b9:33:a2:e8:e2:9c:b6:55:c3:43:0a:cc:b9:
01:f7:fc:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:16 2026 by rpki-client