This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35372e302f32342d3234203d3e20313337343433.roa
File: 3130332e39372e35372e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier: xdA/DzV+toI7Q3bECRbnQQmPTqAaNqd4BPhFTjhYgtk=
Subject key identifier: 1C:A9:75:54:F8:50:C8:3F:A6:C2:21:70:F6:12:58:8F:3D:35:1C:18
Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial: 108FF2ECF52AB51D260DFA4D7E9062B608D6C588
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35372e302f32342d3234203d3e20313337343433.roa
Signing time: Tue 20 Jan 2026 02:08:28 +0000
ROA not before: Tue 20 Jan 2026 02:03:28 +0000
ROA not after: Tue 19 Jan 2027 02:08:28 +0000
asID: 137443
IP address blocks: 103.97.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8f:f2:ec:f5:2a:b5:1d:26:0d:fa:4d:7e:90:62:b6:08:d6:c5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
Validity
Not Before: Jan 20 02:03:28 2026 GMT
Not After : Jan 19 02:08:28 2027 GMT
Subject: CN=1CA97554F850C83FA6C22170F612588F3D351C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fb:6f:87:43:71:a0:9b:52:04:ba:95:79:b5:
7b:07:90:db:2a:f1:61:dc:89:88:33:49:0f:be:52:
45:86:40:87:5c:da:83:0a:f4:27:5b:54:24:52:cb:
a3:9a:d9:29:05:ee:d6:15:a9:0f:9b:d1:09:45:c8:
a2:dd:83:71:34:bf:d3:6e:ce:87:8a:d3:52:e5:47:
6b:71:c8:75:25:6c:24:3d:e0:c0:e5:7a:e9:41:2a:
c4:de:ed:7e:9d:be:01:d0:26:e5:48:2e:98:99:68:
70:0c:3c:bb:94:04:2a:33:8b:63:d8:13:d9:84:10:
be:7a:14:ff:ae:85:f1:81:1d:18:90:3d:4c:38:b0:
1d:86:51:e7:7f:0e:7a:6b:5c:a4:a7:65:79:a3:d5:
8a:e7:6a:ed:7d:af:55:9a:32:4d:c9:76:2c:fb:f1:
95:87:a1:fc:72:1f:c7:47:88:a2:e0:70:f0:a6:79:
dd:62:7e:c5:b9:4a:67:67:c2:0c:f9:d4:3e:dd:e2:
24:a3:c3:02:b0:89:b3:67:28:98:a5:36:2f:5d:83:
3e:75:85:be:0e:c6:e3:30:21:9f:8b:df:e5:62:46:
12:ec:84:43:47:4f:57:d0:f1:2e:f8:f3:58:3f:d5:
b2:35:3e:da:f5:7f:65:6e:a4:a7:36:b6:d7:64:08:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:75:54:F8:50:C8:3F:A6:C2:21:70:F6:12:58:8F:3D:35:1C:18
X509v3 Authority Key Identifier:
keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35372e302f32342d3234203d3e20313337343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.57.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e4:46:a8:1c:8d:87:a8:62:a1:67:bb:28:6a:c7:aa:c9:2f:
90:3a:34:43:de:c7:9b:8d:0a:48:db:b4:43:34:3d:cb:13:db:
1b:05:5e:9b:a6:9b:db:c0:e9:23:8a:5b:28:22:88:3b:24:f4:
ac:10:10:5c:94:39:8c:60:e3:87:b0:ef:5d:06:35:07:d4:b8:
f3:97:1b:34:2b:6d:3d:b6:c8:7e:82:d9:7c:55:70:32:f9:e2:
e7:cc:21:ff:65:5c:e6:47:a4:fe:84:58:1d:03:23:82:d6:c9:
65:c6:4f:44:7a:0b:47:0a:2e:03:93:af:cf:2f:9b:df:08:1f:
75:af:66:6a:ae:2f:06:bf:d1:e2:44:db:12:44:13:0a:92:8f:
13:54:ef:e9:0e:dc:12:1f:19:49:3a:ad:17:f5:16:53:60:d2:
a8:19:a1:ff:d7:a1:8b:ce:a5:73:de:57:3d:8a:a5:51:82:0c:
4f:c2:4d:c7:02:31:ed:7b:7f:bd:90:f6:57:ed:e5:12:4d:ac:
6a:31:db:cd:78:82:69:8e:bf:69:21:c3:85:d4:bf:43:0b:a9:
fa:e8:5f:11:e8:88:63:a7:a2:2b:82:bf:89:b0:ac:e4:83:d4:
e1:df:89:d2:4f:23:fd:ef:a3:81:8a:0a:a9:0e:16:ba:3d:2b:
98:56:b0:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:40:13 2026 by rpki-client