This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35382e302f32342d3234203d3e20313532303932.roa
File: 3130332e39372e35382e302f32342d3234203d3e20313532303932.roa (raw, json)
Hash identifier: 9g8q6C2zMMfK8FIvJQCnY2jS/6Obpq4wlvntZI6tOkw=
Subject key identifier: 35:FC:9C:F5:7A:E3:CF:6D:11:04:A9:93:7B:AF:26:ED:97:45:E1:DE
Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial: 3C9E9E7FCF633721959A0977F5AA2CFEE8FA4FE4
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35382e302f32342d3234203d3e20313532303932.roa
Signing time: Tue 20 Jan 2026 02:08:28 +0000
ROA not before: Tue 20 Jan 2026 02:03:28 +0000
ROA not after: Tue 19 Jan 2027 02:08:28 +0000
asID: 152092
IP address blocks: 103.97.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:9e:9e:7f:cf:63:37:21:95:9a:09:77:f5:aa:2c:fe:e8:fa:4f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
Validity
Not Before: Jan 20 02:03:28 2026 GMT
Not After : Jan 19 02:08:28 2027 GMT
Subject: CN=35FC9CF57AE3CF6D1104A9937BAF26ED9745E1DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:61:c1:bd:d4:5d:fa:53:d6:f8:5c:19:4d:
ba:b5:87:f6:f1:97:6c:52:3a:7e:02:12:d4:6a:77:
4a:c7:23:74:a7:74:b8:46:e3:f2:88:b6:12:41:3c:
f7:a4:df:ff:d3:42:6a:5b:50:8b:3a:7b:f8:44:b2:
34:17:fb:0f:72:57:9a:e2:c6:06:13:1a:8f:dd:e0:
12:0a:5f:2e:9d:0e:82:4e:ea:12:73:31:e0:fb:48:
a9:86:93:6c:e7:1f:db:7e:66:1c:6d:7f:9c:a9:6c:
f7:5c:1c:6e:d1:48:e8:35:0a:9c:10:9c:fe:ed:0e:
af:83:5d:8d:7c:f0:88:5a:5c:7e:71:6d:05:a7:17:
85:c3:f6:e3:a7:6a:bc:57:8f:69:73:06:77:75:bb:
19:2c:97:8d:af:60:76:04:46:d9:b1:b6:59:b2:39:
17:fe:04:a8:31:09:3c:17:a6:76:53:98:af:80:d3:
eb:a6:55:3d:31:ab:37:e8:1e:e5:23:80:f6:01:ba:
32:bb:8c:ef:69:1c:83:f9:45:69:1c:d8:f7:48:2e:
6f:58:ef:86:c5:16:27:3a:6f:8a:02:50:db:d0:2f:
7d:b8:6e:14:80:40:97:22:3b:4f:04:cc:97:37:1c:
fa:f2:ea:2e:4f:a8:f3:7a:09:b1:7e:6a:2a:3c:77:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:9C:F5:7A:E3:CF:6D:11:04:A9:93:7B:AF:26:ED:97:45:E1:DE
X509v3 Authority Key Identifier:
keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35382e302f32342d3234203d3e20313532303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:04:ca:67:ff:09:c7:f4:4f:58:a7:e6:e4:d3:c4:e5:5b:d0:
75:8c:a6:c2:d8:05:85:be:23:89:e2:b7:f5:03:92:08:45:4c:
0d:b5:bc:41:18:da:06:57:a8:bc:aa:13:0e:44:8f:bf:9c:d8:
ea:49:17:36:57:18:c4:32:c3:4d:c4:0f:eb:eb:78:30:1e:c5:
4f:c8:70:12:4d:2c:af:a2:ab:44:ae:58:7f:3d:e7:09:3f:60:
7d:e6:d9:51:65:8e:af:cc:44:97:2f:9c:6b:44:8d:39:79:9f:
49:0b:2a:50:41:9a:13:d0:32:4e:73:30:44:12:bd:82:c4:c3:
41:b0:c4:9d:7d:c8:f3:3a:e6:a0:e8:ce:ef:30:ba:a5:b5:9f:
6b:f1:60:08:22:fe:ba:85:5a:c9:0c:74:6b:33:c8:08:ee:be:
db:46:db:24:bf:71:91:9d:ee:06:3c:df:ac:88:d5:06:ab:17:
7d:e7:f7:2c:1e:00:cc:6f:3b:56:07:62:30:91:cc:f2:6a:25:
83:bc:52:ce:11:e9:57:3c:51:b9:8a:f1:03:6d:0b:d7:60:d5:
34:e9:57:1e:70:88:0d:18:ca:2e:c4:5f:7f:d9:ed:cb:f0:37:
2f:21:aa:13:86:a4:e0:d1:2b:90:9d:8d:93:c1:6e:7e:32:dc:
6c:3e:e4:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:27 2026 by rpki-client