This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32322d3234203d3e203231383539.roa
File: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (raw, json)
Hash identifier: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=
Subject key identifier: DC:7B:D5:45:BC:FC:D7:A1:31:E1:13:89:C8:A7:C2:C3:F4:3B:49:4E
Certificate issuer: /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial: 731DE18703558531C3F909B4A21E19DB287CA9E2
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32322d3234203d3e203231383539.roa
Signing time: Tue 20 Jan 2026 01:19:10 +0000
ROA not before: Tue 20 Jan 2026 01:14:10 +0000
ROA not after: Tue 19 Jan 2027 01:19:10 +0000
asID: 21859
IP address blocks: 103.99.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1d:e1:87:03:55:85:31:c3:f9:09:b4:a2:1e:19:db:28:7c:a9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Validity
Not Before: Jan 20 01:14:10 2026 GMT
Not After : Jan 19 01:19:10 2027 GMT
Subject: CN=DC7BD545BCFCD7A131E11389C8A7C2C3F43B494E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:12:58:dc:7e:19:74:20:85:59:d6:22:4e:
4c:76:78:57:66:45:75:2a:7d:29:f4:be:9d:79:76:
af:e9:d4:c3:cb:be:0f:35:cf:5b:9d:f6:65:4a:84:
53:ea:2e:46:c2:b2:14:b8:bf:d7:ae:ce:f2:cb:42:
03:74:79:c4:11:41:dc:31:55:54:5b:42:ef:ed:c4:
cd:df:4a:57:2b:f6:85:cf:41:cb:3b:40:ab:c0:c9:
af:80:bc:43:e9:50:6b:b5:44:64:7e:80:74:c8:41:
86:ba:f0:ba:ac:5f:df:84:35:17:16:4d:9c:82:14:
44:b4:8f:ee:0c:ae:45:2d:0b:a5:84:ca:fe:b4:53:
76:f1:da:e1:f6:a1:6e:57:58:58:7a:f7:b0:42:5a:
ef:b1:f3:64:d1:f0:49:8f:b4:4f:ed:be:a7:09:fc:
e3:a6:f2:4c:df:0c:30:69:7d:54:7e:e2:6c:aa:7e:
7b:92:75:8e:c2:50:10:81:fa:1c:b7:a9:3f:e3:11:
8f:b4:a0:4b:b7:70:bb:fe:95:f2:63:21:ad:2f:f9:
d1:7b:9c:bd:4c:63:a3:9e:9c:16:1d:6f:d4:d1:e8:
a6:f8:5a:95:a6:1a:a6:f1:fb:f2:a4:51:7d:a3:ef:
10:57:c8:00:d4:b6:32:a8:e9:67:1a:20:4b:4c:85:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7B:D5:45:BC:FC:D7:A1:31:E1:13:89:C8:A7:C2:C3:F4:3B:49:4E
X509v3 Authority Key Identifier:
keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32322d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.99.76.0/22
Signature Algorithm: sha256WithRSAEncryption
26:30:71:c0:11:6f:3a:51:51:75:0a:ef:21:99:04:0f:9c:78:
ca:3b:6e:64:c6:2b:c1:53:d9:5d:8a:39:c2:b3:2f:c5:0c:e0:
96:32:2f:33:59:b6:e8:92:6e:7f:ef:88:34:f8:7d:ef:f0:79:
89:be:ce:cc:f7:55:43:32:0c:bf:01:db:84:61:89:6b:ba:a2:
6d:0b:3e:30:d3:2e:9a:38:bf:fd:7a:95:55:de:fe:50:74:e5:
e1:f4:f3:4e:f7:b7:c0:de:18:77:1c:06:5e:4b:8e:d9:ee:c5:
61:fb:5d:24:76:d7:fe:69:0b:df:ea:48:1e:49:fc:05:de:63:
4c:6b:8b:65:fe:42:64:a5:3d:9c:d0:5b:a7:d4:73:95:df:34:
e7:35:3b:93:63:1e:6e:fc:61:1e:c7:75:5c:a2:3f:6c:e8:ce:
41:48:87:16:e2:c0:f8:a9:06:4f:c2:d5:60:a6:bb:4d:96:a4:
ba:47:78:0e:3b:36:f8:9f:6a:69:2d:9a:fa:da:08:ae:04:9a:
ba:d6:52:4a:a9:a1:5b:70:ca:a8:26:2d:6e:ea:d8:29:f9:13:
73:3c:44:1b:97:45:28:79:a3:da:a0:b6:fb:fb:8b:8a:16:b8:
36:0c:ac:d1:70:86:97:0f:3f:54:2f:1f:8b:9e:cf:0b:39:ea:
76:bb:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:23:00 2026 by rpki-client