This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20313430323234.roa
File: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (raw, json)
Hash identifier: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=
Subject key identifier: DD:54:AE:D1:26:D8:C7:88:4F:2D:8C:8E:EE:7B:34:FD:06:57:A6:C0
Certificate issuer: /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial: 6AA927352BD1A984A7D3C74650BBEAC29FF963E3
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20313430323234.roa
Signing time: Tue 20 Jan 2026 01:19:10 +0000
ROA not before: Tue 20 Jan 2026 01:14:10 +0000
ROA not after: Tue 19 Jan 2027 01:19:10 +0000
asID: 140224
IP address blocks: 103.99.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a9:27:35:2b:d1:a9:84:a7:d3:c7:46:50:bb:ea:c2:9f:f9:63:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Validity
Not Before: Jan 20 01:14:10 2026 GMT
Not After : Jan 19 01:19:10 2027 GMT
Subject: CN=DD54AED126D8C7884F2D8C8EEE7B34FD0657A6C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:43:9b:77:63:25:7b:dc:9e:e5:e6:a4:b0:
c6:3b:fc:aa:c5:db:2e:e8:ef:27:3f:75:c7:3c:be:
93:53:81:1b:8e:1f:82:0b:a0:f3:07:c3:43:fe:cb:
7a:08:28:a6:ae:c1:dc:fe:5c:2e:94:fb:28:d1:48:
f2:3a:91:b7:26:1c:a3:be:a0:5e:76:5e:fd:09:38:
e1:91:46:f7:98:e2:90:11:50:6c:37:30:f7:68:bf:
2a:1c:8f:8a:ca:89:39:92:29:a0:0a:70:2c:64:0d:
6e:5c:1d:28:27:a4:51:e0:e4:2a:f1:3d:58:19:e6:
9b:87:47:7f:2f:9e:8c:83:45:8a:c1:f5:10:04:af:
06:c9:b3:8c:1d:2b:08:6e:a0:c1:4c:ba:d5:52:37:
40:89:46:fc:38:fc:04:5b:cc:83:54:7a:39:9f:c3:
7b:df:ce:8b:60:62:05:a9:b7:65:fb:d2:4f:02:41:
27:34:7e:0c:5c:27:9f:d9:2a:aa:16:6b:b5:78:b7:
43:b8:a9:d7:9b:94:75:af:32:76:d3:f5:ac:3a:ea:
0c:f9:9d:59:b0:ad:6c:aa:17:29:f9:c1:7a:af:d0:
cb:4c:06:a2:cd:b5:2e:08:23:57:d4:07:ba:cc:89:
f5:8f:5f:4b:34:1f:4c:ae:bc:56:2d:f8:58:b4:a9:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:54:AE:D1:26:D8:C7:88:4F:2D:8C:8E:EE:7B:34:FD:06:57:A6:C0
X509v3 Authority Key Identifier:
keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20313430323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.99.76.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:6d:5e:9a:d1:9d:85:60:b6:47:e5:fa:fd:89:16:f9:a6:14:
15:44:e9:2c:cc:d5:c4:01:b7:d7:6d:9f:d9:8d:e9:fa:1b:1c:
68:86:8b:ee:85:e7:dd:0b:c2:d6:f1:e1:cd:47:f3:fb:9e:b5:
53:39:66:fc:1a:ea:30:14:62:f6:70:ee:2b:22:c4:d8:14:b1:
27:c4:31:e1:b5:91:89:08:62:38:7c:a8:64:71:91:d5:bd:b8:
ee:49:74:88:04:05:21:53:55:2f:e3:ef:c5:1b:ea:6e:ea:4d:
70:10:74:b4:54:17:0e:e1:5b:6f:f5:b4:ac:95:26:33:e9:5e:
c7:3b:0d:16:9e:8a:13:25:e6:46:4e:cb:87:15:9a:96:8d:94:
d2:13:2a:ca:37:81:28:24:b8:d9:ec:a7:b8:7f:a5:2c:72:d2:
8a:d7:39:a4:8e:b6:7b:bd:6e:6f:f0:10:4e:08:0c:99:2e:64:
a0:d4:b3:0c:c4:c3:5e:6a:48:ae:48:6c:ea:b2:28:86:08:15:
e0:76:d7:3b:e9:a5:4e:92:68:0a:51:13:08:2a:ef:b8:cf:7b:
cd:66:79:fb:bb:9f:59:31:3d:37:6c:8e:4d:6f:92:b6:a9:78:
4e:20:06:f9:2e:0f:0b:6e:6b:6d:8f:87:16:41:9a:07:dd:ff:
8d:e8:f4:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:33:57 2026 by rpki-client