This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20343031393232.roa
File: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (raw, json)
Hash identifier: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=
Subject key identifier: 84:E3:D4:FC:5B:32:6E:40:A0:2F:F6:72:4D:67:4C:7A:8F:87:4E:B7
Certificate issuer: /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial: 7FFDE14249A8B6594DF99152E18BF80ED8AF7126
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20343031393232.roa
Signing time: Tue 20 Jan 2026 01:19:10 +0000
ROA not before: Tue 20 Jan 2026 01:14:10 +0000
ROA not after: Tue 19 Jan 2027 01:19:10 +0000
asID: 401922
IP address blocks: 103.99.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:fd:e1:42:49:a8:b6:59:4d:f9:91:52:e1:8b:f8:0e:d8:af:71:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Validity
Not Before: Jan 20 01:14:10 2026 GMT
Not After : Jan 19 01:19:10 2027 GMT
Subject: CN=84E3D4FC5B326E40A02FF6724D674C7A8F874EB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:04:71:8c:05:66:61:84:31:6b:7b:c8:7e:
1b:9e:f9:9d:79:58:fd:e8:d5:fd:b0:91:43:84:66:
13:04:5d:d6:93:52:9b:62:fa:ee:0d:2a:b0:c2:96:
82:b7:29:e1:41:b7:8f:e3:57:54:25:8a:77:65:a8:
8a:b4:eb:84:7f:cf:8e:33:18:a1:43:cc:da:03:48:
f2:8c:f1:e6:82:e2:87:db:d4:80:cb:56:e3:19:19:
6c:c7:fb:0c:df:f4:7a:1c:3f:1b:bf:1e:65:13:ba:
bc:30:2c:0d:bf:c2:43:47:aa:b0:47:3e:6a:18:35:
7c:63:a2:76:a3:bc:81:b7:5e:62:0e:52:a3:d1:40:
91:f9:78:70:13:f6:4c:62:3e:36:55:3d:04:f6:1c:
66:cc:92:62:d4:94:cd:6c:2b:bc:4a:ac:ae:cb:2a:
08:0f:c4:ed:6c:03:07:fc:31:19:51:3b:8f:50:de:
c0:19:26:e8:d8:93:4e:c3:74:07:7a:f2:45:9f:a7:
b0:d8:78:ce:33:c1:7f:23:29:6f:b2:3b:15:2d:aa:
00:61:df:c5:b6:2c:10:18:cf:91:76:52:7a:ec:05:
42:01:db:4f:4e:46:0d:5e:cc:5d:4e:2e:52:be:23:
3b:f1:bb:dc:07:a3:81:02:98:18:9c:5f:4f:c0:a1:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E3:D4:FC:5B:32:6E:40:A0:2F:F6:72:4D:67:4C:7A:8F:87:4E:B7
X509v3 Authority Key Identifier:
keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20343031393232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.99.76.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e1:24:b0:d3:62:5d:8b:f7:95:c5:49:7c:db:3d:7d:14:2a:
37:df:fa:91:83:8a:5c:52:fc:31:21:99:df:a0:40:f3:13:e7:
24:24:d1:f2:16:42:b1:b8:d6:29:c7:a9:d5:6a:a9:d2:90:bd:
fa:f5:1e:6d:8c:a3:fe:bf:c9:50:2c:41:42:5b:f8:e4:0f:a7:
d4:57:52:5c:92:fc:3e:d2:83:c4:02:38:44:9a:da:ce:c7:9f:
64:be:ce:53:c3:cd:6d:6f:f4:98:d5:a7:51:7b:f6:49:14:4a:
29:5e:85:0c:f3:54:d4:1c:aa:b2:bb:0a:73:44:db:69:6d:50:
37:40:04:1f:be:e6:ac:6c:b2:c4:25:a9:22:aa:0e:6b:09:cf:
24:21:2c:b6:04:de:1b:53:e9:91:ed:f4:90:ff:07:1e:5b:e8:
ac:59:95:e5:99:22:f2:3d:66:58:3f:e9:77:99:41:56:6e:20:
96:57:99:95:38:8b:26:a3:81:8c:8f:46:72:2c:55:c4:e8:ae:
f0:d7:e9:d4:5c:a1:5e:e7:60:40:90:77:2e:cb:0e:f4:e6:11:
36:20:84:4f:18:34:fe:92:6c:2c:82:67:dd:7b:f2:c9:04:fe:
3d:4a:b6:6d:de:46:80:93:56:92:05:14:68:55:28:a6:10:e2:
52:31:5d:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:37:45 2026 by rpki-client