This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/3130332e3230382e34382e302f32322d3234203d3e203633363737.roa
File: 3130332e3230382e34382e302f32322d3234203d3e203633363737.roa (raw, json)
Hash identifier: fpE/EiwUplHjkiflwKUh3EuFdN+KdT2wGpInbK2XCGw=
Subject key identifier: 0A:C2:08:B5:D4:57:A0:B7:2A:05:8A:07:7B:C4:8D:27:B8:61:DB:87
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 7D4FC7AB30BB5945CB586B1C710B0C9E14F27430
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/3130332e3230382e34382e302f32322d3234203d3e203633363737.roa
Signing time: Tue 20 Jan 2026 01:19:08 +0000
ROA not before: Tue 20 Jan 2026 01:14:08 +0000
ROA not after: Tue 19 Jan 2027 01:19:08 +0000
asID: 63677
IP address blocks: 103.208.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 05:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4f:c7:ab:30:bb:59:45:cb:58:6b:1c:71:0b:0c:9e:14:f2:74:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Jan 20 01:14:08 2026 GMT
Not After : Jan 19 01:19:08 2027 GMT
Subject: CN=0AC208B5D457A0B72A058A077BC48D27B861DB87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:28:82:d0:88:6b:ff:1b:97:43:13:38:08:
1d:11:a3:d8:ca:7b:89:fc:af:2f:e3:65:38:b2:5a:
f7:d3:81:4c:f5:02:eb:a7:32:64:1a:35:49:dd:f8:
38:87:11:67:95:19:82:c1:fb:4f:23:53:4a:ce:9f:
e9:b8:51:c7:5b:30:1a:f1:71:89:23:87:0b:87:55:
b6:18:06:38:1f:93:d3:ed:28:3c:20:31:d1:9e:14:
f0:c5:c7:0a:f6:ef:17:fa:76:7f:e8:5d:3a:90:2b:
4e:92:ed:0c:19:69:df:6a:65:5e:db:d2:15:07:fd:
4f:39:0f:6a:7e:1e:96:7e:b9:f3:0b:22:38:1c:8a:
1d:b4:a9:33:33:81:fb:9c:2b:14:14:a1:4b:97:a7:
63:f0:7c:6a:ef:0d:0d:b6:91:90:4b:5f:ea:89:3d:
3f:78:06:13:12:35:d9:ef:59:00:74:47:18:ab:09:
22:b2:8c:d5:81:d3:93:d5:13:a9:06:1c:4b:14:65:
cd:0c:e4:dc:6e:c1:d9:a6:55:7b:7a:30:00:9e:37:
3f:7d:bf:8b:d1:f4:18:ef:bc:1e:b2:e5:ff:b1:b1:
3f:26:01:17:21:9a:76:e6:32:23:97:82:cb:28:e4:
a4:e1:b6:d9:28:6d:dc:42:ce:2e:9c:19:aa:7a:53:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C2:08:B5:D4:57:A0:B7:2A:05:8A:07:7B:C4:8D:27:B8:61:DB:87
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/3130332e3230382e34382e302f32322d3234203d3e203633363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.48.0/22
Signature Algorithm: sha256WithRSAEncryption
56:94:96:f4:a0:67:85:64:66:d6:76:1a:2d:da:a2:d8:59:4d:
e4:2c:01:2f:c8:ac:56:98:76:2f:64:76:4e:54:0e:97:29:cd:
2d:d7:4b:b9:31:2e:51:69:65:ac:99:e4:31:d0:b7:02:04:76:
94:84:9c:d0:ae:ae:a3:ea:49:d2:15:09:63:a1:78:ac:b7:5d:
40:4e:e2:46:b7:07:fd:86:36:fc:9f:5f:89:c0:94:5b:55:26:
13:57:1a:dc:f9:f5:f1:b1:99:c3:a9:84:15:21:18:ad:66:83:
d7:5b:45:03:54:30:57:2c:26:c1:ee:db:94:bd:a8:9c:fd:36:
af:7a:9d:32:eb:ab:04:1c:e8:ca:71:df:b0:61:c6:cb:e7:4a:
4a:0b:66:c0:ed:27:78:07:d3:91:2a:7c:f0:12:a6:e9:59:a2:
86:4e:ff:6e:ad:8c:7b:e6:20:7a:bf:bc:25:1e:86:5b:be:74:
0b:39:06:17:33:03:47:ed:9a:c5:c2:b4:ba:eb:25:65:06:cb:
8b:d4:64:76:f7:22:82:92:04:74:ca:ba:6c:28:83:42:04:c8:
96:f1:0b:ad:a7:b5:23:c3:67:2d:b9:e6:a0:3e:a5:24:ad:11:
79:2c:65:32:84:85:0c:ea:0e:d1:1c:e7:96:80:05:0b:69:16:
2f:f3:44:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:55 2026 by rpki-client