This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e33392e3233322e302f32322d3232203d3e2034383136.roa
File: 3130332e33392e3233322e302f32322d3232203d3e2034383136.roa (raw, json)
Hash identifier: 3zysFoseyORdE87QxC6HuD/MEEbQT2Rs3erWwrFjSR8=
Subject key identifier: D8:00:D2:D5:35:04:23:7D:5B:0D:D0:44:6D:57:78:8C:D6:ED:0D:53
Certificate issuer: /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial: 1A2D4E01BE8A31DCA422099BC48790AD9D594AEB
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e33392e3233322e302f32322d3232203d3e2034383136.roa
Signing time: Tue 20 Jan 2026 02:07:14 +0000
ROA not before: Tue 20 Jan 2026 02:02:14 +0000
ROA not after: Tue 19 Jan 2027 02:07:14 +0000
asID: 4816
IP address blocks: 103.39.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 18:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2d:4e:01:be:8a:31:dc:a4:22:09:9b:c4:87:90:ad:9d:59:4a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Validity
Not Before: Jan 20 02:02:14 2026 GMT
Not After : Jan 19 02:07:14 2027 GMT
Subject: CN=D800D2D53504237D5B0DD0446D57788CD6ED0D53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:d8:0a:27:f1:ff:7d:6d:e2:1e:73:7c:cc:
55:52:52:82:53:e5:fd:29:8f:8f:a1:ac:2a:3b:b0:
dd:f0:06:d5:f9:7f:68:5f:3a:09:c3:f6:82:07:63:
92:a3:7e:10:6c:c5:1e:03:81:78:5c:b0:c3:4d:fc:
46:0f:15:0a:de:7c:9a:ce:4a:6d:74:3c:ae:b7:9b:
25:82:be:5e:ff:c0:f9:38:97:80:bf:9f:51:98:fe:
3b:f3:fc:c8:09:e0:fb:e8:9a:1d:00:42:9f:c3:23:
50:af:57:19:90:1b:29:99:dd:ea:99:45:73:91:19:
85:e2:b0:b0:51:f1:99:9a:74:e1:db:ee:4c:a9:f7:
e8:fc:97:79:e5:64:47:da:e5:bb:39:33:0d:42:96:
5b:27:65:57:a5:01:84:b1:02:06:45:21:52:50:74:
03:81:d7:7f:00:6e:ea:5d:b0:7e:0b:b9:27:13:75:
29:68:c9:28:c3:f8:66:89:b2:dc:f3:04:fb:9b:78:
0a:ef:ba:d5:2e:36:17:2e:9d:b5:7d:0e:27:29:d5:
3e:67:71:98:0d:14:d7:4f:e8:a3:fe:89:f2:21:b3:
b8:3d:ab:ad:07:a6:37:12:1c:e3:17:12:55:ef:c0:
e4:bc:30:66:1f:9d:71:a8:0f:e5:94:03:39:ba:de:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:D2:D5:35:04:23:7D:5B:0D:D0:44:6D:57:78:8C:D6:ED:0D:53
X509v3 Authority Key Identifier:
keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e33392e3233322e302f32322d3232203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.232.0/22
Signature Algorithm: sha256WithRSAEncryption
28:cb:25:d9:b5:27:95:e2:a4:38:b7:12:89:3b:26:e8:fe:f7:
b2:da:95:ca:88:d2:7f:8e:0f:52:b8:74:23:57:9a:50:4d:47:
2f:6a:af:61:3c:9e:9a:d8:0f:10:ca:13:bc:1c:cc:5c:92:fb:
6a:18:a6:6e:2c:58:3c:2c:02:0c:3e:3c:80:41:42:6f:cd:32:
f2:ba:b4:12:29:e2:87:f3:67:f6:c3:18:0a:eb:c9:db:8d:87:
14:0c:c0:42:7f:7f:51:24:9e:7b:82:ef:34:43:88:5b:b0:36:
7e:3b:ad:42:b5:e9:eb:dc:30:be:5a:58:ec:ca:ed:1a:67:c2:
49:1c:a1:56:c6:6c:2b:b4:1d:66:db:06:2b:f4:23:29:49:8a:
63:c2:60:81:0f:f3:6d:e6:8e:86:03:5b:33:0d:4e:ed:5a:7f:
3d:c1:3a:19:1e:bd:15:27:92:7c:6d:0d:13:28:15:0d:3e:8c:
39:b5:4f:bf:49:c0:f2:85:65:e9:67:15:88:33:e8:fe:7c:c0:
ef:3b:54:bf:c4:87:43:99:01:9c:29:e3:4c:f9:ba:9e:70:72:
9c:b9:cd:c5:e2:22:df:af:5a:1a:c7:f3:84:8a:c4:4e:60:77:
a6:dd:3f:6a:c4:48:71:89:8e:da:9c:04:09:ff:4e:aa:f9:d3:
59:ed:1b:fe
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUGi1OAb6KMdykIgmbxIeQrZ1ZSuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlGMTUxMTY5RUQ3RTVGMUI5MEQxMEREQzU5OTNGRUUx
QjYyMTkyOTAeFw0yNjAxMjAwMjAyMTRaFw0yNzAxMTkwMjA3MTRaMDMxMTAvBgNV
BAMTKEQ4MDBEMkQ1MzUwNDIzN0Q1QjBERDA0NDZENTc3ODhDRDZFRDBENTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKdgKJ/H/fW3iHnN8zFVSUoJT
5f0pj4+hrCo7sN3wBtX5f2hfOgnD9oIHY5KjfhBsxR4DgXhcsMNN/EYPFQrefJrO
Sm10PK63myWCvl7/wPk4l4C/n1GY/jvz/MgJ4Pvomh0AQp/DI1CvVxmQGymZ3eqZ
RXORGYXisLBR8ZmadOHb7kyp9+j8l3nlZEfa5bs5Mw1CllsnZVelAYSxAgZFIVJQ
dAOB138AbupdsH4LuScTdSloySjD+GaJstzzBPubeArvutUuNhcunbV9Dicp1T5n
cZgNFNdP6KP+ifIhs7g9q60HpjcSHOMXElXvwOS8MGYfnXGoD+WUAzm63mmFAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU2ADS1TUEI31bDdBEbVd4jNbtDVMwHwYDVR0j
BBgwFoAUefFRFp7X5fG5DRDdxZk/7htiGSkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTc4NzM5NS8wLzc5RjE1MTE2OUVEN0U1RjFCOTBEMTBEREM1OTkz
RkVFMUI2MjE5MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlGMTUxMTY5RUQ3RTVGMUI5MEQxMEREQzU5OTNGRUUxQjYyMTkyOS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5Nzg3Mzk1LzAvMzEzMDMzMmUzMzM5
MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcn6DANBgkqhkiG9w0BAQsFAAOCAQEAKMsl2bUnleKkOLcSiTsm6P73stqV
yojSf44PUrh0I1eaUE1HL2qvYTyemtgPEMoTvBzMXJL7ahimbixYPCwCDD48gEFC
b80y8rq0Einih/Nn9sMYCuvJ242HFAzAQn9/USSee4LvNEOIW7A2fjutQrXp69ww
vlpY7MrtGmfCSRyhVsZsK7QdZtsGK/QjKUmKY8JggQ/zbeaOhgNbMw1O7Vp/PcE6
GR69FSeSfG0NEygVDT6MObVPv0nA8oVl6WcViDPo/nzA7ztUv8SHQ5kBnCnjTPm6
nnBynLnNxeIi369aGsfzhIrETmB3pt0/asRIcYmO2pwECf9OqvnTWe0b/g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:14:00 2026 by rpki-client