This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34302e3234302e302f32302d3230203d3e2034383136.roa
File: 3130332e34302e3234302e302f32302d3230203d3e2034383136.roa (raw, json)
Hash identifier: QLiibejGZY+s0lzjseXtBPtD7YiiDNXaqGMCZ9IkqtI=
Subject key identifier: 4C:32:CF:80:9B:55:B9:84:12:6C:09:07:19:DB:DB:56:C3:DC:EE:C0
Certificate issuer: /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial: 3D7BF6BA9A5F9AC1D91899189DC17A7FAD7FB3E6
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34302e3234302e302f32302d3230203d3e2034383136.roa
Signing time: Tue 20 Jan 2026 02:07:14 +0000
ROA not before: Tue 20 Jan 2026 02:02:14 +0000
ROA not after: Tue 19 Jan 2027 02:07:14 +0000
asID: 4816
IP address blocks: 103.40.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 18:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:7b:f6:ba:9a:5f:9a:c1:d9:18:99:18:9d:c1:7a:7f:ad:7f:b3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Validity
Not Before: Jan 20 02:02:14 2026 GMT
Not After : Jan 19 02:07:14 2027 GMT
Subject: CN=4C32CF809B55B984126C090719DBDB56C3DCEEC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:d1:15:05:56:45:43:14:69:ab:ff:76:81:
36:71:3c:b4:3e:b8:7d:88:7b:ea:bd:bd:f8:77:7e:
4f:23:6e:33:b8:ea:f8:bd:87:68:41:b2:b5:23:47:
d5:fe:81:fc:a2:c1:6d:fe:9c:c7:3c:83:36:ec:08:
a9:25:43:82:f2:36:bd:d4:da:9b:68:2e:2a:46:c8:
75:50:1d:7d:f0:96:32:f2:83:5b:35:64:50:9f:ec:
52:fd:68:46:ad:0e:89:14:5f:4a:55:05:f2:3c:89:
92:5b:ba:f1:d6:3d:2b:58:c5:e1:51:9f:76:19:4d:
7a:98:be:e3:77:94:04:fc:bb:8c:29:7f:ad:89:81:
c7:44:41:32:21:e1:2d:83:1c:e6:0a:b4:63:1a:f0:
de:08:09:68:b2:10:bd:39:e6:83:e2:13:02:ea:63:
a6:53:3f:27:cb:9b:17:8c:e3:83:b2:4e:ae:79:a6:
b9:66:14:38:7d:b4:db:6e:23:b6:d2:ff:40:5e:04:
94:06:dd:b9:39:fd:56:ca:38:0a:45:0e:cf:cd:e9:
c9:8f:3d:65:c6:8c:bc:70:a3:b3:9a:d1:d0:0a:5a:
66:25:3e:07:27:7d:79:7e:e9:a7:df:46:7c:c4:dc:
b7:14:09:dd:51:fa:f2:53:a8:22:97:60:07:84:39:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:32:CF:80:9B:55:B9:84:12:6C:09:07:19:DB:DB:56:C3:DC:EE:C0
X509v3 Authority Key Identifier:
keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34302e3234302e302f32302d3230203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.40.240.0/20
Signature Algorithm: sha256WithRSAEncryption
07:f3:f4:91:2b:a8:40:2a:85:19:ef:3d:a3:8f:a2:89:73:89:
00:61:ae:d0:34:70:a4:1b:32:25:98:5f:f2:3b:79:36:b2:bb:
3f:13:e5:71:3c:08:90:94:03:ef:c9:03:cc:e8:68:da:de:c5:
33:cb:09:44:55:fc:f3:d7:8b:6d:c4:e1:73:6d:f6:61:e4:02:
b1:32:72:6f:2c:fb:fd:cb:13:32:1e:f8:7d:6c:c8:7a:f4:2a:
d7:62:b2:d5:59:84:54:cc:22:a5:75:30:4a:ee:b5:4e:70:6c:
0d:81:61:a4:cb:aa:db:66:0c:83:cb:44:92:20:c1:1d:9f:0f:
2b:1a:2f:f6:ec:f0:f5:2c:0b:72:f8:1a:b0:e2:9b:6f:7b:04:
22:dc:bb:e0:45:bf:66:cd:35:03:77:d6:61:b0:37:63:7c:d0:
10:e0:34:9e:c5:25:1b:f6:82:8e:11:a2:40:1b:b9:02:77:9d:
32:7d:2a:41:70:64:90:7f:86:86:d3:36:69:51:12:70:73:18:
58:76:e0:f9:39:e5:9d:55:b2:6d:4a:de:ef:df:e2:48:93:a6:
b9:fc:c0:1d:c2:e9:c2:7a:e0:6c:50:7d:48:b3:e7:61:9e:fe:
d3:97:56:59:0c:4d:61:b4:05:c4:3c:19:85:4d:30:89:7a:88:
ea:0d:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:46 2026 by rpki-client