This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa
File: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (raw, json)
Hash identifier: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=
Subject key identifier: D0:49:DE:04:C7:8F:31:BE:01:A2:8C:38:F2:2D:79:28:DD:66:17:48
Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial: 585406806A2DF5B66BDF5D05B12B51DF1581B901
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa
Signing time: Tue 20 Jan 2026 02:07:15 +0000
ROA not before: Tue 20 Jan 2026 02:02:15 +0000
ROA not after: Tue 19 Jan 2027 02:07:15 +0000
asID: 41717
IP address blocks: 103.116.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:54:06:80:6a:2d:f5:b6:6b:df:5d:05:b1:2b:51:df:15:81:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Validity
Not Before: Jan 20 02:02:15 2026 GMT
Not After : Jan 19 02:07:15 2027 GMT
Subject: CN=D049DE04C78F31BE01A28C38F22D7928DD661748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:2a:3b:4d:78:be:27:2e:cb:9d:53:4c:83:
e4:4c:14:56:e0:77:16:48:82:5b:0c:3c:51:ef:69:
46:f1:c8:cd:2c:ed:29:4a:be:5d:64:54:bc:1a:c9:
40:bc:a6:1f:c6:35:1a:e2:fd:2e:86:91:dc:fc:f9:
3d:99:05:49:8f:2a:7b:67:8e:04:31:e6:e2:eb:42:
05:f3:a7:2a:2f:ba:fc:99:95:b5:fe:ca:32:a8:ed:
00:84:2e:a0:32:fc:aa:0e:a3:49:1f:29:7f:70:a5:
22:51:0e:48:91:30:60:97:39:ca:2a:d0:f7:aa:68:
5c:ee:ae:b9:b3:b5:8a:53:e0:aa:45:db:e6:8a:8e:
6c:57:7e:93:ce:36:9d:dd:f9:49:76:a9:cc:04:20:
ce:b1:95:36:8f:5b:9f:a0:18:84:49:53:25:c0:7c:
61:5c:9e:ff:43:7e:fb:37:2f:21:f8:78:60:ac:81:
db:2c:4f:9d:47:79:3d:a0:19:92:47:cd:d0:fe:46:
39:74:1c:9e:28:3f:3e:46:19:c1:15:ec:90:c3:b8:
1c:22:88:4d:96:fa:68:a9:c0:7f:2e:cc:a0:1a:6c:
e7:df:15:de:95:17:2d:0e:dd:7f:18:df:54:1b:fd:
2e:e8:33:48:f7:db:cf:8c:ce:d6:d1:b1:3f:a4:84:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:DE:04:C7:8F:31:BE:01:A2:8C:38:F2:2D:79:28:DD:66:17:48
X509v3 Authority Key Identifier:
keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.149.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:15:b8:da:6e:7d:98:ca:42:c4:9d:b0:57:60:88:d5:ba:e1:
88:73:ed:ba:06:e8:e0:8e:d4:f4:72:a3:75:a8:d6:e3:ce:3a:
d1:e2:aa:ff:88:5b:73:fa:d4:93:04:5d:5e:e4:46:cd:ff:5f:
83:25:15:54:66:2f:8e:c6:66:5c:50:aa:b3:09:48:5b:c0:69:
da:c1:c3:d9:88:24:4f:d7:7f:bc:83:11:75:77:b0:ee:3b:c4:
15:25:af:de:62:c8:4a:32:a4:4b:dd:52:91:05:37:54:d5:ae:
ff:3f:37:de:10:51:d7:5e:c2:5c:06:c8:e3:af:d3:94:b0:aa:
64:17:37:ad:e8:bc:7f:d9:e2:77:ec:c8:ea:04:9c:fe:f4:83:
b0:30:5f:89:52:cb:a0:99:25:e4:c9:a0:62:8c:6c:0d:e3:cd:
b8:73:c5:ea:f7:92:6b:22:1c:22:f1:88:50:89:a0:fb:17:64:
76:7d:42:db:b3:7e:5c:23:f0:c3:19:ec:74:a4:3d:ce:3a:0e:
0c:bf:11:76:3d:72:0a:bc:76:31:40:5f:51:dc:a9:6f:57:d1:
a7:c3:7b:8b:4c:af:b6:96:fd:a7:ec:7b:6d:32:10:71:e3:4f:
2b:eb:97:82:34:43:1a:39:8c:49:07:56:b1:c0:55:c1:2c:a3:
bd:54:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:27:45 2026 by rpki-client