This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa
File: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (raw, json)
Hash identifier: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=
Subject key identifier: 0C:94:12:1E:4A:0C:3A:FE:01:AE:1F:DC:99:D7:FB:00:EC:D9:D8:16
Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial: 10DB0828F9003F8888CCA6592868229A2A3479C6
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa
Signing time: Tue 20 Jan 2026 02:07:16 +0000
ROA not before: Tue 20 Jan 2026 02:02:16 +0000
ROA not after: Tue 19 Jan 2027 02:07:16 +0000
asID: 41717
IP address blocks: 103.116.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:db:08:28:f9:00:3f:88:88:cc:a6:59:28:68:22:9a:2a:34:79:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Validity
Not Before: Jan 20 02:02:16 2026 GMT
Not After : Jan 19 02:07:16 2027 GMT
Subject: CN=0C94121E4A0C3AFE01AE1FDC99D7FB00ECD9D816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:dc:b2:0c:bc:3c:fc:13:0c:dc:76:e8:26:
21:5f:47:e4:13:8c:f4:04:a1:6c:fb:d9:d2:ac:23:
70:df:5a:0e:47:80:aa:fa:c3:38:ab:5a:b4:1b:2c:
83:e2:77:4d:69:6d:1f:d9:54:81:b3:23:c0:52:90:
df:24:28:25:3e:7d:b7:ec:d0:ad:ee:ec:c2:88:d8:
e7:36:13:22:48:2b:b9:09:d4:29:10:66:dc:90:7e:
e3:4f:1c:73:25:53:f5:17:c6:cc:74:a9:2e:da:46:
2c:cd:a6:ea:f5:6a:43:13:3c:33:94:84:3f:71:ec:
08:12:56:5f:7a:b9:a4:29:7b:21:58:c2:27:72:f5:
6e:69:f3:ce:76:f5:a3:24:ca:0d:76:91:69:e1:4c:
a8:6a:94:17:75:4c:6b:bf:2d:c1:8c:a8:7e:c1:04:
42:86:d0:b6:13:7d:92:a4:c9:c3:96:b9:39:f3:53:
73:b8:d4:ae:7e:1a:39:91:4f:82:d0:06:4d:0c:51:
75:2b:59:bc:e9:38:23:ca:ed:77:90:31:f3:91:87:
91:9b:b9:00:18:1d:57:22:39:d7:9e:40:f2:98:cb:
ce:4d:bf:81:dc:f9:11:f7:da:ee:45:e5:f2:d1:c9:
04:d8:82:fe:63:a8:6e:6f:3e:15:7e:5d:0d:ae:f0:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:12:1E:4A:0C:3A:FE:01:AE:1F:DC:99:D7:FB:00:EC:D9:D8:16
X509v3 Authority Key Identifier:
keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.150.0/24
Signature Algorithm: sha256WithRSAEncryption
21:51:29:74:b9:d9:c9:00:8b:74:15:0b:f1:83:0e:cc:e4:0b:
05:da:e9:1c:3f:08:3d:cf:04:21:95:60:4c:2a:55:b5:e0:c9:
c6:26:b8:2b:ed:5b:71:63:35:ae:f3:90:cd:74:57:cc:d3:63:
a7:da:b7:5e:77:2a:cf:f4:f4:c6:42:fb:b0:c4:70:b7:6a:3a:
33:cd:e6:31:c3:3e:bd:3f:39:4b:22:a6:98:75:e1:6f:22:c2:
f8:de:cd:e6:ce:14:e7:39:92:bc:32:17:ff:30:0b:50:42:39:
47:9b:cb:9f:78:1d:ae:27:b0:78:90:67:c7:18:af:72:8b:c9:
4f:17:eb:45:29:1f:61:69:12:e0:a8:be:7d:06:92:8e:4a:16:
8b:ef:00:17:59:ed:05:58:59:44:b9:60:8e:e2:41:64:95:e1:
66:95:1e:20:94:a5:07:7e:a8:1b:e6:9c:43:05:1d:e0:b4:55:
2f:3a:04:e8:e1:53:33:26:e9:59:c7:ae:a2:8a:e7:56:6f:4b:
5a:54:8d:3d:c9:44:6f:1e:24:3f:0d:cd:2c:03:48:ed:c0:34:
2d:ff:0b:a0:b8:a7:f2:d7:2e:be:dc:cf:2b:01:a3:63:d9:54:
e9:10:a9:b5:9e:1f:aa:45:1a:c6:46:84:c9:26:27:20:38:88:
d4:21:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:27:48 2026 by rpki-client