This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa
File: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (raw, json)
Hash identifier: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=
Subject key identifier: 6D:CD:0C:5E:5E:47:18:2B:F4:84:44:24:47:87:C1:23:E2:AF:58:3D
Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial: 31A01D5F9C46C73362009920832661426129D679
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa
Signing time: Tue 20 Jan 2026 02:07:15 +0000
ROA not before: Tue 20 Jan 2026 02:02:15 +0000
ROA not after: Tue 19 Jan 2027 02:07:15 +0000
asID: 41717
IP address blocks: 103.116.151.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a0:1d:5f:9c:46:c7:33:62:00:99:20:83:26:61:42:61:29:d6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Validity
Not Before: Jan 20 02:02:15 2026 GMT
Not After : Jan 19 02:07:15 2027 GMT
Subject: CN=6DCD0C5E5E47182BF48444244787C123E2AF583D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:e0:56:91:54:6a:b5:37:b9:52:3c:c7:88:
b1:3c:fd:72:aa:aa:8a:c6:7c:8b:13:7c:e1:35:e0:
5a:cc:8c:cf:c8:7d:c8:44:e2:52:fa:70:21:bc:87:
68:de:a8:0c:ca:85:50:c6:85:20:f5:25:6c:c1:ef:
74:4f:7e:4c:54:5a:a3:b7:34:80:68:11:ca:9c:37:
7e:d0:3e:19:6f:d7:f3:e2:0b:cd:d3:93:03:e1:48:
00:e9:ed:75:9d:09:27:30:23:2f:5d:bb:0a:31:5e:
79:89:03:5f:d6:37:18:ff:3c:97:6e:3b:31:3f:cf:
41:13:72:ec:ec:1e:91:c4:1c:04:e9:52:52:cb:d7:
d7:d8:1c:b4:ef:29:1a:a1:bf:3b:ae:bd:70:34:70:
7f:3e:b8:68:5e:df:eb:ab:d6:90:51:57:5a:e1:40:
b9:9e:46:76:4b:8c:90:a4:87:8f:9b:d1:80:7c:12:
55:6f:5c:6b:d2:94:68:b2:52:1f:b2:61:a2:20:d6:
64:38:1f:74:2e:09:76:3f:8d:05:e0:39:f1:e8:1c:
01:ad:2a:22:f2:45:4b:36:be:eb:a0:45:ef:bf:7b:
1a:f5:8f:5f:87:a5:73:60:c1:32:21:19:6f:07:e4:
95:73:b8:1a:e3:ec:cd:52:68:7a:9a:8a:da:ea:b7:
22:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CD:0C:5E:5E:47:18:2B:F4:84:44:24:47:87:C1:23:E2:AF:58:3D
X509v3 Authority Key Identifier:
keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.151.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bb:61:0f:24:9c:6c:d5:d8:79:05:da:9e:0e:5d:df:96:6e:
a8:25:64:1f:ba:b0:ea:90:c0:8b:82:64:e7:09:66:be:53:d9:
0a:b7:31:1c:c5:30:b7:8a:b7:cf:d5:31:c5:aa:cf:8b:0d:a9:
86:ea:28:89:f1:2e:d9:1a:99:ad:c9:8c:c9:3a:0a:3a:75:2a:
90:f7:c5:42:2a:9d:67:f1:7a:0d:ad:e9:51:9d:d8:d7:0b:fa:
52:32:87:31:de:0b:6d:cd:73:bf:58:1d:89:16:d9:48:3d:e9:
8b:6f:cf:21:83:c4:3f:9d:0d:69:00:ca:e6:02:ed:8e:aa:5f:
5a:71:bb:ea:8a:74:3c:d3:c4:cb:08:4b:c8:60:70:53:f2:b8:
4f:c3:f9:6e:d1:45:42:86:67:75:dc:e6:0e:0b:a8:0f:e8:bc:
17:7a:4e:7d:a5:56:b3:0c:4f:a6:9e:3b:31:f3:ab:37:d5:01:
39:c5:49:ff:d0:3e:cc:1c:b4:cd:4c:cf:41:9e:29:e1:8e:61:
e6:a0:6c:b2:90:49:94:58:94:c8:89:fb:75:78:e5:7e:6e:98:
ef:9f:93:58:71:a0:cd:b9:df:83:a2:e7:43:ce:41:51:8d:f5:
67:4e:27:f3:7c:23:d6:b2:31:36:6e:72:cb:75:12:2f:b4:5b:
28:19:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:33:39 2026 by rpki-client