This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e34392e37362e302f32322d3234203d3e203337393633.roa
File: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=
Subject key identifier: 44:EF:D6:FC:33:DC:C5:7D:2B:D8:3F:90:AD:90:C5:A6:22:82:80:11
Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial: 563F6FC475D9CD0292C1AB5E04095338AA43E179
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e34392e37362e302f32322d3234203d3e203337393633.roa
Signing time: Tue 20 Jan 2026 02:19:11 +0000
ROA not before: Tue 20 Jan 2026 02:14:11 +0000
ROA not after: Tue 19 Jan 2027 02:19:11 +0000
asID: 37963
IP address blocks: 103.49.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:3f:6f:c4:75:d9:cd:02:92:c1:ab:5e:04:09:53:38:aa:43:e1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Validity
Not Before: Jan 20 02:14:11 2026 GMT
Not After : Jan 19 02:19:11 2027 GMT
Subject: CN=44EFD6FC33DCC57D2BD83F90AD90C5A622828011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:c6:14:b1:97:8f:7b:b3:fc:b9:8b:8f:94:
a8:03:ce:74:7a:12:42:c6:77:13:2e:6a:20:48:23:
b3:6c:48:a2:53:67:1a:ba:b6:59:02:97:49:dd:6b:
5d:13:61:29:16:52:46:67:4a:78:e5:b0:ee:ce:8c:
f0:73:0d:ec:95:04:cf:fd:73:e5:b2:a1:54:c5:76:
72:c8:ec:2e:61:d3:c9:97:60:93:1f:55:ee:5f:66:
97:8c:14:14:ed:51:e0:5c:67:ad:64:dc:0e:4f:c0:
a6:82:86:ee:30:b5:f5:ef:96:b5:02:f7:84:30:fe:
75:b3:3b:23:e6:bc:f1:a8:01:59:d8:10:97:5a:6a:
84:85:da:25:fa:17:34:10:c7:56:77:13:00:a2:2a:
8c:8a:7e:fe:72:b8:8a:b6:6b:c4:b4:2c:f3:8d:d7:
79:6f:3e:5a:bb:4a:f4:a9:c6:a2:b8:1b:7e:d4:db:
57:fd:df:d9:1e:26:ac:08:71:62:7b:58:29:44:9e:
0f:dc:76:f5:50:b9:28:70:43:7c:6b:44:d2:13:0a:
87:7b:06:cf:4b:f2:a3:ce:ef:ce:44:0f:cb:20:ea:
59:15:1a:fd:6b:b1:97:a8:e8:cf:44:db:5a:f1:26:
fe:00:25:a6:4e:38:6e:87:20:bc:36:7e:b4:e6:e9:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:D6:FC:33:DC:C5:7D:2B:D8:3F:90:AD:90:C5:A6:22:82:80:11
X509v3 Authority Key Identifier:
keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e34392e37362e302f32322d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.76.0/22
Signature Algorithm: sha256WithRSAEncryption
56:33:f0:ab:23:03:77:b1:98:42:d8:e7:74:5b:df:80:6d:87:
0a:f1:cf:af:0a:19:c0:d7:60:1d:ae:55:fe:ce:cd:0d:4e:a0:
9a:92:1c:b9:1b:37:fb:5a:3c:98:d9:07:c5:ef:ea:78:88:73:
92:36:8c:9b:3e:dc:fe:49:c2:96:55:bc:43:8f:d8:48:3a:50:
2c:17:8b:9a:57:08:9c:8d:5f:41:24:91:c1:96:0a:30:c6:30:
f6:b6:da:0a:94:e0:b6:11:54:5c:38:4e:2d:44:98:67:33:50:
af:79:e5:5e:48:dc:08:26:80:d1:63:7c:4d:1c:51:bd:f9:f2:
3c:79:50:52:a4:53:3d:40:67:0f:5e:17:29:a5:4b:c8:9b:ff:
be:bf:b9:b1:14:a7:0f:37:a4:33:29:82:72:5c:9a:82:fa:64:
6f:ce:16:30:b0:93:ff:80:a0:65:ae:73:93:e5:db:23:19:c5:
a2:2a:58:6c:1c:3e:9b:1d:d0:eb:f5:65:bc:00:b1:33:83:42:
d9:38:a4:83:c2:ad:3d:96:5a:ec:16:0b:3a:e5:d6:62:b4:f1:
85:15:fc:8e:95:b1:ec:92:78:28:7c:ca:aa:60:c4:03:b0:ba:
88:a9:0b:5b:e4:e3:a4:71:dc:af:1b:c9:25:fe:ac:69:6c:1b:
a7:d2:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:32 2026 by rpki-client