This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa
File: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (raw, json)
Hash identifier: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=
Subject key identifier: CF:FC:A7:FC:CF:83:22:A6:58:DE:12:AC:DF:34:90:91:C2:F0:B7:E0
Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Certificate serial: 571A7A0E26AA5A59096636DC77571126C9FDD09E
Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa
Signing time: Tue 20 Jan 2026 02:25:04 +0000
ROA not before: Tue 20 Jan 2026 02:20:04 +0000
ROA not after: Tue 19 Jan 2027 02:25:04 +0000
asID: 134765
IP address blocks: 103.203.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1a:7a:0e:26:aa:5a:59:09:66:36:dc:77:57:11:26:c9:fd:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Validity
Not Before: Jan 20 02:20:04 2026 GMT
Not After : Jan 19 02:25:04 2027 GMT
Subject: CN=CFFCA7FCCF8322A658DE12ACDF349091C2F0B7E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:0a:6e:bd:e0:07:ae:fa:9a:7e:eb:65:bd:
f8:39:d5:15:b1:1f:33:9d:29:2a:64:55:94:7e:00:
8d:4f:46:16:82:fa:6e:60:d2:86:04:3c:2e:3d:48:
f7:46:dd:43:4c:09:f3:a2:ba:ad:ab:1a:8f:50:76:
eb:2d:45:ee:97:3e:13:35:98:4f:cc:f4:97:d5:42:
62:22:9a:df:af:07:9b:5c:81:03:8d:89:16:03:0c:
ae:fa:2b:ea:32:0e:fb:ee:46:bb:56:80:58:42:10:
2f:be:cd:e5:06:5f:dc:28:2c:c5:b8:9c:c9:cc:31:
66:be:25:25:86:7a:de:ea:0b:75:8b:26:36:76:a0:
29:da:99:fe:7d:75:f7:1e:d0:ab:7b:2f:3d:dd:af:
44:dd:f7:20:4f:83:2d:60:bf:f0:67:1f:2e:c9:1f:
90:e2:b8:20:0e:a4:8f:5b:3b:73:68:1a:f2:ae:3b:
45:fd:c3:da:b9:10:8f:e0:25:1e:e0:26:60:64:67:
6e:78:2d:4e:63:44:7f:52:15:d4:c0:68:c3:72:57:
9b:2f:bc:4c:7b:ab:bc:c2:7b:fb:52:cd:3d:b1:55:
4e:a3:82:97:2f:84:20:bd:5f:fe:45:c7:a8:f5:6d:
67:0e:fd:d6:86:ad:68:7a:19:f0:53:1b:0a:72:b6:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FC:A7:FC:CF:83:22:A6:58:DE:12:AC:DF:34:90:91:C2:F0:B7:E0
X509v3 Authority Key Identifier:
keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.140.0/22
Signature Algorithm: sha256WithRSAEncryption
06:7e:a9:3d:ff:2b:03:3f:70:27:67:a4:58:60:74:7a:71:d6:
49:c8:81:2d:6a:37:13:87:76:8f:e0:1a:80:68:2c:9a:90:ca:
24:62:10:c1:cd:7f:29:25:c6:6f:60:27:d1:fe:64:b8:af:2f:
fa:d8:5c:54:0c:25:43:22:a9:10:ce:d6:51:13:e0:ec:d5:1a:
53:e2:c5:f2:19:fe:a0:ab:8a:17:73:54:a9:e5:71:41:d1:9d:
27:ce:80:bf:72:92:bb:b8:7a:43:76:8c:27:2d:5f:cd:f5:05:
c4:0a:ca:fb:29:31:86:d0:a9:7c:16:1d:41:17:ab:29:49:73:
31:83:8c:9e:a2:28:77:c9:6d:a6:d6:88:bc:e4:70:fd:40:a7:
b7:19:99:fe:d9:d1:e3:e3:60:f3:e0:d2:f2:8e:da:70:d9:fb:
6c:71:09:aa:14:b4:23:9c:8d:3e:9c:d5:70:5d:26:e8:a7:d3:
6d:a8:00:ff:2a:25:f6:b6:d5:0e:f2:f8:c4:7f:f5:2d:02:32:
e5:ba:fc:2f:2b:a5:af:50:25:0c:08:2d:5e:fc:20:89:cb:5e:
1b:56:d7:60:8e:92:15:6e:ec:51:4f:f3:3c:01:d5:16:6b:06:
ae:33:20:b1:6d:d6:f1:9a:ae:fe:55:e3:13:65:78:06:85:9e:
99:fe:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:47 2026 by rpki-client