This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/3130332e32332e382e302f32322d3232203d3e20313334373635.roa
File: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (raw, json)
Hash identifier: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=
Subject key identifier: 9F:1E:06:2D:11:00:F4:53:E8:4E:C1:57:2C:BB:5D:DA:E1:58:84:DE
Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Certificate serial: 7C9E4F4DF333B53DF6CC9DDA157A65908E45A1A9
Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/3130332e32332e382e302f32322d3232203d3e20313334373635.roa
Signing time: Tue 20 Jan 2026 02:25:04 +0000
ROA not before: Tue 20 Jan 2026 02:20:04 +0000
ROA not after: Tue 19 Jan 2027 02:25:04 +0000
asID: 134765
IP address blocks: 103.23.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:9e:4f:4d:f3:33:b5:3d:f6:cc:9d:da:15:7a:65:90:8e:45:a1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Validity
Not Before: Jan 20 02:20:04 2026 GMT
Not After : Jan 19 02:25:04 2027 GMT
Subject: CN=9F1E062D1100F453E84EC1572CBB5DDAE15884DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:74:71:f7:24:15:3b:be:5f:04:28:54:b5:
5a:e2:8f:5d:7e:6f:e5:f8:88:d1:45:e9:69:3a:58:
ea:27:a3:0a:06:4d:58:c7:72:65:78:14:d2:d4:14:
34:ea:33:52:b6:5b:90:da:72:2c:df:7a:c2:a1:41:
30:c9:22:f0:7a:fe:a0:b7:38:3f:05:b5:e4:49:03:
b0:a0:27:58:b1:28:74:b6:4e:1a:55:8b:a0:c9:74:
80:53:4a:61:bd:23:b7:45:ce:32:bc:8d:28:ce:02:
25:c5:1c:75:75:14:7a:f1:93:e6:80:06:f0:f7:51:
55:f3:30:53:0a:d6:f8:f6:90:64:45:b0:7b:84:5d:
b1:02:1f:f0:05:7a:50:48:9e:e5:04:23:f8:c9:9d:
e3:7a:64:53:5a:37:a9:23:2a:39:5d:23:b5:65:28:
69:c1:0c:8b:08:98:c5:6c:ae:a8:ef:5b:6d:b2:aa:
30:20:9f:e7:f9:8b:78:8c:66:f9:42:2e:e4:8c:6e:
06:9a:3c:9c:69:4a:94:e3:0a:31:02:90:84:72:c0:
0c:16:2c:08:ec:17:29:6b:5b:72:dd:29:67:a2:bb:
6a:3a:78:56:17:0d:3d:3f:4d:84:32:cf:54:cb:6f:
3c:37:d0:9d:35:cb:3d:fd:f7:4e:c8:e7:86:d9:60:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:06:2D:11:00:F4:53:E8:4E:C1:57:2C:BB:5D:DA:E1:58:84:DE
X509v3 Authority Key Identifier:
keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/3130332e32332e382e302f32322d3232203d3e20313334373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.8.0/22
Signature Algorithm: sha256WithRSAEncryption
79:c4:69:85:fa:f0:8f:35:00:67:d3:8f:df:f7:e2:08:bf:c1:
d6:f8:6f:b3:23:5f:72:a3:c7:28:60:62:4f:f6:7e:b0:e6:90:
b7:a9:c1:cf:18:0b:0b:76:d4:5b:6c:a5:7b:61:fc:f5:1a:41:
97:66:88:9c:ee:01:84:1e:56:68:74:97:a7:b8:cd:a1:2b:c3:
b8:81:15:02:41:3f:ba:90:af:a9:58:59:f1:65:b3:6e:9a:ea:
a8:97:fa:56:54:08:d5:d6:f1:66:77:25:95:9b:c4:23:62:ee:
a3:fc:3d:fe:c4:51:5a:84:ff:e2:0c:91:fc:d4:57:b2:75:f1:
e2:34:e3:f3:12:6f:1c:ac:e3:35:4a:8f:d0:91:c7:b5:6f:6f:
ca:c4:2b:7a:1c:b3:48:2f:a3:07:5d:3f:dc:bb:2d:af:4f:51:
3a:da:42:61:75:46:3f:82:88:42:13:ee:a2:53:95:bf:2d:6e:
1b:81:a5:bd:b4:31:03:ab:8f:fa:3c:7f:1b:f5:63:31:2a:b8:
8e:b5:ac:3f:78:6b:cd:0b:e1:2f:ac:84:2d:0d:10:ba:3c:ca:
c2:13:9b:ad:49:17:6d:12:c3:e7:be:9e:06:3c:3b:dd:28:a1:
a3:a3:d9:24:6f:9a:c8:2b:86:ec:cf:ab:57:1c:ea:53:6d:a2:
7b:26:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:51 2026 by rpki-client