This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548419074/0/3130332e3139362e3230342e302f32322d3234203d3e20313332333639.roa
File: 3130332e3139362e3230342e302f32322d3234203d3e20313332333639.roa (raw, json)
Hash identifier: MGSi22TL/Oeas781w/pWLL2Lhy55kBcyFcyS9bZmKrU=
Subject key identifier: 0D:34:CC:BB:D3:CD:27:8C:C5:32:E0:8D:DD:93:87:49:37:B9:95:44
Certificate issuer: /CN=7BE06B4744FCF211D039415BB8B17941EC767358
Certificate serial: 2732D5AAF4270E4FBE9D05942B7C41AD8CD7B904
Authority key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/3130332e3139362e3230342e302f32322d3234203d3e20313332333639.roa
Signing time: Tue 20 Jan 2026 02:25:03 +0000
ROA not before: Tue 20 Jan 2026 02:20:03 +0000
ROA not after: Tue 19 Jan 2027 02:25:03 +0000
asID: 132369
IP address blocks: 103.196.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:32:d5:aa:f4:27:0e:4f:be:9d:05:94:2b:7c:41:ad:8c:d7:b9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BE06B4744FCF211D039415BB8B17941EC767358
Validity
Not Before: Jan 20 02:20:03 2026 GMT
Not After : Jan 19 02:25:03 2027 GMT
Subject: CN=0D34CCBBD3CD278CC532E08DDD93874937B99544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:0a:e4:e3:3f:f7:50:64:b7:22:67:45:bc:
3b:f4:1b:0f:6d:9a:d1:93:5b:76:67:02:d8:aa:c2:
d9:56:67:ce:e1:d5:21:d5:1d:14:46:f6:8e:00:f2:
91:db:ea:9f:20:56:a7:ee:4e:93:18:f4:d9:01:ae:
42:66:5c:13:54:71:47:13:a5:5a:fb:79:5c:4d:36:
a3:e8:88:68:18:91:7c:44:70:07:49:14:c5:ea:e0:
59:7c:79:4d:74:e7:36:e5:8f:cb:c6:47:a6:3f:2f:
2f:95:fa:4b:dc:f8:9f:3d:a7:b6:69:66:cd:d8:3a:
05:e4:c6:99:a7:5a:f6:4f:13:2b:41:87:42:1a:21:
34:25:60:93:57:d6:9d:f2:40:5a:7c:81:ab:1c:16:
81:1c:2b:c4:b6:fd:f6:76:61:23:23:07:02:6d:32:
92:25:30:81:02:7e:e1:c7:c4:88:fe:38:38:46:55:
84:39:a5:f8:8c:74:50:e1:f4:22:24:a2:28:86:fe:
11:f0:42:f3:81:3d:4a:19:25:7c:ad:fa:92:2c:10:
b0:1b:f3:5f:51:76:b3:22:10:5a:a2:89:9b:b4:fd:
72:25:c8:ed:b7:a9:04:d4:c1:b2:d1:67:62:36:89:
74:0f:02:ac:ef:80:d8:f5:03:ef:9c:98:82:33:0c:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:34:CC:BB:D3:CD:27:8C:C5:32:E0:8D:DD:93:87:49:37:B9:95:44
X509v3 Authority Key Identifier:
keyid:7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/3130332e3139362e3230342e302f32322d3234203d3e20313332333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.204.0/22
Signature Algorithm: sha256WithRSAEncryption
68:6f:6b:6f:e2:67:a0:cd:4b:16:d0:d5:af:d4:8a:7e:2e:95:
65:10:45:67:fd:7f:4d:b9:8d:85:8c:96:d5:ff:8d:de:df:7e:
0b:3c:4c:c5:76:c6:71:c3:fd:a7:b1:f4:8b:cb:58:6c:e0:9b:
e5:6e:00:67:47:8b:3a:4a:fb:08:c8:08:c4:3b:57:34:3c:37:
bd:92:9c:cc:b6:4c:38:29:73:77:e0:d8:81:f8:82:99:21:b7:
b7:1f:6c:69:4a:b5:6b:56:32:ff:f6:2e:8a:f0:a0:31:28:cb:
31:91:24:cb:a2:4a:74:97:9a:a6:17:b4:18:41:0a:60:cb:d5:
97:63:fb:66:39:c4:f3:9e:5e:fd:fe:93:cd:2d:04:18:6d:c8:
7d:74:57:a4:1a:b8:12:7b:52:96:66:08:c0:fd:c6:f2:79:67:
e7:70:85:67:d5:cc:f5:c6:50:09:a1:56:8d:e5:dd:8e:d6:8a:
72:a9:f7:de:51:b3:2c:05:b0:d5:3c:e7:7c:49:ea:f1:cf:cf:
53:b5:87:74:e3:df:73:48:4a:b6:bf:42:2d:11:0a:05:52:dd:
dd:15:eb:e3:7c:cf:08:c2:7d:33:c9:8d:f5:48:68:32:21:72:
57:81:af:bd:e1:a0:6b:ef:34:90:17:52:7b:51:76:ce:05:65:
db:21:49:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:07 2026 by rpki-client