This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/3130332e37332e3134342e302f32322d3234203d3e203233363530.roa
File: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (raw, json)
Hash identifier: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=
Subject key identifier: A5:94:53:19:F9:F2:5C:03:24:E8:21:99:77:AC:97:ED:8F:18:E4:97
Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52
Certificate serial: 10DB0BDA37F8EBF47B0CD6213C7C23B3182378DD
Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/3130332e37332e3134342e302f32322d3234203d3e203233363530.roa
Signing time: Tue 20 Jan 2026 02:27:12 +0000
ROA not before: Tue 20 Jan 2026 02:22:12 +0000
ROA not after: Tue 19 Jan 2027 02:27:12 +0000
asID: 23650
IP address blocks: 103.73.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:db:0b:da:37:f8:eb:f4:7b:0c:d6:21:3c:7c:23:b3:18:23:78:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52
Validity
Not Before: Jan 20 02:22:12 2026 GMT
Not After : Jan 19 02:27:12 2027 GMT
Subject: CN=A5945319F9F25C0324E8219977AC97ED8F18E497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:07:60:f6:07:0e:47:fb:a3:17:14:e0:22:
32:10:72:20:57:cc:2e:07:47:a6:26:e3:3c:a2:37:
f1:60:b4:8f:19:5f:14:dc:5e:20:25:d6:1e:67:c4:
98:1a:1f:a0:0e:24:10:98:72:1e:7b:f7:d8:de:43:
b3:2c:3f:de:33:21:22:32:5b:47:63:8f:86:d5:5d:
f0:3d:45:50:b4:34:41:5c:76:3f:90:cc:10:9b:6b:
44:60:93:ae:13:a6:c5:e0:3e:36:64:87:44:c0:86:
5a:d6:82:24:5a:88:a5:7e:3c:74:43:c8:e1:5e:a9:
23:eb:e2:6c:79:7e:aa:b4:a1:05:d6:6a:3e:97:5c:
f4:b6:7c:18:27:1e:00:ba:6c:7b:c4:ed:4a:18:ef:
51:be:77:f5:ff:e1:58:dc:ba:74:c0:dc:31:f4:3c:
a2:04:79:66:13:35:2b:cf:de:07:6c:da:f6:c1:68:
29:f4:b9:5e:35:86:8b:2a:e1:1d:80:62:cf:e4:56:
7b:b5:4c:f3:61:30:ab:e9:62:ca:51:e0:0e:a4:c5:
23:19:1c:da:80:ba:3f:98:24:fe:ea:b4:32:ff:83:
90:ed:f9:08:b6:2b:43:33:ae:91:0d:ce:7c:df:55:
9f:74:0a:42:04:03:45:fb:1d:cb:86:5a:03:c2:b5:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:94:53:19:F9:F2:5C:03:24:E8:21:99:77:AC:97:ED:8F:18:E4:97
X509v3 Authority Key Identifier:
keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/3130332e37332e3134342e302f32322d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.73.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:48:c0:12:84:53:c3:b9:e5:17:40:ad:15:f8:74:eb:f5:0e:
68:1b:eb:78:69:6a:1a:28:d6:07:42:a4:04:e0:59:47:7c:5e:
45:f0:eb:23:56:62:a7:b7:06:6b:0b:90:de:48:19:80:51:d1:
25:55:6b:5d:a4:4e:f2:43:29:0b:18:14:9e:6b:42:83:9b:37:
7b:c9:41:e8:87:93:ca:f6:19:af:2b:13:fc:a0:ef:39:94:25:
ab:bc:5d:82:32:b1:3d:bc:28:b4:e7:dc:1b:c5:dc:4f:02:60:
9c:ac:92:3f:80:36:2a:ef:91:70:59:5a:6a:c5:6f:25:a4:1b:
0b:bb:f1:aa:26:ba:ef:5f:af:2a:3a:a3:b5:51:6e:28:de:10:
47:83:2f:50:19:2e:40:c1:54:a9:6a:91:52:d6:07:47:3a:ec:
f1:97:79:9d:cc:fd:c3:85:66:4d:ce:ba:4c:60:64:f5:64:a5:
1d:7e:df:ff:67:e0:5a:df:f9:5f:48:53:34:0e:a1:04:1a:3e:
c0:e0:54:8a:40:a7:3d:ac:f6:1f:24:b7:5b:ec:c4:ea:bf:7d:
1d:b3:b7:2a:50:8c:6c:c7:e5:7a:ff:c1:70:40:bd:d8:38:30:
2e:f6:7d:ae:24:fa:b5:51:37:8d:7f:b1:b6:c0:f0:9b:50:80:
7d:37:37:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:21 2026 by rpki-client