This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230382e302f32322d3234203d3e20313334313430.roa
File: 3130332e3131382e3230382e302f32322d3234203d3e20313334313430.roa (raw, json)
Hash identifier: lxKUiGZVtgLjTzP+eJTtWg5bFu9vcRb0x3509nWMBgs=
Subject key identifier: 5F:0F:7F:CF:D9:52:5B:34:24:B0:F2:FF:47:97:47:41:FE:10:B3:BA
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 270F68504793B52FA6976B4B2FD53C89F20661B0
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230382e302f32322d3234203d3e20313334313430.roa
Signing time: Fri 23 Jan 2026 15:38:49 +0000
ROA not before: Fri 23 Jan 2026 15:33:49 +0000
ROA not after: Fri 22 Jan 2027 15:38:49 +0000
asID: 134140
IP address blocks: 103.118.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:0f:68:50:47:93:b5:2f:a6:97:6b:4b:2f:d5:3c:89:f2:06:61:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 23 15:33:49 2026 GMT
Not After : Jan 22 15:38:49 2027 GMT
Subject: CN=5F0F7FCFD9525B3424B0F2FF47974741FE10B3BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:01:9c:32:3e:2b:20:43:0c:d1:61:5a:6d:
e9:71:2f:32:00:d7:f3:97:2d:c2:8c:6b:67:7e:01:
65:88:89:24:ff:8f:2d:53:1e:2b:ff:dc:38:a6:c9:
0c:be:08:bf:f6:66:60:fc:a6:d7:fd:3f:eb:71:92:
77:17:85:dd:5e:3f:ae:0a:54:5a:e8:7b:54:c2:02:
2a:f8:a0:c1:a7:e0:74:9e:5f:b8:dd:40:1f:fe:7a:
14:d0:d9:73:24:1d:d1:81:b1:9d:bb:09:48:86:f0:
be:8f:ec:eb:eb:08:9c:d7:66:c0:31:42:53:ec:d0:
55:3d:83:15:c7:5e:83:a5:18:1c:70:85:3e:71:0d:
db:ae:65:b8:d8:b5:77:3d:91:69:72:c4:8a:43:af:
10:b9:4c:8b:b7:0e:7a:46:9c:f4:97:e0:04:f3:d3:
85:6c:19:42:0f:29:0c:38:6a:58:2d:42:e7:ec:46:
48:47:d5:c7:41:bb:c3:51:d1:1b:80:69:58:bf:a1:
3e:8a:4e:92:53:87:64:d9:93:1a:3f:3c:cd:17:30:
40:98:ec:d7:e5:3f:68:04:ea:73:c1:0c:1c:3e:f0:
0e:33:ab:ac:62:ec:9d:74:71:55:dd:7a:a6:c2:f3:
f2:f3:60:9b:a6:89:34:7d:46:2c:2e:a0:3b:fd:e5:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:7F:CF:D9:52:5B:34:24:B0:F2:FF:47:97:47:41:FE:10:B3:BA
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230382e302f32322d3234203d3e20313334313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.208.0/22
Signature Algorithm: sha256WithRSAEncryption
16:1c:b4:11:e2:c2:eb:19:cb:7f:8e:3b:7b:88:63:6f:08:cb:
38:35:a8:89:71:f3:41:76:c4:42:5b:0f:71:1c:99:d2:8d:3e:
1f:04:0e:1e:14:61:89:00:57:0e:81:3a:02:11:b7:5b:14:45:
80:18:cf:30:bb:06:bb:6f:ce:34:ff:4c:7e:59:f8:e6:66:c3:
ba:b8:cd:d9:07:56:0c:63:d9:87:ff:1b:2c:cc:53:5e:0e:e1:
87:87:50:67:b5:1b:38:60:c3:b9:87:a0:9e:2c:49:cd:ae:25:
e6:7a:f4:f4:cf:44:3c:04:f7:60:74:0b:85:29:3c:43:ed:db:
f6:cc:d5:09:89:b1:ea:c0:39:3e:de:30:f0:27:1b:ab:bc:58:
0f:15:6e:e4:ad:45:ad:70:a2:75:cf:a2:4a:81:31:73:32:9b:
ed:1c:70:e9:5c:32:c2:81:45:e7:1b:22:76:de:2a:59:0a:29:
92:de:4b:ff:af:8a:1a:e8:1e:f8:52:a3:ac:12:15:e6:ee:63:
6e:22:ad:61:65:65:31:ca:51:64:38:bb:3a:32:48:51:ff:8a:
c4:69:ed:27:87:52:7b:12:0f:4d:2c:1c:76:e3:3b:3a:12:48:
fd:70:c6:97:d9:29:92:a7:0f:8b:d2:d0:e1:c3:c6:73:10:67:
e4:2a:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:11 2026 by rpki-client