This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313336383236.roa
File: 3130332e3131382e3231322e302f32322d3234203d3e20313336383236.roa (raw, json)
Hash identifier: kW71a5jpjBcBBLusyVVJlYZ/+M8YIIJyin86EUaApDk=
Subject key identifier: 30:AE:84:B8:70:BE:D4:31:A3:D8:41:8E:8F:01:87:FE:C2:1D:8B:07
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 4AD077C22718A407A8019EDA1813221A4424E8EE
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313336383236.roa
Signing time: Fri 23 Jan 2026 14:09:17 +0000
ROA not before: Fri 23 Jan 2026 14:04:17 +0000
ROA not after: Fri 22 Jan 2027 14:09:17 +0000
asID: 136826
IP address blocks: 103.118.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d0:77:c2:27:18:a4:07:a8:01:9e:da:18:13:22:1a:44:24:e8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 23 14:04:17 2026 GMT
Not After : Jan 22 14:09:17 2027 GMT
Subject: CN=30AE84B870BED431A3D8418E8F0187FEC21D8B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:aa:88:8c:8c:0b:57:95:47:90:d6:83:18:6c:
60:43:b8:2a:10:96:c9:4a:60:e2:58:57:ca:2f:02:
82:b3:ad:61:21:36:61:af:59:34:6d:0f:a5:5e:f9:
aa:10:44:22:ff:b7:db:2c:ab:11:27:fa:61:09:bd:
3c:78:54:7c:85:6c:f4:dd:4a:11:4c:2b:da:1b:b5:
57:3d:0c:45:95:32:06:40:cf:db:96:f1:81:be:85:
79:9c:e3:b4:a3:84:20:46:88:68:4c:5a:62:b9:5a:
d6:51:9a:62:6c:3c:a1:b1:2a:2b:e0:32:59:9e:7b:
95:9d:e0:4d:98:80:b1:e7:00:1d:46:9b:57:14:4e:
b9:6a:bf:68:3c:76:c7:d4:e8:b4:51:0a:62:c9:c9:
00:ee:34:bc:f6:9e:78:89:0f:1e:13:21:74:02:df:
d5:bb:95:ea:8b:5d:65:fb:74:63:66:dc:3a:ad:91:
18:03:aa:87:91:65:1c:fc:cc:90:32:87:7e:9c:e5:
a6:c0:7a:61:5b:cd:f8:d6:6f:b0:61:62:3c:c7:09:
ab:fb:3d:b8:d9:d8:ff:24:63:81:0d:dc:f9:85:38:
8a:45:f9:a3:d4:4d:fe:9c:fa:ca:24:86:db:0f:39:
7c:42:b4:ad:19:79:35:07:4a:f9:c9:bc:17:b6:15:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:84:B8:70:BE:D4:31:A3:D8:41:8E:8F:01:87:FE:C2:1D:8B:07
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313336383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.212.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:b0:5a:b7:43:00:85:d6:72:b8:b7:ec:fc:29:6d:ee:d6:20:
f7:e1:38:0e:70:33:53:3b:62:c3:28:1d:82:5b:5e:f3:18:bd:
3b:9d:14:93:bd:f6:c2:75:d7:68:e1:cd:b7:69:7e:9b:99:ac:
e0:42:45:aa:1c:f7:4c:d9:f4:20:b7:de:a4:39:16:e7:b1:d2:
ba:98:7a:61:55:c3:ed:01:1d:a4:0f:b8:d5:5d:db:85:79:e2:
f2:e7:3c:f4:4f:27:58:0e:dc:9e:5c:6e:b6:84:b9:0d:76:45:
e4:49:fb:49:95:d2:4d:18:c2:ae:59:96:f0:c5:be:b5:4e:ef:
6b:01:c4:58:a1:12:de:cb:f8:05:e8:59:22:db:da:90:b3:e7:
d1:01:9f:22:6b:d5:9f:74:8d:dd:dd:28:03:54:51:9d:26:51:
09:30:e6:8d:05:ca:cb:96:6b:10:8d:19:8d:a5:e5:08:4c:5e:
88:ae:11:63:6f:73:ec:d4:51:d6:be:c1:67:71:20:02:63:9d:
3f:6c:7f:5d:b0:0a:67:4f:24:b9:a5:6b:12:71:5d:6f:0f:16:
9f:60:f5:fa:a0:60:00:1b:64:cf:41:0a:05:1b:c5:a1:5a:b7:
6e:ac:d6:02:9a:3b:29:72:81:24:e8:3b:bf:88:3f:12:b3:20:
91:5f:7c:6a
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUStB3wicYpAeoAZ7aGBMiGkQk6O4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjMxNDA0MTdaFw0yNzAxMjIxNDA5MTdaMDMxMTAvBgNV
BAMTKDMwQUU4NEI4NzBCRUQ0MzFBM0Q4NDE4RThGMDE4N0ZFQzIxRDhCMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdqoiMjAtXlUeQ1oMYbGBDuCoQ
lslKYOJYV8ovAoKzrWEhNmGvWTRtD6Ve+aoQRCL/t9ssqxEn+mEJvTx4VHyFbPTd
ShFMK9obtVc9DEWVMgZAz9uW8YG+hXmc47SjhCBGiGhMWmK5WtZRmmJsPKGxKivg
Mlmee5Wd4E2YgLHnAB1Gm1cUTrlqv2g8dsfU6LRRCmLJyQDuNLz2nniJDx4TIXQC
39W7leqLXWX7dGNm3DqtkRgDqoeRZRz8zJAyh36c5abAemFbzfjWb7BhYjzHCav7
PbjZ2P8kY4EN3PmFOIpF+aPUTf6c+sokhtsPOXxCtK0ZeTUHSvnJvBe2FarhAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUMK6EuHC+1DGj2EGOjwGH/sIdiwcwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1NjgyLzAvMzEzMDMzMmUz
MTMxMzgyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzNjM4MzIz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmd21DANBgkqhkiG9w0BAQsFAAOCAQEA0LBat0MAhdZyuLfs
/Clt7tYg9+E4DnAzUztiwygdglte8xi9O50Uk732wnXXaOHNt2l+m5ms4EJFqhz3
TNn0ILfepDkW57HSuph6YVXD7QEdpA+41V3bhXni8uc89E8nWA7cnlxutoS5DXZF
5En7SZXSTRjCrlmW8MW+tU7vawHEWKES3sv4BehZItvakLPn0QGfImvVn3SN3d0o
A1RRnSZRCTDmjQXKy5ZrEI0ZjaXlCExeiK4RY29z7NRR1r7BZ3EgAmOdP2x/XbAK
Z08kuaVrEnFdbw8Wn2D1+qBgABtkz0EKBRvFoVq3bqzWApo7KXKBJOg7v4g/ErMg
kV98ag==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:59 2026 by rpki-client