This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313336383236.roa
File: 3130332e3131382e3231362e302f32322d3234203d3e20313336383236.roa (raw, json)
Hash identifier: 1voceP7Vuh/B5kY2rJkYZUv3EQ8CLf/K13UeQGVVgB0=
Subject key identifier: 38:99:DF:53:D7:EE:FF:76:4D:C2:EB:AB:B7:61:3D:57:E2:C1:61:5C
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 517B0BD0E2AD0303D07896818163499A12F5F588
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313336383236.roa
Signing time: Fri 23 Jan 2026 14:09:17 +0000
ROA not before: Fri 23 Jan 2026 14:04:17 +0000
ROA not after: Fri 22 Jan 2027 14:09:17 +0000
asID: 136826
IP address blocks: 103.118.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:7b:0b:d0:e2:ad:03:03:d0:78:96:81:81:63:49:9a:12:f5:f5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 23 14:04:17 2026 GMT
Not After : Jan 22 14:09:17 2027 GMT
Subject: CN=3899DF53D7EEFF764DC2EBABB7613D57E2C1615C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d3:f3:af:ec:05:50:3e:fe:fc:f3:a7:e7:43:
7e:0e:58:60:e6:40:2b:e5:1f:58:b3:c9:5e:01:7d:
06:d3:c6:fc:31:2c:37:a9:4c:a8:64:b5:97:b7:7c:
40:10:da:b0:34:28:9b:76:10:b5:16:c0:ad:07:2d:
64:80:56:a5:31:e7:c6:6a:24:28:28:d9:e6:dc:8c:
47:84:dd:f2:54:7a:13:af:41:54:c4:ef:aa:34:ca:
e5:01:2a:0e:c6:9c:9d:03:78:46:e8:ba:e7:82:e5:
41:cd:92:eb:43:13:b3:d7:e7:f1:86:03:74:ba:7f:
75:c9:29:26:3c:d6:28:37:43:99:cc:a0:ef:37:d3:
18:4b:cd:89:45:9d:69:57:a6:51:0e:99:72:11:ee:
63:2f:da:be:b5:6e:7a:af:c8:62:a5:8a:34:b5:c2:
a4:31:e9:9c:8f:8f:e7:76:02:ce:fa:b6:64:88:ca:
46:87:1d:a8:13:c0:e2:94:c2:ed:f0:c0:74:be:ee:
aa:d3:79:d1:65:6b:64:31:ae:12:62:3f:e6:bd:e1:
c1:7c:b5:f7:a6:70:11:26:0f:e5:fb:b9:3a:b6:b0:
f0:8c:1f:1d:e2:f3:e1:cf:2f:80:11:f2:3d:9d:6c:
60:21:87:12:5c:9c:72:3a:69:d1:20:e0:2c:00:e3:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:99:DF:53:D7:EE:FF:76:4D:C2:EB:AB:B7:61:3D:57:E2:C1:61:5C
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313336383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:3a:81:80:38:dd:f1:a0:4b:58:83:a7:a3:fa:9a:4c:aa:c1:
96:88:25:99:4d:83:32:52:5c:7c:8c:dc:01:11:dd:70:6d:36:
f6:a9:85:88:22:a5:56:b5:25:f2:07:39:9a:c6:a2:7c:4f:6b:
03:eb:7d:12:10:84:3c:1d:5c:d6:f1:00:dd:f9:ed:de:d6:17:
ad:7c:a7:c6:aa:c3:bc:46:8e:9f:67:0f:88:1f:b9:6e:7e:b3:
ae:0e:86:f4:19:08:bf:35:8e:06:90:8c:fa:04:04:79:4c:25:
65:ec:08:59:cd:fa:bd:68:31:9c:cc:73:d5:88:24:12:a8:1e:
d6:8e:2d:8b:dc:0e:44:db:3d:63:75:57:7a:01:37:cf:93:82:
f7:1b:94:3f:25:f4:8d:60:ef:f6:93:c1:ad:d1:c3:90:8a:aa:
f8:ca:6d:78:f9:64:a1:64:25:18:20:05:65:1d:42:00:35:ec:
04:da:8c:55:36:ee:d5:1b:ef:01:19:a3:dc:db:11:dc:72:cb:
ba:c4:39:0f:23:3a:26:1a:b1:2d:56:91:77:2b:97:04:1a:5b:
f4:e3:ac:7f:27:f6:3e:6f:97:b3:f4:1b:7e:76:1d:47:82:45:
47:14:24:0d:68:d8:b8:37:ba:db:d3:47:16:46:50:2d:d7:a4:
bc:59:68:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:00 2026 by rpki-client