This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/3130332e392e3135322e302f32342d3234203d3e203338333434.roa
File: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (raw, json)
Hash identifier: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=
Subject key identifier: 37:05:F8:3D:A0:72:9C:36:EA:65:8B:8E:65:30:E9:63:A0:03:E5:3D
Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4
Certificate serial: 573110C996611AF641B9EDE8E1CC18773CDE88BD
Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/3130332e392e3135322e302f32342d3234203d3e203338333434.roa
Signing time: Tue 20 Jan 2026 02:23:50 +0000
ROA not before: Tue 20 Jan 2026 02:18:50 +0000
ROA not after: Tue 19 Jan 2027 02:23:50 +0000
asID: 38344
IP address blocks: 103.9.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 11:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:31:10:c9:96:61:1a:f6:41:b9:ed:e8:e1:cc:18:77:3c:de:88:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4
Validity
Not Before: Jan 20 02:18:50 2026 GMT
Not After : Jan 19 02:23:50 2027 GMT
Subject: CN=3705F83DA0729C36EA658B8E6530E963A003E53D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:f6:1f:2a:04:65:13:0a:0f:b1:33:36:3c:
12:8c:0b:be:1d:78:6f:b4:06:dc:ac:a5:bb:20:4a:
6b:a6:a2:e4:ec:a3:c3:e3:5f:39:cb:0e:2c:9e:98:
ec:4d:c4:d0:e2:a5:13:8e:4e:fe:0f:59:3c:51:92:
44:d5:df:71:e4:42:24:55:54:4b:48:84:d5:ad:f0:
aa:1f:e2:93:18:01:5d:23:19:5f:2d:5f:9a:f8:2d:
1b:98:af:05:e4:2c:ed:1a:90:ac:41:32:ff:4a:d8:
76:f2:0a:5a:7b:95:08:74:41:31:28:35:21:e8:70:
cd:d6:6b:db:2b:58:9d:43:2d:9e:d7:da:37:46:7f:
ec:ba:10:c8:c0:5b:9c:9c:ab:88:af:2b:0a:93:53:
d0:ad:cc:04:65:1d:a0:57:55:aa:17:38:b9:ae:c0:
c9:66:dc:cc:d9:49:54:9d:d4:de:a0:92:a1:e9:cb:
b0:a6:26:65:a7:ee:e3:15:35:32:dc:9f:26:b8:2c:
d3:9e:44:71:a0:99:11:f6:37:01:2e:25:a0:f2:bf:
2f:d9:1e:7c:ad:d2:b2:82:72:63:01:cc:e2:77:92:
18:f6:93:73:54:91:1d:40:12:e7:a4:d1:e0:51:e5:
8b:c5:70:b7:48:f8:4c:6d:78:c8:d0:34:e3:59:95:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:F8:3D:A0:72:9C:36:EA:65:8B:8E:65:30:E9:63:A0:03:E5:3D
X509v3 Authority Key Identifier:
keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/3130332e392e3135322e302f32342d3234203d3e203338333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.9.152.0/24
Signature Algorithm: sha256WithRSAEncryption
13:da:fb:1a:b8:ee:e4:a9:0c:2a:28:28:38:06:f1:de:69:eb:
c8:3f:06:a5:be:e9:44:31:13:ea:d0:4d:69:2a:ee:d1:66:29:
a3:7a:24:9f:6a:a9:34:4c:a4:d0:24:f5:92:22:3f:c8:52:87:
b1:bd:49:35:85:e7:8d:5d:2b:9d:95:ab:46:95:0f:65:8d:0c:
4e:86:a3:3b:f8:48:fd:ed:60:5a:49:c9:22:cc:38:ad:c0:1f:
1f:38:0e:11:e6:61:12:97:be:25:08:42:67:19:73:4d:86:7e:
fa:ce:42:8f:9c:fd:6a:72:9f:f6:a3:bc:17:e5:a4:8a:86:86:
fc:9e:72:5b:39:aa:8a:6f:fa:82:45:a5:a6:8d:14:8f:85:47:
13:96:20:fd:a5:d6:c3:ef:cb:43:26:4e:25:c0:2b:cf:13:25:
df:a9:a9:27:97:63:f6:15:46:3c:71:f3:2a:71:2b:07:a2:31:
59:9d:b5:7b:8c:16:a1:4e:2a:c0:7d:1f:da:12:9d:70:42:c9:
9e:e0:5e:cf:3d:30:d1:e7:96:97:37:d0:a2:4f:f2:b1:1f:03:
16:ac:22:a3:b1:d5:f2:c8:19:bb:0f:e4:30:7f:f8:9b:c0:c4:
85:2e:70:1d:86:cb:cf:6c:07:5a:16:6b:1b:d4:54:3e:f5:e5:
f0:4b:06:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:45 2026 by rpki-client