This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa
File: 3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa (raw, json)
Hash identifier: gwsYWrqcYK0ktFka8dQFWvrHKpCXna1yR/uwRK4K9H4=
Subject key identifier: 37:15:7A:4D:DA:6A:F7:CC:05:AA:DA:AD:C6:D7:D9:F3:DE:39:B5:3D
Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial: 5F07E9763E0D3CF359577E302B10C5203A3761BC
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa
Signing time: Tue 20 Jan 2026 02:21:33 +0000
ROA not before: Tue 20 Jan 2026 02:16:33 +0000
ROA not after: Tue 19 Jan 2027 02:21:33 +0000
asID: 139021
IP address blocks: 103.235.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 11:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:07:e9:76:3e:0d:3c:f3:59:57:7e:30:2b:10:c5:20:3a:37:61:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Validity
Not Before: Jan 20 02:16:33 2026 GMT
Not After : Jan 19 02:21:33 2027 GMT
Subject: CN=37157A4DDA6AF7CC05AADAADC6D7D9F3DE39B53D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:e8:62:07:5c:5d:c6:20:2d:4d:fb:97:0b:
87:3f:4a:be:c5:a3:48:43:8a:45:47:b5:84:42:d3:
2b:6a:21:2d:60:9d:a4:dc:5c:93:38:7a:ba:e2:76:
79:e6:32:c4:7d:e5:a1:a5:52:f0:d5:21:b8:30:dd:
98:8e:b3:7b:a1:ed:0e:8e:1f:73:b8:89:22:9d:bc:
10:78:75:ea:f0:7f:a4:69:d9:1d:d5:37:6d:2f:4e:
6f:c2:ef:b7:55:e5:71:79:17:69:6d:d4:d8:c2:ef:
0e:cd:5d:97:a4:92:9a:bd:27:89:69:0a:14:66:c3:
86:c0:0a:16:d1:bd:a3:ee:24:87:9d:54:56:f9:63:
d9:e1:54:58:4f:07:f6:ce:50:81:1c:2e:29:03:fa:
ad:1e:d7:09:dc:c6:72:e6:1f:77:3d:1e:40:4e:8d:
cd:0d:e2:83:93:75:0a:8c:a8:3c:b8:85:23:50:66:
25:11:76:35:64:20:50:61:ef:37:32:36:0d:a8:5f:
ba:4f:f4:d5:f6:9d:39:f9:5e:f3:8f:e6:f2:2f:b0:
ff:f2:53:a6:2c:f4:c9:7a:f8:ab:41:10:82:15:5a:
f4:4d:b3:25:36:7e:84:7b:6a:91:2a:5e:e4:1b:76:
b9:ae:e0:ed:90:d1:05:af:cb:e6:e1:5b:0f:22:d2:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:7A:4D:DA:6A:F7:CC:05:AA:DA:AD:C6:D7:D9:F3:DE:39:B5:3D
X509v3 Authority Key Identifier:
keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:42:7d:d9:e4:04:e3:c7:6f:16:be:33:78:79:a8:43:c8:0a:
fd:39:72:50:c8:81:88:17:5f:8c:e9:7a:f9:3d:5d:55:15:6b:
de:63:31:2f:35:df:60:ad:81:08:9f:09:16:36:3d:4c:49:79:
ba:fc:32:31:79:2e:60:36:45:aa:33:a8:49:8c:35:5e:b3:02:
48:a9:f9:c0:b3:52:4f:cb:37:4f:27:4f:cc:3c:4b:b0:2e:a0:
d2:86:af:e3:71:29:88:3e:58:8e:92:4d:3f:bb:f8:41:81:26:
99:b1:75:b2:2d:ce:6b:1f:ee:bd:c0:2f:5d:24:a8:82:9c:87:
cd:0b:6d:2d:b6:b0:90:8a:e8:2d:1f:41:e3:a4:ef:28:fc:0f:
bd:bd:91:c1:71:05:20:67:3f:db:80:08:0d:63:85:fd:e9:61:
54:87:65:2a:38:0e:59:8a:6e:e1:80:60:ba:eb:de:44:1d:e4:
5b:7d:c0:99:53:a7:ba:c1:67:d4:08:30:3f:cb:ee:2c:ac:49:
82:db:2f:be:11:61:e1:82:d2:e8:97:05:5a:22:a7:76:33:c1:
73:80:3c:c4:78:5c:6a:1e:dd:18:e8:33:85:07:a7:3c:ab:1c:
de:c4:ab:af:cb:a3:5d:16:fc:49:ae:3d:f2:34:95:28:2a:8a:
d8:70:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:23 2026 by rpki-client