This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa
File: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (raw, json)
Hash identifier: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=
Subject key identifier: 40:14:1E:B5:F2:79:07:D7:52:E1:F0:4C:78:1F:57:55:05:74:BA:87
Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
Certificate serial: 56752DF39045A2DDF53070ED321D3E86E071B96E
Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa
Signing time: Tue 20 Jan 2026 02:18:06 +0000
ROA not before: Tue 20 Jan 2026 02:13:06 +0000
ROA not after: Tue 19 Jan 2027 02:18:06 +0000
asID: 131530
IP address blocks: 103.150.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:75:2d:f3:90:45:a2:dd:f5:30:70:ed:32:1d:3e:86:e0:71:b9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
Validity
Not Before: Jan 20 02:13:06 2026 GMT
Not After : Jan 19 02:18:06 2027 GMT
Subject: CN=40141EB5F27907D752E1F04C781F57550574BA87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:2e:d1:74:36:c1:14:b6:14:67:2f:92:02:
22:28:ad:7d:1e:9a:67:a6:ad:3c:06:06:37:43:4a:
cc:e7:bd:49:cd:88:13:99:fb:ee:38:e0:9e:4b:27:
9e:24:c6:85:de:94:be:5f:46:27:b6:05:fa:c8:d0:
90:b0:e9:6c:49:7a:78:0c:f8:3f:00:ff:95:fd:47:
37:08:a1:4b:9c:ac:68:3b:7d:4c:93:6e:57:78:29:
2e:f0:04:7f:a3:f1:c0:a7:cd:dd:34:ed:d8:fa:ae:
28:cb:1a:34:5b:6e:92:99:da:0e:74:91:a8:3a:96:
bf:fb:1c:3a:a5:09:18:0c:f7:4f:9d:97:69:e4:7d:
0d:1f:f4:ee:86:7d:5d:5a:df:ff:e5:62:c2:4c:6a:
70:6f:42:b4:d2:c8:89:c1:53:72:51:d8:c2:8c:ed:
7d:ab:1f:8a:ed:4d:52:71:f3:c0:4e:33:c6:d3:7e:
03:5f:6b:6a:17:6d:a0:a3:f2:43:71:7e:4a:14:a9:
bd:1d:09:83:4b:8e:93:9d:17:9d:38:6c:82:e9:b1:
1b:25:64:3d:a6:89:2c:74:8b:eb:54:00:98:f6:4b:
d4:a5:bb:28:2a:34:13:6a:e6:f1:f3:63:0e:bc:65:
09:24:bf:ab:c3:6a:3d:42:d1:51:6c:ea:8c:2f:d5:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:1E:B5:F2:79:07:D7:52:E1:F0:4C:78:1F:57:55:05:74:BA:87
X509v3 Authority Key Identifier:
keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.130.0/23
Signature Algorithm: sha256WithRSAEncryption
44:b0:a8:9f:1f:88:b8:af:0e:5e:d3:19:01:75:2f:6d:75:98:
64:a4:f6:3b:05:cf:c8:4d:cc:d5:93:a9:57:27:a1:cb:a2:a9:
f3:68:25:26:23:a7:b4:25:97:55:e2:81:a4:cf:7d:48:8b:c4:
49:5a:3a:38:05:a1:db:ef:3c:8d:b2:bb:01:56:56:ee:80:73:
fc:b2:17:43:ab:96:69:24:85:a7:d0:75:96:bc:df:d8:b0:9e:
fa:97:2f:8d:ed:ef:b3:bc:d7:80:a5:5f:fc:14:75:d7:6b:03:
ea:32:86:83:a8:bb:34:c7:b8:4a:81:a8:a3:91:0c:7c:5c:db:
36:f6:d1:7d:80:eb:1e:4f:87:ae:e6:b7:d8:89:71:d0:c7:dc:
3e:1b:0a:c0:42:ca:d4:fe:23:48:62:5b:46:99:66:3a:af:94:
10:32:57:9b:8a:49:ae:dd:59:87:40:7e:1d:cc:a5:5b:66:5d:
8e:32:0a:aa:2c:72:2e:ba:68:c2:93:10:69:c7:0e:2b:f1:1b:
25:c9:7f:54:a9:9c:ef:f4:96:bb:97:c5:68:2e:6f:97:78:74:
b2:1f:d9:3e:6e:fd:bf:25:c9:45:d9:4e:e9:b7:46:3b:ff:2d:
eb:2a:79:50:ec:00:5d:1b:e8:58:3d:45:d8:99:9d:af:95:fe:
2d:af:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:32:55 2026 by rpki-client