This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa
File: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (raw, json)
Hash identifier: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=
Subject key identifier: 65:D1:41:DF:8B:E6:DF:63:6D:40:32:39:DC:96:EC:5A:1C:BD:DF:8E
Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
Certificate serial: 1CF859C08AEBEF2B690884954EFDB6549D614BE2
Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa
Signing time: Tue 20 Jan 2026 02:18:06 +0000
ROA not before: Tue 20 Jan 2026 02:13:06 +0000
ROA not after: Tue 19 Jan 2027 02:18:06 +0000
asID: 398704
IP address blocks: 103.150.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f8:59:c0:8a:eb:ef:2b:69:08:84:95:4e:fd:b6:54:9d:61:4b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
Validity
Not Before: Jan 20 02:13:06 2026 GMT
Not After : Jan 19 02:18:06 2027 GMT
Subject: CN=65D141DF8BE6DF636D403239DC96EC5A1CBDDF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:17:f8:00:5c:18:fe:0d:a2:a0:a4:c2:80:
84:e8:38:f2:ca:59:62:1e:f9:ae:a7:b9:20:61:6d:
21:cc:58:f0:69:f6:cd:e8:f7:b8:81:7d:8e:c5:53:
cc:18:58:fd:60:2f:8a:3b:e1:00:fc:d0:94:af:9d:
b9:93:1a:43:54:1f:f5:db:0a:7a:e6:50:2b:80:a7:
26:af:69:8f:45:75:62:25:44:a9:66:db:fd:68:0f:
40:11:0e:62:e2:e0:a5:62:30:fe:99:5c:0c:66:c9:
77:6b:47:9f:f0:7c:c2:80:bd:15:dc:7f:4c:ea:ef:
a0:94:52:7d:51:0c:2f:28:82:74:f5:14:0d:3f:21:
9f:6b:b5:ff:43:59:4d:cb:55:74:74:ef:5d:82:f1:
47:f5:03:77:51:70:27:9e:9c:95:84:28:62:fe:6b:
63:b9:53:35:0b:b2:a1:57:80:6a:19:01:94:85:af:
68:45:71:56:f6:fe:f7:19:fd:5a:34:de:a9:20:68:
33:77:25:d4:48:5a:4c:63:37:5b:4f:9b:20:5c:3b:
06:56:d8:86:3d:5d:3a:fb:08:6c:82:fd:e1:fb:bc:
7a:9c:b8:67:21:c3:68:ff:c3:5a:ba:46:15:f5:25:
36:56:38:b8:39:3a:38:b9:72:a6:ab:d2:99:9b:5b:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:41:DF:8B:E6:DF:63:6D:40:32:39:DC:96:EC:5A:1C:BD:DF:8E
X509v3 Authority Key Identifier:
keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.130.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:da:a8:57:48:a2:e7:55:2e:f4:82:ff:d5:d6:9c:ad:1b:3e:
74:10:fe:6d:8c:4e:6d:e9:4a:4a:31:91:c5:3b:30:7b:4a:fe:
32:a7:e0:fa:c2:a2:ed:87:01:d3:dd:9f:72:ff:b4:30:79:c0:
a4:1d:50:9b:8e:8b:d2:f2:05:3c:12:fd:89:d5:26:1c:6e:b1:
63:ad:a5:e4:32:a0:fe:b6:49:79:5f:5b:b4:ab:76:30:2c:96:
e2:21:f5:ca:47:6c:94:b3:5c:ca:23:fc:68:98:ec:59:18:12:
c2:93:0f:4a:7d:5d:59:2c:7a:05:94:48:90:29:2a:04:58:6c:
20:e7:0a:b7:21:85:3d:92:94:f5:ac:9b:ce:0f:17:93:ba:c4:
fa:b0:b6:55:c5:44:66:f0:b5:df:0c:13:41:45:8c:ad:7a:03:
cc:f9:c6:cb:85:cc:af:4d:4f:e7:45:07:9d:86:9d:f4:74:cf:
3d:08:fb:88:ac:cf:75:25:80:7e:19:7f:df:d2:3c:27:23:a2:
de:b1:15:bf:a7:a7:e3:fc:29:59:85:f8:08:6b:7c:56:20:99:
99:00:45:30:ab:e8:61:29:a0:91:bb:9b:56:e6:23:68:ff:17:
03:75:08:9a:d4:ff:85:68:6c:d3:27:96:ef:c9:9c:b0:ce:e8:
1e:eb:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:47:09 2026 by rpki-client