This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3133392e39332e302f32342d3234203d3e20313337343433.roa
File: 3130332e3133392e39332e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier: zau23N00IR2hAGYo56Nge2Ymz5rQiM6x3QCKZyW/qEQ=
Subject key identifier: 82:C9:01:53:4E:70:65:94:12:7C:F9:F4:CA:1F:00:1F:8A:E0:F2:EE
Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial: 48201514591174E0C4F89F8234FCA55820691220
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3133392e39332e302f32342d3234203d3e20313337343433.roa
Signing time: Tue 20 Jan 2026 02:18:05 +0000
ROA not before: Tue 20 Jan 2026 02:13:05 +0000
ROA not after: Tue 19 Jan 2027 02:18:05 +0000
asID: 137443
IP address blocks: 103.139.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 17:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:20:15:14:59:11:74:e0:c4:f8:9f:82:34:fc:a5:58:20:69:12:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Validity
Not Before: Jan 20 02:13:05 2026 GMT
Not After : Jan 19 02:18:05 2027 GMT
Subject: CN=82C901534E706594127CF9F4CA1F001F8AE0F2EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:dc:a9:32:be:db:25:ac:2e:a9:62:b3:f6:
3b:11:27:76:8f:4f:89:1e:d0:0f:57:f0:5d:e3:3d:
39:f5:14:05:f1:2f:b6:29:80:81:5c:8e:75:07:fb:
73:30:dc:89:08:5a:55:52:b3:f4:ae:2e:71:86:b0:
bc:ba:5f:09:f8:12:79:a1:83:71:01:d1:58:40:0e:
6f:02:d5:39:c7:c1:9c:49:2a:17:3b:98:a5:09:7a:
95:ac:ba:ca:0d:62:2a:44:7a:ed:6f:65:60:42:c6:
8e:7d:4e:0d:8b:e7:db:cf:18:2f:d3:fc:b0:6c:f6:
65:b7:a2:02:7b:ff:9d:76:b3:33:6c:e2:c2:b7:51:
fb:2e:7a:e8:40:d5:89:26:cb:dc:4a:72:90:c2:3a:
4f:4e:92:5f:41:e9:91:1d:7b:6e:a7:16:41:22:1a:
9d:7d:b0:f3:e2:74:a5:e3:61:11:9c:1e:f9:38:a3:
81:de:8e:47:59:fb:5d:3b:8b:a7:70:04:e8:84:67:
6c:05:63:bb:a7:3a:4f:20:5b:2b:06:e5:ac:ec:f7:
86:52:5f:07:33:5c:03:55:02:da:4e:63:56:90:de:
cf:9c:89:18:18:05:04:ec:08:f8:42:fa:fa:2b:71:
cc:a1:ed:57:cf:f2:13:11:46:ff:d8:c6:a7:8a:e6:
d4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:01:53:4E:70:65:94:12:7C:F9:F4:CA:1F:00:1F:8A:E0:F2:EE
X509v3 Authority Key Identifier:
keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3133392e39332e302f32342d3234203d3e20313337343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.93.0/24
Signature Algorithm: sha256WithRSAEncryption
34:18:94:58:fb:f7:2f:96:87:38:43:5e:f0:9e:26:48:bc:f7:
ce:b0:46:b5:8a:e2:7b:31:58:5a:2a:a8:47:51:e5:65:88:9c:
bb:0a:10:9e:25:d7:ba:00:d3:a1:36:9a:df:9c:4a:f8:78:07:
bd:70:1e:31:98:3f:e4:79:f6:63:f2:97:60:da:49:26:af:54:
7a:b1:05:89:ce:6f:65:78:92:4d:9b:5b:02:6e:66:83:e2:10:
83:27:1c:bd:02:e5:13:da:7e:dd:17:f7:33:22:6b:a4:32:dd:
4b:76:b0:42:67:4a:1c:cb:6b:1a:f8:d0:97:10:f9:4b:58:ba:
26:d2:c5:83:1c:94:c3:08:71:26:a3:f3:47:44:88:ee:0d:7c:
a1:a2:0f:5d:40:09:04:69:de:4b:cf:ad:cf:69:41:db:5b:5a:
eb:16:dd:c5:0d:bb:d1:b3:1c:b0:50:e2:7e:86:62:43:1b:a9:
da:0b:30:e4:f7:c9:37:16:6b:c3:1c:2b:e8:e8:c9:66:f0:ef:
af:9e:ea:6e:3f:e0:57:f3:67:2d:f0:c6:81:b0:7d:10:bf:60:
19:69:6a:fb:1c:ae:a6:d7:62:60:c5:a2:25:d8:ea:62:60:d0:
52:53:3c:bc:45:92:5f:84:95:80:53:29:72:6f:24:c2:2d:45:
a6:39:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:09 2026 by rpki-client