This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138312e302f32342d3234203d3e20313337343433.roa
File: 3130332e3139372e3138312e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier: zOxNjVfF4PHJ4W0md7ggUK41QC6HrtT7zlrQOASTAfY=
Subject key identifier: 92:BC:72:72:9D:A9:22:2E:3A:8A:22:E7:BB:2A:AE:10:0A:09:C6:78
Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial: 4FEC2D700407DEB380E7008341EB5971484CC784
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138312e302f32342d3234203d3e20313337343433.roa
Signing time: Tue 20 Jan 2026 02:18:05 +0000
ROA not before: Tue 20 Jan 2026 02:13:05 +0000
ROA not after: Tue 19 Jan 2027 02:18:05 +0000
asID: 137443
IP address blocks: 103.197.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 17:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ec:2d:70:04:07:de:b3:80:e7:00:83:41:eb:59:71:48:4c:c7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Validity
Not Before: Jan 20 02:13:05 2026 GMT
Not After : Jan 19 02:18:05 2027 GMT
Subject: CN=92BC72729DA9222E3A8A22E7BB2AAE100A09C678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:80:2d:1b:0c:5d:73:bf:ea:6d:31:db:e0:d3:
34:05:e6:e8:da:56:8b:01:2b:66:c8:0a:d2:67:2c:
08:b2:79:91:a0:f3:66:f5:82:f7:1c:1a:cf:02:6c:
ab:76:25:8c:42:4b:af:34:2a:d0:65:54:9c:67:d2:
c6:7a:bd:87:2a:b8:7d:cd:be:71:83:a5:37:d1:96:
5f:69:df:2c:2a:6c:89:ab:92:91:fc:a8:39:8c:af:
96:9e:b1:4f:37:78:09:86:8f:e3:f7:13:50:f6:73:
02:f9:39:77:2a:b3:21:9c:df:5c:14:0f:2a:87:bd:
c9:0c:a6:34:4a:f1:53:f7:49:ee:e8:72:f3:9a:01:
d1:ab:16:7d:27:56:2d:4c:52:17:b7:eb:08:9b:8c:
3a:75:8c:70:bc:c7:6b:c0:9c:fe:f0:2f:7b:2b:5b:
f9:fe:14:c8:fd:4e:48:cf:60:b0:66:08:48:39:0f:
a3:a6:9a:8e:47:04:15:d9:e8:c9:72:78:83:e0:4e:
c1:a5:de:5d:ff:18:0e:cc:a9:52:91:9b:ef:67:7b:
d3:17:6a:99:8f:16:04:5c:d9:7f:b7:4a:68:3e:4f:
23:9c:47:fb:54:ec:4e:be:7e:17:c5:39:10:7b:2c:
a5:af:aa:d0:be:a0:5f:7f:c3:41:ba:3c:f0:25:1b:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BC:72:72:9D:A9:22:2E:3A:8A:22:E7:BB:2A:AE:10:0A:09:C6:78
X509v3 Authority Key Identifier:
keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138312e302f32342d3234203d3e20313337343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.181.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b3:6a:99:7a:0e:f8:38:af:53:1d:b0:b1:a3:12:af:f1:c6:
f2:31:87:8b:d8:04:96:f4:d0:61:f0:62:88:a9:04:2e:c3:30:
95:17:86:8f:79:e1:50:90:de:76:e4:2e:f8:84:57:04:35:21:
7a:ad:57:71:e6:6f:ed:f9:88:b5:1f:82:e0:a1:45:d6:a6:93:
db:b7:28:df:e1:9f:1b:0f:99:7f:df:c2:cf:49:fb:ea:51:e7:
03:0c:a4:1f:ba:62:b8:c4:3d:4f:8e:19:54:31:05:3d:29:90:
6e:5f:77:4c:bf:58:fa:c1:ae:15:19:80:67:8c:3a:17:20:16:
09:2a:c5:85:cc:f2:7c:d5:f8:9c:6e:fa:d1:87:36:67:c0:64:
a8:75:6b:34:1e:2b:c7:e6:37:4c:26:87:a1:61:cc:89:79:06:
f7:e7:6b:8a:3e:49:88:31:af:3a:18:df:07:00:1e:a0:b5:f4:
7e:97:22:59:3c:8c:78:ad:ce:69:e5:61:33:b1:46:00:82:e1:
16:7f:6b:02:76:75:c2:fb:7c:32:67:ff:29:97:ca:b8:a8:db:
98:01:cb:c3:71:db:62:38:db:e4:a1:90:9a:15:85:d2:6d:0e:
f0:f0:4b:ef:1b:fb:21:44:9f:59:5e:8f:0b:6a:22:e0:c7:1f:
91:4a:0a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:02 2026 by rpki-client