This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138322e302f32342d3234203d3e20313337343433.roa
File: 3130332e3139372e3138322e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier: ml/dotA8tYURkCi9gGLb/6fH4D6/8JJeVSMbsmWUy9o=
Subject key identifier: CD:6A:73:A1:94:2A:69:F1:FA:4D:E6:72:85:27:BB:94:C6:1D:46:98
Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial: 614C2038EC55FDBBC5D31C21DBC76A97D424173B
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138322e302f32342d3234203d3e20313337343433.roa
Signing time: Tue 20 Jan 2026 02:18:04 +0000
ROA not before: Tue 20 Jan 2026 02:13:04 +0000
ROA not after: Tue 19 Jan 2027 02:18:04 +0000
asID: 137443
IP address blocks: 103.197.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 17:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4c:20:38:ec:55:fd:bb:c5:d3:1c:21:db:c7:6a:97:d4:24:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Validity
Not Before: Jan 20 02:13:04 2026 GMT
Not After : Jan 19 02:18:04 2027 GMT
Subject: CN=CD6A73A1942A69F1FA4DE6728527BB94C61D4698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:b7:68:e6:01:69:6e:ef:ba:c9:ea:37:6a:
b4:80:80:88:52:22:96:83:81:f9:49:04:f5:0c:9c:
d3:49:ae:2e:40:d1:d2:1d:51:07:be:76:c0:b3:96:
d5:90:7c:45:a2:82:bd:b6:5e:db:8c:58:5a:6b:3d:
4b:55:c5:5c:d6:c1:87:d3:ad:9e:19:c4:65:35:21:
d7:aa:01:a7:24:8e:f9:4a:2a:6a:ed:42:68:2a:07:
da:cc:e4:e1:23:58:c7:d2:32:98:da:68:f0:eb:cd:
88:92:6c:77:30:93:1d:b4:bc:6f:e6:4d:02:10:ba:
6c:ce:d2:36:84:48:f1:f2:bb:e9:c1:c3:51:9d:de:
e6:02:93:04:72:aa:ac:7f:c3:ea:fc:9d:c9:ed:16:
f1:b0:77:17:cc:ed:b0:16:31:3a:03:84:6f:d7:75:
84:20:c4:8f:fa:a5:db:14:a2:63:66:86:f6:54:36:
ac:24:e7:b8:bc:99:68:4e:6e:1c:dc:61:0d:d3:59:
b7:b9:b5:43:d9:82:92:4f:56:d8:79:87:87:b0:5e:
e4:e9:49:29:5f:72:b3:f5:fa:33:98:75:61:c0:40:
eb:fd:fe:cf:01:fe:e3:e6:b2:36:6e:f7:e5:bd:9c:
ee:90:e3:a6:c5:42:93:08:39:cd:65:f0:25:ae:73:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6A:73:A1:94:2A:69:F1:FA:4D:E6:72:85:27:BB:94:C6:1D:46:98
X509v3 Authority Key Identifier:
keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138322e302f32342d3234203d3e20313337343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.182.0/24
Signature Algorithm: sha256WithRSAEncryption
50:db:72:4c:a1:54:bb:4f:1a:5b:4e:c5:52:92:eb:36:76:50:
dc:0d:1b:2f:72:88:26:66:3d:ff:60:3e:0b:e2:d3:93:da:61:
4c:f1:c8:2c:34:9a:9e:d2:f8:b1:f0:79:f0:55:b7:2e:44:64:
d1:3b:1b:71:b0:a0:fc:f1:45:d2:dc:98:ff:a2:dc:54:c8:14:
da:e6:85:3e:e0:db:07:32:c3:85:ca:da:95:45:3b:cd:ad:eb:
8b:18:68:e4:ed:3a:fa:73:4a:91:8e:b6:43:0b:e6:8a:b4:20:
61:c3:ee:d9:61:78:58:dc:d5:43:d6:e9:46:f2:1f:7f:00:e3:
f0:f0:cc:3c:41:e0:47:b5:5e:a7:fd:b7:fd:06:1d:cb:f8:e8:
18:5d:08:ac:4d:50:69:bb:c6:02:49:ff:d2:00:0a:1c:fc:78:
7e:f3:00:89:7a:39:de:d1:90:25:a1:8f:d5:e6:46:6b:e6:1f:
b9:0d:f3:3d:66:8f:40:cc:e0:d2:8f:d2:0b:ad:42:74:33:ba:
a8:6f:7f:91:df:92:24:52:ee:3b:c6:05:bd:1c:f9:5d:16:e1:
23:80:a9:47:e3:f4:8c:24:20:8d:bc:c7:e1:9e:72:ff:e8:40:
a4:dd:b8:16:2c:12:2e:73:59:8b:a3:3d:8e:6c:73:3b:f1:ed:
a7:ec:53:5f
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUYUwgOOxV/bvF0xwh28dql9QkFzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2
MTA5NjNBQjAeFw0yNjAxMjAwMjEzMDRaFw0yNzAxMTkwMjE4MDRaMDMxMTAvBgNV
BAMTKENENkE3M0ExOTQyQTY5RjFGQTRERTY3Mjg1MjdCQjk0QzYxRDQ2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhVrdo5gFpbu+6yeo3arSAgIhS
IpaDgflJBPUMnNNJri5A0dIdUQe+dsCzltWQfEWigr22XtuMWFprPUtVxVzWwYfT
rZ4ZxGU1IdeqAackjvlKKmrtQmgqB9rM5OEjWMfSMpjaaPDrzYiSbHcwkx20vG/m
TQIQumzO0jaESPHyu+nBw1Gd3uYCkwRyqqx/w+r8ncntFvGwdxfM7bAWMToDhG/X
dYQgxI/6pdsUomNmhvZUNqwk57i8mWhObhzcYQ3TWbe5tUPZgpJPVth5h4ewXuTp
SSlfcrP1+jOYdWHAQOv9/s8B/uPmsjZu9+W9nO6Q46bFQpMIOc1l8CWuc36PAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUzWpzoZQqafH6TeZyhSe7lMYdRpgwHwYDVR0j
BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND
NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxNjgzMDYxNzc2Mzg2LzAvMzEzMDMzMmUz
MTM5MzcyZTMxMzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzQz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfFtjANBgkqhkiG9w0BAQsFAAOCAQEAUNtyTKFUu08aW07F
UpLrNnZQ3A0bL3KIJmY9/2A+C+LTk9phTPHILDSantL4sfB58FW3LkRk0TsbcbCg
/PFF0tyY/6LcVMgU2uaFPuDbBzLDhcralUU7za3rixho5O06+nNKkY62QwvmirQg
YcPu2WF4WNzVQ9bpRvIffwDj8PDMPEHgR7Vep/23/QYdy/joGF0IrE1QabvGAkn/
0gAKHPx4fvMAiXo53tGQJaGP1eZGa+YfuQ3zPWaPQMzg0o/SC61CdDO6qG9/kd+S
JFLuO8YFvRz5XRbhI4CpR+P0jCQgjbzH4Z5y/+hApN24FiwSLnNZi6M9jmxzO/Ht
p+xTXw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:00 2026 by rpki-client