This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138332e302f32342d3234203d3e20313337343433.roa
File: 3130332e3139372e3138332e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier: k0G/J1wGW3vLozXs6GIpw7cXS7zIX2gS1KUAiSrbLNE=
Subject key identifier: 94:02:8A:C8:AF:A8:95:39:4D:A6:8D:82:79:1A:AB:AD:24:2D:E4:F0
Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial: 26DB14098B6B2A36C060EC5577A19542EAB8457C
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138332e302f32342d3234203d3e20313337343433.roa
Signing time: Tue 20 Jan 2026 02:18:05 +0000
ROA not before: Tue 20 Jan 2026 02:13:05 +0000
ROA not after: Tue 19 Jan 2027 02:18:05 +0000
asID: 137443
IP address blocks: 103.197.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 17:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:db:14:09:8b:6b:2a:36:c0:60:ec:55:77:a1:95:42:ea:b8:45:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Validity
Not Before: Jan 20 02:13:05 2026 GMT
Not After : Jan 19 02:18:05 2027 GMT
Subject: CN=94028AC8AFA895394DA68D82791AABAD242DE4F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:23:f9:1d:81:38:56:05:73:db:62:57:6d:
7c:08:9a:47:52:80:7c:06:96:54:7e:0e:58:95:38:
4f:b3:56:18:38:1b:81:9c:93:19:e6:2b:6a:bd:e6:
19:d7:ea:78:de:2a:79:f8:58:af:3a:4d:0b:d0:fc:
64:37:29:30:9a:4a:e9:79:b4:7c:ae:ee:78:85:17:
44:98:73:71:1a:1b:5e:5d:d6:5c:a1:d7:28:01:62:
d4:14:66:d0:53:fa:e2:09:de:a2:37:a9:5d:8a:e5:
d8:27:f2:1f:42:25:83:02:ae:c7:4b:77:d0:c8:68:
b3:d0:f4:8d:13:7c:fd:f3:e6:17:24:f7:52:f0:44:
ae:bf:f1:83:74:b4:55:ca:6f:37:6f:93:ce:09:6c:
9c:a7:58:44:01:4d:d1:f8:b4:59:e4:65:60:37:cd:
f9:e0:9b:34:83:45:14:4f:3b:fa:e9:6e:ab:cd:d8:
41:3d:25:96:4b:8f:1c:b6:6e:d7:63:31:d7:56:4f:
31:13:af:3e:2a:41:1b:c4:ce:67:c9:9b:50:be:5e:
a1:db:9d:63:b5:29:88:09:48:a2:c4:17:35:e3:2b:
5d:6f:08:94:f4:5c:db:33:58:99:78:e0:a6:94:c6:
48:09:b7:7f:5a:41:ac:81:3b:e5:1b:45:c7:6c:dc:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:8A:C8:AF:A8:95:39:4D:A6:8D:82:79:1A:AB:AD:24:2D:E4:F0
X509v3 Authority Key Identifier:
keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138332e302f32342d3234203d3e20313337343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.183.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0e:03:eb:b5:b3:15:7a:74:df:69:90:64:88:ab:8d:3c:53:
92:f7:1e:00:82:3d:d3:72:9c:b4:b8:32:7b:e5:c9:bd:e7:03:
45:f3:30:c8:5e:8d:58:34:b0:76:e0:d2:0a:15:bc:ec:f5:5d:
c9:3d:19:9d:d8:04:eb:74:d8:28:6b:14:ad:87:d7:e2:3a:99:
fe:be:02:40:b8:12:52:0d:3a:c5:e1:ce:60:ef:02:a6:84:e3:
dd:b4:d8:22:f6:84:d9:f8:ae:d0:61:fc:bd:a5:20:09:a8:6d:
cf:60:17:18:8d:73:a5:ae:55:18:da:96:a0:3f:1d:7d:f1:24:
8c:66:df:b5:cb:ef:89:50:f4:34:63:f2:97:39:31:bd:fc:6b:
47:da:75:f7:44:15:9c:91:5e:f4:6d:f5:c8:4b:54:aa:36:8d:
05:c7:cc:22:c4:df:d2:2e:60:a4:ad:71:3e:9b:99:f4:99:76:
24:c3:29:80:c6:6c:27:00:dc:d6:57:70:80:b6:be:77:e9:f7:
ba:2f:c3:e0:1e:a8:75:4c:0f:9e:fa:35:9c:91:57:99:29:f7:
bb:45:bd:83:d8:2d:74:3c:70:71:6f:75:d4:4e:4f:a8:b1:a2:
a2:d6:44:db:19:39:7c:1d:09:c6:f3:31:b6:18:ed:e5:c1:7e:
82:4c:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:00 2026 by rpki-client