This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39342e302f32342d3234203d3e20313337343433.roa
File: 3130332e3231382e39342e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier: m0yFRzPkgz00e4Cr6K/4bM0qVLURm4aMUqElN3RsHhw=
Subject key identifier: 12:3F:9D:BF:C3:00:7E:0F:07:DF:AF:9B:35:3D:92:7E:51:46:6C:94
Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial: 73613C44AEE54CB8DE11DF2FE631803181E808FD
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39342e302f32342d3234203d3e20313337343433.roa
Signing time: Tue 20 Jan 2026 02:18:05 +0000
ROA not before: Tue 20 Jan 2026 02:13:05 +0000
ROA not after: Tue 19 Jan 2027 02:18:05 +0000
asID: 137443
IP address blocks: 103.218.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 17:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:61:3c:44:ae:e5:4c:b8:de:11:df:2f:e6:31:80:31:81:e8:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Validity
Not Before: Jan 20 02:13:05 2026 GMT
Not After : Jan 19 02:18:05 2027 GMT
Subject: CN=123F9DBFC3007E0F07DFAF9B353D927E51466C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:06:6e:a1:f5:b6:3c:b5:b6:5f:d4:16:42:
bd:41:e0:81:49:e8:8d:d9:d4:68:1c:61:92:33:11:
6a:ff:b9:3f:08:21:b9:25:6a:4c:82:c2:f3:4e:b6:
b7:62:53:1c:f5:c6:93:bd:b4:21:93:14:90:a6:46:
fa:7a:16:c8:29:8e:37:95:fe:4e:5d:05:c2:10:8a:
97:a6:3f:a0:19:0b:06:ad:1f:53:12:b2:fb:9a:71:
2b:7b:45:0f:6c:cb:62:45:f1:a0:5e:07:b8:63:f1:
a5:2a:3c:2e:52:c9:d5:05:47:df:a3:04:76:45:11:
72:d4:cd:76:3b:9d:d3:0c:9d:9b:77:bd:ee:63:e5:
47:67:45:55:79:9b:e5:5a:37:13:1f:e1:06:3b:10:
5a:f6:dc:05:3a:24:ae:fe:ce:58:f6:21:f7:fd:6f:
28:83:75:cb:ae:88:74:70:cd:08:a8:9b:9e:c2:7b:
56:1b:2b:dc:3e:fa:15:5c:5c:f4:8d:ed:7d:c7:77:
e7:ea:9b:76:b1:f6:f4:60:9c:b9:a3:66:27:cb:fd:
04:0b:e7:80:86:d0:b2:6d:3d:39:90:80:8c:fe:f2:
e7:9b:c1:12:55:6b:43:ef:fc:7d:f9:30:03:93:55:
c7:37:77:1f:83:d8:75:89:48:53:03:a8:72:97:db:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:9D:BF:C3:00:7E:0F:07:DF:AF:9B:35:3D:92:7E:51:46:6C:94
X509v3 Authority Key Identifier:
keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39342e302f32342d3234203d3e20313337343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.218.94.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2c:02:46:d8:2c:ea:f9:c8:dd:9c:b5:15:be:84:10:8b:1b:
09:6d:a2:fd:c6:fb:4b:84:b2:5d:43:e6:ac:01:15:5a:2f:23:
d1:94:00:12:80:a3:66:ff:09:2c:c1:c4:67:21:a4:20:ff:8b:
75:64:c2:fb:d6:1e:ef:21:f3:5c:d7:34:c4:5c:c0:c6:37:dc:
20:6b:af:08:c8:0a:bd:d4:eb:f7:93:fa:05:b4:d5:22:1e:71:
a3:c5:12:9f:1c:00:20:70:17:eb:06:a0:da:cd:68:80:03:29:
8b:e7:4d:5e:c9:d3:95:d0:3a:75:ac:18:cf:c9:c4:bb:1d:44:
74:73:e2:9c:79:6f:be:02:b3:d3:fc:d6:bd:55:e6:c3:6b:77:
22:ba:76:1c:ea:c4:c6:e7:d8:03:a9:97:6f:8b:2d:34:07:ac:
a7:54:da:de:0f:6f:c6:59:f0:e6:8c:05:52:d7:61:75:2b:95:
7b:d3:de:22:7e:24:22:52:af:58:05:31:ed:fc:65:19:16:3a:
19:d1:7e:27:84:eb:32:5c:78:3b:b9:9d:b9:84:6e:d0:1e:10:
1a:86:e4:b1:f4:a9:a3:c9:0a:2a:44:93:1d:6b:c1:cb:e0:77:
cd:82:79:82:be:01:86:89:af:70:4a:84:0c:5e:f6:c6:da:be:
c5:fc:51:0c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUc2E8RK7lTLjeEd8v5jGAMYHoCP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2
MTA5NjNBQjAeFw0yNjAxMjAwMjEzMDVaFw0yNzAxMTkwMjE4MDVaMDMxMTAvBgNV
BAMTKDEyM0Y5REJGQzMwMDdFMEYwN0RGQUY5QjM1M0Q5MjdFNTE0NjZDOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL0gZuofW2PLW2X9QWQr1B4IFJ
6I3Z1GgcYZIzEWr/uT8IIbklakyCwvNOtrdiUxz1xpO9tCGTFJCmRvp6FsgpjjeV
/k5dBcIQipemP6AZCwatH1MSsvuacSt7RQ9sy2JF8aBeB7hj8aUqPC5SydUFR9+j
BHZFEXLUzXY7ndMMnZt3ve5j5UdnRVV5m+VaNxMf4QY7EFr23AU6JK7+zlj2Iff9
byiDdcuuiHRwzQiom57Ce1YbK9w++hVcXPSN7X3Hd+fqm3ax9vRgnLmjZifL/QQL
54CG0LJtPTmQgIz+8uebwRJVa0Pv/H35MAOTVcc3dx+D2HWJSFMDqHKX2/29AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUEj+dv8MAfg8H36+bNT2SflFGbJQwHwYDVR0j
BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND
NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8zMTMwMzMyZTMy
MzEzODJlMzkzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzQzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfaXjANBgkqhkiG9w0BAQsFAAOCAQEAYywCRtgs6vnI3Zy1Fb6E
EIsbCW2i/cb7S4SyXUPmrAEVWi8j0ZQAEoCjZv8JLMHEZyGkIP+LdWTC+9Ye7yHz
XNc0xFzAxjfcIGuvCMgKvdTr95P6BbTVIh5xo8USnxwAIHAX6wag2s1ogAMpi+dN
XsnTldA6dawYz8nEux1EdHPinHlvvgKz0/zWvVXmw2t3Irp2HOrExufYA6mXb4st
NAesp1Ta3g9vxlnw5owFUtdhdSuVe9PeIn4kIlKvWAUx7fxlGRY6GdF+J4TrMlx4
O7mduYRu0B4QGobksfSpo8kKKkSTHWvBy+B3zYJ5gr4BhomvcEqEDF72xtq+xfxR
DA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:09 2026 by rpki-client