This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32342d3234203d3e203137363231.roa
File: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=
Subject key identifier: 24:DE:90:AF:8B:D2:F6:6A:E4:DA:AE:98:A7:72:5C:C4:AC:1D:2C:46
Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Certificate serial: 220AE3D728E80221D10BAB8907CBC94A12F004A6
Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32342d3234203d3e203137363231.roa
Signing time: Tue 20 Jan 2026 02:13:10 +0000
ROA not before: Tue 20 Jan 2026 02:08:10 +0000
ROA not after: Tue 19 Jan 2027 02:13:10 +0000
asID: 17621
IP address blocks: 103.96.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0a:e3:d7:28:e8:02:21:d1:0b:ab:89:07:cb:c9:4a:12:f0:04:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Validity
Not Before: Jan 20 02:08:10 2026 GMT
Not After : Jan 19 02:13:10 2027 GMT
Subject: CN=24DE90AF8BD2F66AE4DAAE98A7725CC4AC1D2C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:26:a2:67:f9:1f:a6:98:55:1d:52:0a:74:
ea:f1:49:39:06:86:2f:46:7a:e5:5f:10:fa:e9:9f:
ae:3c:9e:57:db:9e:d0:3d:1e:59:62:d3:90:96:1d:
c6:60:10:52:7c:62:5e:5e:0c:83:92:d1:80:c0:1c:
1d:20:60:1a:45:43:51:01:93:2d:70:fc:7a:56:56:
98:44:71:52:c9:b6:83:6c:ae:c0:ed:e3:00:ee:b7:
65:4f:66:e8:75:6a:51:df:74:be:db:af:63:0f:28:
ea:51:7d:48:4b:93:45:95:18:b3:72:0f:b7:57:53:
96:bf:ac:ad:2f:0f:fb:93:c5:60:28:0e:7c:3e:65:
30:de:3c:9d:92:13:63:14:cf:73:0a:51:68:39:72:
f6:af:f1:b7:57:d9:12:a4:c9:fe:8f:dd:66:bf:60:
a9:66:88:2a:bc:6f:d9:30:08:a5:0a:9a:5e:3d:3f:
46:15:dc:cf:3e:47:d6:1b:d2:95:6d:12:be:6d:62:
75:d2:f5:44:92:69:21:81:13:f3:6b:e9:cc:dc:5f:
62:bb:09:58:c5:53:1b:66:f7:ce:9c:3e:1e:97:7e:
30:87:ba:3b:f9:06:1c:aa:be:18:38:3e:84:ff:d1:
a6:04:2e:4c:37:33:d1:55:e2:2a:a6:48:e0:dd:23:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DE:90:AF:8B:D2:F6:6A:E4:DA:AE:98:A7:72:5C:C4:AC:1D:2C:46
X509v3 Authority Key Identifier:
keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:75:cc:75:be:2a:7c:a3:53:ef:cf:a4:94:b2:ea:27:65:2c:
f3:75:d1:af:a3:22:ee:c7:c7:a1:79:2d:bb:7c:b3:42:6d:2f:
df:12:c9:17:55:a8:c6:08:e4:db:75:ea:f3:a4:79:2f:95:33:
eb:40:de:84:59:40:27:01:4b:54:66:6f:65:3d:11:d9:f7:85:
43:92:4b:e9:96:e5:f7:48:eb:06:1d:03:14:8f:3a:cc:2b:4f:
44:fb:dd:75:a6:6e:80:02:40:b7:5c:78:0f:a1:f6:07:0c:3d:
b0:05:b2:59:2b:23:38:cb:2a:fa:bd:d6:3b:18:7a:a0:ff:63:
fd:eb:c2:69:94:d0:07:58:fb:d4:4b:c9:6d:4b:f0:ed:90:52:
be:fc:ed:1b:8b:19:18:44:52:96:f2:ac:16:e2:a4:ae:00:ea:
28:26:eb:73:9e:e2:bd:d0:c1:0f:e5:0e:41:b1:a3:68:18:51:
39:18:75:97:c0:c1:de:db:e1:41:df:e4:e6:ad:51:49:ad:de:
29:9d:eb:e3:2b:c0:bd:f5:06:53:c9:ab:63:93:0c:31:4d:ae:
d5:04:47:16:e3:55:30:9d:f6:fb:be:93:be:93:c1:55:09:4f:
05:df:84:42:98:24:eb:1d:d5:11:a6:da:fa:c1:61:64:76:6a:
26:e4:81:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:06 2026 by rpki-client