This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139332e302f32342d3234203d3e20313334373733.roa File: 3130332e3230312e3139332e302f32342d3234203d3e20313334373733.roa (raw, json) Hash identifier: 8eLHNRuQPDos/VQVqtrUan8VhqrgRT0eANeLwIl9R5A= Subject key identifier: A6:44:0A:E6:45:4B:C4:CF:A8:D9:3D:A2:BC:D7:B5:7C:C0:C8:68:6D Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 65D329E7D4D20A7B417680D4A347018D55EE846E Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139332e302f32342d3234203d3e20313334373733.roa Signing time: Tue 20 Jan 2026 01:19:11 +0000 ROA not before: Tue 20 Jan 2026 01:14:11 +0000 ROA not after: Tue 19 Jan 2027 01:19:11 +0000 asID: 134773 IP address blocks: 103.201.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d3:29:e7:d4:d2:0a:7b:41:76:80:d4:a3:47:01:8d:55:ee:84:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jan 20 01:14:11 2026 GMT Not After : Jan 19 01:19:11 2027 GMT Subject: CN=A6440AE6454BC4CFA8D93DA2BCD7B57CC0C8686D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:a5:c4:c7:dd:32:b9:0b:bd:99:41:56:d8: d5:db:08:2e:48:e3:48:29:c0:d6:6b:7e:1b:df:29: f0:80:3a:eb:80:28:bb:75:bd:46:77:d4:0f:fc:c6: 0f:a6:da:d5:6d:f3:10:c2:1e:b6:e8:7b:bf:02:70: 0f:88:b4:2a:1d:4e:7d:46:f8:f4:55:e5:96:0f:aa: 20:94:84:66:76:e6:a5:e6:34:df:48:1c:4d:91:4a: 4f:2c:54:92:73:01:67:98:ea:14:b2:28:ed:28:bb: a1:d6:eb:a9:c3:9d:33:2a:5c:23:74:08:b3:ae:27: ee:1e:8f:5c:de:1b:d9:1e:27:c6:01:ff:42:69:fa: 98:5f:a9:bd:19:f5:2e:57:db:69:d6:80:d6:bd:2e: eb:6b:75:08:fe:c8:a9:da:fd:05:90:bc:6b:97:9c: a8:22:6b:53:be:dc:55:42:67:9d:f4:a7:80:fe:69: ff:2d:f9:da:de:53:3a:84:94:b1:e3:66:33:db:2b: ef:dc:25:1e:e8:64:c2:15:fb:72:8d:73:da:97:86: 7b:97:97:a5:19:9d:23:fe:3c:74:88:35:78:e3:44: ca:33:db:d8:10:e9:8e:22:3a:05:e1:a0:e5:9b:72: 8c:87:d4:f1:c9:86:85:d9:1d:1a:d5:04:20:88:4f: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:44:0A:E6:45:4B:C4:CF:A8:D9:3D:A2:BC:D7:B5:7C:C0:C8:68:6D X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139332e302f32342d3234203d3e20313334373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.201.193.0/24 Signature Algorithm: sha256WithRSAEncryption 82:83:11:a5:ba:31:bc:5b:b8:aa:47:74:36:d3:d3:dd:b5:ff: 10:6c:31:39:1c:35:e9:71:3d:e8:eb:be:ed:b3:52:2f:60:4c: 20:d1:42:a4:b4:6c:ad:45:1a:50:ca:55:1b:12:a0:de:43:1d: d7:9f:fa:ee:c4:d9:79:cf:e6:90:0f:64:16:82:52:e7:94:1e: 53:c0:f0:04:2d:77:a1:cf:64:8d:4b:6c:c5:b7:9a:0e:d2:12: 69:e9:a4:fb:06:68:60:54:f2:79:20:9d:82:5e:76:8e:bc:9d: 27:e5:16:35:a0:94:7d:b0:6a:c7:9d:ab:be:3d:c8:46:5e:cd: d0:16:bc:75:10:c4:55:56:2d:d9:93:c3:10:db:4e:14:a4:4c: 34:fd:19:ee:4a:d7:19:b0:5c:5c:9d:79:85:ea:63:ab:26:76: 3c:fd:e3:67:43:0d:70:89:37:93:d2:a0:0a:93:76:81:ad:36: df:e9:cb:71:f4:02:79:6a:8b:a9:42:de:31:6d:32:ca:b4:94: 88:cf:0d:0c:5e:9d:62:31:98:5c:53:0e:66:77:ac:81:54:08: 77:5e:58:26:c8:e5:33:35:02:0a:ac:13:0b:2b:82:80:f9:51: 20:d1:c2:96:95:79:e2:cf:58:75:2c:3d:d5:1d:36:82:cf:22: 30:4f:d5:84 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUZdMp59TSCntBdoDUo0cBjVXuhG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAxMjAwMTE0MTFaFw0yNzAxMTkwMTE5MTFaMDMxMTAvBgNV BAMTKEE2NDQwQUU2NDU0QkM0Q0ZBOEQ5M0RBMkJDRDdCNTdDQzBDODY4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZwqXEx90yuQu9mUFW2NXbCC5I 40gpwNZrfhvfKfCAOuuAKLt1vUZ31A/8xg+m2tVt8xDCHrboe78CcA+ItCodTn1G +PRV5ZYPqiCUhGZ25qXmNN9IHE2RSk8sVJJzAWeY6hSyKO0ou6HW66nDnTMqXCN0 CLOuJ+4ej1zeG9keJ8YB/0Jp+phfqb0Z9S5X22nWgNa9LutrdQj+yKna/QWQvGuX nKgia1O+3FVCZ530p4D+af8t+dreUzqElLHjZjPbK+/cJR7oZMIV+3KNc9qXhnuX l6UZnSP+PHSINXjjRMoz29gQ6Y4iOgXhoOWbcoyH1PHJhoXZHRrVBCCIT+VZAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUpkQK5kVLxM+o2T2ivNe1fMDIaG0wHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTc5NDU4LzAvMzEzMDMzMmUz MjMwMzEyZTMxMzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3Mzcz My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfJwTANBgkqhkiG9w0BAQsFAAOCAQEAgoMRpboxvFu4qkd0 NtPT3bX/EGwxORw16XE96Ou+7bNSL2BMINFCpLRsrUUaUMpVGxKg3kMd15/67sTZ ec/mkA9kFoJS55QeU8DwBC13oc9kjUtsxbeaDtISaemk+wZoYFTyeSCdgl52jryd J+UWNaCUfbBqx52rvj3IRl7N0Ba8dRDEVVYt2ZPDENtOFKRMNP0Z7krXGbBcXJ15 hepjqyZ2PP3jZ0MNcIk3k9KgCpN2ga023+nLcfQCeWqLqULeMW0yyrSUiM8NDF6d YjGYXFMOZnesgVQId15YJsjlMzUCCqwTCyuCgPlRINHClpV54s9YdSw91R02gs8i ME/VhA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:32 2026 by rpki-client