This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138372e302f32342d3234203d3e203539303433.roa File: 3130332e35362e3138372e302f32342d3234203d3e203539303433.roa (raw, json) Hash identifier: b93qXeOKMOA0k1Tq0lEXe8AyLgDN80wyTvETkl87my8= Subject key identifier: 40:E0:5C:D2:E1:6D:9B:6B:E8:A0:98:CF:44:18:44:99:E7:B8:61:12 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 353FA3E2FDFBD8363A10D91CE636C4C497CAEAFE Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138372e302f32342d3234203d3e203539303433.roa Signing time: Tue 20 Jan 2026 02:18:08 +0000 ROA not before: Tue 20 Jan 2026 02:13:08 +0000 ROA not after: Tue 19 Jan 2027 02:18:08 +0000 asID: 59043 IP address blocks: 103.56.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3f:a3:e2:fd:fb:d8:36:3a:10:d9:1c:e6:36:c4:c4:97:ca:ea:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Jan 20 02:13:08 2026 GMT Not After : Jan 19 02:18:08 2027 GMT Subject: CN=40E05CD2E16D9B6BE8A098CF44184499E7B86112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:c9:7a:59:99:32:e9:cc:fa:9d:cd:da:22: 26:fa:ee:5a:77:b0:f1:ab:37:54:df:8b:d2:7f:cd: 5d:d1:9c:db:7f:0b:4f:fa:d7:80:97:6b:3b:b4:94: fc:4d:70:05:33:93:85:67:e3:89:df:e4:f2:89:3f: d5:14:16:67:22:37:62:f8:57:e6:45:8c:5e:14:fd: 1c:43:8d:c5:bd:98:21:52:e3:e0:9d:d7:d3:4c:90: c9:3c:10:7f:74:6d:b6:99:90:79:4a:8a:02:e8:de: 4c:ce:02:aa:35:97:8c:0e:0b:a3:db:83:ab:ad:18: b4:24:69:2a:65:5a:9a:92:a7:f8:24:85:3d:8b:0f: 9f:a3:25:af:0a:04:63:1b:68:e5:e1:5f:29:a7:56: 22:8e:34:a8:76:d7:b7:57:26:64:36:55:f1:7f:46: 98:25:90:78:55:f8:17:c0:59:bc:7f:79:3b:87:77: c4:f4:c1:f7:4e:63:b2:05:04:ac:ad:81:52:d6:04: fe:cb:f1:c4:56:73:4e:8c:8d:6f:ef:ca:83:b8:b2: b7:75:ac:31:82:d0:1e:15:3d:3d:95:d4:69:67:e7: c3:da:14:41:91:ad:3e:bc:b3:d5:18:38:4b:f6:68: 73:37:cf:ac:dd:00:17:ab:62:7e:af:be:c2:8f:76: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E0:5C:D2:E1:6D:9B:6B:E8:A0:98:CF:44:18:44:99:E7:B8:61:12 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138372e302f32342d3234203d3e203539303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.187.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:e7:0e:5a:82:cc:69:2f:66:9d:e0:c7:90:c3:37:8b:5e:b2: e8:d5:be:f3:d3:41:65:c7:1c:5c:e6:ec:2a:ea:a7:04:b3:08: 52:dc:f1:e3:05:e7:72:51:f2:f0:0e:f7:df:2c:c0:17:05:c2: 7c:af:f6:13:76:6a:56:74:3b:d7:16:04:5f:8b:8f:d5:80:eb: 96:3a:5f:70:fe:76:70:7e:66:85:9c:32:9e:f8:6f:c1:74:3f: 53:46:16:b2:3b:27:51:52:a7:b8:ef:c4:6b:c7:58:41:86:b9: 6a:8b:50:e4:d1:87:99:5d:01:cd:82:db:7e:88:2b:1c:c3:f7: a3:3b:20:3f:c0:3e:87:e5:ce:68:a8:ac:64:2e:5f:b4:a3:a5: 50:25:85:cc:53:aa:11:ad:bc:6c:88:ba:ab:f1:ed:43:3c:2b: 7b:f6:f2:9d:43:c8:dd:7f:44:ed:d4:81:9e:82:55:15:41:0b: 5e:a6:a6:10:69:28:b7:9e:2a:bf:18:af:df:ea:43:e7:01:b7: b5:32:f3:6b:b3:5a:79:ca:77:9a:fa:66:62:93:0f:c6:d9:f8: 3a:c7:c7:94:b4:66:7e:f9:48:bc:34:e3:69:7d:4b:51:cf:8b: cf:73:d1:2a:43:19:9b:d0:78:fa:74:f3:ae:16:29:79:b4:06: a4:58:27:fb -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNT+j4v372DY6ENkc5jbExJfK6v4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjAxMjAwMjEzMDhaFw0yNzAxMTkwMjE4MDhaMDMxMTAvBgNV BAMTKDQwRTA1Q0QyRTE2RDlCNkJFOEEwOThDRjQ0MTg0NDk5RTdCODYxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ncl6WZky6cz6nc3aIib67lp3 sPGrN1Tfi9J/zV3RnNt/C0/614CXazu0lPxNcAUzk4Vn44nf5PKJP9UUFmciN2L4 V+ZFjF4U/RxDjcW9mCFS4+Cd19NMkMk8EH90bbaZkHlKigLo3kzOAqo1l4wOC6Pb g6utGLQkaSplWpqSp/gkhT2LD5+jJa8KBGMbaOXhXymnViKONKh217dXJmQ2VfF/ RpglkHhV+BfAWbx/eTuHd8T0wfdOY7IFBKytgVLWBP7L8cRWc06MjW/vyoO4srd1 rDGC0B4VPT2V1Gln58PaFEGRrT68s9UYOEv2aHM3z6zdABerYn6vvsKPdnAXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUQOBc0uFtm2vooJjPRBhEmee4YRIwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDcyMDI1OS8wLzMxMzAzMzJlMzUz NjJlMzEzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGc4uzANBgkqhkiG9w0BAQsFAAOCAQEATucOWoLMaS9mneDHkMM3i16y 6NW+89NBZcccXObsKuqnBLMIUtzx4wXnclHy8A733yzAFwXCfK/2E3ZqVnQ71xYE X4uP1YDrljpfcP52cH5mhZwynvhvwXQ/U0YWsjsnUVKnuO/Ea8dYQYa5aotQ5NGH mV0BzYLbfogrHMP3ozsgP8A+h+XOaKisZC5ftKOlUCWFzFOqEa28bIi6q/HtQzwr e/bynUPI3X9E7dSBnoJVFUELXqamEGkot54qvxiv3+pD5wG3tTLza7Naecp3mvpm YpMPxtn4OsfHlLRmfvlIvDTjaX1LUc+Lz3PRKkMZm9B4+nTzrhYpebQGpFgn+w== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:57 2026 by rpki-client