This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32322d3234203d3e20313332313638.roa File: 3130332e3230342e37322e302f32322d3234203d3e20313332313638.roa (raw, json) Hash identifier: vIxinq+PxVf5QpmwbUh/AWqEXFEqMtO1Zsqh5o961nU= Subject key identifier: 88:9F:B4:0A:CA:2E:CE:2F:30:4A:FE:64:83:A6:3C:B5:36:07:10:BF Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 0179B89BD1BEE6F82F5FB87AB1AB3A14F6C747D0 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32322d3234203d3e20313332313638.roa Signing time: Tue 20 Jan 2026 02:16:43 +0000 ROA not before: Tue 20 Jan 2026 02:11:43 +0000 ROA not after: Tue 19 Jan 2027 02:16:43 +0000 asID: 132168 IP address blocks: 103.204.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:79:b8:9b:d1:be:e6:f8:2f:5f:b8:7a:b1:ab:3a:14:f6:c7:47:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:43 2026 GMT Not After : Jan 19 02:16:43 2027 GMT Subject: CN=889FB40ACA2ECE2F304AFE6483A63CB5360710BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:0b:d7:58:32:2c:73:ac:88:da:59:62:e6: 73:66:d6:5a:3d:6a:0e:52:28:32:63:c6:4b:ec:44: 17:db:69:3e:4b:46:4c:83:c5:6c:14:36:de:5b:a5: de:12:c1:98:41:bc:54:15:6a:97:45:88:31:e3:12: 93:40:0f:c8:a8:1c:3f:aa:f2:33:d6:fb:1f:35:93: be:da:74:30:0e:80:72:6f:cc:a5:01:b4:0c:32:09: e2:d8:a8:e5:67:98:4b:4e:bf:12:77:3a:3c:ad:38: 2e:a6:a5:a5:46:ec:de:ce:71:dc:9c:81:17:a8:1b: a1:e5:a2:c3:52:52:fb:9e:93:85:d4:f0:4a:03:41: e6:9f:03:22:b3:92:56:f3:e8:63:04:40:be:cd:40: 57:16:a3:bc:d5:96:e4:fc:36:31:20:26:ad:2c:61: a6:a7:4a:d3:e5:d2:69:2c:10:57:71:7b:70:1e:bd: 3c:e2:c1:68:38:52:36:47:02:c0:5a:62:9b:f7:5b: 77:de:91:12:dd:47:0d:44:bc:30:6f:cb:63:02:a5: 91:c8:16:50:eb:81:5b:40:11:56:bf:0e:ea:4f:73: 08:c5:71:2e:22:88:f4:e9:91:bf:17:c5:c9:2f:00: b4:d2:dd:8f:2b:9d:cb:cd:0b:8b:75:e7:4b:5c:7b: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9F:B4:0A:CA:2E:CE:2F:30:4A:FE:64:83:A6:3C:B5:36:07:10:BF X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32322d3234203d3e20313332313638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.72.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:bc:dd:bc:0d:0a:eb:24:b3:fe:a5:35:d8:94:a8:6f:71:33: f7:a3:c5:ee:34:bf:48:f2:8d:3b:ca:15:55:41:73:01:65:93: a7:8f:f0:75:7e:7a:07:3f:4e:a5:59:43:5d:f7:55:7b:f4:0f: 71:b8:e5:c8:1b:98:86:0a:ef:74:ec:d2:c6:62:39:44:ff:a0: 56:a8:31:d8:4d:1a:d4:38:c8:aa:77:b4:cf:8f:07:95:38:1e: b9:7d:6b:34:ca:71:2b:96:5f:62:1b:f4:5b:5a:d8:24:2d:ad: 1d:d5:42:f3:90:f9:f9:93:f2:68:a8:2a:03:49:ac:14:8f:20: f3:74:00:7b:1d:f1:bf:64:1b:95:af:67:70:f0:94:a0:07:d6: 3d:1c:03:85:ea:88:07:a9:99:08:82:d1:b7:7c:d7:46:f9:f6: 19:2d:5a:5d:e9:de:0e:8c:7c:5e:e0:86:4c:b1:db:73:77:42: 1b:d1:19:38:59:38:5e:11:32:53:0c:2c:b2:61:9c:c9:57:36: 71:3e:f9:f7:a1:af:f7:71:19:79:c1:89:74:db:2e:e0:4a:9a: 27:1d:db:a0:00:1f:85:c5:19:fd:68:46:b5:d7:70:a8:1e:46: 6a:52:87:19:ba:1b:e1:00:30:dd:af:83:ea:2f:90:1c:43:cc: bd:28:61:51 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUAXm4m9G+5vgvX7h6sas6FPbHR9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDNaFw0yNzAxMTkwMjE2NDNaMDMxMTAvBgNV BAMTKDg4OUZCNDBBQ0EyRUNFMkYzMDRBRkU2NDgzQTYzQ0I1MzYwNzEwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuAvXWDIsc6yI2lli5nNm1lo9 ag5SKDJjxkvsRBfbaT5LRkyDxWwUNt5bpd4SwZhBvFQVapdFiDHjEpNAD8ioHD+q 8jPW+x81k77adDAOgHJvzKUBtAwyCeLYqOVnmEtOvxJ3OjytOC6mpaVG7N7Ocdyc gReoG6HlosNSUvuek4XU8EoDQeafAyKzklbz6GMEQL7NQFcWo7zVluT8NjEgJq0s YaanStPl0mksEFdxe3AevTziwWg4UjZHAsBaYpv3W3fekRLdRw1EvDBvy2MCpZHI FlDrgVtAEVa/DupPcwjFcS4iiPTpkb8XxckvALTS3Y8rncvNC4t150tce96lAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUiJ+0Csouzi8wSv5kg6Y8tTYHEL8wHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5MTY4NjcvMC8zMTMwMzMyZTMy MzAzNDJlMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMjMxMzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfMSDANBgkqhkiG9w0BAQsFAAOCAQEAXLzdvA0K6ySz/qU12JSo b3Ez96PF7jS/SPKNO8oVVUFzAWWTp4/wdX56Bz9OpVlDXfdVe/QPcbjlyBuYhgrv dOzSxmI5RP+gVqgx2E0a1DjIqne0z48HlTgeuX1rNMpxK5ZfYhv0W1rYJC2tHdVC 85D5+ZPyaKgqA0msFI8g83QAex3xv2Qbla9ncPCUoAfWPRwDheqIB6mZCILRt3zX Rvn2GS1aXeneDox8XuCGTLHbc3dCG9EZOFk4XhEyUwwssmGcyVc2cT7596Gv93EZ ecGJdNsu4EqaJx3boAAfhcUZ/WhGtddwqB5GalKHGbob4QAw3a+D6i+QHEPMvShh UQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:27 2026 by rpki-client