This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32322d3234203d3e203539303333.roa File: 3130332e3230342e37322e302f32322d3234203d3e203539303333.roa (raw, json) Hash identifier: mB3jQDfmzg7vK2LwQDHCFXgcwGI7tCNPqa24X0JfllI= Subject key identifier: B5:A2:ED:F9:4F:C4:10:5D:17:8E:7D:EA:7A:0E:8D:51:10:52:4F:85 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 0C18A25F6BF1751F37DAFAED1C0BC17238929008 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32322d3234203d3e203539303333.roa Signing time: Tue 20 Jan 2026 02:16:43 +0000 ROA not before: Tue 20 Jan 2026 02:11:43 +0000 ROA not after: Tue 19 Jan 2027 02:16:43 +0000 asID: 59033 IP address blocks: 103.204.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:18:a2:5f:6b:f1:75:1f:37:da:fa:ed:1c:0b:c1:72:38:92:90:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:43 2026 GMT Not After : Jan 19 02:16:43 2027 GMT Subject: CN=B5A2EDF94FC4105D178E7DEA7A0E8D5110524F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:9f:51:02:36:34:11:61:37:4b:19:74:57: d4:6f:2d:12:69:a1:bc:f8:27:04:66:74:88:d7:51: be:5d:55:ef:1d:77:5d:9b:e5:16:ee:e3:d4:58:18: 3d:bd:b7:cf:a0:3d:34:c8:c9:2b:4e:5e:a6:97:af: 01:6a:ca:4b:64:8c:82:95:5c:b7:74:ae:a8:3d:64: 02:30:1f:32:5b:1f:e9:e1:5a:e6:cb:20:fa:ca:26: 5c:9e:a8:74:36:a5:5c:12:be:60:42:92:a9:7b:30: b2:d3:90:2a:71:e3:cf:75:5f:11:df:0e:8d:87:24: fb:f1:f6:d0:12:13:d9:54:9e:8a:df:c2:31:85:89: d6:65:ef:be:1d:84:0b:c4:f8:54:79:da:e8:99:82: 5d:56:a3:b0:8c:e9:fb:a0:59:05:b1:0e:19:b4:88: d2:50:fe:c5:68:8f:47:70:90:85:55:72:1b:04:3e: 92:30:3d:74:77:26:dd:2d:fb:3c:36:59:bd:eb:80: 97:e6:20:78:6f:8f:66:fe:96:cf:25:3d:f8:41:de: a4:a4:df:cf:01:69:dd:dc:26:02:2e:22:77:a5:3c: 32:04:0f:9f:87:b6:59:e8:12:8e:5e:7e:89:d2:33: 05:3f:9c:99:1b:f2:25:a0:7e:82:50:9b:5a:57:cf: ba:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A2:ED:F9:4F:C4:10:5D:17:8E:7D:EA:7A:0E:8D:51:10:52:4F:85 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32322d3234203d3e203539303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.72.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:2d:86:f4:c7:32:14:e7:98:f6:00:1e:16:45:4d:6c:a0:ca: 9c:52:a5:c0:79:af:74:a0:14:41:20:fa:c0:4d:03:f8:a8:c5: 11:41:16:3b:ba:7a:16:19:41:a8:98:78:da:01:1e:c9:a0:ae: 68:42:7a:68:03:6b:48:8d:36:50:9d:5e:19:b2:1f:77:1a:34: 75:88:aa:bd:ae:cd:e5:aa:ff:1b:40:e0:70:81:d7:8c:c5:55: 26:28:f2:a6:ee:10:c5:e9:c5:30:11:11:ae:52:13:84:40:6c: a7:f3:b3:1b:fd:a4:11:c4:8b:69:88:c2:3d:36:3e:1f:b9:b6: 26:b3:21:dc:e2:c5:5b:23:da:61:fd:71:98:0f:ed:41:df:f8: 91:ef:10:ef:8f:1f:60:7a:f4:f0:40:3d:20:8f:4e:f7:03:2e: f8:b7:d5:ac:2c:f6:74:cb:44:ee:3a:58:fe:2b:59:f1:c7:f1: 35:bc:8c:53:f6:3f:8b:e7:08:5d:90:30:e6:7e:dd:fa:1b:4d: 9e:a7:22:10:02:ff:32:15:eb:fb:de:8a:d1:13:c7:a8:a5:2b: 9e:10:96:f3:09:59:20:4e:18:a3:aa:51:ae:53:dc:e9:98:5e: 3c:ec:c2:b9:56:6d:56:61:7a:85:38:26:0f:17:f0:4b:9c:2d: 35:88:56:f6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDBiiX2vxdR832vrtHAvBcjiSkAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDNaFw0yNzAxMTkwMjE2NDNaMDMxMTAvBgNV BAMTKEI1QTJFREY5NEZDNDEwNUQxNzhFN0RFQTdBMEU4RDUxMTA1MjRGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFN59RAjY0EWE3Sxl0V9RvLRJp obz4JwRmdIjXUb5dVe8dd12b5Rbu49RYGD29t8+gPTTIyStOXqaXrwFqyktkjIKV XLd0rqg9ZAIwHzJbH+nhWubLIPrKJlyeqHQ2pVwSvmBCkql7MLLTkCpx4891XxHf Do2HJPvx9tASE9lUnorfwjGFidZl774dhAvE+FR52uiZgl1Wo7CM6fugWQWxDhm0 iNJQ/sVoj0dwkIVVchsEPpIwPXR3Jt0t+zw2Wb3rgJfmIHhvj2b+ls8lPfhB3qSk 388Bad3cJgIuInelPDIED5+HtlnoEo5efonSMwU/nJkb8iWgfoJQm1pXz7qHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUtaLt+U/EEF0Xjn3qeg6NURBST4UwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDkxNjg2Ny8wLzMxMzAzMzJlMzIz MDM0MmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzOTMwMzMzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfMSDANBgkqhkiG9w0BAQsFAAOCAQEALS2G9McyFOeY9gAeFkVNbKDK nFKlwHmvdKAUQSD6wE0D+KjFEUEWO7p6FhlBqJh42gEeyaCuaEJ6aANrSI02UJ1e GbIfdxo0dYiqva7N5ar/G0DgcIHXjMVVJijypu4QxenFMBERrlIThEBsp/OzG/2k EcSLaYjCPTY+H7m2JrMh3OLFWyPaYf1xmA/tQd/4ke8Q748fYHr08EA9II9O9wMu +LfVrCz2dMtE7jpY/itZ8cfxNbyMU/Y/i+cIXZAw5n7d+htNnqciEAL/MhXr+96K 0RPHqKUrnhCW8wlZIE4Yo6pRrlPc6ZhePOzCuVZtVmF6hTgmDxfwS5wtNYhW9g== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:44 2026 by rpki-client