This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32342d3234203d3e203633363839.roa File: 3130332e3230342e37322e302f32342d3234203d3e203633363839.roa (raw, json) Hash identifier: iwm1PAsf58NIBLmzjRHazdy9+/542RiOrglkzAVdIPQ= Subject key identifier: C5:C3:6E:22:16:04:A0:F3:83:4B:96:CC:79:71:6C:1E:A4:A0:99:BC Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 343155917A424D9BCD04E1F3320A4E8D3CA89088 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32342d3234203d3e203633363839.roa Signing time: Tue 20 Jan 2026 02:16:44 +0000 ROA not before: Tue 20 Jan 2026 02:11:44 +0000 ROA not after: Tue 19 Jan 2027 02:16:44 +0000 asID: 63689 IP address blocks: 103.204.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:31:55:91:7a:42:4d:9b:cd:04:e1:f3:32:0a:4e:8d:3c:a8:90:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:44 2026 GMT Not After : Jan 19 02:16:44 2027 GMT Subject: CN=C5C36E221604A0F3834B96CC79716C1EA4A099BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:2d:e8:e6:12:ce:e8:38:eb:19:eb:8f:a1: 35:38:cb:c3:0b:ea:47:05:0d:45:03:60:1f:90:0e: c3:65:61:b1:51:4d:50:cf:75:a4:26:f9:88:32:65: 78:ca:64:ce:f9:97:0f:ba:c5:0b:09:d2:76:9f:49: 1f:8a:cc:3b:43:24:01:b5:fa:a0:20:aa:23:94:ae: 70:62:a9:71:ea:82:6c:53:80:93:45:8e:14:63:cf: 3b:ae:e3:e1:4f:94:bd:74:11:b3:09:5d:4f:ae:7d: 77:66:5f:3d:af:9c:3f:bb:cd:0f:d3:90:da:a7:ef: 6d:e6:c8:30:db:ff:1c:f4:8c:64:de:ee:10:85:f5: fd:9d:84:d6:e8:84:c9:3b:90:f8:0f:94:1d:90:64: 50:a0:93:57:3c:5c:30:94:15:29:99:d3:fb:28:32: e4:28:0b:d6:a9:90:0c:1b:6d:92:b4:ba:ba:3f:9c: 89:b0:86:d9:e9:3b:a5:81:98:e5:9e:9a:f9:b6:6e: 29:91:13:5a:a6:91:22:be:69:80:0b:65:b3:ea:53: 23:10:bf:0e:88:78:fa:a3:40:f5:81:61:51:93:4a: 1e:01:22:d9:f0:38:b5:34:2f:4e:34:9e:f5:f8:51: eb:8e:d0:77:33:4c:a0:55:32:34:53:9c:58:de:fe: c2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:6E:22:16:04:A0:F3:83:4B:96:CC:79:71:6C:1E:A4:A0:99:BC X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32342d3234203d3e203633363839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.72.0/24 Signature Algorithm: sha256WithRSAEncryption b1:73:86:7b:cb:06:c3:e1:61:30:55:6c:c7:ea:f0:da:b3:77: 0c:94:d2:fa:c5:fe:ee:2d:d0:b8:c3:b1:c3:f1:fa:ea:f1:71: c9:de:22:71:d0:a4:7f:ec:a9:f9:86:4b:4f:ca:5b:a9:78:5f: 42:2d:ae:2f:10:2b:df:49:1e:15:d8:89:00:2c:12:b1:96:74: 41:43:8e:bc:92:ce:91:38:c5:ab:53:15:06:7d:94:f5:04:37: 7f:bf:e4:28:e7:69:a7:a7:ad:89:10:c1:68:09:39:96:c5:00: 64:24:c9:54:51:75:3c:e8:1a:7e:94:2c:f1:05:6c:7f:8e:1f: a2:31:e4:49:ad:49:4a:dc:3b:08:61:10:d4:c5:88:e3:1a:67: 19:e5:5e:6a:80:34:37:71:e0:b0:d8:e0:18:49:65:8c:6a:04: 0b:9a:1d:c7:b9:07:07:67:8c:dd:9f:20:a5:0b:ab:c9:f0:cd: 1f:a3:c9:97:fc:48:f8:d6:4a:8c:db:38:ad:a2:0c:fb:d8:34: 69:95:14:23:68:d8:e9:27:75:98:be:27:b7:10:e4:89:80:36: 8d:d2:c1:fe:7f:dd:f9:7d:8a:5a:93:ad:4e:12:e9:bf:f5:d9: 13:d6:1f:5b:fe:75:0b:7c:95:fb:d2:b2:47:ee:ab:c0:8a:25: 64:ed:2a:7b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNDFVkXpCTZvNBOHzMgpOjTyokIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDRaFw0yNzAxMTkwMjE2NDRaMDMxMTAvBgNV BAMTKEM1QzM2RTIyMTYwNEEwRjM4MzRCOTZDQzc5NzE2QzFFQTRBMDk5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Hy3o5hLO6DjrGeuPoTU4y8ML 6kcFDUUDYB+QDsNlYbFRTVDPdaQm+YgyZXjKZM75lw+6xQsJ0nafSR+KzDtDJAG1 +qAgqiOUrnBiqXHqgmxTgJNFjhRjzzuu4+FPlL10EbMJXU+ufXdmXz2vnD+7zQ/T kNqn723myDDb/xz0jGTe7hCF9f2dhNbohMk7kPgPlB2QZFCgk1c8XDCUFSmZ0/so MuQoC9apkAwbbZK0uro/nImwhtnpO6WBmOWemvm2bimRE1qmkSK+aYALZbPqUyMQ vw6IePqjQPWBYVGTSh4BItnwOLU0L040nvX4UeuO0HczTKBVMjRTnFje/sI1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUxcNuIhYEoPODS5bMeXFsHqSgmbwwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDkxNjg2Ny8wLzMxMzAzMzJlMzIz MDM0MmUzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzgzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGfMSDANBgkqhkiG9w0BAQsFAAOCAQEAsXOGe8sGw+FhMFVsx+rw2rN3 DJTS+sX+7i3QuMOxw/H66vFxyd4icdCkf+yp+YZLT8pbqXhfQi2uLxAr30keFdiJ ACwSsZZ0QUOOvJLOkTjFq1MVBn2U9QQ3f7/kKOdpp6etiRDBaAk5lsUAZCTJVFF1 POgafpQs8QVsf44fojHkSa1JStw7CGEQ1MWI4xpnGeVeaoA0N3HgsNjgGElljGoE C5odx7kHB2eM3Z8gpQuryfDNH6PJl/xI+NZKjNs4raIM+9g0aZUUI2jY6Sd1mL4n txDkiYA2jdLB/n/d+X2KWpOtThLpv/XZE9YfW/51C3yV+9KyR+6rwIolZO0qew== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:52 2026 by rpki-client