This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37332e302f32342d3234203d3e203633363839.roa File: 3130332e3230342e37332e302f32342d3234203d3e203633363839.roa (raw, json) Hash identifier: Q6jgMj/d3okvKv3ynC6CWoj1fUezFYleWugWctYgwmc= Subject key identifier: B8:F9:FD:16:AF:E5:59:C8:D9:79:F2:BC:E9:3D:39:BA:EB:A1:A2:7B Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 243F9809C1E70675E06EAC3E1F5FF712B7B65039 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37332e302f32342d3234203d3e203633363839.roa Signing time: Tue 20 Jan 2026 02:16:44 +0000 ROA not before: Tue 20 Jan 2026 02:11:44 +0000 ROA not after: Tue 19 Jan 2027 02:16:44 +0000 asID: 63689 IP address blocks: 103.204.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3f:98:09:c1:e7:06:75:e0:6e:ac:3e:1f:5f:f7:12:b7:b6:50:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:44 2026 GMT Not After : Jan 19 02:16:44 2027 GMT Subject: CN=B8F9FD16AFE559C8D979F2BCE93D39BAEBA1A27B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a5:30:cc:d0:59:ab:64:90:92:4b:8f:b7:a6: 14:42:87:ac:b5:25:46:b6:64:22:5f:5f:9f:87:18: b2:eb:90:fb:ee:dc:09:3e:5a:05:f8:4b:cc:9a:4f: bf:21:2d:a8:63:0e:bd:61:9a:12:64:a6:d0:47:d7: 3a:2e:f0:29:b0:2e:41:c4:6d:0b:2a:2d:1b:f7:8d: 78:1d:32:19:31:99:31:3c:01:c3:27:80:8d:e8:2a: 0b:f3:21:e9:eb:c3:87:aa:46:ed:d7:37:59:8e:d7: f3:9a:3b:6f:0d:e0:ff:62:4a:ba:f8:46:23:16:81: a5:83:48:cf:68:f4:4f:1e:94:77:4a:1d:4a:31:05: 2b:37:3b:93:36:4a:67:5e:f7:d8:43:51:95:c6:65: e6:a2:78:b0:02:10:3d:7e:2a:78:bd:14:43:41:c3: b5:72:aa:79:81:ad:c7:e6:d6:94:5c:31:fc:6b:ff: bb:24:a3:8c:df:7b:7d:b8:a8:fa:7a:5a:85:8a:05: 94:4a:00:5a:9c:44:0d:ad:83:15:be:d1:ae:9f:86: e2:d0:3f:ab:aa:bc:c6:35:e3:2e:90:cd:a5:ee:6f: 92:94:ce:49:0d:8f:5e:52:f5:40:ce:74:5d:a0:a6: 89:bd:af:1d:48:30:b1:18:0a:f6:cb:d1:0b:a2:d3: 4e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F9:FD:16:AF:E5:59:C8:D9:79:F2:BC:E9:3D:39:BA:EB:A1:A2:7B X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37332e302f32342d3234203d3e203633363839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.73.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:ba:d6:73:92:a3:80:58:c8:9a:39:54:e2:23:6c:a1:00:6d: 4e:a5:2a:a1:d5:89:11:b3:fc:97:65:5b:59:43:5a:01:1e:a3: f4:0c:2f:1c:fd:cc:e9:d7:9e:17:a0:09:9d:ad:44:d4:8c:db: 50:60:b1:1a:02:6e:9a:3e:ef:b8:f5:75:83:f6:97:c0:4d:8e: 0b:bb:37:06:57:30:39:2b:4b:27:94:1d:cb:27:9d:15:8d:33: e0:8c:50:eb:ab:15:86:fa:a5:52:1d:fc:c0:d8:16:5f:62:5b: df:38:4e:63:7d:a3:94:28:d9:97:fb:a3:82:f8:34:41:89:88: 8d:d6:45:8f:a1:95:f2:78:2a:c8:e6:43:8b:38:2d:55:b2:98: a5:f1:9d:96:d7:f8:ac:63:63:f8:02:15:03:ac:ad:fe:b2:63: ba:88:10:e0:75:4e:76:dc:2f:ba:ef:24:84:da:f5:22:77:fd: 1a:80:e7:ea:fe:45:cb:3c:47:9f:e5:24:14:c5:f2:0d:f5:f1: 01:fa:c6:dd:75:e1:36:3e:9c:31:79:96:35:4f:91:28:d9:ac: 74:ab:24:dd:67:21:99:8e:fa:bb:53:1b:73:47:53:5a:fa:7e: db:00:30:94:95:bc:0f:9b:aa:cf:70:df:f6:0b:25:23:5b:20: 4f:81:e2:4e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJD+YCcHnBnXgbqw+H1/3Ere2UDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDRaFw0yNzAxMTkwMjE2NDRaMDMxMTAvBgNV BAMTKEI4RjlGRDE2QUZFNTU5QzhEOTc5RjJCQ0U5M0QzOUJBRUJBMUEyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRpTDM0FmrZJCSS4+3phRCh6y1 JUa2ZCJfX5+HGLLrkPvu3Ak+WgX4S8yaT78hLahjDr1hmhJkptBH1zou8CmwLkHE bQsqLRv3jXgdMhkxmTE8AcMngI3oKgvzIenrw4eqRu3XN1mO1/OaO28N4P9iSrr4 RiMWgaWDSM9o9E8elHdKHUoxBSs3O5M2Smde99hDUZXGZeaieLACED1+Kni9FENB w7VyqnmBrcfm1pRcMfxr/7sko4zfe324qPp6WoWKBZRKAFqcRA2tgxW+0a6fhuLQ P6uqvMY14y6QzaXub5KUzkkNj15S9UDOdF2gpom9rx1IMLEYCvbL0Qui005pAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUuPn9Fq/lWcjZefK86T05uuuhonswHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDkxNjg2Ny8wLzMxMzAzMzJlMzIz MDM0MmUzNzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzgzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGfMSTANBgkqhkiG9w0BAQsFAAOCAQEADbrWc5KjgFjImjlU4iNsoQBt TqUqodWJEbP8l2VbWUNaAR6j9AwvHP3M6deeF6AJna1E1IzbUGCxGgJumj7vuPV1 g/aXwE2OC7s3BlcwOStLJ5QdyyedFY0z4IxQ66sVhvqlUh38wNgWX2Jb3zhOY32j lCjZl/ujgvg0QYmIjdZFj6GV8ngqyOZDizgtVbKYpfGdltf4rGNj+AIVA6yt/rJj uogQ4HVOdtwvuu8khNr1Inf9GoDn6v5FyzxHn+UkFMXyDfXxAfrG3XXhNj6cMXmW NU+RKNmsdKsk3WchmY76u1Mbc0dTWvp+2wAwlJW8D5uqz3Df9gslI1sgT4HiTg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:03 2026 by rpki-client