This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32342d3234203d3e203539303333.roa File: 3130332e39302e35362e302f32342d3234203d3e203539303333.roa (raw, json) Hash identifier: S61yDZF1whKkcCQwCsWSFDHC9PUJ7gxDhv+oKZ0xdSs= Subject key identifier: 7E:03:20:43:A4:27:1B:B3:DB:FC:69:30:42:BC:FF:32:B4:48:2B:62 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 4491E0705B034684226B012D34C812A2768CDB0A Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32342d3234203d3e203539303333.roa Signing time: Tue 20 Jan 2026 02:16:45 +0000 ROA not before: Tue 20 Jan 2026 02:11:45 +0000 ROA not after: Tue 19 Jan 2027 02:16:45 +0000 asID: 59033 IP address blocks: 103.90.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:91:e0:70:5b:03:46:84:22:6b:01:2d:34:c8:12:a2:76:8c:db:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:45 2026 GMT Not After : Jan 19 02:16:45 2027 GMT Subject: CN=7E032043A4271BB3DBFC693042BCFF32B4482B62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:8d:13:5a:e7:2e:2c:c9:0a:aa:b4:8f:8a: cb:e0:54:24:0f:34:f5:18:d5:1c:06:09:90:fb:ed: 76:4a:41:31:76:04:ee:a9:a3:96:e6:ae:e1:40:5c: 25:39:c4:ba:e4:03:86:d2:f9:e6:5e:ba:81:03:b3: 33:d3:a3:23:2c:cb:08:8e:be:26:ea:4e:7d:b6:d4: 51:70:a5:31:a6:a1:2e:d3:0b:36:ce:42:f9:84:26: ae:9c:f9:4b:ae:45:5f:ee:19:a7:e6:27:2c:2e:a8: 70:27:56:85:37:2f:25:48:5c:f4:42:48:53:3a:88: f2:86:b1:95:d2:bd:56:5a:be:d0:f3:9a:87:8a:43: 54:6b:c3:7e:49:5b:e4:22:77:34:23:97:40:fd:82: b9:71:e1:62:7e:8a:17:f1:bf:a8:52:85:bc:90:60: ec:ed:05:41:b3:f8:ad:ac:47:3b:34:ad:36:6c:ff: cd:aa:d8:4d:e0:7e:e8:b4:a5:e8:d7:a0:d4:d4:f6: 15:26:34:b2:bc:87:4b:a4:56:c2:ef:bd:d9:8e:eb: 00:d2:6c:6f:47:5d:00:7d:61:a3:1a:fc:7b:90:e8: ab:e9:1b:b6:54:e3:a8:99:7f:6e:be:62:a9:7e:55: ee:14:47:5d:7e:4c:f3:03:7b:38:06:0d:4d:a3:1a: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:03:20:43:A4:27:1B:B3:DB:FC:69:30:42:BC:FF:32:B4:48:2B:62 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32342d3234203d3e203539303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.56.0/24 Signature Algorithm: sha256WithRSAEncryption 96:c8:c4:a7:77:70:48:9e:f2:bb:9f:5d:88:43:82:75:6e:21: 91:d8:28:51:84:12:db:2a:46:2a:b2:ce:73:c5:05:ac:a0:b5: dd:d4:20:35:7d:bb:ae:ac:93:f7:e9:1d:05:0d:9e:30:8e:1e: 49:90:8c:56:30:b2:e4:1c:af:5b:47:5d:4e:36:60:9e:4c:3c: 96:74:16:a0:07:46:9c:62:a1:8d:6c:30:3a:03:df:4e:f3:33: a6:e5:e1:5b:5b:37:10:2c:04:ac:34:7c:a6:ef:b7:4b:bd:21: 26:09:ba:03:ea:09:7d:90:e7:5f:9e:ad:be:ea:9c:d0:73:0b: d3:49:a2:44:a6:09:43:dd:b9:e2:3e:c6:28:52:90:b4:25:ef: 3d:8c:66:0b:02:9b:fb:b4:54:dc:43:e6:4c:bd:c1:0f:51:ca: 5a:09:cc:da:08:aa:dd:60:a3:23:77:3d:93:d3:ce:aa:e5:d0: 2f:bd:1f:d5:b4:69:38:90:54:5d:18:ab:d9:a6:1a:b9:19:9f: dc:53:ee:a8:20:b6:44:40:b1:f9:f6:e4:7a:ce:94:4b:aa:f0: 38:83:54:20:ad:a8:1a:f4:ee:1e:55:46:7e:09:1a:35:74:06: fc:f1:f8:5c:a3:1e:2f:4c:57:82:51:98:90:17:ab:54:5c:e3: 4c:bc:94:14 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIURJHgcFsDRoQiawEtNMgSonaM2wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDVaFw0yNzAxMTkwMjE2NDVaMDMxMTAvBgNV BAMTKDdFMDMyMDQzQTQyNzFCQjNEQkZDNjkzMDQyQkNGRjMyQjQ0ODJCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE8I0TWucuLMkKqrSPisvgVCQP NPUY1RwGCZD77XZKQTF2BO6po5bmruFAXCU5xLrkA4bS+eZeuoEDszPToyMsywiO vibqTn221FFwpTGmoS7TCzbOQvmEJq6c+UuuRV/uGafmJywuqHAnVoU3LyVIXPRC SFM6iPKGsZXSvVZavtDzmoeKQ1Rrw35JW+QidzQjl0D9grlx4WJ+ihfxv6hShbyQ YOztBUGz+K2sRzs0rTZs/82q2E3gfui0pejXoNTU9hUmNLK8h0ukVsLvvdmO6wDS bG9HXQB9YaMa/HuQ6KvpG7ZU46iZf26+Yql+Ve4UR11+TPMDezgGDU2jGicHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUfgMgQ6QnG7Pb/GkwQrz/MrRIK2IwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3LzAvMzEzMDMzMmUzOTMw MmUzNTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzMzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdaODANBgkqhkiG9w0BAQsFAAOCAQEAlsjEp3dwSJ7yu59diEOCdW4hkdgo UYQS2ypGKrLOc8UFrKC13dQgNX27rqyT9+kdBQ2eMI4eSZCMVjCy5ByvW0ddTjZg nkw8lnQWoAdGnGKhjWwwOgPfTvMzpuXhW1s3ECwErDR8pu+3S70hJgm6A+oJfZDn X56tvuqc0HML00miRKYJQ9254j7GKFKQtCXvPYxmCwKb+7RU3EPmTL3BD1HKWgnM 2giq3WCjI3c9k9POquXQL70f1bRpOJBUXRir2aYauRmf3FPuqCC2RECx+fbkes6U S6rwOINUIK2oGvTuHlVGfgkaNXQG/PH4XKMeL0xXglGYkBerVFzjTLyUFA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:56 2026 by rpki-client