This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132322e302f32342d3234203d3e2031343439.roa File: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (raw, json) Hash identifier: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0= Subject key identifier: 04:DC:8A:BB:DC:85:95:22:98:5F:59:3D:17:C9:6C:03:D3:36:91:15 Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 2A46594C95002C9153C2FEFCB095D4F8A2473E7B Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132322e302f32342d3234203d3e2031343439.roa Signing time: Tue 20 Jan 2026 02:12:02 +0000 ROA not before: Tue 20 Jan 2026 02:07:02 +0000 ROA not after: Tue 19 Jan 2027 02:12:02 +0000 asID: 1449 IP address blocks: 103.59.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:46:59:4c:95:00:2c:91:53:c2:fe:fc:b0:95:d4:f8:a2:47:3e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Jan 20 02:07:02 2026 GMT Not After : Jan 19 02:12:02 2027 GMT Subject: CN=04DC8ABBDC859522985F593D17C96C03D3369115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:0d:19:28:16:9a:16:fe:08:47:0a:33:12: c6:5a:f4:43:56:16:1e:0b:eb:17:cc:dc:d0:cb:bb: 5e:b0:be:3f:a4:25:72:d7:9a:94:a4:e9:b0:88:8c: eb:69:b1:8d:85:f2:b8:1b:1f:00:eb:d5:e6:2e:94: 15:99:39:37:dc:94:b1:55:66:21:a1:3a:67:53:8a: 29:ea:78:a3:a2:a6:b8:93:05:ee:51:5a:53:a0:55: 1d:ea:b7:83:84:d7:6b:79:10:72:fe:2d:4a:49:9a: c9:f4:84:6e:09:72:c0:21:d8:f9:e7:90:fb:61:5c: 9f:6b:e7:2d:1b:8d:53:c8:8e:20:b2:b2:a1:c1:86: 18:be:14:a8:12:62:8f:75:15:dc:01:3b:e5:44:3c: 51:0c:1a:69:6e:ae:60:cd:44:c6:74:cd:4e:51:a4: 90:69:43:3f:96:d8:af:f2:50:14:41:aa:56:3f:17: 36:27:c9:4f:22:c8:f5:6e:bf:6f:bb:d6:6e:fb:0f: fc:d0:6f:25:25:7e:42:69:fd:6a:99:3c:8e:1c:73: b6:cd:3c:bf:d2:4f:d3:9e:4b:4d:42:cd:a3:97:21: 93:5e:d1:84:c9:c3:03:07:43:c3:d6:0c:f8:ac:18: 92:c0:d3:97:f5:90:2f:0a:93:13:ff:2b:a3:ce:c6: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DC:8A:BB:DC:85:95:22:98:5F:59:3D:17:C9:6C:03:D3:36:91:15 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132322e302f32342d3234203d3e2031343439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.59.122.0/24 Signature Algorithm: sha256WithRSAEncryption 63:a9:30:f7:0a:bd:ce:0d:8c:fd:1d:70:a6:8b:3f:fe:dd:aa: 0e:48:b2:87:f4:d1:8a:e9:9c:7d:01:15:83:82:88:7a:d3:25: 80:0f:b9:bb:97:d1:08:fc:33:45:41:79:4c:5b:e7:bb:ca:98: 7d:ca:54:e6:bf:4a:a8:cd:9c:72:dc:2d:0e:06:04:e5:b9:28: cd:06:fe:0c:b8:a5:b4:f0:60:65:86:c1:ef:11:f1:95:82:62: a9:11:0c:8e:80:40:2f:bd:62:84:8c:8c:55:a9:8a:9f:47:b4: de:35:92:f5:20:8c:ed:75:ee:0c:34:f3:ee:54:b8:d3:30:fd: a1:b6:22:86:9a:1c:d7:32:df:cc:d9:3f:22:a6:1c:bb:95:d3: d4:28:14:c8:31:71:3c:90:72:93:41:2e:88:9c:d2:73:38:19: 0b:a6:e1:99:c8:45:f4:34:d8:b0:fe:86:aa:c4:e6:fd:54:06: 55:46:2e:d1:b7:6a:93:a0:64:73:f6:4a:8b:5a:c7:6d:7a:f3: 4c:2f:f9:90:0a:6d:dc:a0:c5:ce:32:32:f7:71:b0:d7:ed:4a: c3:f4:16:f8:cf:e6:0c:77:a7:9b:46:57:c5:ef:63:71:0b:9e: 5c:80:77:ef:51:61:fe:08:c0:9a:3c:81:5c:5f:17:68:e0:78: 4b:b3:5c:7b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKkZZTJUALJFTwv78sJXU+KJHPnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjAxMjAwMjA3MDJaFw0yNzAxMTkwMjEyMDJaMDMxMTAvBgNV BAMTKDA0REM4QUJCREM4NTk1MjI5ODVGNTkzRDE3Qzk2QzAzRDMzNjkxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIA0ZKBaaFv4IRwozEsZa9ENW Fh4L6xfM3NDLu16wvj+kJXLXmpSk6bCIjOtpsY2F8rgbHwDr1eYulBWZOTfclLFV ZiGhOmdTiinqeKOipriTBe5RWlOgVR3qt4OE12t5EHL+LUpJmsn0hG4JcsAh2Pnn kPthXJ9r5y0bjVPIjiCysqHBhhi+FKgSYo91FdwBO+VEPFEMGmlurmDNRMZ0zU5R pJBpQz+W2K/yUBRBqlY/FzYnyU8iyPVuv2+71m77D/zQbyUlfkJp/WqZPI4cc7bN PL/ST9OeS01CzaOXIZNe0YTJwwMHQ8PWDPisGJLA05f1kC8KkxP/K6POxibvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUBNyKu9yFlSKYX1k9F8lsA9M2kRUwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk1MDQ3OTM5LzAvMzEzMDMzMmUzNTM5 MmUzMTMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzQzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGc7ejANBgkqhkiG9w0BAQsFAAOCAQEAY6kw9wq9zg2M/R1wpos//t2qDkiy h/TRiumcfQEVg4KIetMlgA+5u5fRCPwzRUF5TFvnu8qYfcpU5r9KqM2cctwtDgYE 5bkozQb+DLiltPBgZYbB7xHxlYJiqREMjoBAL71ihIyMVamKn0e03jWS9SCM7XXu DDTz7lS40zD9obYihpoc1zLfzNk/IqYcu5XT1CgUyDFxPJByk0EuiJzSczgZC6bh mchF9DTYsP6GqsTm/VQGVUYu0bdqk6Bkc/ZKi1rHbXrzTC/5kApt3KDFzjIy93Gw 1+1Kw/QW+M/mDHenm0ZXxe9jcQueXIB371Fh/gjAmjyBXF8XaOB4S7Ncew== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:27 2026 by rpki-client