This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132322e302f32342d3234203d3e203539303635.roa File: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (raw, json) Hash identifier: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE= Subject key identifier: 99:7D:EF:AB:61:B4:6E:36:3A:EB:5F:C8:03:D9:A5:90:0C:45:9C:35 Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 6A2E12EFFF41FB4835DD6FC730033D881C77A0FE Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132322e302f32342d3234203d3e203539303635.roa Signing time: Tue 20 Jan 2026 02:12:02 +0000 ROA not before: Tue 20 Jan 2026 02:07:02 +0000 ROA not after: Tue 19 Jan 2027 02:12:02 +0000 asID: 59065 IP address blocks: 103.59.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2e:12:ef:ff:41:fb:48:35:dd:6f:c7:30:03:3d:88:1c:77:a0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Jan 20 02:07:02 2026 GMT Not After : Jan 19 02:12:02 2027 GMT Subject: CN=997DEFAB61B46E363AEB5FC803D9A5900C459C35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:b4:d1:c7:4e:0f:e3:41:7e:04:a3:a1:ef: b8:3c:cb:5d:56:e0:c0:a9:db:da:1a:da:81:76:3c: 69:18:cb:7b:59:c9:88:04:64:17:55:e6:a7:00:3e: 7a:68:3b:20:86:e3:e4:ee:97:0d:41:3a:99:96:1a: 56:30:16:e9:7a:55:67:30:84:02:06:03:5c:33:eb: 9e:2e:ba:9d:e6:8e:82:dc:fb:b6:a0:96:39:55:7b: ad:79:04:43:c3:e3:6b:35:18:2b:9c:22:d4:fb:0e: 96:69:c9:61:b4:4d:7b:0b:6a:24:39:3f:7b:65:1a: f6:31:4a:72:88:d4:1a:e5:75:44:30:5d:39:cc:7d: 86:c4:76:ea:be:82:25:67:ef:31:b4:09:d9:0b:74: 11:58:53:81:91:f0:d2:31:ea:88:92:57:ae:52:5c: 2a:df:0c:b3:5b:4e:e6:f1:49:17:aa:95:6a:49:64: ec:0e:0c:d5:55:ca:ba:0e:65:df:d1:70:69:53:88: 0e:26:1f:f5:48:46:3a:1e:df:3d:c3:7e:63:b0:ed: b9:b8:3a:9c:cd:38:e1:05:2a:4c:89:bd:09:f3:ea: 86:8b:a2:44:c5:79:81:53:3e:49:fa:30:ff:42:94: 9d:74:47:a5:43:e0:cb:63:73:bb:38:d0:1f:b4:83: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7D:EF:AB:61:B4:6E:36:3A:EB:5F:C8:03:D9:A5:90:0C:45:9C:35 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132322e302f32342d3234203d3e203539303635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.59.122.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:95:9c:c4:17:2f:41:41:70:21:28:d8:20:b4:06:de:22:e6: d9:40:54:a4:b3:f0:cf:2a:90:32:9a:b5:77:0b:76:5e:4a:a4: 35:d6:f3:8d:5f:3e:aa:22:d4:24:fe:f5:cb:c7:32:78:c9:82: 72:99:d3:e0:e8:8b:b6:74:0c:de:ff:4d:6a:31:c3:dd:94:a2: 03:f7:12:f2:ec:6e:07:42:75:93:b6:53:fc:a4:eb:a2:70:4d: 07:05:21:ed:bd:e7:c1:1f:50:1f:bf:16:44:a5:7b:ab:42:01: dd:f2:2a:0f:b6:30:77:8f:fa:73:41:c3:27:2d:44:4d:df:72: 39:25:05:ed:76:f9:ea:af:7b:78:60:d9:3b:24:8b:da:2e:5a: fb:72:97:0f:3e:97:0e:98:25:1f:dc:61:2c:99:6f:b8:d5:bc: 5d:7d:e8:35:3f:a5:43:bb:27:51:e1:af:28:ca:2e:58:7b:11: 1e:a8:28:3c:b1:f9:f3:08:de:31:33:9a:14:6b:35:71:08:0b: 49:43:31:1b:ec:d5:af:78:60:a1:3e:8d:cd:e5:32:d1:fa:fb: 63:36:c4:fc:62:2c:b8:8b:3a:4f:a7:30:fa:dd:a5:b9:56:d3: 84:6a:83:5d:96:75:88:0d:d7:fd:0d:77:23:dd:13:2d:64:c6: f8:fe:9c:a1 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUai4S7/9B+0g13W/HMAM9iBx3oP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjAxMjAwMjA3MDJaFw0yNzAxMTkwMjEyMDJaMDMxMTAvBgNV BAMTKDk5N0RFRkFCNjFCNDZFMzYzQUVCNUZDODAzRDlBNTkwMEM0NTlDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2LLTRx04P40F+BKOh77g8y11W 4MCp29oa2oF2PGkYy3tZyYgEZBdV5qcAPnpoOyCG4+Tulw1BOpmWGlYwFul6VWcw hAIGA1wz654uup3mjoLc+7agljlVe615BEPD42s1GCucItT7DpZpyWG0TXsLaiQ5 P3tlGvYxSnKI1BrldUQwXTnMfYbEduq+giVn7zG0CdkLdBFYU4GR8NIx6oiSV65S XCrfDLNbTubxSReqlWpJZOwODNVVyroOZd/RcGlTiA4mH/VIRjoe3z3DfmOw7bm4 OpzNOOEFKkyJvQnz6oaLokTFeYFTPkn6MP9ClJ10R6VD4Mtjc7s40B+0gxZJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUmX3vq2G0bjY661/IA9mlkAxFnDUwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NTA0NzkzOS8wLzMxMzAzMzJlMzUz OTJlMzEzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzYzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGc7ejANBgkqhkiG9w0BAQsFAAOCAQEAO5WcxBcvQUFwISjYILQG3iLm 2UBUpLPwzyqQMpq1dwt2XkqkNdbzjV8+qiLUJP71y8cyeMmCcpnT4OiLtnQM3v9N ajHD3ZSiA/cS8uxuB0J1k7ZT/KTronBNBwUh7b3nwR9QH78WRKV7q0IB3fIqD7Yw d4/6c0HDJy1ETd9yOSUF7Xb56q97eGDZOySL2i5a+3KXDz6XDpglH9xhLJlvuNW8 XX3oNT+lQ7snUeGvKMouWHsRHqgoPLH58wjeMTOaFGs1cQgLSUMxG+zVr3hgoT6N zeUy0fr7YzbE/GIsuIs6T6cw+t2luVbThGqDXZZ1iA3X/Q13I90TLWTG+P6coQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:49 2026 by rpki-client