This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132332e302f32342d3234203d3e2031343439.roa File: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (raw, json) Hash identifier: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8= Subject key identifier: 61:E4:33:D0:1A:B5:0D:B2:1D:9E:08:0E:09:6A:2F:EA:EE:81:E8:43 Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 0104AD60D96C668773CF7A7B3ABDC118154CB1D8 Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132332e302f32342d3234203d3e2031343439.roa Signing time: Tue 20 Jan 2026 02:12:02 +0000 ROA not before: Tue 20 Jan 2026 02:07:02 +0000 ROA not after: Tue 19 Jan 2027 02:12:02 +0000 asID: 1449 IP address blocks: 103.59.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:04:ad:60:d9:6c:66:87:73:cf:7a:7b:3a:bd:c1:18:15:4c:b1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Jan 20 02:07:02 2026 GMT Not After : Jan 19 02:12:02 2027 GMT Subject: CN=61E433D01AB50DB21D9E080E096A2FEAEE81E843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:bd:35:b1:a2:ad:94:98:21:ad:c1:fc:7c: 87:e5:f4:dc:8b:bb:c8:74:86:6d:1f:97:72:5d:89: de:d6:c0:8b:01:0f:8d:3a:f8:f9:c0:02:78:b4:ff: ed:40:27:48:57:4f:fb:62:d7:73:81:07:12:71:97: 1b:e5:55:40:26:79:74:c4:7f:23:d6:31:61:bc:5e: 1b:ba:70:e6:2b:1b:e2:87:ac:ce:0a:d4:56:c8:4f: 5f:87:83:48:d5:79:d0:8a:f5:f3:7c:b8:67:e8:e9: 72:4a:3a:83:43:89:b3:48:97:c3:d8:66:3c:d3:10: fe:9a:56:7a:07:ee:df:0c:60:74:af:d7:d6:48:ac: dd:c5:ef:18:f5:92:a5:d9:07:9a:1b:4c:d6:7d:0e: d5:42:27:ca:c8:4d:c6:92:26:5b:c1:56:fd:05:f6: 60:b1:ca:ff:33:b4:41:e0:ed:5a:8f:da:ce:5f:be: b2:85:e1:2b:b8:45:9d:5c:ec:20:77:67:f3:9e:97: 06:a2:b4:75:3f:6b:45:4e:41:ca:12:ee:93:3b:17: e5:25:8f:39:01:f4:22:6f:65:4b:a8:fe:51:c2:31: b4:d0:4b:24:03:58:19:72:0f:45:89:2f:1d:59:61: 85:79:c5:9a:b6:ab:63:25:ca:79:dd:03:41:11:c5: 28:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E4:33:D0:1A:B5:0D:B2:1D:9E:08:0E:09:6A:2F:EA:EE:81:E8:43 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/3130332e35392e3132332e302f32342d3234203d3e2031343439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.59.123.0/24 Signature Algorithm: sha256WithRSAEncryption 47:be:08:71:50:c1:ef:9c:38:7e:e6:79:32:6a:da:af:15:df: a2:c1:fb:77:b1:31:53:9b:ad:2b:b6:f9:39:76:5f:f1:82:51: f5:a9:ef:e4:94:c5:08:38:5d:60:c5:a4:cf:04:a3:4b:aa:a9: 98:5f:70:0d:6d:f6:ed:43:0a:09:33:02:69:f9:28:14:b6:aa: 39:29:9c:3a:23:cf:f1:37:23:35:47:12:b6:e3:1a:e3:ef:34: 65:9a:3f:d5:3a:49:ce:22:fb:dd:64:f4:67:e3:6e:b3:9e:44: c6:66:a7:8d:6c:47:8d:a4:c0:6d:61:1b:be:47:25:a2:f5:f3: 31:03:00:6c:f3:16:f2:b3:b3:33:f4:41:6c:67:1b:0b:29:3f: 49:4b:7c:5f:c4:47:ce:7d:0c:cf:20:85:52:61:60:08:29:39: d0:f7:3f:31:17:16:64:12:da:31:53:fb:4c:fd:da:f3:e1:d0: 93:85:de:ef:4c:e5:99:10:1b:4d:8a:c4:be:a4:d9:c1:48:da: f2:01:1b:25:1e:b3:ce:12:35:30:2c:6c:3f:b7:3f:22:f3:b7: 89:a7:ab:13:f7:dd:1a:4c:78:f5:9c:6c:9d:27:da:7c:6d:26: 94:6a:9d:db:ba:20:dc:bf:31:4c:63:80:f2:19:1f:ab:2d:4c: 3d:98:fc:fb -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUAQStYNlsZodzz3p7Or3BGBVMsdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjAxMjAwMjA3MDJaFw0yNzAxMTkwMjEyMDJaMDMxMTAvBgNV BAMTKDYxRTQzM0QwMUFCNTBEQjIxRDlFMDgwRTA5NkEyRkVBRUU4MUU4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Kb01saKtlJghrcH8fIfl9NyL u8h0hm0fl3Jdid7WwIsBD406+PnAAni0/+1AJ0hXT/ti13OBBxJxlxvlVUAmeXTE fyPWMWG8Xhu6cOYrG+KHrM4K1FbIT1+Hg0jVedCK9fN8uGfo6XJKOoNDibNIl8PY ZjzTEP6aVnoH7t8MYHSv19ZIrN3F7xj1kqXZB5obTNZ9DtVCJ8rITcaSJlvBVv0F 9mCxyv8ztEHg7VqP2s5fvrKF4Su4RZ1c7CB3Z/OelwaitHU/a0VOQcoS7pM7F+Ul jzkB9CJvZUuo/lHCMbTQSyQDWBlyD0WJLx1ZYYV5xZq2q2MlynndA0ERxSh9AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUYeQz0Bq1DbIdnggOCWov6u6B6EMwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk1MDQ3OTM5LzAvMzEzMDMzMmUzNTM5 MmUzMTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzQzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGc7ezANBgkqhkiG9w0BAQsFAAOCAQEAR74IcVDB75w4fuZ5MmrarxXfosH7 d7ExU5utK7b5OXZf8YJR9anv5JTFCDhdYMWkzwSjS6qpmF9wDW327UMKCTMCafko FLaqOSmcOiPP8TcjNUcStuMa4+80ZZo/1TpJziL73WT0Z+Nus55ExmanjWxHjaTA bWEbvkclovXzMQMAbPMW8rOzM/RBbGcbCyk/SUt8X8RHzn0MzyCFUmFgCCk50Pc/ MRcWZBLaMVP7TP3a8+HQk4Xe70zlmRAbTYrEvqTZwUja8gEbJR6zzhI1MCxsP7c/ IvO3iaerE/fdGkx49ZxsnSfafG0mlGqd27og3L8xTGOA8hkfqy1MPZj8+w== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:46 2026 by rpki-client