This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714618881/0/3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa File: 3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa (raw, json) Hash identifier: R0FJRlGBhabLsCIj283sVLghPk9hRoG7yfIrsXVSXJk= Subject key identifier: D3:43:75:76:05:31:8E:2A:B8:06:A1:9E:19:0A:D3:90:A9:25:A3:6B Certificate issuer: /CN=94E710ECBD2B699498C75FA9259347AC68776036 Certificate serial: 66B013B4F74255BAEE4C2C2D940671A4ABBCFAE2 Authority key identifier: 94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa Signing time: Tue 20 Jan 2026 02:07:16 +0000 ROA not before: Tue 20 Jan 2026 02:02:16 +0000 ROA not after: Tue 19 Jan 2027 02:07:16 +0000 asID: 58850 IP address blocks: 103.251.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b0:13:b4:f7:42:55:ba:ee:4c:2c:2d:94:06:71:a4:ab:bc:fa:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94E710ECBD2B699498C75FA9259347AC68776036 Validity Not Before: Jan 20 02:02:16 2026 GMT Not After : Jan 19 02:07:16 2027 GMT Subject: CN=D343757605318E2AB806A19E190AD390A925A36B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7b:ad:77:ef:83:1c:a8:2f:02:57:47:f3:cc: 22:88:63:c7:25:35:0f:77:40:77:af:51:8f:ab:09: 4d:63:4a:b4:4a:77:f1:d5:25:9f:5e:91:1f:d1:5a: 0e:07:6d:f1:55:ce:ba:d6:17:12:38:5d:84:58:b0: 24:09:87:cf:d3:b9:cb:5a:9e:fb:a0:13:d4:e2:eb: 89:ee:0b:7d:90:63:9f:89:32:d6:47:f3:35:bb:5d: 73:b4:b1:df:59:c1:14:0d:70:12:2e:88:c3:1f:2f: 41:cf:c1:a6:71:a6:ea:1d:0e:80:ab:ac:41:bb:eb: 81:82:4b:2f:c1:30:5e:ca:1f:5f:16:30:68:33:de: 2f:36:14:79:a3:56:5f:5b:6e:de:e2:04:64:07:7e: c4:49:eb:32:ca:e6:35:08:8f:0f:f6:5a:ab:e4:55: 7d:af:29:d7:69:f3:6b:bb:ba:e6:ee:16:d6:bf:18: bc:31:07:ce:05:1c:50:75:ab:bf:f0:3a:3b:95:81: 46:92:47:3e:06:57:17:4e:86:0e:0a:57:f6:22:70: c4:21:4e:db:51:7c:6c:67:82:95:1d:a0:02:dd:69: 9c:e0:47:49:88:5e:c0:b2:bf:d4:f3:cb:3b:75:b6: 40:33:78:bb:8b:bd:ea:e2:51:7a:dc:c6:f6:0c:76: f6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:43:75:76:05:31:8E:2A:B8:06:A1:9E:19:0A:D3:90:A9:25:A3:6B X509v3 Authority Key Identifier: keyid:94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.251.204.0/22 Signature Algorithm: sha256WithRSAEncryption 92:b2:f0:f5:4d:28:51:01:e6:7c:69:f3:ea:24:b7:b5:90:2b: f4:1e:a2:58:88:aa:3b:63:73:f7:9f:e7:44:26:06:30:d5:6b: b1:fc:dc:a6:82:44:3a:d8:ce:41:a8:b1:c6:7c:f9:a9:ce:10: 65:f5:fc:a5:14:bc:ba:3d:19:b9:94:ec:15:56:8c:aa:51:be: c1:e3:89:46:9a:3b:26:4d:92:bb:36:66:de:c7:e1:c0:7c:e9: 48:67:fe:71:bc:6f:20:0d:6e:88:21:d3:f8:70:02:b2:18:c5: 64:43:cc:56:2c:1c:8d:ee:41:84:f0:8d:b9:63:99:ba:5e:1d: 48:b4:d7:5a:cd:50:62:1c:e9:32:fe:87:b0:65:ec:b8:ed:a0: 66:b0:16:09:48:32:fe:b7:fa:fa:d7:d7:b7:c6:69:c9:99:e3: 6d:99:d8:8a:08:e1:20:86:f2:a8:e8:7f:18:05:96:3b:f8:cc: 5f:4d:8a:2f:cd:b1:52:23:1f:e5:9f:cb:dc:a8:2b:76:f5:f0: 19:4c:b8:93:6f:8b:ea:97:f9:ce:ac:8b:10:29:82:d8:39:5d: f6:2b:ca:93:08:eb:03:f2:36:e4:49:60:76:e2:85:b9:b8:c8: 63:a1:21:15:6f:58:27:b8:7d:af:c8:77:0d:a8:49:fc:56:2a: fa:d0:97:54 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZrATtPdCVbruTCwtlAZxpKu8+uIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFNzEwRUNCRDJCNjk5NDk4Qzc1RkE5MjU5MzQ3QUM2 ODc3NjAzNjAeFw0yNjAxMjAwMjAyMTZaFw0yNzAxMTkwMjA3MTZaMDMxMTAvBgNV BAMTKEQzNDM3NTc2MDUzMThFMkFCODA2QTE5RTE5MEFEMzkwQTkyNUEzNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbe61374McqC8CV0fzzCKIY8cl NQ93QHevUY+rCU1jSrRKd/HVJZ9ekR/RWg4HbfFVzrrWFxI4XYRYsCQJh8/Tucta nvugE9Ti64nuC32QY5+JMtZH8zW7XXO0sd9ZwRQNcBIuiMMfL0HPwaZxpuodDoCr rEG764GCSy/BMF7KH18WMGgz3i82FHmjVl9bbt7iBGQHfsRJ6zLK5jUIjw/2Wqvk VX2vKddp82u7uubuFta/GLwxB84FHFB1q7/wOjuVgUaSRz4GVxdOhg4KV/YicMQh TttRfGxngpUdoALdaZzgR0mIXsCyv9Tzyzt1tkAzeLuLveriUXrcxvYMdvYFAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU00N1dgUxjiq4BqGeGQrTkKklo2swHwYDVR0j BBgwFoAUlOcQ7L0raZSYx1+pJZNHrGh3YDYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDYxODg4MS8wLzk0RTcxMEVDQkQyQjY5OTQ5OEM3NUZBOTI1OTM0 N0FDNjg3NzYwMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTRFNzEwRUNCRDJCNjk5NDk4Qzc1RkE5MjU5MzQ3QUM2ODc3NjAzNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2MTg4ODEvMC8zMTMwMzMyZTMy MzUzMTJlMzIzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzODM4MzUzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmf7zDANBgkqhkiG9w0BAQsFAAOCAQEAkrLw9U0oUQHmfGnz6iS3 tZAr9B6iWIiqO2Nz95/nRCYGMNVrsfzcpoJEOtjOQaixxnz5qc4QZfX8pRS8uj0Z uZTsFVaMqlG+weOJRpo7Jk2SuzZm3sfhwHzpSGf+cbxvIA1uiCHT+HACshjFZEPM Viwcje5BhPCNuWOZul4dSLTXWs1QYhzpMv6HsGXsuO2gZrAWCUgy/rf6+tfXt8Zp yZnjbZnYigjhIIbyqOh/GAWWO/jMX02KL82xUiMf5Z/L3KgrdvXwGUy4k2+L6pf5 zqyLECmC2Dld9ivKkwjrA/I25ElgduKFubjIY6EhFW9YJ7h9r8h3DahJ/FYq+tCX VA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:16:10 2026 by rpki-client