This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e35372e31322e302f32322d3234203d3e203633373031.roa File: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (raw, json) Hash identifier: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE= Subject key identifier: 85:D9:BF:A3:3D:4B:D5:97:FB:D6:51:98:E1:C5:19:ED:7C:69:CC:81 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 614451EC9EC9A4FBB364F451EB53539D340E5EC5 Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e35372e31322e302f32322d3234203d3e203633373031.roa Signing time: Tue 20 Jan 2026 02:19:09 +0000 ROA not before: Tue 20 Jan 2026 02:14:09 +0000 ROA not after: Tue 19 Jan 2027 02:19:09 +0000 asID: 63701 IP address blocks: 103.57.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:44:51:ec:9e:c9:a4:fb:b3:64:f4:51:eb:53:53:9d:34:0e:5e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: Jan 20 02:14:09 2026 GMT Not After : Jan 19 02:19:09 2027 GMT Subject: CN=85D9BFA33D4BD597FBD65198E1C519ED7C69CC81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:d6:09:76:19:80:d5:b8:b8:af:39:da:de: 43:d3:00:8f:4e:6b:3b:a2:44:4b:3a:d5:10:2e:70: 71:14:99:62:40:99:39:e0:64:43:83:4e:23:61:de: c8:23:5a:5a:3e:96:23:d0:91:c0:c3:2f:85:8b:81: 39:59:17:92:d1:81:6c:0d:12:22:ab:47:0a:1c:22: ce:28:3c:7b:9e:e8:6c:44:f8:7d:9e:5f:83:db:05: a4:14:07:80:4c:e8:e4:37:b3:4b:01:76:fc:9f:2e: 67:f4:75:c8:19:ed:f6:f9:ea:62:2d:08:06:82:c3: 45:70:ee:07:28:8f:72:3f:65:6b:46:62:22:26:d4: a4:77:f8:1b:1a:b0:a1:70:d0:53:00:45:38:43:23: c2:26:93:0b:e3:89:59:b8:7f:b6:89:cc:20:fc:db: 9c:2d:d8:d9:53:1b:0e:93:bd:bd:e5:87:a1:bc:55: c8:cd:9b:27:6e:14:6a:29:2d:51:3a:45:dc:74:d4: 0e:a1:f7:d6:03:c2:48:a9:4c:fb:2c:0b:c0:2d:33: db:43:7b:e7:c3:2c:6d:5d:c4:d9:f1:3d:d2:29:4d: 0e:0f:d2:fe:3b:97:ed:b3:bd:12:4e:44:8e:fb:ab: d1:c5:0e:75:73:fb:fb:7e:1e:ba:ac:a3:eb:f7:96: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:BF:A3:3D:4B:D5:97:FB:D6:51:98:E1:C5:19:ED:7C:69:CC:81 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e35372e31322e302f32322d3234203d3e203633373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.57.12.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:fb:e5:5f:9d:ec:c7:8c:f6:30:66:4b:d6:9d:cf:78:93:46: ab:4b:58:55:aa:2a:9f:64:de:0f:a3:08:40:ca:95:17:80:0e: 8c:73:15:3e:df:a2:65:97:27:ff:ee:16:2b:db:c4:88:e8:ac: b2:69:63:fb:ea:2a:70:d9:1d:4c:4f:98:7a:01:81:d2:26:7a: a0:5f:b4:10:a9:c6:e0:11:c3:0d:bf:ce:c6:30:f9:96:71:9d: e2:b3:6f:5c:97:57:98:67:01:37:8e:5d:b3:a3:31:c6:62:ec: 1a:93:fe:00:da:c2:d4:df:34:33:80:4a:1a:8f:f2:c2:0a:c9: a5:17:df:d4:ee:f9:d1:1c:3d:00:83:70:e1:80:1a:bd:40:1f: 09:99:ef:43:52:49:bf:c3:73:05:72:5e:81:ab:f6:ad:8a:4a: e7:08:35:6f:ee:b3:84:05:51:18:40:d6:ac:89:60:ba:78:b1: 10:4c:db:b9:dc:15:e8:58:dc:d2:9a:8f:e6:1a:89:a1:3a:59: 05:27:2a:4b:39:48:9b:28:14:58:a0:35:ba:43:82:e0:68:71: 4c:bc:26:0e:61:b7:d5:88:d8:a3:7b:f9:32:19:69:79:7b:a8: 5c:74:01:68:af:b5:b2:ce:c2:c5:07:6a:2b:cb:9b:09:82:cf: 93:af:58:f0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUYURR7J7JpPuzZPRR61NTnTQOXsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjAxMjAwMjE0MDlaFw0yNzAxMTkwMjE5MDlaMDMxMTAvBgNV BAMTKDg1RDlCRkEzM0Q0QkQ1OTdGQkQ2NTE5OEUxQzUxOUVEN0M2OUNDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iNYJdhmA1bi4rzna3kPTAI9O azuiREs61RAucHEUmWJAmTngZEODTiNh3sgjWlo+liPQkcDDL4WLgTlZF5LRgWwN EiKrRwocIs4oPHue6GxE+H2eX4PbBaQUB4BM6OQ3s0sBdvyfLmf0dcgZ7fb56mIt CAaCw0Vw7gcoj3I/ZWtGYiIm1KR3+BsasKFw0FMARThDI8ImkwvjiVm4f7aJzCD8 25wt2NlTGw6Tvb3lh6G8VcjNmyduFGopLVE6Rdx01A6h99YDwkipTPssC8AtM9tD e+fDLG1dxNnxPdIpTQ4P0v47l+2zvRJORI77q9HFDnVz+/t+Hrqso+v3lokxAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUhdm/oz1L1Zf71lGY4cUZ7XxpzIEwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0Njg0NDE3LzAvMzEzMDMzMmUzNTM3 MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmc5DDANBgkqhkiG9w0BAQsFAAOCAQEATPvlX53sx4z2MGZL1p3PeJNGq0tY Vaoqn2TeD6MIQMqVF4AOjHMVPt+iZZcn/+4WK9vEiOissmlj++oqcNkdTE+YegGB 0iZ6oF+0EKnG4BHDDb/OxjD5lnGd4rNvXJdXmGcBN45ds6MxxmLsGpP+ANrC1N80 M4BKGo/ywgrJpRff1O750Rw9AINw4YAavUAfCZnvQ1JJv8NzBXJegav2rYpK5wg1 b+6zhAVRGEDWrIlgunixEEzbudwV6Fjc0pqP5hqJoTpZBScqSzlImygUWKA1ukOC 4GhxTLwmDmG31YjYo3v5MhlpeXuoXHQBaK+1ss7CxQdqK8ubCYLPk69Y8A== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:15 2026 by rpki-client