This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e36332e3234342e302f32322d3234203d3e203633373031.roa File: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (raw, json) Hash identifier: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0= Subject key identifier: E2:0E:F5:B3:AA:4A:54:98:BF:71:32:CF:F5:38:DB:6C:B1:55:CE:43 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 56FFD7EA584C6FB878A5368AAB62B02E1A21B283 Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e36332e3234342e302f32322d3234203d3e203633373031.roa Signing time: Tue 20 Jan 2026 02:19:09 +0000 ROA not before: Tue 20 Jan 2026 02:14:09 +0000 ROA not after: Tue 19 Jan 2027 02:19:09 +0000 asID: 63701 IP address blocks: 103.63.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ff:d7:ea:58:4c:6f:b8:78:a5:36:8a:ab:62:b0:2e:1a:21:b2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: Jan 20 02:14:09 2026 GMT Not After : Jan 19 02:19:09 2027 GMT Subject: CN=E20EF5B3AA4A5498BF7132CFF538DB6CB155CE43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:42:93:98:37:f3:12:47:34:58:d8:80:8d:c5: c1:10:3d:9f:4d:fc:77:57:a2:90:bf:2c:f7:d7:13: d0:60:0a:5c:b2:f8:7d:58:fd:c0:91:5b:19:6e:63: 7a:d7:c8:6a:c2:29:66:92:55:41:64:42:b7:9d:bd: 23:c2:51:2b:07:8d:42:cc:21:f2:9b:7f:9f:b6:0e: 49:71:29:c6:34:c3:4f:c2:60:02:94:72:b1:1e:14: 1e:71:3d:8f:9f:fe:bd:fd:64:03:f6:f3:97:10:f5: 27:4a:c7:08:b8:c1:16:9c:47:70:a8:80:91:9a:35: 05:70:a9:47:71:79:87:30:45:72:90:a2:be:b7:b7: 75:a7:37:1a:cd:dc:2b:00:94:41:17:1d:25:0f:0e: 50:b1:7f:7d:87:97:ec:19:e7:39:92:df:76:95:e3: 92:2b:57:8c:75:d7:44:b5:e4:c3:2a:37:c4:b3:92: b2:be:3e:b2:41:84:a9:43:39:1a:38:18:98:57:4c: 73:65:cb:92:e4:12:2d:16:59:0a:5a:c3:cb:e6:34: d1:de:83:2e:23:6b:6f:b5:a8:11:81:a3:65:49:cb: 34:1c:23:57:eb:bc:26:9a:03:ce:f9:fc:d6:21:b6: ad:2d:c0:7a:69:76:7d:e7:d5:81:74:a2:38:76:14: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0E:F5:B3:AA:4A:54:98:BF:71:32:CF:F5:38:DB:6C:B1:55:CE:43 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e36332e3234342e302f32322d3234203d3e203633373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.63.244.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:48:33:ab:9f:44:88:71:dd:67:cb:ec:18:e0:16:2d:7c:c0: 78:f6:a1:3a:f5:f5:f6:cb:4c:66:d8:8f:c7:c3:1e:92:c1:6f: d6:bc:61:2c:74:96:24:2a:21:69:bb:c1:45:94:b5:ad:c6:13: ec:83:cc:d9:2a:e6:3c:9a:1f:6f:f7:7d:61:d9:37:31:6b:33: ed:96:93:dd:4c:d4:ea:06:e8:43:4b:b3:97:2a:00:c6:e0:44: fd:22:68:71:6d:56:4e:cc:33:ff:6e:8f:70:45:72:14:8a:5a: f4:ce:f1:79:5b:fb:4c:84:c5:27:c6:30:a9:44:12:f3:b6:f2: 36:ec:fe:91:03:53:6b:51:0a:0f:5c:7c:54:81:bf:5d:7d:71: 2a:93:f5:c7:71:e0:e9:6e:bb:7e:94:c7:88:05:93:17:52:a2: 99:99:38:22:e6:1e:ec:e1:06:12:a0:19:0d:ef:79:18:97:3b: d7:d0:0a:18:b5:06:38:68:b6:0f:5d:a4:ed:8c:af:c8:02:5d: a5:07:5d:3f:9d:7b:4b:ae:91:6a:aa:22:b6:99:a7:46:a6:33: 68:51:ef:b9:ad:e3:04:28:8f:64:2c:60:cf:0b:75:46:76:82: 9b:1a:87:d6:c9:85:50:b1:3f:1e:56:92:f2:ed:3b:7d:a7:cf: 88:f2:fa:29 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVv/X6lhMb7h4pTaKq2KwLhohsoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjAxMjAwMjE0MDlaFw0yNzAxMTkwMjE5MDlaMDMxMTAvBgNV BAMTKEUyMEVGNUIzQUE0QTU0OThCRjcxMzJDRkY1MzhEQjZDQjE1NUNFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTQpOYN/MSRzRY2ICNxcEQPZ9N /HdXopC/LPfXE9BgClyy+H1Y/cCRWxluY3rXyGrCKWaSVUFkQredvSPCUSsHjULM IfKbf5+2DklxKcY0w0/CYAKUcrEeFB5xPY+f/r39ZAP285cQ9SdKxwi4wRacR3Co gJGaNQVwqUdxeYcwRXKQor63t3WnNxrN3CsAlEEXHSUPDlCxf32Hl+wZ5zmS33aV 45IrV4x110S15MMqN8SzkrK+PrJBhKlDORo4GJhXTHNly5LkEi0WWQpaw8vmNNHe gy4ja2+1qBGBo2VJyzQcI1frvCaaA875/NYhtq0twHppdn3n1YF0ojh2FDa3AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU4g71s6pKVJi/cTLP9TjbbLFVzkMwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDY4NDQxNy8wLzMxMzAzMzJlMzYz MzJlMzIzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmc/9DANBgkqhkiG9w0BAQsFAAOCAQEACkgzq59EiHHdZ8vsGOAWLXzA ePahOvX19stMZtiPx8MeksFv1rxhLHSWJCohabvBRZS1rcYT7IPM2SrmPJofb/d9 Ydk3MWsz7ZaT3UzU6gboQ0uzlyoAxuBE/SJocW1WTswz/26PcEVyFIpa9M7xeVv7 TITFJ8YwqUQS87byNuz+kQNTa1EKD1x8VIG/XX1xKpP1x3Hg6W67fpTHiAWTF1Ki mZk4IuYe7OEGEqAZDe95GJc719AKGLUGOGi2D12k7YyvyAJdpQddP517S66Raqoi tpmnRqYzaFHvua3jBCiPZCxgzwt1RnaCmxqH1smFULE/HlaS8u07fafPiPL6KQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:44 2026 by rpki-client