This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e38382e39362e302f32322d3234203d3e203633373031.roa File: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (raw, json) Hash identifier: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU= Subject key identifier: 4C:E0:4B:B3:23:B4:BD:6A:A8:F4:BC:DD:64:39:70:09:F3:65:36:87 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 760FC8E8F5CE2F76C105F1EC04683118DD78D4F8 Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e38382e39362e302f32322d3234203d3e203633373031.roa Signing time: Tue 20 Jan 2026 02:19:09 +0000 ROA not before: Tue 20 Jan 2026 02:14:09 +0000 ROA not after: Tue 19 Jan 2027 02:19:09 +0000 asID: 63701 IP address blocks: 103.88.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0f:c8:e8:f5:ce:2f:76:c1:05:f1:ec:04:68:31:18:dd:78:d4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: Jan 20 02:14:09 2026 GMT Not After : Jan 19 02:19:09 2027 GMT Subject: CN=4CE04BB323B4BD6AA8F4BCDD64397009F3653687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3b:43:61:46:65:b5:68:11:64:13:2c:55:e5: ba:86:af:64:ae:0a:05:a5:6c:7a:e4:68:08:05:bd: 8d:e8:5f:83:29:3c:6c:2a:5b:42:ed:fe:ae:f6:60: 33:6a:ca:14:26:4d:53:59:ec:92:00:2e:ed:95:d9: 5a:ec:78:2e:92:74:48:47:72:6a:f6:3a:04:32:62: 5f:85:ab:6a:73:55:68:ca:78:0c:f7:3a:48:99:a0: 92:b6:25:14:9a:67:6b:13:75:8c:4c:de:d8:db:9a: 99:09:93:b7:63:99:1c:59:b9:58:8b:11:95:46:ac: 1c:f6:91:00:e6:42:61:88:d4:cc:5b:56:1e:09:ba: 9d:6c:d4:1c:34:6a:b7:26:85:a4:4c:4f:e4:5c:9d: 05:94:68:c7:bf:db:b5:e6:d7:08:ec:1f:ff:e0:92: 2e:43:39:20:0b:37:9b:41:d1:63:38:83:dd:5c:13: 1e:a7:6c:f6:eb:f4:75:ff:66:2b:78:30:74:e8:4c: e7:40:2d:70:12:3a:9c:8d:c4:e0:0e:05:ac:5c:c7: b2:77:c1:1a:ad:06:aa:73:4c:f1:56:95:1e:9e:b0: 8a:d7:f6:0c:98:1e:d7:e1:d3:20:09:ae:8f:cf:01: 18:23:8f:25:19:f9:28:5a:c6:69:59:7a:57:5f:a9: 9c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E0:4B:B3:23:B4:BD:6A:A8:F4:BC:DD:64:39:70:09:F3:65:36:87 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e38382e39362e302f32322d3234203d3e203633373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.88.96.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:4f:a6:68:51:08:7c:71:78:23:92:60:f9:c9:14:66:8d:77: 1f:cf:5a:55:b4:0f:87:82:06:7f:2b:f5:24:1f:7a:1b:ed:ef: 57:79:d9:e7:1f:75:46:38:7a:a3:e2:cc:50:26:e7:d2:ae:78: 5f:27:8d:f1:6d:d0:90:f1:97:24:7d:3d:b1:12:f1:66:ad:5f: 83:d8:bf:d1:16:f8:1d:a7:be:9f:02:a4:f3:ea:dd:0d:af:4f: c0:0a:f6:dc:b4:4c:20:b0:21:02:2b:dc:7a:a5:95:35:23:8e: 1c:57:6e:29:7b:ce:6d:f0:7d:a8:c5:59:8b:d2:c5:7a:ca:08: d2:1e:6b:4d:ef:09:21:2a:9c:72:9d:83:0d:99:2d:1e:2f:c9: b3:c6:d8:74:78:d1:18:4e:85:e2:e2:f8:22:f7:d8:9e:cc:81: a4:59:64:3f:73:0f:45:ba:1f:76:5d:0d:62:31:7c:1e:90:f5: 4c:00:98:3d:ef:fc:c0:88:82:55:09:a3:95:1f:9c:15:ae:2b: 21:10:1f:22:ea:44:c9:fd:b3:b9:51:5b:bb:a0:22:8c:c3:fd: 55:0f:4b:ee:ae:ea:17:1a:7b:d0:6a:79:50:71:5a:cd:bf:48: 22:3c:a4:09:19:1f:20:28:1d:39:5c:58:b1:c8:32:83:60:20: a6:41:31:2e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdg/I6PXOL3bBBfHsBGgxGN141PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjAxMjAwMjE0MDlaFw0yNzAxMTkwMjE5MDlaMDMxMTAvBgNV BAMTKDRDRTA0QkIzMjNCNEJENkFBOEY0QkNERDY0Mzk3MDA5RjM2NTM2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlO0NhRmW1aBFkEyxV5bqGr2Su CgWlbHrkaAgFvY3oX4MpPGwqW0Lt/q72YDNqyhQmTVNZ7JIALu2V2VrseC6SdEhH cmr2OgQyYl+Fq2pzVWjKeAz3OkiZoJK2JRSaZ2sTdYxM3tjbmpkJk7djmRxZuViL EZVGrBz2kQDmQmGI1MxbVh4Jup1s1Bw0arcmhaRMT+RcnQWUaMe/27Xm1wjsH//g ki5DOSALN5tB0WM4g91cEx6nbPbr9HX/Zit4MHToTOdALXASOpyNxOAOBaxcx7J3 wRqtBqpzTPFWlR6esIrX9gyYHtfh0yAJro/PARgjjyUZ+ShaxmlZeldfqZw9AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUTOBLsyO0vWqo9LzdZDlwCfNlNocwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0Njg0NDE3LzAvMzEzMDMzMmUzODM4 MmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdYYDANBgkqhkiG9w0BAQsFAAOCAQEAX0+maFEIfHF4I5Jg+ckUZo13H89a VbQPh4IGfyv1JB96G+3vV3nZ5x91Rjh6o+LMUCbn0q54XyeN8W3QkPGXJH09sRLx Zq1fg9i/0Rb4Hae+nwKk8+rdDa9PwAr23LRMILAhAivceqWVNSOOHFduKXvObfB9 qMVZi9LFesoI0h5rTe8JISqccp2DDZktHi/Js8bYdHjRGE6F4uL4IvfYnsyBpFlk P3MPRbofdl0NYjF8HpD1TACYPe/8wIiCVQmjlR+cFa4rIRAfIupEyf2zuVFbu6Ai jMP9VQ9L7q7qFxp70Gp5UHFazb9IIjykCRkfICgdOVxYscgyg2AgpkExLg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:52 2026 by rpki-client