This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa File: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (raw, json) Hash identifier: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU= Subject key identifier: 60:B8:46:20:12:E9:78:A9:46:52:02:B7:45:10:90:EA:F6:27:7E:5F Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 08A79E02F7BA4766FFBBA30741CFEF8EA58030D1 Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa Signing time: Tue 20 Jan 2026 02:11:59 +0000 ROA not before: Tue 20 Jan 2026 02:06:59 +0000 ROA not after: Tue 19 Jan 2027 02:11:59 +0000 asID: 149628 IP address blocks: 103.23.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a7:9e:02:f7:ba:47:66:ff:bb:a3:07:41:cf:ef:8e:a5:80:30:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Jan 20 02:06:59 2026 GMT Not After : Jan 19 02:11:59 2027 GMT Subject: CN=60B8462012E978A9465202B7451090EAF6277E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b1:a1:b7:0f:f2:66:a6:99:09:eb:ac:39:49: d0:e6:a2:f3:4b:c4:b8:c4:9b:1c:70:4b:27:e1:36: 5b:e0:08:9b:cb:a3:51:f3:75:58:fd:1d:45:88:36: fa:d7:6d:6f:be:fd:9e:00:e8:fb:ad:67:93:6f:f1: 72:12:68:62:e2:22:ee:00:2f:4f:e7:5e:23:8d:24: 4d:9e:5a:aa:85:6c:32:b4:74:27:2a:f3:01:38:04: 09:3e:7d:4a:4f:4a:3d:33:37:da:2f:27:3e:9e:a8: 83:32:e5:a6:80:2a:e2:93:fa:93:98:09:2a:53:e2: 34:82:98:fb:43:d6:5c:e5:fe:cc:6d:c7:61:1d:6d: fc:66:a9:16:dc:18:90:0f:46:74:ae:e7:12:b3:5a: 83:d1:7c:99:a6:9a:33:6b:6e:49:e4:b6:f5:06:81: cf:9c:40:9e:57:39:90:60:28:ba:c8:72:fa:33:c3: ce:49:be:b7:5d:db:00:3d:a1:78:88:c0:c6:40:5b: 49:07:7c:54:a0:62:0c:d9:e9:fd:66:5d:89:67:03: eb:24:df:d8:6d:4f:a6:91:ec:09:d1:3e:a1:2a:c6: a1:a1:17:c3:75:6f:8c:b4:a4:fa:46:5a:68:d9:58: f9:83:95:b9:c2:98:2a:b4:bc:dd:cf:10:5b:07:2f: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B8:46:20:12:E9:78:A9:46:52:02:B7:45:10:90:EA:F6:27:7E:5F X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.164.0/22 Signature Algorithm: sha256WithRSAEncryption 81:ad:99:cf:f2:23:90:b2:3f:cb:01:31:49:5a:c8:9c:28:58: 3f:bf:af:76:91:2e:92:a4:90:6c:6b:a9:90:cc:1a:91:19:35: 09:75:c7:1e:dd:50:6e:dc:fe:ba:1b:5b:04:3f:41:e9:aa:bf: 09:8f:9c:01:69:ca:1e:58:b5:e3:21:c0:47:bb:ac:ed:27:d4: 30:0f:ee:23:83:e0:e3:91:31:ba:85:8b:c2:d1:84:8b:1b:d6: 61:4b:f2:79:99:7b:59:0f:d1:e4:b1:61:6b:f5:e6:91:33:17: 67:39:bf:52:f7:83:54:4e:fc:f7:a6:6a:ee:18:95:11:80:76: 2b:d1:08:41:58:2b:e2:ef:24:47:28:cf:06:5a:29:da:76:7d: d4:9c:e1:19:05:55:d8:8d:56:93:0e:a6:17:52:65:2f:00:c0: ef:5e:dc:6e:3c:cb:a5:78:63:0a:8a:c9:98:66:aa:61:1b:05: 46:81:50:ea:c7:02:65:8d:9f:9a:ea:f3:6f:9e:8a:d0:d0:28: bd:92:8e:08:d2:89:46:a9:5e:5c:42:8b:88:bb:3a:f8:a8:c4: 77:90:1a:70:ad:22:a9:46:55:23:69:f0:a0:79:c4:05:86:75: a7:38:31:d5:5b:d2:78:98:b4:8a:52:db:2d:f9:50:14:42:a6: 58:4c:07:4c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCKeeAve6R2b/u6MHQc/vjqWAMNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjAxMjAwMjA2NTlaFw0yNzAxMTkwMjExNTlaMDMxMTAvBgNV BAMTKDYwQjg0NjIwMTJFOTc4QTk0NjUyMDJCNzQ1MTA5MEVBRjYyNzdFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnsaG3D/JmppkJ66w5SdDmovNL xLjEmxxwSyfhNlvgCJvLo1HzdVj9HUWINvrXbW++/Z4A6PutZ5Nv8XISaGLiIu4A L0/nXiONJE2eWqqFbDK0dCcq8wE4BAk+fUpPSj0zN9ovJz6eqIMy5aaAKuKT+pOY CSpT4jSCmPtD1lzl/sxtx2EdbfxmqRbcGJAPRnSu5xKzWoPRfJmmmjNrbknktvUG gc+cQJ5XOZBgKLrIcvozw85Jvrdd2wA9oXiIwMZAW0kHfFSgYgzZ6f1mXYlnA+sk 39htT6aR7AnRPqEqxqGhF8N1b4y0pPpGWmjZWPmDlbnCmCq0vN3PEFsHLzC1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUYLhGIBLpeKlGUgK3RRCQ6vYnfl8wHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ3NDk5NTMvMC8zMTMwMzMyZTMy MzMyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzOTM2MzIzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmcXpDANBgkqhkiG9w0BAQsFAAOCAQEAga2Zz/IjkLI/ywExSVrI nChYP7+vdpEukqSQbGupkMwakRk1CXXHHt1Qbtz+uhtbBD9B6aq/CY+cAWnKHli1 4yHAR7us7SfUMA/uI4Pg45ExuoWLwtGEixvWYUvyeZl7WQ/R5LFha/XmkTMXZzm/ UveDVE7896Zq7hiVEYB2K9EIQVgr4u8kRyjPBlop2nZ91JzhGQVV2I1Wkw6mF1Jl LwDA717cbjzLpXhjCorJmGaqYRsFRoFQ6scCZY2fmurzb56K0NAovZKOCNKJRqle XEKLiLs6+KjEd5AacK0iqUZVI2nwoHnEBYZ1pzgx1VvSeJi0ilLbLflQFEKmWEwH TA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:33 2026 by rpki-client