This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa File: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (raw, json) Hash identifier: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg= Subject key identifier: 5A:53:60:FE:EC:0A:F9:44:74:72:28:0D:C3:8B:45:DC:17:11:D9:3E Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 37AACCCD616DA15EED0634808C2FDDB818F90526 Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa Signing time: Tue 20 Jan 2026 02:11:59 +0000 ROA not before: Tue 20 Jan 2026 02:06:59 +0000 ROA not after: Tue 19 Jan 2027 02:11:59 +0000 asID: 149628 IP address blocks: 103.56.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:aa:cc:cd:61:6d:a1:5e:ed:06:34:80:8c:2f:dd:b8:18:f9:05:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Jan 20 02:06:59 2026 GMT Not After : Jan 19 02:11:59 2027 GMT Subject: CN=5A5360FEEC0AF9447472280DC38B45DC1711D93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:bb:70:a9:59:73:41:b1:52:1f:88:f9:58: aa:be:80:e6:1f:46:ba:ea:71:c9:25:0b:f4:9b:87: 44:d4:36:dd:c1:b3:e5:17:9d:40:2c:c0:0c:81:9c: a3:61:23:9c:10:c2:68:6b:6e:c5:e1:23:3f:39:40: 27:8e:4b:bd:3e:ee:16:eb:66:1b:1b:4d:b0:a5:ca: 95:3f:9c:c7:c9:19:43:c1:4f:1c:56:b5:f9:e8:f5: e0:c3:f0:2a:54:63:66:5a:ea:12:bb:4e:36:4a:4f: 2f:28:0b:7d:f3:1d:27:8d:4c:b2:db:f3:31:fc:25: cd:0a:a0:e1:88:72:e2:ec:47:b9:96:05:c4:09:5e: 24:5c:42:4b:03:9c:f7:a9:84:ba:e8:d9:50:ad:de: ad:38:75:45:20:a7:df:ec:f0:4e:7d:89:e0:b5:65: 9a:1c:06:20:08:67:96:4d:74:81:3d:5f:ff:59:1b: cb:db:bf:5a:b1:f9:20:70:26:6f:c4:07:f4:2f:0e: 2e:63:16:15:14:52:02:93:46:5f:8d:96:7d:8f:4b: 57:f8:2b:d4:97:3b:12:8f:be:32:a8:fa:b9:04:96: 16:40:28:57:3c:0e:04:c8:91:a2:7a:f5:b6:4a:19: 2f:d2:83:6b:48:32:16:f7:67:38:9e:25:ef:03:e0: cb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:53:60:FE:EC:0A:F9:44:74:72:28:0D:C3:8B:45:DC:17:11:D9:3E X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.140.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:4f:20:57:a1:8a:b0:55:16:00:a6:d6:30:d9:95:85:93:8f: 21:13:24:12:f9:3b:69:f5:76:d4:ad:c9:ba:eb:f3:04:6a:dd: 11:cb:cd:3d:b0:17:25:0c:12:83:c4:1e:84:71:1a:24:2e:3b: 74:3a:6a:4f:44:e2:c7:bd:80:8e:a6:f7:80:b9:df:00:e2:a6: a8:b7:cd:57:1d:10:88:90:3e:a1:df:5a:0b:b6:c3:ee:62:78: 87:d7:3f:51:76:ec:28:7f:d1:de:ac:4b:97:ad:b7:f5:9d:96: 27:af:87:44:c1:f2:10:80:ef:a4:8b:f6:e5:94:5e:a0:5f:6f: 15:ee:2d:15:da:2b:92:99:37:81:76:1d:e4:fe:4d:a6:5c:62: 59:e7:10:65:57:d1:72:93:13:a3:f7:5d:a3:7c:25:e8:a0:34: 05:0c:79:4c:1d:e7:eb:ac:dd:c7:a1:ec:8a:a1:66:14:a7:8d: ee:81:54:19:ab:fd:bf:88:20:c6:2c:ec:eb:03:fe:60:92:cb: 0d:ec:e0:93:52:c5:c3:0a:d1:2f:39:05:2e:7f:c3:8e:e1:eb: d7:0c:d4:f9:58:51:cf:e2:7b:44:2c:7d:35:91:cd:56:af:99: a3:d9:e9:31:3b:f4:a8:0e:ec:54:45:c9:a9:c7:d5:99:69:58: 33:66:77:e0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUN6rMzWFtoV7tBjSAjC/duBj5BSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjAxMjAwMjA2NTlaFw0yNzAxMTkwMjExNTlaMDMxMTAvBgNV BAMTKDVBNTM2MEZFRUMwQUY5NDQ3NDcyMjgwREMzOEI0NURDMTcxMUQ5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFrtwqVlzQbFSH4j5WKq+gOYf RrrqccklC/Sbh0TUNt3Bs+UXnUAswAyBnKNhI5wQwmhrbsXhIz85QCeOS70+7hbr ZhsbTbClypU/nMfJGUPBTxxWtfno9eDD8CpUY2Za6hK7TjZKTy8oC33zHSeNTLLb 8zH8Jc0KoOGIcuLsR7mWBcQJXiRcQksDnPephLro2VCt3q04dUUgp9/s8E59ieC1 ZZocBiAIZ5ZNdIE9X/9ZG8vbv1qx+SBwJm/EB/QvDi5jFhUUUgKTRl+Nln2PS1f4 K9SXOxKPvjKo+rkElhZAKFc8DgTIkaJ69bZKGS/Sg2tIMhb3ZzieJe8D4MuLAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUWlNg/uwK+UR0cigNw4tF3BcR2T4wHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ3NDk5NTMvMC8zMTMwMzMyZTM1 MzYyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzOTM2MzIzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmc4jDANBgkqhkiG9w0BAQsFAAOCAQEADU8gV6GKsFUWAKbWMNmV hZOPIRMkEvk7afV21K3JuuvzBGrdEcvNPbAXJQwSg8QehHEaJC47dDpqT0Tix72A jqb3gLnfAOKmqLfNVx0QiJA+od9aC7bD7mJ4h9c/UXbsKH/R3qxLl6239Z2WJ6+H RMHyEIDvpIv25ZReoF9vFe4tFdorkpk3gXYd5P5NplxiWecQZVfRcpMTo/ddo3wl 6KA0BQx5TB3n66zdx6HsiqFmFKeN7oFUGav9v4ggxizs6wP+YJLLDezgk1LFwwrR LzkFLn/DjuHr1wzU+VhRz+J7RCx9NZHNVq+Zo9npMTv0qA7sVEXJqcfVmWlYM2Z3 4A== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:36 2026 by rpki-client