This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa File: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (raw, json) Hash identifier: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw= Subject key identifier: 05:37:FD:CC:D6:E3:FD:6B:12:80:64:FE:BE:68:2D:D4:2A:B4:95:52 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 28B058E75807A2C7BC376D80FF390CEADADDF298 Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa Signing time: Tue 20 Jan 2026 02:26:11 +0000 ROA not before: Tue 20 Jan 2026 02:21:11 +0000 ROA not after: Tue 19 Jan 2027 02:26:11 +0000 asID: 131482 IP address blocks: 103.72.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b0:58:e7:58:07:a2:c7:bc:37:6d:80:ff:39:0c:ea:da:dd:f2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: Jan 20 02:21:11 2026 GMT Not After : Jan 19 02:26:11 2027 GMT Subject: CN=0537FDCCD6E3FD6B128064FEBE682DD42AB49552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:86:14:83:2a:9a:09:02:1f:c2:12:bb:ab: f7:47:d8:73:39:d1:82:d5:ef:e8:68:47:e5:7c:4e: 34:81:39:da:6c:ba:f1:9e:8e:ee:e1:6f:24:4c:28: fd:ad:c8:65:8d:c9:db:71:9d:b8:6b:9a:db:92:02: 79:2f:26:b6:9c:e3:3c:e5:2a:9e:2d:83:2d:2e:df: fb:0d:48:26:ea:19:fb:5b:7a:c5:a7:d4:3e:db:db: 79:c0:2e:86:7d:2a:74:60:8d:bf:b9:69:20:fa:f8: 3b:33:9c:e8:b7:ca:d6:9f:76:74:63:77:b9:72:a4: 59:7e:6e:25:cd:85:7b:29:df:3d:f6:b9:fc:14:61: 35:2d:75:69:25:4e:4c:96:57:a7:b1:ce:a8:af:cc: 85:16:9a:c0:78:ea:a1:f3:f6:0e:bb:f9:de:9c:ed: 3a:22:96:db:8a:f1:43:0b:14:fd:fb:75:79:92:54: 93:2b:bf:49:3e:0a:ed:ce:e8:7a:12:cb:94:f0:9e: 55:78:fd:eb:88:59:3b:f5:ab:11:ff:09:f6:16:29: ac:11:2b:37:f5:c7:bd:97:02:37:65:1d:b4:54:0a: 0a:01:ea:b0:17:c3:01:0e:c8:c3:58:0b:8a:f8:d6: ac:89:34:80:87:56:a6:44:48:23:b5:4f:0c:e1:65: c8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:37:FD:CC:D6:E3:FD:6B:12:80:64:FE:BE:68:2D:D4:2A:B4:95:52 X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.72.120.0/22 Signature Algorithm: sha256WithRSAEncryption 14:62:f2:cd:ae:e3:8d:bb:4d:0f:78:cf:40:be:0f:2c:35:6c: 44:e7:38:43:b8:f0:c8:e9:96:02:d0:51:48:02:42:3e:a8:f2: 6a:a7:98:a6:85:2d:5c:c5:28:8f:b9:9f:90:b5:b7:dc:46:7e: ca:cc:f0:5f:1b:47:c5:79:da:8f:da:a4:63:26:ca:59:40:a1: bf:62:55:3f:84:ec:65:1c:0c:cf:b2:52:ab:3c:83:c8:25:c7: 0c:08:05:13:8e:de:ae:8e:53:41:73:15:3b:99:ae:9f:b5:1c: 0a:4c:90:85:6d:78:f4:b6:7e:1a:6f:fd:85:f7:58:a0:47:f2: 99:e4:fc:35:9c:79:b8:0d:62:ef:b5:fd:0e:aa:74:8a:43:bf: 3f:5c:96:ec:35:0b:35:02:bd:f1:da:9d:48:c6:b4:4f:cb:52: 05:09:f6:f3:70:d2:92:56:64:15:c3:93:68:69:04:11:6e:17: 07:a1:7a:32:84:c8:06:cd:a2:8e:20:2b:9d:ea:63:2d:b8:69: 1c:9c:f9:1e:9b:fa:ff:63:e2:f8:3b:f2:a8:b6:d2:eb:d8:0a: 37:99:fb:47:d7:92:66:8b:f9:ca:04:26:f7:66:a5:54:38:e7: d7:f4:c3:b6:b0:5a:11:b0:37:b7:c0:ba:7e:9b:6e:a7:a3:ef: ce:14:a2:54 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKLBY51gHose8N22A/zkM6trd8pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjAxMjAwMjIxMTFaFw0yNzAxMTkwMjI2MTFaMDMxMTAvBgNV BAMTKDA1MzdGRENDRDZFM0ZENkIxMjgwNjRGRUJFNjgyREQ0MkFCNDk1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznYYUgyqaCQIfwhK7q/dH2HM5 0YLV7+hoR+V8TjSBOdpsuvGeju7hbyRMKP2tyGWNydtxnbhrmtuSAnkvJrac4zzl Kp4tgy0u3/sNSCbqGftbesWn1D7b23nALoZ9KnRgjb+5aSD6+DsznOi3ytafdnRj d7lypFl+biXNhXsp3z32ufwUYTUtdWklTkyWV6exzqivzIUWmsB46qHz9g67+d6c 7ToiltuK8UMLFP37dXmSVJMrv0k+Cu3O6HoSy5TwnlV4/euIWTv1qxH/CfYWKawR Kzf1x72XAjdlHbRUCgoB6rAXwwEOyMNYC4r41qyJNICHVqZESCO1TwzhZcjjAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUBTf9zNbj/WsSgGT+vmgt1Cq0lVIwHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC8zMTMwMzMyZTM3 MzIyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTM0MzgzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdIeDANBgkqhkiG9w0BAQsFAAOCAQEAFGLyza7jjbtND3jPQL4P LDVsROc4Q7jwyOmWAtBRSAJCPqjyaqeYpoUtXMUoj7mfkLW33EZ+yszwXxtHxXna j9qkYybKWUChv2JVP4TsZRwMz7JSqzyDyCXHDAgFE47ero5TQXMVO5mun7UcCkyQ hW149LZ+Gm/9hfdYoEfymeT8NZx5uA1i77X9Dqp0ikO/P1yW7DULNQK98dqdSMa0 T8tSBQn283DSklZkFcOTaGkEEW4XB6F6MoTIBs2ijiArnepjLbhpHJz5Hpv6/2Pi +DvyqLbS69gKN5n7R9eSZov5ygQm92alVDjn1/TDtrBaEbA3t8C6fptup6PvzhSi VA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:17 2026 by rpki-client