This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa File: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (raw, json) Hash identifier: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4= Subject key identifier: D9:CD:96:00:16:5D:A5:C4:E3:6E:A4:8B:CD:0B:35:36:F5:14:2C:C2 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 03E47613745AFB9E66BEB28D11B634DE01BE16FF Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa Signing time: Tue 20 Jan 2026 02:26:12 +0000 ROA not before: Tue 20 Jan 2026 02:21:12 +0000 ROA not after: Tue 19 Jan 2027 02:26:12 +0000 asID: 131530 IP address blocks: 103.72.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e4:76:13:74:5a:fb:9e:66:be:b2:8d:11:b6:34:de:01:be:16:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: Jan 20 02:21:12 2026 GMT Not After : Jan 19 02:26:12 2027 GMT Subject: CN=D9CD9600165DA5C4E36EA48BCD0B3536F5142CC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:fe:9d:c2:8f:73:eb:54:2c:4a:7a:77:84: 0c:ea:52:1c:66:60:0a:94:80:ee:53:27:60:6e:bb: 7d:37:2f:a7:08:37:9f:1d:94:56:99:bd:d5:db:da: e9:98:65:bf:d0:67:ef:37:06:60:a1:57:9e:fc:2c: 21:e5:63:07:cd:1a:34:0b:fd:b6:e8:a6:8b:23:dd: 6c:85:09:9b:a3:31:39:2d:48:30:99:b8:36:57:0c: ca:2e:5b:21:30:fd:94:75:c7:0d:79:ac:a6:c1:9a: 96:ba:62:77:53:c6:61:ac:77:be:db:cc:96:76:f9: 7f:6a:ac:a7:b0:f4:96:89:5b:29:79:86:c8:f2:d2: 33:4a:43:a0:6d:66:74:d8:75:65:95:68:ff:48:e6: ca:09:8c:b0:62:d0:5e:ab:dd:a3:66:1f:b5:a1:99: 96:13:c2:f2:5f:37:e5:03:bf:a6:e4:d1:ba:4d:10: 2b:0a:b8:8f:73:04:26:75:25:89:f1:08:2e:9b:75: f9:71:da:23:22:26:60:32:23:60:92:b4:d0:81:3f: 0d:ed:68:6d:18:88:f5:ea:c0:e9:b8:e6:96:9f:94: 08:87:7c:40:2b:1f:b0:d2:db:77:64:a0:e3:b9:7e: 40:ac:a2:d5:69:8a:ea:44:ef:18:02:7e:50:e4:f0: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CD:96:00:16:5D:A5:C4:E3:6E:A4:8B:CD:0B:35:36:F5:14:2C:C2 X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.72.120.0/22 Signature Algorithm: sha256WithRSAEncryption 75:7a:22:6d:05:10:9e:b1:51:5d:87:f0:b6:35:6c:85:ce:bc: d3:2c:e5:31:0d:3e:c3:46:34:53:44:89:ac:f3:19:25:73:2d: 42:b6:87:3f:2e:0e:00:7d:66:ea:03:19:ad:3e:53:52:a0:87: 76:a2:46:22:58:56:80:83:74:78:6d:fb:4f:4e:64:f7:97:36: a2:4c:d6:fc:36:8e:a6:47:04:9c:48:02:56:e0:f0:33:c7:a3: 65:10:7c:56:34:3b:23:03:2e:14:94:a6:8d:b5:18:bf:e1:eb: 5e:59:cf:80:6b:f8:4b:b8:bf:ea:09:87:4c:7f:e1:4a:03:90: 65:73:2d:48:7a:8a:94:f6:79:9a:84:cf:a5:22:7f:db:19:5d: c4:48:7e:a3:c1:07:3a:90:b3:6a:20:f5:c8:e4:64:dc:39:ef: 68:2d:65:dd:19:b0:a4:0d:74:6e:7c:08:b9:51:f0:30:ef:fa: 73:0e:82:7d:13:13:19:93:53:2e:8f:3b:5a:98:e1:d2:72:22: 5e:6a:48:75:60:00:63:2b:2e:f2:dd:a1:d8:67:f3:02:a4:a2: 80:4a:17:53:2e:07:2d:63:94:fb:f0:eb:70:c3:55:3a:36:7c: 2b:ce:cc:c3:46:d5:87:88:b5:e0:3e:1d:5f:bf:18:8a:29:79: 16:88:80:93 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUA+R2E3Ra+55mvrKNEbY03gG+Fv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjAxMjAwMjIxMTJaFw0yNzAxMTkwMjI2MTJaMDMxMTAvBgNV BAMTKEQ5Q0Q5NjAwMTY1REE1QzRFMzZFQTQ4QkNEMEIzNTM2RjUxNDJDQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHP6dwo9z61QsSnp3hAzqUhxm YAqUgO5TJ2Buu303L6cIN58dlFaZvdXb2umYZb/QZ+83BmChV578LCHlYwfNGjQL /bboposj3WyFCZujMTktSDCZuDZXDMouWyEw/ZR1xw15rKbBmpa6YndTxmGsd77b zJZ2+X9qrKew9JaJWyl5hsjy0jNKQ6BtZnTYdWWVaP9I5soJjLBi0F6r3aNmH7Wh mZYTwvJfN+UDv6bk0bpNECsKuI9zBCZ1JYnxCC6bdflx2iMiJmAyI2CStNCBPw3t aG0YiPXqwOm45paflAiHfEArH7DS23dkoOO5fkCsotVpiupE7xgCflDk8LfRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU2c2WABZdpcTjbqSLzQs1NvUULMIwHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC8zMTMwMzMyZTM3 MzIyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzMzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdIeDANBgkqhkiG9w0BAQsFAAOCAQEAdXoibQUQnrFRXYfwtjVs hc680yzlMQ0+w0Y0U0SJrPMZJXMtQraHPy4OAH1m6gMZrT5TUqCHdqJGIlhWgIN0 eG37T05k95c2okzW/DaOpkcEnEgCVuDwM8ejZRB8VjQ7IwMuFJSmjbUYv+HrXlnP gGv4S7i/6gmHTH/hSgOQZXMtSHqKlPZ5moTPpSJ/2xldxEh+o8EHOpCzaiD1yORk 3DnvaC1l3RmwpA10bnwIuVHwMO/6cw6CfRMTGZNTLo87Wpjh0nIiXmpIdWAAYysu 8t2h2GfzAqSigEoXUy4HLWOU+/DrcMNVOjZ8K87Mw0bVh4i14D4dX78Yiil5FoiA kw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:23 2026 by rpki-client