This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa File: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (raw, json) Hash identifier: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8= Subject key identifier: EE:5A:FB:00:03:9F:5E:15:FB:02:73:20:A6:73:16:AE:64:BC:FE:C6 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 5BDDF2AEE671B88F8EFF9775986DD991D2A09788 Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa Signing time: Tue 20 Jan 2026 02:26:11 +0000 ROA not before: Tue 20 Jan 2026 02:21:11 +0000 ROA not after: Tue 19 Jan 2027 02:26:11 +0000 asID: 398704 IP address blocks: 103.72.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:dd:f2:ae:e6:71:b8:8f:8e:ff:97:75:98:6d:d9:91:d2:a0:97:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: Jan 20 02:21:11 2026 GMT Not After : Jan 19 02:26:11 2027 GMT Subject: CN=EE5AFB00039F5E15FB027320A67316AE64BCFEC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:be:a7:78:fe:73:a2:3e:4d:7c:a1:93:ae:c8: 04:ca:45:c4:0b:3f:95:ca:88:2b:aa:b2:47:43:c5: 1d:d4:6e:80:4b:16:b2:fd:96:81:03:2e:db:cf:93: d7:52:c8:d1:93:d7:47:0f:97:1c:52:4e:41:f9:03: f2:8a:2c:10:26:74:62:f1:18:1f:b5:da:78:3a:f1: de:5a:55:ff:d9:5a:6f:29:08:7d:cc:54:ca:2b:6f: 01:47:15:4e:18:08:d1:30:70:57:82:27:cf:4d:a8: 13:25:9f:d2:8a:d7:31:94:c0:a8:56:e3:6f:1a:0a: d4:b4:c9:8d:02:0f:cb:ff:db:29:38:77:b4:98:af: 3e:32:a8:b2:a8:52:83:0a:42:62:78:52:7e:0b:df: c9:70:03:fa:ab:b9:a7:26:e9:07:74:e6:1c:92:52: c5:9d:1d:9f:71:77:38:bc:5c:ef:22:de:ac:7d:6a: 84:a2:5f:bb:53:9a:dd:cb:07:d7:79:19:58:01:1b: 92:9c:c1:7c:94:79:13:9d:1f:17:e9:f8:4d:2c:1f: c9:0a:81:19:39:20:9e:56:ed:93:f2:5c:22:c8:2a: 8e:1e:c4:fe:10:d0:ac:29:2a:11:ce:0f:48:c0:d3: c8:39:c4:fd:e9:53:b0:19:04:32:d7:02:28:05:5e: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5A:FB:00:03:9F:5E:15:FB:02:73:20:A6:73:16:AE:64:BC:FE:C6 X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.72.120.0/22 Signature Algorithm: sha256WithRSAEncryption 18:7c:5d:56:fe:22:24:b0:19:fa:a8:82:38:ba:d6:67:d8:24: bb:47:c1:e6:da:af:5c:89:7e:1e:d8:b0:7a:87:57:a2:7b:c1: 7c:2b:07:75:fd:8a:bf:ac:99:82:bf:ab:86:90:94:d4:31:77: b2:88:0a:f7:4e:3e:5d:5e:54:1e:27:ea:36:4d:e5:9f:1e:7d: 7b:d1:ea:33:65:7e:f3:3b:5d:4b:49:2b:a9:45:34:f3:17:0e: 39:ab:e2:e3:74:da:0a:5f:39:54:2f:f0:c6:56:a7:0a:16:6d: 3f:0c:7e:b3:ce:fd:35:43:e3:9c:3d:f4:f2:6f:c6:c5:b0:79: 8d:2b:95:98:93:91:ac:42:5b:44:7d:6e:68:21:5c:d1:ce:31: 3d:51:a9:99:f4:4d:98:e0:3c:f4:93:b5:06:b7:10:f4:54:a3: 61:9d:e9:69:78:41:8b:c9:bf:73:57:5f:86:c4:e8:68:a9:3f: 3f:97:af:7c:0e:b2:07:99:35:8f:8c:2d:af:3c:a3:7c:69:54: 66:62:13:e8:cc:11:90:ac:ae:a3:d7:d1:a4:ed:e1:e8:de:54: cc:6a:26:fb:56:9f:60:1c:75:2e:d8:ff:71:87:13:b0:ae:b1: a6:8a:04:fc:be:4f:d9:ea:61:34:89:7f:24:62:4f:0f:11:1e: f1:fe:fe:9f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUW93yruZxuI+O/5d1mG3ZkdKgl4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjAxMjAwMjIxMTFaFw0yNzAxMTkwMjI2MTFaMDMxMTAvBgNV BAMTKEVFNUFGQjAwMDM5RjVFMTVGQjAyNzMyMEE2NzMxNkFFNjRCQ0ZFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvqd4/nOiPk18oZOuyATKRcQL P5XKiCuqskdDxR3UboBLFrL9loEDLtvPk9dSyNGT10cPlxxSTkH5A/KKLBAmdGLx GB+12ng68d5aVf/ZWm8pCH3MVMorbwFHFU4YCNEwcFeCJ89NqBMln9KK1zGUwKhW 428aCtS0yY0CD8v/2yk4d7SYrz4yqLKoUoMKQmJ4Un4L38lwA/qruacm6Qd05hyS UsWdHZ9xdzi8XO8i3qx9aoSiX7tTmt3LB9d5GVgBG5KcwXyUeROdHxfp+E0sH8kK gRk5IJ5W7ZPyXCLIKo4exP4Q0KwpKhHOD0jA08g5xP3pU7AZBDLXAigFXl4nAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU7lr7AAOfXhX7AnMgpnMWrmS8/sYwHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC8zMTMwMzMyZTM3 MzIyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzODM3MzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdIeDANBgkqhkiG9w0BAQsFAAOCAQEAGHxdVv4iJLAZ+qiCOLrW Z9gku0fB5tqvXIl+HtiweodXonvBfCsHdf2Kv6yZgr+rhpCU1DF3sogK904+XV5U HifqNk3lnx59e9HqM2V+8ztdS0krqUU08xcOOavi43TaCl85VC/wxlanChZtPwx+ s879NUPjnD308m/GxbB5jSuVmJORrEJbRH1uaCFc0c4xPVGpmfRNmOA89JO1BrcQ 9FSjYZ3paXhBi8m/c1dfhsToaKk/P5evfA6yB5k1j4wtrzyjfGlUZmIT6MwRkKyu o9fRpO3h6N5UzGom+1afYBx1Ltj/cYcTsK6xpooE/L5P2ephNIl/JGJPDxEe8f7+ nw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:31 2026 by rpki-client