This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e322e302f32342d3332203d3e20313331353339.roa File: 3131302e34322e322e302f32342d3332203d3e20313331353339.roa (raw, json) Hash identifier: pBwER9sTJhTwYDQM7K5BzzFLDuRowL/EfrGMCdxJtro= Subject key identifier: C6:02:CA:F6:90:DA:80:AD:A9:1A:32:EF:67:96:80:92:43:34:9B:CE Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Certificate serial: 7DC8B41F06DBB654F7600CA6ECB3C7FFB5763DD5 Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e322e302f32342d3332203d3e20313331353339.roa Signing time: Tue 20 Jan 2026 02:12:04 +0000 ROA not before: Tue 20 Jan 2026 02:07:04 +0000 ROA not after: Tue 19 Jan 2027 02:12:04 +0000 asID: 131539 IP address blocks: 110.42.2.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c8:b4:1f:06:db:b6:54:f7:60:0c:a6:ec:b3:c7:ff:b5:76:3d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Validity Not Before: Jan 20 02:07:04 2026 GMT Not After : Jan 19 02:12:04 2027 GMT Subject: CN=C602CAF690DA80ADA91A32EF6796809243349BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:09:01:f4:4a:c7:5e:82:b9:d2:aa:d5:e1: 77:ab:f3:47:cd:cd:30:54:37:71:6f:a3:e8:ff:93: b1:c6:b8:73:ca:95:7f:2f:a6:a5:9b:c7:a6:9a:cc: e5:42:a9:f1:0f:f4:69:f1:57:57:18:73:58:62:1f: 98:7c:85:b0:a6:e1:16:86:f7:b3:96:a7:00:09:e6: 9b:c1:eb:7b:89:34:e1:30:4b:90:53:b9:f5:da:e3: 51:4f:aa:dd:21:85:e0:45:c1:79:a1:3e:2b:f1:6e: 1e:f8:ac:85:e1:0e:a3:4d:f5:87:a2:56:bc:a3:81: 59:f1:a4:3a:0a:3e:ce:f7:6d:23:86:e3:0b:f7:3d: 24:46:9a:3e:df:59:7d:38:fe:5e:37:6a:b8:ab:07: 12:37:07:d0:ae:87:39:82:14:a3:d8:56:9c:56:f7: 7c:83:fb:79:1e:4b:37:04:24:0c:03:b7:86:02:17: 69:69:00:d4:43:e1:6d:e3:82:b9:1e:45:f0:5f:09: b9:96:be:6c:d0:16:57:4f:99:26:06:4e:ae:e1:5b: 2f:c2:10:b1:9a:e8:87:cc:34:7c:f2:77:35:ab:a4: ec:bf:30:de:60:02:c0:77:36:94:fc:0a:d4:11:ab: 8a:c6:1a:8f:7e:db:b8:bb:dc:32:d5:96:c5:a7:d4: e7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:02:CA:F6:90:DA:80:AD:A9:1A:32:EF:67:96:80:92:43:34:9B:CE X509v3 Authority Key Identifier: keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e322e302f32342d3332203d3e20313331353339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.42.2.0/24 Signature Algorithm: sha256WithRSAEncryption a8:94:c2:27:48:26:19:8f:9f:eb:35:73:17:10:46:e6:eb:a6: 0e:53:56:f0:c4:3d:b9:3a:36:d2:5b:95:d9:26:10:26:f1:d1: b4:53:88:61:85:2b:b6:98:04:f2:76:14:8d:9c:f7:16:97:35: dc:77:76:8d:c7:cc:e1:b7:ff:e0:1e:7f:65:7a:92:70:6c:77: c9:bb:68:1f:af:60:4a:3b:78:3f:42:7b:80:77:5b:8b:11:31: 0a:5b:e4:09:fd:a1:65:3d:3c:ab:4c:df:ec:90:25:04:5e:9d: 76:34:11:be:c6:fb:b2:58:46:7f:fd:22:8f:04:64:1b:8e:e6: 47:3d:34:2a:9e:17:41:b8:80:50:f2:a8:db:b3:c4:8c:47:01: ad:d3:69:f0:de:55:bd:9a:a1:94:01:bf:3e:de:7a:27:23:3c: ca:d0:49:e7:32:cf:30:12:9b:6a:c0:d9:ed:77:2d:03:2d:87: 6f:a3:d5:cf:43:b9:d8:a9:4d:8c:f8:e3:b5:02:90:11:dd:f8: 61:50:08:69:f7:f4:52:53:24:f5:06:69:f7:5a:58:d0:57:6f: 19:58:c0:13:bf:ef:a2:1e:35:5b:5e:5f:8b:ca:24:84:c5:25: f3:1d:de:04:1c:b5:7f:2b:52:f3:43:fb:10:34:b2:23:07:69: 45:15:f2:a0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUfci0HwbbtlT3YAym7LPH/7V2PdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURF Njk3MDBCRjAeFw0yNjAxMjAwMjA3MDRaFw0yNzAxMTkwMjEyMDRaMDMxMTAvBgNV BAMTKEM2MDJDQUY2OTBEQTgwQURBOTFBMzJFRjY3OTY4MDkyNDMzNDlCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCatwkB9ErHXoK50qrV4Xer80fN zTBUN3Fvo+j/k7HGuHPKlX8vpqWbx6aazOVCqfEP9GnxV1cYc1hiH5h8hbCm4RaG 97OWpwAJ5pvB63uJNOEwS5BTufXa41FPqt0hheBFwXmhPivxbh74rIXhDqNN9Yei VryjgVnxpDoKPs73bSOG4wv3PSRGmj7fWX04/l43arirBxI3B9CuhzmCFKPYVpxW 93yD+3keSzcEJAwDt4YCF2lpANRD4W3jgrkeRfBfCbmWvmzQFldPmSYGTq7hWy/C ELGa6IfMNHzydzWrpOy/MN5gAsB3NpT8CtQRq4rGGo9+27i73DLVlsWn1OdrAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUxgLK9pDagK2pGjLvZ5aAkkM0m84wHwYDVR0j BBgwFoAUCjesiOMD9LuDTBgLBvJQreaXAL8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzI2OTI1MC8wLzBBMzdBQzg4RTMwM0Y0QkI4MzRDMTgwQjA2RjI1 MEFERTY5NzAwQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURFNjk3MDBCRi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3MjY5MjUwLzAvMzEzMTMwMmUzNDMy MmUzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzMTM1MzMzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4qAjANBgkqhkiG9w0BAQsFAAOCAQEAqJTCJ0gmGY+f6zVzFxBG5uumDlNW 8MQ9uTo20luV2SYQJvHRtFOIYYUrtpgE8nYUjZz3Fpc13Hd2jcfM4bf/4B5/ZXqS cGx3ybtoH69gSjt4P0J7gHdbixExClvkCf2hZT08q0zf7JAlBF6ddjQRvsb7slhG f/0ijwRkG47mRz00Kp4XQbiAUPKo27PEjEcBrdNp8N5VvZqhlAG/Pt56JyM8ytBJ 5zLPMBKbasDZ7XctAy2Hb6PVz0O52KlNjPjjtQKQEd34YVAIaff0UlMk9QZp91pY 0FdvGVjAE7/voh41W15fi8okhMUl8x3eBBy1fytS80P7EDSyIwdpRRXyoA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:11 2026 by rpki-client