This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa File: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (raw, json) Hash identifier: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE= Subject key identifier: 68:7B:6A:C6:9F:BD:CB:89:FD:9D:A7:DB:B0:1B:19:DB:F4:78:A4:04 Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 39EEEBF2978155C6BF3E15A721027E6DA6FBF3B5 Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa Signing time: Tue 20 Jan 2026 02:11:57 +0000 ROA not before: Tue 20 Jan 2026 02:06:57 +0000 ROA not after: Tue 19 Jan 2027 02:11:57 +0000 asID: 9392 IP address blocks: 103.122.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ee:eb:f2:97:81:55:c6:bf:3e:15:a7:21:02:7e:6d:a6:fb:f3:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Jan 20 02:06:57 2026 GMT Not After : Jan 19 02:11:57 2027 GMT Subject: CN=687B6AC69FBDCB89FD9DA7DBB01B19DBF478A404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3e:dd:58:ca:5c:5b:ad:64:87:68:5f:4c:21: 2b:9a:a2:2f:ae:7d:69:47:da:cf:d8:99:c0:bc:0f: 67:c2:b7:9b:1b:5e:d1:7d:2a:41:7b:98:e2:e5:6e: ce:54:9d:f3:f5:34:a3:83:1c:5e:e9:a6:59:e1:36: 98:f0:03:82:90:33:33:a1:02:d2:70:f9:82:36:d2: d5:7b:fd:94:e5:8f:43:86:49:29:3f:96:c1:a3:05: f9:96:e1:6f:99:68:fa:5f:0b:58:92:fb:84:65:7d: 16:9e:8f:1f:67:53:c2:1d:85:66:27:3d:04:5b:aa: 67:a7:60:56:7b:19:f8:78:67:35:59:a5:20:64:c1: 57:44:d7:3a:7f:f4:5e:11:0c:da:86:e3:dd:c2:6a: 57:d6:73:39:d7:74:a0:b0:cd:87:56:82:23:9a:f7: 9e:31:c0:97:0b:22:68:06:ae:1c:a6:fb:ce:43:6c: 10:95:8e:f3:78:76:50:43:21:7a:5d:10:8b:4c:71: 81:b6:fc:ac:85:a6:73:4a:20:7a:f1:c2:b9:b8:20: 45:de:2e:ff:03:78:62:7a:44:ef:62:95:de:48:ee: f7:3a:56:d5:35:c4:2f:72:c6:0c:f7:33:d5:49:40: 07:86:18:fa:6d:70:ee:74:81:8f:25:da:44:7f:54: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:6A:C6:9F:BD:CB:89:FD:9D:A7:DB:B0:1B:19:DB:F4:78:A4:04 X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.241.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:52:be:24:66:b3:b5:3f:50:9e:87:67:06:03:39:a4:16:bd: 5f:18:ea:c8:14:ad:19:e8:63:2e:55:1e:95:a3:76:f2:3b:4a: 2c:cb:14:98:ff:f5:00:f3:f0:8c:f1:36:e4:83:28:aa:e3:e2: 4d:0b:f2:68:cb:17:59:55:e7:10:c0:35:f8:02:bc:8b:e9:55: 26:3b:ef:d6:5c:10:77:14:6f:08:0a:17:a5:d5:ff:64:7c:89: c5:d7:c2:c6:12:77:3a:41:ea:ba:11:d9:94:ad:80:ec:74:8a: 55:1d:92:32:a3:df:f8:89:8f:a4:8f:d1:83:2f:fc:c8:bb:a3: b8:e2:bd:d3:e6:81:c7:db:fa:44:db:b8:fc:62:d4:52:b8:fd: ac:7b:15:2d:e7:d6:dc:4c:55:1a:d0:1c:17:05:cd:f3:52:d5: b3:12:88:fc:d7:98:43:3f:95:0b:5d:68:1b:8c:98:fc:40:4b: 4e:e4:d4:bb:2d:49:58:19:75:08:03:ff:42:c5:7d:b8:cf:98: cd:e5:d4:f8:b8:fa:63:99:3f:09:4d:17:4a:36:71:54:29:e4: d7:23:8d:fc:0e:4d:47:a4:c8:d2:9b:6b:d6:e7:5b:e3:fd:4a: 2d:40:dd:1c:36:ba:49:6f:94:70:e5:97:d6:c7:46:74:31:20: 15:c7:02:c6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOe7r8peBVca/PhWnIQJ+bab787UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjAxMjAwMjA2NTdaFw0yNzAxMTkwMjExNTdaMDMxMTAvBgNV BAMTKDY4N0I2QUM2OUZCRENCODlGRDlEQTdEQkIwMUIxOURCRjQ3OEE0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdPt1YylxbrWSHaF9MISuaoi+u fWlH2s/YmcC8D2fCt5sbXtF9KkF7mOLlbs5UnfP1NKODHF7pplnhNpjwA4KQMzOh AtJw+YI20tV7/ZTlj0OGSSk/lsGjBfmW4W+ZaPpfC1iS+4RlfRaejx9nU8IdhWYn PQRbqmenYFZ7Gfh4ZzVZpSBkwVdE1zp/9F4RDNqG493CalfWcznXdKCwzYdWgiOa 954xwJcLImgGrhym+85DbBCVjvN4dlBDIXpdEItMcYG2/KyFpnNKIHrxwrm4IEXe Lv8DeGJ6RO9ild5I7vc6VtU1xC9yxgz3M9VJQAeGGPptcO50gY8l2kR/VEFPAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUaHtqxp+9y4n9nafbsBsZ2/R4pAQwHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4Mjc0MTU3NzcyODAwMi8wLzMxMzAzMzJlMzEz MjMyMmUzMjM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzkzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGd68TANBgkqhkiG9w0BAQsFAAOCAQEAPFK+JGaztT9QnodnBgM5pBa9 XxjqyBStGehjLlUelaN28jtKLMsUmP/1APPwjPE25IMoquPiTQvyaMsXWVXnEMA1 +AK8i+lVJjvv1lwQdxRvCAoXpdX/ZHyJxdfCxhJ3OkHquhHZlK2A7HSKVR2SMqPf +ImPpI/Rgy/8yLujuOK90+aBx9v6RNu4/GLUUrj9rHsVLefW3ExVGtAcFwXN81LV sxKI/NeYQz+VC11oG4yY/EBLTuTUuy1JWBl1CAP/QsV9uM+YzeXU+Lj6Y5k/CU0X SjZxVCnk1yON/A5NR6TI0ptr1udb4/1KLUDdHDa6SW+UcOWX1sdGdDEgFccCxg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:47 2026 by rpki-client