This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e302e302f32332d3233203d3e20313334373630.roa File: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (raw, json) Hash identifier: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg= Subject key identifier: 8F:48:F2:43:4C:E1:42:38:80:FA:71:51:18:AB:79:09:69:AD:56:BB Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F Certificate serial: 1F0309527E337A720973A0173AC79A50D509051D Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e302e302f32332d3233203d3e20313334373630.roa Signing time: Tue 20 Jan 2026 02:18:03 +0000 ROA not before: Tue 20 Jan 2026 02:13:03 +0000 ROA not after: Tue 19 Jan 2027 02:18:03 +0000 asID: 134760 IP address blocks: 103.41.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:03:09:52:7e:33:7a:72:09:73:a0:17:3a:c7:9a:50:d5:09:05:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F Validity Not Before: Jan 20 02:13:03 2026 GMT Not After : Jan 19 02:18:03 2027 GMT Subject: CN=8F48F2434CE1423880FA715118AB790969AD56BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:b5:e2:61:35:94:32:9f:f1:b4:15:b3:49: a3:7d:b7:60:76:e7:02:47:75:ec:77:7e:75:ec:b7: ed:0e:eb:39:30:74:a0:51:46:bf:eb:ef:4d:4f:7c: b4:fa:28:31:d9:9f:e5:06:f7:5b:ce:9d:1c:41:77: 2b:24:b0:1d:39:f0:60:ff:7a:ec:3d:c6:0c:07:4f: 27:4d:b3:39:c4:5c:ba:ac:52:f8:e5:7f:d2:1a:38: f6:12:98:b6:b9:54:90:8d:4b:6c:62:2e:75:de:27: 21:a4:5a:7a:3e:ad:99:cf:71:db:ea:7e:34:a5:93: 84:2e:6a:af:92:57:eb:0b:35:61:fe:25:5c:ad:ea: db:d6:f2:c5:a7:ae:0e:21:18:e6:d3:13:25:ed:50: 6b:13:05:7d:01:be:ef:2a:7b:2d:df:e5:71:b7:04: 78:04:c4:22:c7:eb:1c:df:2d:08:6f:ac:47:5f:66: 1c:c5:c9:51:0c:48:18:6d:7c:f3:00:8b:07:38:bd: 57:de:1a:4d:61:82:48:a7:aa:2a:a8:20:b8:75:3e: d4:ec:80:d0:2d:1c:4c:ae:b9:9d:ae:dc:8e:73:9f: 3c:2c:68:db:8e:43:79:04:c9:88:0a:3a:7e:51:14: f6:ce:b4:7b:77:ad:89:41:cd:e4:1e:69:dc:d6:be: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:48:F2:43:4C:E1:42:38:80:FA:71:51:18:AB:79:09:69:AD:56:BB X509v3 Authority Key Identifier: keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e302e302f32332d3233203d3e20313334373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.0.0/23 Signature Algorithm: sha256WithRSAEncryption 13:f3:39:a2:f2:91:f6:9c:bb:f5:7f:42:8f:b4:3f:b1:ae:6b: eb:75:af:be:c1:9b:50:27:5c:8b:89:9b:79:c5:15:73:e8:49: fa:ec:b5:de:19:51:b0:f3:cc:dc:0b:e8:9a:31:ea:c2:34:ed: f7:d2:71:d6:f1:29:71:98:bd:2c:84:66:6a:e3:ec:71:5b:07: b6:43:8a:fa:0c:29:c9:89:d8:a9:c0:97:c2:bf:f2:54:ee:30: 1f:9a:cf:92:29:dc:f5:73:7a:39:2a:93:9f:de:2b:b8:d2:6e: ed:5b:e0:59:7b:7a:e8:84:bb:21:93:c9:5a:a6:93:fb:31:96: 50:0f:2d:85:23:45:44:d3:3a:d7:43:c6:d2:cc:fc:70:89:ff: d5:50:da:03:a0:3c:2b:06:dc:d3:79:49:06:30:d9:5d:ed:bc: 70:ea:d3:b9:49:6e:d5:8b:20:9e:cb:c7:a9:01:98:6a:97:fc: 3e:cb:62:78:ff:4d:90:c4:6a:d6:50:65:81:94:f6:3e:2d:d6: 78:82:0e:ec:84:6e:f5:c1:64:d0:bd:7c:93:97:a5:56:ef:7e: 45:3a:b9:67:60:78:aa:35:42:cc:a6:91:90:16:be:04:84:29: 5b:4a:f6:55:22:00:23:35:d6:01:50:5d:ed:02:b4:06:93:de: 72:d3:02:f5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHwMJUn4zenIJc6AXOseaUNUJBR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz MjI3NDM5RjAeFw0yNjAxMjAwMjEzMDNaFw0yNzAxMTkwMjE4MDNaMDMxMTAvBgNV BAMTKDhGNDhGMjQzNENFMTQyMzg4MEZBNzE1MTE4QUI3OTA5NjlBRDU2QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1P7XiYTWUMp/xtBWzSaN9t2B2 5wJHdex3fnXst+0O6zkwdKBRRr/r701PfLT6KDHZn+UG91vOnRxBdysksB058GD/ euw9xgwHTydNsznEXLqsUvjlf9IaOPYSmLa5VJCNS2xiLnXeJyGkWno+rZnPcdvq fjSlk4Quaq+SV+sLNWH+JVyt6tvW8sWnrg4hGObTEyXtUGsTBX0Bvu8qey3f5XG3 BHgExCLH6xzfLQhvrEdfZhzFyVEMSBhtfPMAiwc4vVfeGk1hgkinqiqoILh1PtTs gNAtHEyuuZ2u3I5znzwsaNuOQ3kEyYgKOn5RFPbOtHt3rYlBzeQeadzWvgk7AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUj0jyQ0zhQjiA+nFRGKt5CWmtVrswHwYDVR0j BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5 RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3OTkwMTQ2LzAvMzEzMDMzMmUzNDMx MmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNDM3MzYzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWcpADANBgkqhkiG9w0BAQsFAAOCAQEAE/M5ovKR9py79X9Cj7Q/sa5r63Wv vsGbUCdci4mbecUVc+hJ+uy13hlRsPPM3AvomjHqwjTt99Jx1vEpcZi9LIRmauPs cVsHtkOK+gwpyYnYqcCXwr/yVO4wH5rPkinc9XN6OSqTn94ruNJu7VvgWXt66IS7 IZPJWqaT+zGWUA8thSNFRNM610PG0sz8cIn/1VDaA6A8Kwbc03lJBjDZXe28cOrT uUlu1YsgnsvHqQGYapf8PstieP9NkMRq1lBlgZT2Pi3WeIIO7IRu9cFk0L18k5el Vu9+RTq5Z2B4qjVCzKaRkBa+BIQpW0r2VSIAIzXWAVBd7QK0BpPectMC9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:37 2026 by rpki-client