This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e322e302f32342d3234203d3e20313334373630.roa File: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (raw, json) Hash identifier: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko= Subject key identifier: DB:FA:8F:1A:9C:43:72:7A:E1:61:44:A9:96:E2:8D:97:E7:0F:9A:CC Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F Certificate serial: 2D53745F4497F2069CCF165235F8A479671F692C Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e322e302f32342d3234203d3e20313334373630.roa Signing time: Tue 20 Jan 2026 02:18:03 +0000 ROA not before: Tue 20 Jan 2026 02:13:03 +0000 ROA not after: Tue 19 Jan 2027 02:18:03 +0000 asID: 134760 IP address blocks: 103.41.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:53:74:5f:44:97:f2:06:9c:cf:16:52:35:f8:a4:79:67:1f:69:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F Validity Not Before: Jan 20 02:13:03 2026 GMT Not After : Jan 19 02:18:03 2027 GMT Subject: CN=DBFA8F1A9C43727AE16144A996E28D97E70F9ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:3a:75:cb:57:4a:7d:3f:18:ee:1d:8f:b1: cb:83:c6:e2:ac:1e:17:32:ac:e6:17:15:09:68:7d: d4:9c:d4:e7:88:1a:dd:62:ca:ea:61:76:e7:9d:19: e4:91:38:55:fd:65:77:14:e6:47:e5:48:6e:8a:20: 0b:c8:92:e8:f3:fc:f8:c4:7b:2f:91:0a:43:d4:cd: 3a:3f:55:80:3a:70:c6:b9:16:67:98:c3:3a:61:41: 74:6c:ff:08:94:cf:5f:36:bb:d0:f6:4f:60:b9:43: 34:28:fe:d5:fe:b2:97:2c:7f:92:ac:fd:e5:d5:23: 60:56:26:97:49:c7:d9:bd:51:94:b6:e8:99:5b:7e: 6f:b7:3e:e4:92:30:e3:9c:a5:9f:b9:97:8d:4d:95: 34:d9:b5:f0:fb:77:a0:88:96:d0:f8:8c:56:5b:01: 2f:a2:cf:be:ac:36:1e:d2:58:f2:5a:15:4f:2b:5f: a7:54:32:ff:1c:52:67:98:96:23:b9:53:ce:82:63: bf:e0:b7:60:5d:a5:f6:6a:57:1e:c8:10:2a:57:f7: a9:ce:34:ee:ec:de:e2:29:68:69:30:9c:2c:36:53: 0f:12:bc:8a:25:d0:5c:4c:bc:5a:db:fd:8d:20:4d: 91:c8:b1:cd:99:fb:1d:d5:d0:99:2c:23:8a:06:39: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FA:8F:1A:9C:43:72:7A:E1:61:44:A9:96:E2:8D:97:E7:0F:9A:CC X509v3 Authority Key Identifier: keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e322e302f32342d3234203d3e20313334373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.2.0/24 Signature Algorithm: sha256WithRSAEncryption 92:6b:b6:97:2f:2e:91:02:ff:28:27:c5:36:21:aa:41:95:b2: b6:9d:0f:a6:b9:d9:11:11:19:20:bc:5a:f0:7e:e7:46:51:c6: d9:f8:72:27:77:4c:3d:7e:b9:c6:81:fb:0e:a8:c4:31:b4:e7: 79:f7:b2:ee:e1:cf:ce:8f:5e:47:ab:48:58:3d:76:48:dd:a7: 23:91:14:3f:b2:3f:65:4a:66:e5:88:8f:81:e8:c0:da:cf:11: b3:6e:fa:df:5b:df:32:40:da:e6:26:f9:cf:66:40:45:4d:2d: 37:f6:aa:60:a7:98:00:cb:d7:20:ec:66:1f:05:35:fa:0b:1d: 92:96:99:dc:58:b4:2e:d9:17:a8:04:e6:68:cf:ac:37:0f:ad: ee:77:58:1c:0b:44:77:b4:bd:eb:58:8b:84:f5:12:00:ae:15: f2:1a:7a:14:f0:3c:22:b3:38:8b:b1:3c:da:80:b0:b9:aa:e4: 6b:e2:d1:6c:90:e3:3b:e0:22:de:a4:40:9c:79:72:bf:69:7d: e0:12:19:13:b2:ed:e2:09:43:1e:66:d3:dd:ac:ba:0e:63:18: 1c:41:08:2e:70:ff:f6:d2:f1:27:22:ff:ab:3a:55:62:83:3d: 26:40:9e:d6:8c:bb:61:e1:04:e0:d3:6e:3b:29:c8:75:3a:88: 71:03:06:4b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULVN0X0SX8gaczxZSNfikeWcfaSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz MjI3NDM5RjAeFw0yNjAxMjAwMjEzMDNaFw0yNzAxMTkwMjE4MDNaMDMxMTAvBgNV BAMTKERCRkE4RjFBOUM0MzcyN0FFMTYxNDRBOTk2RTI4RDk3RTcwRjlBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqTp1y1dKfT8Y7h2PscuDxuKs HhcyrOYXFQlofdSc1OeIGt1iyuphduedGeSROFX9ZXcU5kflSG6KIAvIkujz/PjE ey+RCkPUzTo/VYA6cMa5FmeYwzphQXRs/wiUz182u9D2T2C5QzQo/tX+spcsf5Ks /eXVI2BWJpdJx9m9UZS26Jlbfm+3PuSSMOOcpZ+5l41NlTTZtfD7d6CIltD4jFZb AS+iz76sNh7SWPJaFU8rX6dUMv8cUmeYliO5U86CY7/gt2BdpfZqVx7IECpX96nO NO7s3uIpaGkwnCw2Uw8SvIol0FxMvFrb/Y0gTZHIsc2Z+x3V0JksI4oGOahPAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU2/qPGpxDcnrhYUSpluKNl+cPmswwHwYDVR0j BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5 RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3OTkwMTQ2LzAvMzEzMDMzMmUzNDMx MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcpAjANBgkqhkiG9w0BAQsFAAOCAQEAkmu2ly8ukQL/KCfFNiGqQZWytp0P prnZEREZILxa8H7nRlHG2fhyJ3dMPX65xoH7DqjEMbTnefey7uHPzo9eR6tIWD12 SN2nI5EUP7I/ZUpm5YiPgejA2s8Rs27631vfMkDa5ib5z2ZARU0tN/aqYKeYAMvX IOxmHwU1+gsdkpaZ3Fi0LtkXqATmaM+sNw+t7ndYHAtEd7S961iLhPUSAK4V8hp6 FPA8IrM4i7E82oCwuarka+LRbJDjO+Ai3qRAnHlyv2l94BIZE7Lt4glDHmbT3ay6 DmMYHEEILnD/9tLxJyL/qzpVYoM9JkCe1oy7YeEE4NNuOynIdTqIcQMGSw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:19 2026 by rpki-client