This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e332e302f32342d3234203d3e20313334373630.roa File: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (raw, json) Hash identifier: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w= Subject key identifier: 7E:13:23:2D:0F:ED:F3:0B:60:57:64:08:18:AA:C0:6E:09:FD:C5:71 Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F Certificate serial: 65A861092C69860DDE38B6E103E77C9D7B301BE7 Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e332e302f32342d3234203d3e20313334373630.roa Signing time: Tue 20 Jan 2026 02:18:03 +0000 ROA not before: Tue 20 Jan 2026 02:13:03 +0000 ROA not after: Tue 19 Jan 2027 02:18:03 +0000 asID: 134760 IP address blocks: 103.41.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a8:61:09:2c:69:86:0d:de:38:b6:e1:03:e7:7c:9d:7b:30:1b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F Validity Not Before: Jan 20 02:13:03 2026 GMT Not After : Jan 19 02:18:03 2027 GMT Subject: CN=7E13232D0FEDF30B6057640818AAC06E09FDC571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:55:5b:09:12:9c:92:60:f7:7a:0e:f8:be: c8:fa:8e:4e:99:39:c7:b5:56:c0:13:71:98:23:ea: 2d:99:c1:31:65:be:60:9b:cd:b5:2e:aa:ad:bb:f6: 7c:be:cc:c2:a4:ea:50:5b:cb:85:fd:da:0f:34:41: bc:54:6d:86:b4:b1:db:c5:3b:11:d6:ca:62:f1:22: 88:94:b6:20:09:9d:dc:83:74:d8:f5:50:24:aa:35: 10:5c:a1:2b:d1:e5:76:2c:e7:2d:6e:74:f0:4d:35: 50:d2:d7:9b:b1:30:26:a1:7b:65:24:55:ea:2c:0c: 64:68:1c:e8:4d:1e:3f:96:74:dc:6e:00:83:b9:bd: 6b:9c:a9:1b:e8:0e:01:fc:26:09:73:71:8e:c0:13: 45:dc:fb:a0:9a:e8:9d:b6:7d:58:c2:f5:f6:d5:29: 05:a9:b5:f9:06:fc:ba:06:5b:70:2a:e2:3d:f1:6a: d8:7f:6d:dc:fc:11:e6:77:43:7e:2a:a0:e6:6b:94: f1:af:ef:29:86:df:4b:bc:eb:bc:71:d6:78:1c:09: 8e:9c:6f:30:9d:c3:87:51:33:ca:70:df:b5:e6:99: 9f:83:01:6c:3b:da:bf:92:54:55:8b:10:e8:4b:27: c5:20:94:05:34:9e:ab:43:01:98:7e:4d:08:21:d5: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:13:23:2D:0F:ED:F3:0B:60:57:64:08:18:AA:C0:6E:09:FD:C5:71 X509v3 Authority Key Identifier: keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e332e302f32342d3234203d3e20313334373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.3.0/24 Signature Algorithm: sha256WithRSAEncryption af:39:4d:84:6c:ca:b9:7b:42:95:0a:a7:b1:42:aa:ea:fd:4c: 7d:e2:7a:08:fc:de:a5:bd:79:79:1d:c5:58:e7:9b:c2:e3:dd: bd:8f:74:1e:71:b3:8f:90:36:0d:31:00:a3:ce:5a:e5:09:c5: 39:2d:e1:71:33:ee:36:ca:52:d3:97:98:4b:03:00:96:11:1a: 32:d2:f0:fd:a9:f2:ec:05:c8:77:ac:68:5a:94:4f:0c:13:47: 9a:37:3d:8d:68:69:91:01:13:5f:fe:f6:3e:77:8d:91:e4:b4: 0f:ce:5a:2e:42:6c:f5:ef:c4:cf:9a:b7:fd:ae:9f:17:c5:50: 9e:f8:32:65:ea:ea:94:d3:75:9a:8d:bd:ff:8a:d4:f8:73:9a: 31:49:2f:c8:33:d8:2c:2a:8e:93:8e:7f:58:77:37:89:10:4c: bb:dc:bb:55:97:73:86:54:8b:4d:8d:a3:f4:f5:18:3f:be:78: a6:80:78:25:4c:f1:9c:ed:47:56:e6:86:82:70:d2:a6:b0:74: 35:12:96:37:e6:71:ec:44:b2:c0:34:ed:41:38:29:90:b8:c9: 9b:78:b7:a3:7b:c3:17:10:6b:d4:4c:82:cc:d2:88:55:fc:b1: 8d:4e:8b:13:82:dc:dd:23:81:4e:57:e4:f7:a2:9f:fb:bd:f5: 1b:31:34:35 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZahhCSxphg3eOLbhA+d8nXswG+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz MjI3NDM5RjAeFw0yNjAxMjAwMjEzMDNaFw0yNzAxMTkwMjE4MDNaMDMxMTAvBgNV BAMTKDdFMTMyMzJEMEZFREYzMEI2MDU3NjQwODE4QUFDMDZFMDlGREM1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nVVbCRKckmD3eg74vsj6jk6Z Oce1VsATcZgj6i2ZwTFlvmCbzbUuqq279ny+zMKk6lBby4X92g80QbxUbYa0sdvF OxHWymLxIoiUtiAJndyDdNj1UCSqNRBcoSvR5XYs5y1udPBNNVDS15uxMCahe2Uk VeosDGRoHOhNHj+WdNxuAIO5vWucqRvoDgH8JglzcY7AE0Xc+6Ca6J22fVjC9fbV KQWptfkG/LoGW3Aq4j3xath/bdz8EeZ3Q34qoOZrlPGv7ymG30u867xx1ngcCY6c bzCdw4dRM8pw37XmmZ+DAWw72r+SVFWLEOhLJ8UglAU0nqtDAZh+TQgh1dVRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUfhMjLQ/t8wtgV2QIGKrAbgn9xXEwHwYDVR0j BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5 RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3OTkwMTQ2LzAvMzEzMDMzMmUzNDMx MmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcpAzANBgkqhkiG9w0BAQsFAAOCAQEArzlNhGzKuXtClQqnsUKq6v1MfeJ6 CPzepb15eR3FWOebwuPdvY90HnGzj5A2DTEAo85a5QnFOS3hcTPuNspS05eYSwMA lhEaMtLw/any7AXId6xoWpRPDBNHmjc9jWhpkQETX/72PneNkeS0D85aLkJs9e/E z5q3/a6fF8VQnvgyZerqlNN1mo29/4rU+HOaMUkvyDPYLCqOk45/WHc3iRBMu9y7 VZdzhlSLTY2j9PUYP754poB4JUzxnO1HVuaGgnDSprB0NRKWN+Zx7ESywDTtQTgp kLjJm3i3o3vDFxBr1EyCzNKIVfyxjU6LE4Lc3SOBTlfk96Kf+731GzE0NQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:25 2026 by rpki-client