This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3130332e392e382e302f32332d3234203d3e203538353933.roa File: 3130332e392e382e302f32332d3234203d3e203538353933.roa (raw, json) Hash identifier: Ac25he14xQqmp0IzPo/j386Yah1y8Wvh1+xgt2mrTTs= Subject key identifier: CB:3C:B3:F9:7D:41:AF:00:FB:69:56:DF:E4:21:53:7E:84:8C:29:51 Certificate issuer: /CN=7505D5D0FC8DB66FC48DA4A64839077551466B62 Certificate serial: 4BD8D1A4E8EB479F5E764CDD90DD02D9AE176FDF Authority key identifier: 75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3130332e392e382e302f32332d3234203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:22 +0000 ROA not before: Tue 20 Jan 2026 02:03:22 +0000 ROA not after: Tue 19 Jan 2027 02:08:22 +0000 asID: 58593 IP address blocks: 103.9.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d8:d1:a4:e8:eb:47:9f:5e:76:4c:dd:90:dd:02:d9:ae:17:6f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7505D5D0FC8DB66FC48DA4A64839077551466B62 Validity Not Before: Jan 20 02:03:22 2026 GMT Not After : Jan 19 02:08:22 2027 GMT Subject: CN=CB3CB3F97D41AF00FB6956DFE421537E848C2951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:be:30:61:f7:fc:6c:72:4c:b7:75:55:51: 75:0d:df:54:31:26:8c:ec:bf:44:0c:bd:66:e9:c6: 57:ec:7b:a6:7a:6e:ab:20:f9:fc:35:7c:e6:25:85: 58:52:d0:cc:66:25:81:6f:01:82:b2:ae:5b:dd:9a: da:e7:3d:b4:22:58:78:22:51:f6:66:b9:7b:c8:2d: 04:74:9c:5f:b0:96:2d:5d:31:0f:f8:35:ba:31:28: c2:75:bd:d3:e2:8a:40:8c:28:a1:ec:2c:87:4f:b7: cc:4b:cb:fb:94:98:b1:c1:25:02:23:7b:8d:35:a8: 61:e8:50:23:02:df:e3:b6:14:b1:e2:59:44:0b:14: 51:74:f3:8b:29:2b:12:72:fd:25:df:f9:66:66:77: 6b:38:38:80:e3:7d:ab:ee:f0:c7:84:94:05:0b:8f: 80:f8:6b:e4:cd:fa:61:32:e3:7e:42:ac:3a:d7:1e: 32:36:b5:ed:21:f8:32:dc:6d:c8:08:8d:59:e9:80: 08:b6:21:55:77:3f:7c:6b:de:26:c5:5d:43:bd:1d: f7:41:10:a2:17:f5:23:a5:c7:fd:20:de:1e:49:f2: 65:82:29:9d:71:4e:7d:32:5c:d5:61:92:58:c2:52: 46:2e:d8:58:c2:3a:04:cd:75:e3:45:04:d4:6c:7b: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3C:B3:F9:7D:41:AF:00:FB:69:56:DF:E4:21:53:7E:84:8C:29:51 X509v3 Authority Key Identifier: keyid:75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3130332e392e382e302f32332d3234203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.9.8.0/23 Signature Algorithm: sha256WithRSAEncryption 82:17:1f:8d:e1:b6:95:4b:80:95:e3:e1:2d:4f:b0:37:bd:c3: bd:10:98:40:a5:c2:60:81:f0:1d:45:c5:10:88:79:80:d5:b4: d2:bc:e5:1a:d9:e0:3c:bf:f1:b8:41:a6:34:e2:48:91:62:fc: e1:90:6b:97:85:e5:cc:9b:d9:74:80:95:77:61:dc:4b:c3:7f: 34:d1:56:2e:03:d7:82:04:c6:df:a3:64:40:2e:2b:46:92:2a: eb:3f:74:ef:67:bb:cc:37:16:7d:2e:f9:26:87:ce:cd:b8:b6: 08:b9:4f:78:35:29:66:fe:df:f3:05:e1:29:66:9e:dc:b8:eb: 87:52:09:a9:77:b0:73:0e:f5:c3:9d:f2:fa:ea:6f:94:65:dd: 9b:59:55:91:f0:c3:f4:b0:b9:ba:11:cf:71:0c:16:2c:26:b0: 03:d8:c4:ba:18:43:cb:4b:46:77:0e:67:96:b0:ce:1c:98:19: 1e:2d:21:4a:79:b3:79:48:f7:72:7e:54:41:74:e8:29:18:2b: da:6a:0b:b1:b0:59:c0:9c:a5:90:c9:a4:36:3f:c6:f4:c3:bf: 4c:7e:4d:70:eb:d1:fb:69:d8:7d:bd:f8:4f:f7:42:87:90:48: 0c:79:41:06:47:87:13:c9:be:d8:2b:b3:67:9d:5d:f0:95:06: c7:e7:36:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUS9jRpOjrR59edkzdkN0C2a4Xb98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUwNUQ1RDBGQzhEQjY2RkM0OERBNEE2NDgzOTA3NzU1 MTQ2NkI2MjAeFw0yNjAxMjAwMjAzMjJaFw0yNzAxMTkwMjA4MjJaMDMxMTAvBgNV BAMTKENCM0NCM0Y5N0Q0MUFGMDBGQjY5NTZERkU0MjE1MzdFODQ4QzI5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtL4wYff8bHJMt3VVUXUN31Qx Jozsv0QMvWbpxlfse6Z6bqsg+fw1fOYlhVhS0MxmJYFvAYKyrlvdmtrnPbQiWHgi UfZmuXvILQR0nF+wli1dMQ/4NboxKMJ1vdPiikCMKKHsLIdPt8xLy/uUmLHBJQIj e401qGHoUCMC3+O2FLHiWUQLFFF084spKxJy/SXf+WZmd2s4OIDjfavu8MeElAUL j4D4a+TN+mEy435CrDrXHjI2te0h+DLcbcgIjVnpgAi2IVV3P3xr3ibFXUO9HfdB EKIX9SOlx/0g3h5J8mWCKZ1xTn0yXNVhkljCUkYu2FjCOgTNdeNFBNRse2IHAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUyzyz+X1BrwD7aVbf5CFTfoSMKVEwHwYDVR0j BBgwFoAUdQXV0PyNtm/EjaSmSDkHdVFGa2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8wLzc1MDVENUQwRkM4REI2NkZDNDhEQTRBNjQ4Mzkw Nzc1NTE0NjZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzUwNUQ1RDBGQzhEQjY2RkM0OERBNEE2NDgzOTA3NzU1MTQ2NkI2Mi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzAvMzEzMDMzMmUzOTJl MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTM4MzUzOTMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB ZwkIMA0GCSqGSIb3DQEBCwUAA4IBAQCCFx+N4baVS4CV4+EtT7A3vcO9EJhApcJg gfAdRcUQiHmA1bTSvOUa2eA8v/G4QaY04kiRYvzhkGuXheXMm9l0gJV3YdxLw380 0VYuA9eCBMbfo2RALitGkirrP3TvZ7vMNxZ9Lvkmh87NuLYIuU94NSlm/t/zBeEp Zp7cuOuHUgmpd7BzDvXDnfL66m+UZd2bWVWR8MP0sLm6Ec9xDBYsJrAD2MS6GEPL S0Z3DmeWsM4cmBkeLSFKebN5SPdyflRBdOgpGCvaaguxsFnAnKWQyaQ2P8b0w79M fk1w69H7adh9vfhP90KHkEgMeUEGR4cTyb7YK7NnnV3wlQbH5zY6 -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:00 2026 by rpki-client