This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa File: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (raw, json) Hash identifier: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek= Subject key identifier: 8A:D7:18:4E:8E:DB:D8:CD:52:20:9B:D5:7D:D9:D9:20:6E:A2:9A:66 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 4A40B50C0C1F4151FAC479956F65C8BABFC7C1FF Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa Signing time: Tue 20 Jan 2026 02:10:56 +0000 ROA not before: Tue 20 Jan 2026 02:05:56 +0000 ROA not after: Tue 19 Jan 2027 02:10:56 +0000 asID: 139138 IP address blocks: 103.150.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:40:b5:0c:0c:1f:41:51:fa:c4:79:95:6f:65:c8:ba:bf:c7:c1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Jan 20 02:05:56 2026 GMT Not After : Jan 19 02:10:56 2027 GMT Subject: CN=8AD7184E8EDBD8CD52209BD57DD9D9206EA29A66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:61:c5:c4:e5:88:42:8f:24:6e:75:11:45: dd:51:e3:02:dd:65:2f:40:9c:a5:39:ee:d2:ee:9f: 85:94:28:5e:ca:8d:cd:8e:d0:f7:34:b2:13:72:5e: 57:24:18:68:11:d8:ff:9f:d3:e3:bc:df:c1:a0:77: 2d:b3:f4:ea:31:69:d4:5f:9c:67:cc:97:50:2b:7d: 90:7a:56:f0:47:74:12:88:ba:0c:9c:3b:f1:b3:52: 87:bf:60:44:76:0f:63:95:b1:f4:e2:f2:9f:0b:41: f5:77:48:8f:39:05:99:09:ce:15:46:10:00:65:cc: bc:e0:13:6d:4e:4d:cb:cd:47:02:f1:81:11:9e:de: 21:91:bf:ea:fb:4d:42:4f:47:a4:79:d6:6b:6c:d6: e2:9e:a6:c1:15:72:5d:26:47:15:ef:02:a8:15:e2: ce:1f:8e:36:fa:4a:e3:da:11:4b:e9:e9:bf:7a:95: c1:90:20:d8:b7:32:d1:39:da:96:4e:b6:9f:d5:40: 3c:32:0a:8b:c9:73:a2:63:47:25:a6:64:91:bf:7c: 80:59:df:5e:f6:ef:e1:0a:bc:b0:f8:71:cf:26:30: d3:f4:64:da:2a:b0:71:af:8a:46:29:c0:39:27:91: 5b:90:32:13:ec:08:97:28:d8:b0:e6:fd:98:64:38: 31:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D7:18:4E:8E:DB:D8:CD:52:20:9B:D5:7D:D9:D9:20:6E:A2:9A:66 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.164.0/24 Signature Algorithm: sha256WithRSAEncryption a7:fc:a9:ec:18:b9:89:61:9e:a9:6a:c8:cd:67:cf:c3:d9:7f: 4c:77:ab:b9:01:da:45:47:cf:d3:7d:19:09:ae:74:6e:25:de: 2b:20:23:be:10:d8:78:68:ba:5f:85:2a:af:ea:19:90:83:7b: 5f:02:a3:c5:6a:52:0c:dd:ef:86:d8:ac:45:02:80:d6:f9:74: 0f:e8:fc:ca:fd:3c:a7:4e:45:88:95:9f:c9:de:95:6b:63:77: 37:3b:b2:9b:1b:ec:7d:77:19:a2:e4:8a:d0:13:19:ab:78:34: 17:e2:a1:e9:04:8b:b2:61:5b:38:5c:22:bd:27:16:f4:a7:db: fc:46:6f:b3:5d:30:ae:17:9a:b4:17:21:ff:1d:42:71:c0:14: d3:ce:f3:c6:fb:84:ea:04:5b:73:2f:23:f2:31:cb:1d:77:cd: 00:21:7c:ef:a4:ae:93:3a:36:db:ee:05:7b:41:62:ef:93:0c: fd:29:50:6e:bc:a5:64:31:f8:46:f1:88:32:0b:ce:15:86:05: ed:64:b6:c7:85:d7:a8:41:64:2b:1a:ec:87:90:fc:ee:bb:d7: 82:91:f8:ba:0f:8b:2f:a6:c6:6a:04:6f:24:ca:9c:40:f1:1a: e7:98:4d:6a:96:d6:5f:86:ad:cc:1a:70:2f:9e:b1:31:0e:03: 04:95:b9:a8 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUSkC1DAwfQVH6xHmVb2XIur/Hwf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjAxMjAwMjA1NTZaFw0yNzAxMTkwMjEwNTZaMDMxMTAvBgNV BAMTKDhBRDcxODRFOEVEQkQ4Q0Q1MjIwOUJENTdERDlEOTIwNkVBMjlBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlWHFxOWIQo8kbnURRd1R4wLd ZS9AnKU57tLun4WUKF7Kjc2O0Pc0shNyXlckGGgR2P+f0+O838Ggdy2z9OoxadRf nGfMl1ArfZB6VvBHdBKIugycO/GzUoe/YER2D2OVsfTi8p8LQfV3SI85BZkJzhVG EABlzLzgE21OTcvNRwLxgRGe3iGRv+r7TUJPR6R51mts1uKepsEVcl0mRxXvAqgV 4s4fjjb6SuPaEUvp6b96lcGQINi3MtE52pZOtp/VQDwyCovJc6JjRyWmZJG/fIBZ 31727+EKvLD4cc8mMNP0ZNoqsHGvikYpwDknkVuQMhPsCJco2LDm/ZhkODHFAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUitcYTo7b2M1SIJvVfdnZIG6immYwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMzM2NjQzLzAvMzEzMDMzMmUz MTM1MzAyZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzMz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeWpDANBgkqhkiG9w0BAQsFAAOCAQEAp/yp7Bi5iWGeqWrI zWfPw9l/THeruQHaRUfP030ZCa50biXeKyAjvhDYeGi6X4Uqr+oZkIN7XwKjxWpS DN3vhtisRQKA1vl0D+j8yv08p05FiJWfyd6Va2N3NzuymxvsfXcZouSK0BMZq3g0 F+Kh6QSLsmFbOFwivScW9Kfb/EZvs10wrheatBch/x1CccAU087zxvuE6gRbcy8j 8jHLHXfNACF876Sukzo22+4Fe0Fi75MM/SlQbrylZDH4RvGIMgvOFYYF7WS2x4XX qEFkKxrsh5D87rvXgpH4ug+LL6bGagRvJMqcQPEa55hNapbWX4atzBpwL56xMQ4D BJW5qA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:33 2026 by rpki-client