This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138362e302f32332d3233203d3e20313339313339.roa File: 3130332e3135322e3138362e302f32332d3233203d3e20313339313339.roa (raw, json) Hash identifier: qjCyivi0dxcfzMAmqMJUlGNdGpx1THcX6jE8xR7VxBI= Subject key identifier: C0:63:6E:CF:91:3E:0B:52:70:A0:D9:70:C2:59:43:1A:A5:65:42:2D Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 2E64005BF558B72B56C7D688B3E4DD513CF9CE22 Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138362e302f32332d3233203d3e20313339313339.roa Signing time: Tue 20 Jan 2026 02:18:07 +0000 ROA not before: Tue 20 Jan 2026 02:13:07 +0000 ROA not after: Tue 19 Jan 2027 02:18:07 +0000 asID: 139139 IP address blocks: 103.152.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:64:00:5b:f5:58:b7:2b:56:c7:d6:88:b3:e4:dd:51:3c:f9:ce:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:07 2026 GMT Not After : Jan 19 02:18:07 2027 GMT Subject: CN=C0636ECF913E0B5270A0D970C259431AA565422D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:d3:f2:ed:d3:08:95:bf:ce:05:3e:89:b5: 78:ac:e3:b3:ba:34:80:fa:2c:99:3f:70:95:b8:36: 59:87:56:68:41:0b:0b:26:79:24:b5:30:ea:ba:0f: a9:63:65:98:e9:69:4c:3d:2a:1e:69:8b:55:9d:90: 44:83:f7:63:ab:66:f2:f1:88:04:35:f6:5f:8e:b5: 83:6d:1e:61:6d:e6:79:20:99:23:ef:78:83:8a:b1: b7:84:07:d4:ff:7b:97:91:c7:a0:43:b4:f9:c3:5e: 1c:5e:bc:03:cc:7d:d2:c0:69:b9:ce:8e:7b:7f:e0: ec:2f:17:fa:9c:b8:0a:7a:96:64:9f:c4:92:b2:ee: 9f:82:11:ac:ed:5c:03:b4:8f:6a:5f:f1:a4:3b:a3: 36:8e:f5:e1:c4:30:ed:8d:33:eb:11:79:a7:5b:0f: c4:5a:dd:8f:6d:41:ce:fb:b2:4b:18:31:f1:35:d3: 51:53:b5:ba:6b:51:89:d2:02:78:05:81:df:4b:78: 9b:b8:65:e1:c9:ad:fa:21:36:db:ab:4e:81:06:96: dc:01:9b:e5:6c:82:90:00:60:ee:48:6d:58:f7:35: 46:9e:51:21:e6:7e:e0:ab:bb:40:8f:6c:5a:19:33: 16:fc:5a:2d:ce:eb:0c:d3:1c:00:b4:e0:ae:fc:5a: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:63:6E:CF:91:3E:0B:52:70:A0:D9:70:C2:59:43:1A:A5:65:42:2D X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138362e302f32332d3233203d3e20313339313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.186.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:28:fb:71:5f:95:57:1a:6d:60:4a:7f:92:b2:3b:2c:04:ca: 89:61:b8:75:f3:50:4b:27:0d:15:4b:5f:42:c1:6d:b3:e4:4b: 3f:48:8a:74:75:23:5d:60:a7:6b:e9:19:5f:8d:17:36:88:73: e3:b9:63:50:a8:c8:37:0e:d4:e7:22:d0:6c:b5:8d:2c:43:10: 53:23:eb:dd:73:58:98:d8:ea:6b:95:3d:bf:c0:0e:2a:d9:db: f4:7c:4f:2a:54:f1:12:ad:39:f4:fc:42:a4:5f:d7:5b:e3:94: 06:5b:f4:91:6b:20:bc:48:ac:7d:a5:ce:30:38:2a:f2:e3:90: 2c:98:eb:19:93:8b:fd:64:02:ab:4e:1f:86:6b:de:55:73:a9: fc:d9:6e:5c:79:1b:ff:56:b6:df:dd:52:36:14:ab:a8:13:89: fb:39:62:98:c3:e1:62:e2:bd:65:3b:f5:97:57:bf:83:ea:23: e2:11:4e:3d:3d:51:52:5c:27:ef:06:55:85:af:75:58:cd:1c: 9d:d2:84:95:9a:f7:09:56:44:35:30:a5:83:fe:12:ba:8f:26: 74:3a:75:63:d0:c4:c5:49:2e:79:7b:53:29:21:c0:ab:e9:ca: d5:fe:52:6c:0d:a6:51:dc:9e:65:4c:2f:36:0a:45:79:77:05: 66:7a:2c:43 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIULmQAW/VYtytWx9aIs+TdUTz5ziIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDdaFw0yNzAxMTkwMjE4MDdaMDMxMTAvBgNV BAMTKEMwNjM2RUNGOTEzRTBCNTI3MEEwRDk3MEMyNTk0MzFBQTU2NTQyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOdPy7dMIlb/OBT6JtXis47O6 NID6LJk/cJW4NlmHVmhBCwsmeSS1MOq6D6ljZZjpaUw9Kh5pi1WdkESD92OrZvLx iAQ19l+OtYNtHmFt5nkgmSPveIOKsbeEB9T/e5eRx6BDtPnDXhxevAPMfdLAabnO jnt/4OwvF/qcuAp6lmSfxJKy7p+CEaztXAO0j2pf8aQ7ozaO9eHEMO2NM+sReadb D8Ra3Y9tQc77sksYMfE101FTtbprUYnSAngFgd9LeJu4ZeHJrfohNturToEGltwB m+VsgpAAYO5IbVj3NUaeUSHmfuCru0CPbFoZMxb8Wi3O6wzTHAC04K78WnefAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUwGNuz5E+C1JwoNlwwllDGqVlQi0wHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzEzMDMzMmUz MTM1MzIyZTMxMzgzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzOTMxMzMz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeYujANBgkqhkiG9w0BAQsFAAOCAQEAmij7cV+VVxptYEp/ krI7LATKiWG4dfNQSycNFUtfQsFts+RLP0iKdHUjXWCna+kZX40XNohz47ljUKjI Nw7U5yLQbLWNLEMQUyPr3XNYmNjqa5U9v8AOKtnb9HxPKlTxEq059PxCpF/XW+OU Blv0kWsgvEisfaXOMDgq8uOQLJjrGZOL/WQCq04fhmveVXOp/NluXHkb/1a2391S NhSrqBOJ+zlimMPhYuK9ZTv1l1e/g+oj4hFOPT1RUlwn7wZVha91WM0cndKElZr3 CVZENTClg/4Suo8mdDp1Y9DExUkueXtTKSHAq+nK1f5SbA2mUdyeZUwvNgpFeXcF ZnosQw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:08 2026 by rpki-client