This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138362e302f32342d3234203d3e20313339313339.roa File: 3130332e3135322e3138362e302f32342d3234203d3e20313339313339.roa (raw, json) Hash identifier: tCqkCgPu3CbJwypKqoPdvpwfBaPceEp0JmkZYHoK9dA= Subject key identifier: 97:93:4E:17:AB:BF:E1:9D:B2:AE:79:4C:9B:AE:D1:C0:89:DE:39:B6 Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 0E910F10005A7E5823E8FAD73476800579348731 Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138362e302f32342d3234203d3e20313339313339.roa Signing time: Tue 20 Jan 2026 02:18:08 +0000 ROA not before: Tue 20 Jan 2026 02:13:08 +0000 ROA not after: Tue 19 Jan 2027 02:18:08 +0000 asID: 139139 IP address blocks: 103.152.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:91:0f:10:00:5a:7e:58:23:e8:fa:d7:34:76:80:05:79:34:87:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:08 2026 GMT Not After : Jan 19 02:18:08 2027 GMT Subject: CN=97934E17ABBFE19DB2AE794C9BAED1C089DE39B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6a:d0:2a:28:f3:b1:a9:d2:f3:3f:80:3e:79: 73:3b:9a:b7:11:c5:f5:66:78:8b:42:99:ad:a2:e4: 9b:5e:a4:d0:67:1b:f3:d2:be:4c:6b:71:86:dc:08: 77:29:f0:fe:9f:18:db:1b:b9:01:48:a7:5f:e6:9d: 9c:03:64:53:d9:10:3d:7e:34:0e:d8:90:3e:31:12: 1f:0c:c3:ec:25:56:b8:17:73:46:8d:82:ee:84:d6: f2:7d:b6:bf:a2:ea:f5:29:dc:81:03:93:9e:05:e0: 48:92:95:c9:71:20:70:5d:50:2c:66:61:d7:b8:1e: a8:cb:8a:50:ef:a7:53:52:20:98:0c:eb:d3:24:c6: cd:4e:a6:76:de:76:ff:26:13:2f:69:0b:c3:e8:fa: a6:2f:f9:26:6c:45:e6:73:df:8f:b0:34:15:da:8b: f8:bd:09:16:46:61:b4:fe:e4:23:c9:de:05:36:bc: de:6b:0d:e3:9e:b5:34:b9:d0:7d:ce:8f:72:75:a6: 96:cf:3d:7a:c6:69:a1:da:08:7b:08:c9:18:77:49: ea:93:2e:8a:d1:13:d3:c4:a8:12:a6:c4:80:f2:73: 01:a4:39:4c:5d:c2:da:89:5e:68:5b:ca:bd:92:e8: c3:c0:33:8a:6b:d0:53:5e:4a:71:05:90:00:d8:27: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:93:4E:17:AB:BF:E1:9D:B2:AE:79:4C:9B:AE:D1:C0:89:DE:39:B6 X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138362e302f32342d3234203d3e20313339313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.186.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ea:71:10:f2:7f:d2:fd:a8:6f:5d:b8:bc:38:44:66:3c:1c: 63:97:6c:32:1e:f2:2d:db:9e:79:06:cf:ff:aa:6b:4e:6b:78: 70:f7:5e:61:41:ac:d2:af:16:5a:d8:8e:69:e4:28:be:38:4f: 55:f4:3a:39:01:85:69:4f:77:3a:c8:79:ed:ee:20:88:64:37: a1:92:f7:f1:20:4e:24:cf:66:73:81:4b:ee:dd:78:05:99:42: 65:0c:a8:e2:7e:03:99:b5:31:80:94:ef:c8:1d:ca:92:98:c3: 6e:ed:1f:64:83:63:c1:be:b2:4d:bd:a4:24:25:8c:47:64:65: 29:5c:f0:1c:e3:9e:63:25:97:4e:fc:40:59:fe:52:d2:87:43: 7e:04:8c:0d:38:45:96:1f:c0:cb:50:25:6a:d3:91:27:0f:30: a5:95:cf:e1:94:c8:07:1f:56:53:d1:10:60:7b:55:74:b1:dd: 19:74:ca:4b:d0:77:2f:18:c9:72:ea:c8:12:b9:3c:5b:2d:a4: 39:52:40:72:13:3b:c2:2d:77:43:e4:46:7d:3f:10:ab:07:c3: d8:d1:8a:05:b8:48:30:e7:24:43:a0:b3:72:9f:2a:99:7c:79: ed:a5:3c:03:cd:05:bc:c0:dd:01:18:1c:15:62:7a:ae:95:30: d5:9b:49:b0 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUDpEPEABaflgj6PrXNHaABXk0hzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDhaFw0yNzAxMTkwMjE4MDhaMDMxMTAvBgNV BAMTKDk3OTM0RTE3QUJCRkUxOURCMkFFNzk0QzlCQUVEMUMwODlERTM5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPatAqKPOxqdLzP4A+eXM7mrcR xfVmeItCma2i5JtepNBnG/PSvkxrcYbcCHcp8P6fGNsbuQFIp1/mnZwDZFPZED1+ NA7YkD4xEh8Mw+wlVrgXc0aNgu6E1vJ9tr+i6vUp3IEDk54F4EiSlclxIHBdUCxm Yde4HqjLilDvp1NSIJgM69Mkxs1Opnbedv8mEy9pC8Po+qYv+SZsReZz34+wNBXa i/i9CRZGYbT+5CPJ3gU2vN5rDeOetTS50H3Oj3J1ppbPPXrGaaHaCHsIyRh3SeqT LorRE9PEqBKmxIDycwGkOUxdwtqJXmhbyr2S6MPAM4pr0FNeSnEFkADYJ7ZFAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUl5NOF6u/4Z2yrnlMm67RwIneObYwHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzEzMDMzMmUz MTM1MzIyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzMz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeYujANBgkqhkiG9w0BAQsFAAOCAQEAB+pxEPJ/0v2ob124 vDhEZjwcY5dsMh7yLdueeQbP/6prTmt4cPdeYUGs0q8WWtiOaeQovjhPVfQ6OQGF aU93Osh57e4giGQ3oZL38SBOJM9mc4FL7t14BZlCZQyo4n4DmbUxgJTvyB3KkpjD bu0fZINjwb6yTb2kJCWMR2RlKVzwHOOeYyWXTvxAWf5S0odDfgSMDThFlh/Ay1Al atORJw8wpZXP4ZTIBx9WU9EQYHtVdLHdGXTKS9B3LxjJcurIErk8Wy2kOVJAchM7 wi13Q+RGfT8QqwfD2NGKBbhIMOckQ6Czcp8qmXx57aU8A80FvMDdARgcFWJ6rpUw 1ZtJsA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:53 2026 by rpki-client