This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa File: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (raw, json) Hash identifier: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw= Subject key identifier: FD:F8:39:86:5E:80:30:C9:EB:89:8D:A3:4E:C8:62:69:39:A0:25:16 Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Certificate serial: 60B722F7B051CE57DA0DBED55A08F33A6C287312 Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa Signing time: Tue 20 Jan 2026 02:12:02 +0000 ROA not before: Tue 20 Jan 2026 02:07:02 +0000 ROA not after: Tue 19 Jan 2027 02:12:02 +0000 asID: 55991 IP address blocks: 103.235.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b7:22:f7:b0:51:ce:57:da:0d:be:d5:5a:08:f3:3a:6c:28:73:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Validity Not Before: Jan 20 02:07:02 2026 GMT Not After : Jan 19 02:12:02 2027 GMT Subject: CN=FDF839865E8030C9EB898DA34EC8626939A02516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:f9:e9:74:b2:ed:72:79:00:79:d3:f0:06: e1:aa:93:44:bf:3f:93:10:70:c4:18:3f:91:7b:4c: 35:b8:ca:8c:d3:e8:bf:65:c8:87:da:4b:5e:40:7a: e5:2a:91:fd:21:a2:ad:53:e6:7f:33:39:40:89:37: 1b:2c:46:b1:75:7d:c7:05:85:93:4a:29:d0:3a:11: f0:4e:f4:6a:d7:ce:af:8c:5c:cc:bc:19:6a:f1:8c: e5:74:f6:52:76:1b:6e:31:02:6b:db:8a:04:f8:b5: b1:4f:1f:b7:86:02:e1:b8:87:c5:ee:10:4d:63:b8: 3c:65:1f:56:cf:b4:c0:ba:83:1f:f6:e4:f5:8a:bc: 40:2c:df:d0:15:4f:cd:02:57:96:05:28:79:64:4d: e1:45:f3:fc:d4:5b:02:04:3c:f4:08:62:5e:1d:0a: 07:f0:76:91:5b:1f:25:3b:02:11:c7:8b:77:a8:d7: d0:17:c6:aa:38:cb:78:57:07:fb:9c:bb:f1:f8:c4: e9:e8:48:d2:27:7b:52:13:7a:a2:cb:10:85:4b:2c: ea:10:22:dd:c3:77:30:76:34:20:b6:ff:54:ad:fe: 70:82:11:f4:5b:9b:68:8f:48:64:e7:f8:0f:d7:77: 2a:d3:56:ea:b9:5d:82:29:79:65:58:12:fd:60:43: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F8:39:86:5E:80:30:C9:EB:89:8D:A3:4E:C8:62:69:39:A0:25:16 X509v3 Authority Key Identifier: keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.102.0/24 Signature Algorithm: sha256WithRSAEncryption 85:10:f3:3c:bf:06:77:b1:0d:86:21:38:77:9e:08:80:bd:23: 87:33:c5:79:d5:7c:01:9b:b0:fd:6f:2e:7c:c2:ca:36:06:30: 15:dc:83:1c:f1:7a:0e:11:43:88:92:7a:89:3f:be:9d:61:42: d9:9f:61:24:ac:fb:13:1d:46:37:be:f0:88:a5:b9:ec:2a:6c: 29:41:9f:94:62:49:5b:a8:3d:64:45:b3:6b:6d:0c:08:03:0d: 7c:d3:be:2e:f5:51:99:9c:83:4d:74:82:fc:61:7c:dc:8c:4b: 92:e5:21:70:d4:02:af:41:0c:f3:31:f3:8e:27:e0:df:da:ff: f0:07:63:f8:d1:4e:17:8a:fa:0b:1f:65:6a:19:26:73:2c:16: 2f:bd:95:fa:dd:52:07:b7:ea:04:81:2c:5d:ca:62:ee:a5:30: 13:9a:8a:f2:cb:8e:39:b9:64:e4:3e:60:db:0d:74:c6:9b:32: 90:68:38:8f:d6:52:c4:a9:8b:fc:a1:14:52:bc:c3:06:1a:97: 15:23:87:6b:6a:38:9f:40:2f:51:eb:83:56:20:b5:33:85:89: e9:85:3c:78:7c:40:62:4c:73:5e:b2:96:0a:89:9a:3a:8f:e8: 60:8d:a2:5f:fd:66:83:17:7d:ca:7c:d6:1b:2b:3f:89:70:c6: fe:ff:d8:7c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYLci97BRzlfaDb7VWgjzOmwocxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC QTcwMTlCQjAeFw0yNjAxMjAwMjA3MDJaFw0yNzAxMTkwMjEyMDJaMDMxMTAvBgNV BAMTKEZERjgzOTg2NUU4MDMwQzlFQjg5OERBMzRFQzg2MjY5MzlBMDI1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWf/npdLLtcnkAedPwBuGqk0S/ P5MQcMQYP5F7TDW4yozT6L9lyIfaS15AeuUqkf0hoq1T5n8zOUCJNxssRrF1fccF hZNKKdA6EfBO9GrXzq+MXMy8GWrxjOV09lJ2G24xAmvbigT4tbFPH7eGAuG4h8Xu EE1juDxlH1bPtMC6gx/25PWKvEAs39AVT80CV5YFKHlkTeFF8/zUWwIEPPQIYl4d CgfwdpFbHyU7AhHHi3eo19AXxqo4y3hXB/ucu/H4xOnoSNIne1ITeqLLEIVLLOoQ It3DdzB2NCC2/1St/nCCEfRbm2iPSGTn+A/XdyrTVuq5XYIpeWVYEv1gQ8gNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU/fg5hl6AMMnriY2jTshiaTmgJRYwHwYDVR0j BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC8zMTMwMzMyZTMy MzMzNTJlMzEzMDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfrZjANBgkqhkiG9w0BAQsFAAOCAQEAhRDzPL8Gd7ENhiE4d54I gL0jhzPFedV8AZuw/W8ufMLKNgYwFdyDHPF6DhFDiJJ6iT++nWFC2Z9hJKz7Ex1G N77wiKW57CpsKUGflGJJW6g9ZEWza20MCAMNfNO+LvVRmZyDTXSC/GF83IxLkuUh cNQCr0EM8zHzjifg39r/8Adj+NFOF4r6Cx9lahkmcywWL72V+t1SB7fqBIEsXcpi 7qUwE5qK8suOOblk5D5g2w10xpsykGg4j9ZSxKmL/KEUUrzDBhqXFSOHa2o4n0Av UeuDViC1M4WJ6YU8eHxAYkxzXrKWComaOo/oYI2iX/1mgxd9ynzWGys/iXDG/v/Y fA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:13 2026 by rpki-client