This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa File: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (raw, json) Hash identifier: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA= Subject key identifier: 12:53:3F:CD:0D:0C:9C:71:50:A3:19:74:29:96:41:B0:20:87:EC:96 Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Certificate serial: 6C0F09F014A5B9CEE8BE403958021AE80F27D98E Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa Signing time: Tue 20 Jan 2026 02:12:03 +0000 ROA not before: Tue 20 Jan 2026 02:07:03 +0000 ROA not after: Tue 19 Jan 2027 02:12:03 +0000 asID: 55991 IP address blocks: 103.235.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0f:09:f0:14:a5:b9:ce:e8:be:40:39:58:02:1a:e8:0f:27:d9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Validity Not Before: Jan 20 02:07:03 2026 GMT Not After : Jan 19 02:12:03 2027 GMT Subject: CN=12533FCD0D0C9C7150A31974299641B02087EC96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:0e:91:4c:30:c3:ca:99:86:b3:45:e0:f0: de:d8:06:c9:73:fc:b2:ba:33:a4:bf:18:db:cc:93: 7f:d1:5d:58:b0:59:56:32:e5:bf:63:cb:05:2f:be: 9e:2f:b6:33:d5:c2:7e:b5:80:27:4b:e2:5b:70:66: c3:20:1d:e9:74:82:63:ae:00:34:9c:0c:15:dd:22: e4:c8:52:d7:6f:0e:9b:fb:54:76:5f:c9:2c:ee:9e: 38:02:a0:a1:eb:e5:ef:de:c5:be:29:17:c7:16:aa: a3:28:4b:86:44:df:46:da:08:de:c2:c2:b8:a7:45: 2d:48:5a:9c:e6:d8:33:30:d5:71:da:71:4b:a4:91: 59:20:41:94:f6:6d:df:f2:8c:e6:4f:3b:78:4f:fe: 00:c1:dc:ec:af:2d:04:2f:74:06:b8:bb:20:36:f8: 36:ab:60:0c:37:72:cf:09:22:22:e8:63:4c:4d:4a: 73:21:9b:59:4a:7b:78:45:06:8c:29:8a:8c:32:e9: 0c:6f:07:07:f7:6e:52:c9:c3:a7:1d:6d:da:33:39: 12:92:ed:8c:5a:fe:09:2f:5d:43:82:82:88:32:05: 0b:7e:73:e1:a2:0e:5c:c8:9c:ae:85:96:68:73:52: 99:9d:f6:48:a5:81:15:b7:2b:38:fd:ac:db:72:f6: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:53:3F:CD:0D:0C:9C:71:50:A3:19:74:29:96:41:B0:20:87:EC:96 X509v3 Authority Key Identifier: keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.103.0/24 Signature Algorithm: sha256WithRSAEncryption 20:87:20:d5:6b:33:8a:b8:26:c4:eb:ca:ee:fc:52:24:58:ab: 23:8c:12:b8:00:3b:41:ee:2d:b9:3d:43:58:62:2e:c2:95:d0: 54:0f:72:c4:a8:f0:ec:91:8d:a6:68:b4:1a:4b:c5:fd:61:21: b5:f6:19:81:d6:c8:80:d0:18:d4:5f:93:c1:b7:ca:78:8c:13: 28:01:74:e5:13:21:ef:d6:58:83:a2:e4:52:23:bc:7b:ea:2f: ab:69:54:d7:31:17:88:9d:fc:d3:c0:61:d7:61:ad:be:65:62: 9f:c3:ea:a8:b6:f2:53:d5:59:ca:a6:a6:f4:a4:40:29:35:ce: eb:ad:2c:4e:97:0f:7d:6f:27:05:49:3c:c6:92:55:c4:d9:26: 5f:56:95:31:2e:8d:a1:c4:3d:95:71:ec:81:77:33:5b:1c:c9: 62:ac:56:35:08:82:be:67:05:ea:a3:14:43:2e:0c:9a:67:46: e1:c9:05:57:f9:92:95:44:57:80:a7:13:d9:68:ac:b6:86:d8: 5d:17:46:de:f8:0d:da:b7:ad:38:d0:34:8d:2b:e3:d0:f1:25: 3f:d8:98:1b:e4:4c:02:e5:e8:3c:b7:4b:81:9f:10:52:02:c9: 40:22:29:0d:b3:5d:1b:82:5e:8c:27:5f:3d:92:84:e5:61:af: 7d:f3:e2:c1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUbA8J8BSluc7ovkA5WAIa6A8n2Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC QTcwMTlCQjAeFw0yNjAxMjAwMjA3MDNaFw0yNzAxMTkwMjEyMDNaMDMxMTAvBgNV BAMTKDEyNTMzRkNEMEQwQzlDNzE1MEEzMTk3NDI5OTY0MUIwMjA4N0VDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0g6RTDDDypmGs0Xg8N7YBslz /LK6M6S/GNvMk3/RXViwWVYy5b9jywUvvp4vtjPVwn61gCdL4ltwZsMgHel0gmOu ADScDBXdIuTIUtdvDpv7VHZfySzunjgCoKHr5e/exb4pF8cWqqMoS4ZE30baCN7C wrinRS1IWpzm2DMw1XHacUukkVkgQZT2bd/yjOZPO3hP/gDB3OyvLQQvdAa4uyA2 +DarYAw3cs8JIiLoY0xNSnMhm1lKe3hFBowpiowy6QxvBwf3blLJw6cdbdozORKS 7Yxa/gkvXUOCgogyBQt+c+GiDlzInK6FlmhzUpmd9kilgRW3Kzj9rNty9pMfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUElM/zQ0MnHFQoxl0KZZBsCCH7JYwHwYDVR0j BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC8zMTMwMzMyZTMy MzMzNTJlMzEzMDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfrZzANBgkqhkiG9w0BAQsFAAOCAQEAIIcg1WszirgmxOvK7vxS JFirI4wSuAA7Qe4tuT1DWGIuwpXQVA9yxKjw7JGNpmi0GkvF/WEhtfYZgdbIgNAY 1F+TwbfKeIwTKAF05RMh79ZYg6LkUiO8e+ovq2lU1zEXiJ3808Bh12GtvmVin8Pq qLbyU9VZyqam9KRAKTXO660sTpcPfW8nBUk8xpJVxNkmX1aVMS6NocQ9lXHsgXcz WxzJYqxWNQiCvmcF6qMUQy4MmmdG4ckFV/mSlURXgKcT2WistobYXRdG3vgN2ret ONA0jSvj0PElP9iYG+RMAuXoPLdLgZ8QUgLJQCIpDbNdG4JejCdfPZKE5WGvffPi wQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:57 2026 by rpki-client