This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133322e302f32342d3234203d3e203535393931.roa File: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (raw, json) Hash identifier: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug= Subject key identifier: 7B:79:EB:85:38:03:5D:FD:CC:0A:07:23:86:A9:E4:DB:A8:77:34:B0 Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Certificate serial: 0F3675F07A747EB632D0408A8B2A8301DE22C12C Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133322e302f32342d3234203d3e203535393931.roa Signing time: Tue 20 Jan 2026 02:12:03 +0000 ROA not before: Tue 20 Jan 2026 02:07:03 +0000 ROA not after: Tue 19 Jan 2027 02:12:03 +0000 asID: 55991 IP address blocks: 103.43.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:36:75:f0:7a:74:7e:b6:32:d0:40:8a:8b:2a:83:01:de:22:c1:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Validity Not Before: Jan 20 02:07:03 2026 GMT Not After : Jan 19 02:12:03 2027 GMT Subject: CN=7B79EB8538035DFDCC0A072386A9E4DBA87734B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:13:70:45:c7:63:37:5f:bb:b5:d7:79:90: 28:70:2c:a5:68:28:e8:9e:2c:89:ef:9b:84:26:69: 6d:0e:5b:8b:58:60:ee:e7:2b:7d:c9:3e:4e:5d:6c: 8f:02:bf:75:39:ad:de:95:80:16:01:a4:10:a6:c3: ac:09:5c:67:03:a9:03:f8:6a:3f:5d:65:56:7a:25: 92:ac:08:6c:ae:2c:0f:77:18:4d:7a:00:0c:c9:7c: 06:6f:53:7a:7c:bd:8d:b4:61:08:04:28:22:fe:97: 62:dd:cb:b5:ef:ed:2a:97:84:15:91:e9:4c:57:6b: 7e:1a:3e:06:fb:3d:75:cb:5f:50:95:8f:80:96:2c: f9:1a:5c:58:02:12:28:85:9b:d0:71:88:dc:a2:0d: 57:a9:67:9b:f5:14:91:44:02:d4:98:a4:b0:10:8c: 24:fd:1f:c7:0c:a6:6b:5e:61:9b:d8:d7:96:36:e3: 3d:c6:43:c1:ad:8b:c1:fb:c1:5c:8a:55:0c:59:3e: 01:32:3e:b5:03:e5:58:35:2e:bd:e9:a7:a0:64:16: 14:08:9b:74:c1:71:24:40:6d:5b:7f:2d:ef:ae:c6: 8b:d0:af:5f:3b:f4:a6:e4:ff:99:10:79:6d:9b:8f: 42:ba:22:14:dd:bf:e6:98:c9:3f:62:cf:9c:87:b1: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:79:EB:85:38:03:5D:FD:CC:0A:07:23:86:A9:E4:DB:A8:77:34:B0 X509v3 Authority Key Identifier: keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133322e302f32342d3234203d3e203535393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.132.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:88:3f:a9:0e:87:4b:4c:26:c3:01:7b:4b:36:46:41:70:7d: fc:11:56:be:f3:cd:bc:e3:82:67:a2:b5:cc:43:58:ae:90:62: a9:ee:f5:6c:b8:b6:e3:18:e5:17:43:de:5c:6e:7d:4c:04:8d: 87:e6:f0:f6:c9:fd:52:18:42:fa:aa:44:3e:ea:6f:d1:0b:72: ed:cd:e1:e4:1c:a9:b2:f7:98:dc:02:d3:ab:c7:52:c3:cb:27: 43:9f:62:e3:f5:fe:7d:94:dd:ad:25:f9:aa:e5:93:20:70:0b: c2:e9:9f:3b:40:d6:c2:8c:4b:6f:54:97:d3:80:d7:e2:8d:3e: b6:4a:96:fa:a7:22:4f:ca:01:bf:ee:9c:6f:20:a9:ef:05:11: 94:3c:92:ab:c9:a6:8c:e2:12:81:56:34:d8:ae:50:de:3c:fc: 99:7a:74:bc:ba:8e:c7:27:71:4d:fa:de:f9:d4:d4:cc:aa:08: 70:e6:17:26:49:86:4d:f2:c4:f0:4a:d0:21:22:69:d1:50:1b: 35:3c:ce:2a:47:a8:6d:0a:4c:39:b0:72:d2:86:2b:ca:2b:23: c2:89:6c:da:81:5f:2f:4d:84:ef:54:e5:3e:38:2c:3f:6d:ba: 7b:66:bc:31:5c:ba:b6:8c:dc:44:2d:7e:9a:28:7d:e2:82:80: 9c:40:f0:11 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDzZ18Hp0frYy0ECKiyqDAd4iwSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC QTcwMTlCQjAeFw0yNjAxMjAwMjA3MDNaFw0yNzAxMTkwMjEyMDNaMDMxMTAvBgNV BAMTKDdCNzlFQjg1MzgwMzVERkRDQzBBMDcyMzg2QTlFNERCQTg3NzM0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrhNwRcdjN1+7tdd5kChwLKVo KOieLInvm4QmaW0OW4tYYO7nK33JPk5dbI8Cv3U5rd6VgBYBpBCmw6wJXGcDqQP4 aj9dZVZ6JZKsCGyuLA93GE16AAzJfAZvU3p8vY20YQgEKCL+l2Ldy7Xv7SqXhBWR 6UxXa34aPgb7PXXLX1CVj4CWLPkaXFgCEiiFm9BxiNyiDVepZ5v1FJFEAtSYpLAQ jCT9H8cMpmteYZvY15Y24z3GQ8Gti8H7wVyKVQxZPgEyPrUD5Vg1Lr3pp6BkFhQI m3TBcSRAbVt/Le+uxovQr1879Kbk/5kQeW2bj0K6IhTdv+aYyT9iz5yHseDDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUe3nrhTgDXf3MCgcjhqnk26h3NLAwHwYDVR0j BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTM4OTI2NTI4OTIxNy8wLzMxMzAzMzJlMzQz MzJlMzEzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGcrhDANBgkqhkiG9w0BAQsFAAOCAQEAnog/qQ6HS0wmwwF7SzZGQXB9 /BFWvvPNvOOCZ6K1zENYrpBiqe71bLi24xjlF0PeXG59TASNh+bw9sn9UhhC+qpE Pupv0Qty7c3h5BypsveY3ALTq8dSw8snQ59i4/X+fZTdrSX5quWTIHALwumfO0DW woxLb1SX04DX4o0+tkqW+qciT8oBv+6cbyCp7wURlDySq8mmjOISgVY02K5Q3jz8 mXp0vLqOxydxTfre+dTUzKoIcOYXJkmGTfLE8ErQISJp0VAbNTzOKkeobQpMObBy 0oYryisjwols2oFfL02E71TlPjgsP226e2a8MVy6tozcRC1+mih94oKAnEDwEQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:14:02 2026 by rpki-client