This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133352e302f32342d3234203d3e203535393931.roa File: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (raw, json) Hash identifier: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE= Subject key identifier: 2A:AB:DD:22:F1:F0:53:B1:FC:AC:05:4C:CE:6D:0B:C9:9A:B1:C4:90 Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Certificate serial: 038ED3D0E2DB31034249CA4FA16F89ADFA4F5069 Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133352e302f32342d3234203d3e203535393931.roa Signing time: Tue 20 Jan 2026 02:12:02 +0000 ROA not before: Tue 20 Jan 2026 02:07:02 +0000 ROA not after: Tue 19 Jan 2027 02:12:02 +0000 asID: 55991 IP address blocks: 103.43.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8e:d3:d0:e2:db:31:03:42:49:ca:4f:a1:6f:89:ad:fa:4f:50:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Validity Not Before: Jan 20 02:07:02 2026 GMT Not After : Jan 19 02:12:02 2027 GMT Subject: CN=2AABDD22F1F053B1FCAC054CCE6D0BC99AB1C490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:58:61:dc:ae:80:a8:c9:72:3d:52:0c:f7: fe:a2:84:89:f1:93:cb:46:56:e9:3b:32:46:aa:d2: 0f:62:83:e5:c7:69:1c:71:62:75:04:7e:1c:59:7a: 24:11:04:e6:c8:70:ce:d0:4d:4c:ce:21:ce:e7:d6: 08:df:6f:4a:d1:91:ba:4c:ec:47:72:cf:5c:61:91: 28:76:f4:94:ea:99:43:dc:17:87:9c:76:de:9c:4b: 41:25:52:54:fa:7f:0d:f5:43:0c:86:60:5e:69:7f: 57:06:a5:5f:72:1f:63:e3:77:ee:36:00:28:75:ac: 26:a9:82:9f:62:58:4f:4a:54:cd:07:88:6c:59:e9: 29:b6:4d:ab:23:c8:0d:07:28:1e:d8:80:e6:29:a5: e8:85:54:97:55:00:22:f2:aa:ab:de:bc:0c:3e:5a: 76:b5:41:ec:06:d7:ff:b1:06:60:d6:59:d1:f7:67: c5:41:7d:e9:13:40:8b:cd:99:61:10:ed:67:b9:71: 5a:72:e6:7b:92:64:e5:0b:fc:4b:b7:19:e3:07:b1: 05:04:3a:2a:58:d0:09:87:24:1f:3e:01:eb:ab:de: a9:9e:c0:48:2e:c2:8d:e8:4e:25:83:d2:a9:5b:92: cb:67:98:80:9d:e7:44:52:f4:67:77:c7:82:0d:86: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AB:DD:22:F1:F0:53:B1:FC:AC:05:4C:CE:6D:0B:C9:9A:B1:C4:90 X509v3 Authority Key Identifier: keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133352e302f32342d3234203d3e203535393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.135.0/24 Signature Algorithm: sha256WithRSAEncryption 33:7c:4b:3a:f6:b5:c1:cf:a4:f1:05:8f:84:57:2d:6c:3f:84: 19:3a:26:53:cc:0a:b7:30:8c:ca:05:b0:7d:e3:a5:b9:5e:99: 46:ff:5d:a6:37:d8:ab:f7:52:12:b4:9c:ed:1a:00:e3:20:74: 0c:12:c7:a4:da:d2:fa:2c:bb:63:03:8b:57:0e:09:cb:9c:23: dd:33:45:ec:5d:53:80:f0:9f:be:a5:89:6d:60:02:e2:8b:0b: 39:93:f7:5e:9b:40:3d:88:20:5e:8d:46:89:98:dd:1e:43:d0: cb:7a:28:d4:c6:29:d9:f7:ce:63:ff:4b:72:b0:3e:39:2f:e6: b9:79:5e:d4:16:3d:fb:1a:a8:96:75:76:6b:78:ee:bb:00:d0: f6:ba:4e:f1:7f:c9:ef:a3:0c:75:e3:01:76:3e:86:cb:8e:3f: fb:c3:93:6e:7e:3c:b5:62:26:fc:82:1c:a5:ec:2f:72:22:dc: 92:93:7f:aa:0d:38:43:ce:39:65:f7:5e:80:b8:c7:97:0e:f6: 46:a8:ba:14:bb:3f:0b:38:16:09:7f:d5:15:05:81:6f:e8:f3: 65:73:da:ed:b9:f0:a5:d8:4e:95:a5:64:20:6e:29:91:4d:1d: 5f:14:3c:79:1b:3e:b6:d7:d6:44:44:f2:5c:b4:c9:da:22:39: 00:62:11:f0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUA47T0OLbMQNCScpPoW+JrfpPUGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC QTcwMTlCQjAeFw0yNjAxMjAwMjA3MDJaFw0yNzAxMTkwMjEyMDJaMDMxMTAvBgNV BAMTKDJBQUJERDIyRjFGMDUzQjFGQ0FDMDU0Q0NFNkQwQkM5OUFCMUM0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IFhh3K6AqMlyPVIM9/6ihInx k8tGVuk7Mkaq0g9ig+XHaRxxYnUEfhxZeiQRBObIcM7QTUzOIc7n1gjfb0rRkbpM 7Edyz1xhkSh29JTqmUPcF4ecdt6cS0ElUlT6fw31QwyGYF5pf1cGpV9yH2Pjd+42 ACh1rCapgp9iWE9KVM0HiGxZ6Sm2TasjyA0HKB7YgOYppeiFVJdVACLyqqvevAw+ Wna1QewG1/+xBmDWWdH3Z8VBfekTQIvNmWEQ7We5cVpy5nuSZOUL/Eu3GeMHsQUE OipY0AmHJB8+Aeur3qmewEguwo3oTiWD0qlbkstnmICd50RS9Gd3x4INhm0bAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUKqvdIvHwU7H8rAVMzm0LyZqxxJAwHwYDVR0j BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTM4OTI2NTI4OTIxNy8wLzMxMzAzMzJlMzQz MzJlMzEzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGcrhzANBgkqhkiG9w0BAQsFAAOCAQEAM3xLOva1wc+k8QWPhFctbD+E GTomU8wKtzCMygWwfeOluV6ZRv9dpjfYq/dSErSc7RoA4yB0DBLHpNrS+iy7YwOL Vw4Jy5wj3TNF7F1TgPCfvqWJbWAC4osLOZP3XptAPYggXo1GiZjdHkPQy3oo1MYp 2ffOY/9LcrA+OS/muXle1BY9+xqolnV2a3juuwDQ9rpO8X/J76MMdeMBdj6Gy44/ +8OTbn48tWIm/IIcpewvciLckpN/qg04Q845ZfdegLjHlw72Rqi6FLs/CzgWCX/V FQWBb+jzZXPa7bnwpdhOlaVkIG4pkU0dXxQ8eRs+ttfWRETyXLTJ2iI5AGIR8A== -----END CERTIFICATE-----Generated at Sun Jan 25 11:14:06 2026 by rpki-client