This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa File: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (raw, json) Hash identifier: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw= Subject key identifier: A9:16:59:61:07:41:D0:73:4F:B1:4A:3C:22:BD:15:5F:38:31:4A:3B Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 7C12272149A4484F0A918EF0EC66F160A82B8D44 Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa Signing time: Tue 20 Jan 2026 02:10:53 +0000 ROA not before: Tue 20 Jan 2026 02:05:53 +0000 ROA not after: Tue 19 Jan 2027 02:10:53 +0000 asID: 139119 IP address blocks: 103.157.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:12:27:21:49:a4:48:4f:0a:91:8e:f0:ec:66:f1:60:a8:2b:8d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Jan 20 02:05:53 2026 GMT Not After : Jan 19 02:10:53 2027 GMT Subject: CN=A91659610741D0734FB14A3C22BD155F38314A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:52:47:00:ca:31:f7:be:fa:a2:07:3f:ce: c9:23:c5:83:6e:4f:32:e8:41:bd:69:3f:29:55:3e: bd:70:2e:8a:ae:46:ce:ca:04:4d:a1:4f:9f:e8:c8: 7f:3d:b4:e8:d6:bb:7c:5d:bd:f2:77:4c:22:4d:7b: ee:99:c6:58:22:9f:64:a1:33:6c:4c:ac:0e:0f:81: 37:61:68:da:6e:82:4d:ed:ff:ac:38:eb:c4:42:37: ef:32:3c:51:57:93:ee:0f:c5:98:4d:2d:83:ba:b9: b2:87:05:94:cf:86:35:fc:08:7f:c2:39:53:25:39: 9d:c1:1e:10:97:dd:2e:bb:45:99:c2:0d:27:6f:5f: f1:1b:64:92:c8:e2:9a:71:5e:f4:de:74:ea:9a:7a: 3c:97:87:d5:29:51:59:31:62:0e:fc:5e:5a:58:d3: 1e:ae:0a:7c:f3:6a:bd:d8:ca:50:b1:91:45:57:97: 4a:65:62:c4:24:b1:0e:23:7c:5d:d2:fc:bd:d0:6c: 69:0f:85:00:53:a4:d8:01:74:c9:e1:f4:79:43:27: a4:37:3f:cc:11:7e:a1:2f:b2:c2:d3:10:e6:65:8e: 13:8a:fd:de:d6:d1:56:f3:7a:b4:a5:e6:f7:fd:25: 5c:03:19:93:17:91:fb:de:25:94:18:aa:b8:db:73: 6f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:16:59:61:07:41:D0:73:4F:B1:4A:3C:22:BD:15:5F:38:31:4A:3B X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.234.0/24 Signature Algorithm: sha256WithRSAEncryption ab:64:5f:28:e8:db:52:46:c5:d4:c2:d9:ae:3f:47:0e:6d:b5: e8:d1:5d:75:96:51:80:f7:aa:8f:97:ba:40:65:ec:d6:c1:c0: 86:2e:44:cd:f9:69:9c:ea:0e:89:ae:9d:e3:f9:84:b3:a1:41: 1e:a7:71:08:e9:a2:f0:f4:37:bb:bf:6c:b9:7a:0f:5b:98:f2: 47:7c:6e:7b:01:66:f5:3b:26:ab:ac:83:4d:14:22:5c:79:11: 8d:d0:8f:74:5f:f3:47:8f:42:7e:7e:4c:7e:72:2d:d2:b3:4b: 26:1e:0e:b0:22:cf:15:94:12:29:a6:1b:35:38:30:e4:03:fa: 5a:3a:96:61:44:22:f4:ca:60:ca:9e:0b:5f:cf:0b:1a:ec:49: 11:0e:73:88:9a:f7:9a:a5:6a:ee:8f:08:cd:bc:04:e2:5f:0d: 06:c3:78:5e:b9:b2:56:6c:c5:bc:90:2b:f3:b5:d4:82:10:d9: d9:a6:3a:3e:b1:05:eb:50:aa:b3:32:e6:35:0f:46:53:a6:ee: 49:7d:76:fd:d8:bd:85:b6:98:41:de:cc:f9:97:6c:b2:d8:3f: 71:1d:95:f9:2b:bc:2e:fe:78:24:fa:87:ec:7b:02:93:70:81: 63:d7:f4:c9:3b:68:7d:53:63:91:1b:b4:54:39:31:4b:cf:72: 3a:a5:5d:a6 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUfBInIUmkSE8KkY7w7GbxYKgrjUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjAxMjAwMjA1NTNaFw0yNzAxMTkwMjEwNTNaMDMxMTAvBgNV BAMTKEE5MTY1OTYxMDc0MUQwNzM0RkIxNEEzQzIyQkQxNTVGMzgzMTRBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHh1JHAMox9776ogc/zskjxYNu TzLoQb1pPylVPr1wLoquRs7KBE2hT5/oyH89tOjWu3xdvfJ3TCJNe+6Zxlgin2Sh M2xMrA4PgTdhaNpugk3t/6w468RCN+8yPFFXk+4PxZhNLYO6ubKHBZTPhjX8CH/C OVMlOZ3BHhCX3S67RZnCDSdvX/EbZJLI4ppxXvTedOqaejyXh9UpUVkxYg78XlpY 0x6uCnzzar3YylCxkUVXl0plYsQksQ4jfF3S/L3QbGkPhQBTpNgBdMnh9HlDJ6Q3 P8wRfqEvssLTEOZljhOK/d7W0VbzerSl5vf9JVwDGZMXkfveJZQYqrjbc29tAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUqRZZYQdB0HNPsUo8Ir0VXzgxSjswHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MzU0NzUzLzAvMzEzMDMzMmUz MTM1MzcyZTMyMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzEz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGed6jANBgkqhkiG9w0BAQsFAAOCAQEAq2RfKOjbUkbF1MLZ rj9HDm216NFddZZRgPeqj5e6QGXs1sHAhi5EzflpnOoOia6d4/mEs6FBHqdxCOmi 8PQ3u79suXoPW5jyR3xuewFm9Tsmq6yDTRQiXHkRjdCPdF/zR49Cfn5MfnIt0rNL Jh4OsCLPFZQSKaYbNTgw5AP6WjqWYUQi9Mpgyp4LX88LGuxJEQ5ziJr3mqVq7o8I zbwE4l8NBsN4XrmyVmzFvJAr87XUghDZ2aY6PrEF61CqszLmNQ9GU6buSX12/di9 hbaYQd7M+Zdsstg/cR2V+Su8Lv54JPqH7HsCk3CBY9f0yTtofVNjkRu0VDkxS89y OqVdpg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:50 2026 by rpki-client