This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa File: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (raw, json) Hash identifier: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0= Subject key identifier: 26:19:53:15:79:F0:AC:9C:54:14:1A:31:44:F5:4F:6A:6F:53:28:0F Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 67E40AD7C84DDFF881B1D2E923FD2D851AD3F0DC Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa Signing time: Tue 20 Jan 2026 02:07:17 +0000 ROA not before: Tue 20 Jan 2026 02:02:17 +0000 ROA not after: Tue 19 Jan 2027 02:07:17 +0000 asID: 131484 IP address blocks: 103.159.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e4:0a:d7:c8:4d:df:f8:81:b1:d2:e9:23:fd:2d:85:1a:d3:f0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Jan 20 02:02:17 2026 GMT Not After : Jan 19 02:07:17 2027 GMT Subject: CN=2619531579F0AC9C54141A3144F54F6A6F53280F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:cc:4b:3c:7d:b6:1b:d5:16:e9:1a:59:46: 2d:9e:4c:12:ae:f0:25:0a:10:03:89:f6:4f:f3:ec: f8:03:27:ce:ce:75:b0:f6:f4:b5:2c:53:82:9c:b9: 2d:f3:8a:24:7e:b4:59:6a:a0:c8:0e:dd:8c:2f:c2: 0a:e8:0a:44:6d:7c:df:87:bb:a6:8a:51:b5:d0:ef: 34:c4:f3:b1:d7:d3:a4:77:50:70:a3:8b:11:62:c8: ad:31:3e:02:e8:71:fd:3e:c8:05:46:73:13:7d:e2: 2d:ff:75:57:80:bb:91:26:f4:42:8a:04:21:af:fd: d1:72:c3:68:c1:40:da:58:0b:ea:e3:ae:ec:da:16: 09:86:55:67:04:0e:7f:5b:2d:92:c0:1c:a9:57:b1: cc:90:87:44:10:b1:47:07:ac:4c:ba:c5:88:24:cb: f6:3e:b3:25:c7:79:69:da:c9:88:1b:da:75:f6:44: 09:4a:d4:eb:45:7f:c9:91:25:d7:c7:6a:02:e2:3c: 00:82:e6:72:cb:62:71:56:47:dd:5c:d7:12:48:3a: fa:81:03:ef:84:30:85:ed:18:12:fc:f7:e3:de:19: 23:23:d8:c6:0d:93:a9:44:d6:9d:41:14:d6:7d:a0: a3:d0:ee:cd:af:56:ca:8e:7a:58:f9:66:da:ab:7f: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:19:53:15:79:F0:AC:9C:54:14:1A:31:44:F5:4F:6A:6F:53:28:0F X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.122.0/23 Signature Algorithm: sha256WithRSAEncryption 54:f4:31:ce:aa:cf:ab:9b:e8:2e:ec:d2:1c:a9:5f:57:ab:89: 31:44:78:1e:c4:e7:c1:8a:52:d6:a7:71:7d:40:d8:dc:2e:3b: 55:a2:b0:f5:87:c5:e9:98:20:23:52:0d:bf:67:25:c7:0e:19: 10:ab:5d:9c:e3:1d:89:e9:19:b7:3d:d7:d4:dd:b6:f5:a8:b1: 0c:4a:85:0d:0e:64:f4:4e:ee:48:7b:e0:24:0f:93:7b:30:26: d8:71:62:7a:f8:25:0c:46:08:2c:48:75:b2:df:4e:50:40:42: 8f:49:f7:53:55:30:fc:fe:f1:c0:80:86:c8:6f:f1:49:ff:a7: d5:30:d1:a8:4f:c7:da:c0:38:9e:09:ff:0f:f5:fd:8b:fb:29: c3:1f:86:e3:52:94:38:6c:d9:24:c5:88:94:a5:0d:82:6c:de: 00:fc:8f:ad:65:11:81:1c:ea:67:1d:d3:e1:e2:d6:ce:25:49: ac:9f:25:69:58:cb:ca:8b:23:76:e5:c5:cc:14:4d:9c:bc:1e: 91:e7:ae:55:75:79:97:f8:c3:0d:45:f9:bf:32:df:4a:22:dd: 3f:b7:c8:4e:0d:36:05:04:bc:1f:97:91:d1:f6:02:f3:0f:a2: df:02:fd:6e:af:b3:b1:55:3b:e7:92:c9:01:f5:2c:57:70:2f: 54:91:cb:25 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUZ+QK18hN3/iBsdLpI/0thRrT8NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjAxMjAwMjAyMTdaFw0yNzAxMTkwMjA3MTdaMDMxMTAvBgNV BAMTKDI2MTk1MzE1NzlGMEFDOUM1NDE0MUEzMTQ0RjU0RjZBNkY1MzI4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGsxLPH22G9UW6RpZRi2eTBKu 8CUKEAOJ9k/z7PgDJ87OdbD29LUsU4KcuS3ziiR+tFlqoMgO3YwvwgroCkRtfN+H u6aKUbXQ7zTE87HX06R3UHCjixFiyK0xPgLocf0+yAVGcxN94i3/dVeAu5Em9EKK BCGv/dFyw2jBQNpYC+rjruzaFgmGVWcEDn9bLZLAHKlXscyQh0QQsUcHrEy6xYgk y/Y+syXHeWnayYgb2nX2RAlK1OtFf8mRJdfHagLiPACC5nLLYnFWR91c1xJIOvqB A++EMIXtGBL89+PeGSMj2MYNk6lE1p1BFNZ9oKPQ7s2vVsqOelj5ZtqrfxWRAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUJhlTFXnwrJxUFBoxRPVPam9TKA8wHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjI2MTE0LzAvMzEzMDMzMmUz MTM1MzkyZTMxMzIzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMTM0Mzgz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWefejANBgkqhkiG9w0BAQsFAAOCAQEAVPQxzqrPq5voLuzS HKlfV6uJMUR4HsTnwYpS1qdxfUDY3C47VaKw9YfF6ZggI1INv2clxw4ZEKtdnOMd iekZtz3X1N229aixDEqFDQ5k9E7uSHvgJA+TezAm2HFievglDEYILEh1st9OUEBC j0n3U1Uw/P7xwICGyG/xSf+n1TDRqE/H2sA4ngn/D/X9i/spwx+G41KUOGzZJMWI lKUNgmzeAPyPrWURgRzqZx3T4eLWziVJrJ8laVjLyosjduXFzBRNnLwekeeuVXV5 l/jDDUX5vzLfSiLdP7fITg02BQS8H5eR0fYC8w+i3wL9bq+zsVU755LJAfUsV3Av VJHLJQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:37 2026 by rpki-client