This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e302e302f31362d3234203d3e20313337373138.roa File: 31342e3130332e302e302f31362d3234203d3e20313337373138.roa (raw, json) Hash identifier: zJLAc21BjJDREDdsmtyu6miXWZcpByUByQEhPl0l38g= Subject key identifier: 5E:78:F2:0E:65:9E:87:38:62:9D:0B:7A:32:F2:BF:B3:B6:32:F1:BD Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 682BCBBB4E8D83020D72894D913AB2694AD4989C Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e302e302f31362d3234203d3e20313337373138.roa Signing time: Tue 20 Jan 2026 02:09:46 +0000 ROA not before: Tue 20 Jan 2026 02:04:46 +0000 ROA not after: Tue 19 Jan 2027 02:09:46 +0000 asID: 137718 IP address blocks: 14.103.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2b:cb:bb:4e:8d:83:02:0d:72:89:4d:91:3a:b2:69:4a:d4:98:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:46 2026 GMT Not After : Jan 19 02:09:46 2027 GMT Subject: CN=5E78F20E659E8738629D0B7A32F2BFB3B632F1BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:e9:db:96:fd:57:25:f5:49:f6:1e:37:fb: fc:da:b4:77:0d:4d:29:c3:30:e7:96:cd:7a:d1:e6: b1:ab:84:f0:bf:d8:f3:fa:1c:5a:45:63:51:77:46: c2:d4:8a:68:a9:3b:2f:ba:70:f2:88:8a:2f:ba:78: 4c:6a:02:ce:06:e9:c0:d5:dd:bf:ef:0b:09:3a:56: 0a:0e:c4:9d:83:ce:42:b2:73:7c:44:30:7e:21:27: 6f:e7:50:90:a3:ee:ac:d8:5c:e9:0d:30:ff:6c:ad: 8b:e8:90:b6:85:df:f7:22:2d:d2:5c:3c:e2:35:ed: ea:01:12:84:1d:f9:30:ad:44:7b:33:f1:4e:9b:cd: a7:8c:43:ac:25:d9:f6:91:ce:10:0f:d5:4c:ac:4c: 87:63:94:ec:59:34:9c:f4:52:8c:73:2c:10:22:a9: 11:62:be:f3:4b:fc:13:59:58:7c:2f:74:d9:e6:7a: 0a:e5:82:c3:d6:2b:1b:8c:e6:c9:1f:66:6e:02:0a: a1:67:bc:17:e1:fb:00:5e:1f:73:46:f2:1c:fb:35: 6c:0a:eb:e6:35:aa:f2:f0:05:da:e9:24:29:06:33: 75:f9:16:ea:16:70:98:b7:9f:14:e2:0c:15:b4:b5: a4:e3:af:03:98:0f:15:48:4c:a0:30:51:15:88:c6: 91:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:78:F2:0E:65:9E:87:38:62:9D:0B:7A:32:F2:BF:B3:B6:32:F1:BD X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e302e302f31362d3234203d3e20313337373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 95:62:c8:47:3f:b6:35:22:a3:44:63:b6:d9:87:c2:39:96:95: c3:42:55:c7:86:57:a4:77:d7:ff:f8:8d:bc:91:cf:4a:15:58: 7d:2c:ef:cb:a0:fd:68:4f:2a:1e:5b:7b:1b:2a:32:44:a9:69: 56:45:f4:3e:d7:0c:fc:c7:47:79:37:f5:9d:42:d6:e0:36:7e: f9:d8:3f:6a:b4:15:5b:79:b8:33:e8:63:63:29:ce:76:d8:cf: 66:97:7c:99:cf:9e:33:55:94:90:d2:44:a4:fe:6e:c8:09:ab: 19:47:e9:05:e8:d1:5d:44:d0:4a:4d:23:7a:0c:65:f0:14:6e: b3:7b:2e:c7:0e:55:9d:e8:81:4c:cf:ac:62:99:a0:a7:e1:4b: cd:87:e1:15:67:4b:b2:80:21:29:68:8b:ef:88:a3:97:b9:36: a9:ff:da:2a:4d:ff:c0:ce:17:a2:62:be:7e:4c:73:b9:db:ab: e6:01:09:49:a4:3e:05:6a:c4:83:eb:c8:ed:27:80:67:fc:07: 72:c1:24:12:1d:5f:bc:2e:92:7d:d8:2c:54:10:18:69:65:b6: c9:04:c3:c8:6c:ca:d0:c5:38:52:8c:ca:d5:2f:da:56:3f:4a: e2:ea:29:98:e1:ce:b4:b8:1c:f3:75:39:9b:a2:de:e6:a0:55: bd:ee:42:00 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUaCvLu06NgwINcolNkTqyaUrUmJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDZaFw0yNzAxMTkwMjA5NDZaMDMxMTAvBgNV BAMTKDVFNzhGMjBFNjU5RTg3Mzg2MjlEMEI3QTMyRjJCRkIzQjYzMkYxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfOnblv1XJfVJ9h43+/zatHcN TSnDMOeWzXrR5rGrhPC/2PP6HFpFY1F3RsLUimipOy+6cPKIii+6eExqAs4G6cDV 3b/vCwk6VgoOxJ2DzkKyc3xEMH4hJ2/nUJCj7qzYXOkNMP9srYvokLaF3/ciLdJc POI17eoBEoQd+TCtRHsz8U6bzaeMQ6wl2faRzhAP1UysTIdjlOxZNJz0UoxzLBAi qRFivvNL/BNZWHwvdNnmegrlgsPWKxuM5skfZm4CCqFnvBfh+wBeH3NG8hz7NWwK 6+Y1qvLwBdrpJCkGM3X5FuoWcJi3nxTiDBW0taTjrwOYDxVITKAwURWIxpGDAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUXnjyDmWehzhinQt6MvK/s7Yy8b0wHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzEzNDJlMzEzMDMz MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzEzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAA5nMA0GCSqGSIb3DQEBCwUAA4IBAQCVYshHP7Y1IqNEY7bZh8I5lpXDQlXH hlekd9f/+I28kc9KFVh9LO/LoP1oTyoeW3sbKjJEqWlWRfQ+1wz8x0d5N/WdQtbg Nn752D9qtBVbebgz6GNjKc522M9ml3yZz54zVZSQ0kSk/m7ICasZR+kF6NFdRNBK TSN6DGXwFG6zey7HDlWd6IFMz6ximaCn4UvNh+EVZ0uygCEpaIvviKOXuTap/9oq Tf/AzheiYr5+THO526vmAQlJpD4FasSD68jtJ4Bn/AdywSQSHV+8LpJ92CxUEBhp ZbbJBMPIbMrQxThSjMrVL9pWP0ri6imY4c60uBzzdTmbot7moFW97kIA -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:00 2026 by rpki-client