This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e37322e302f32332d3234203d3e2034383131.roa File: 31342e3130332e37322e302f32332d3234203d3e2034383131.roa (raw, json) Hash identifier: m2ns5z+RCIdbj2K9zO62K5iN5PRLEpiT6T+KVfqBUKg= Subject key identifier: E7:B4:E9:11:46:A1:55:92:B4:F4:3B:A8:0B:3E:A1:46:AC:F3:5A:EB Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 5FBB29638BB584C70ABD5CC13B075A1C90A028EC Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e37322e302f32332d3234203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:09:43 +0000 ROA not before: Tue 20 Jan 2026 02:04:43 +0000 ROA not after: Tue 19 Jan 2027 02:09:43 +0000 asID: 4811 IP address blocks: 14.103.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bb:29:63:8b:b5:84:c7:0a:bd:5c:c1:3b:07:5a:1c:90:a0:28:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:43 2026 GMT Not After : Jan 19 02:09:43 2027 GMT Subject: CN=E7B4E91146A15592B4F43BA80B3EA146ACF35AEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:6b:d4:5d:f6:29:ba:30:2d:f1:51:bf:22: b2:f1:62:02:3f:9a:4e:e5:66:bf:5c:36:4b:3c:5c: 0f:f1:03:3e:47:6e:bd:e6:24:af:36:8a:8e:bc:8d: a4:71:67:0d:fe:01:78:a5:7d:6a:e6:7b:7a:54:6a: 10:8f:01:03:fb:d3:f3:00:07:d3:0d:5c:e3:4c:d4: 84:6d:57:cb:d1:cd:7d:a4:ad:0d:a7:52:20:9a:ed: b4:16:56:bc:2e:77:da:ed:db:81:bd:bf:ea:f8:62: 6b:05:66:20:18:d8:22:64:cf:7c:d4:17:c6:ab:eb: 18:6a:5c:55:1d:21:61:58:c5:9a:8b:fd:fa:68:6a: 9c:fb:9b:21:63:6b:b5:97:84:9f:53:b8:18:b7:d5: 34:c0:dc:cd:98:98:21:10:bb:1a:c5:c3:b6:95:b4: fe:b4:3c:f0:f5:e1:b4:a8:42:37:23:3b:9e:fa:e6: 0f:6a:7f:e5:ff:39:9f:0e:34:57:81:55:0b:78:d7: f3:63:6e:ad:45:9d:ea:33:b5:07:14:17:87:50:51: f2:24:b5:3c:d7:c4:1a:59:dc:05:ea:65:b7:d2:c6: 41:39:23:b7:07:81:59:ec:49:a7:68:c6:2b:59:3e: 0f:6f:28:c7:34:e6:5f:f0:d4:34:07:f0:55:8f:6e: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B4:E9:11:46:A1:55:92:B4:F4:3B:A8:0B:3E:A1:46:AC:F3:5A:EB X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e37322e302f32332d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.103.72.0/23 Signature Algorithm: sha256WithRSAEncryption a0:4b:18:07:d7:2a:ec:19:ea:bb:f9:67:f1:52:cc:64:5b:54: 54:7e:f5:16:7f:a8:ca:4b:19:69:da:ef:17:02:38:84:6b:42: 1d:6b:1e:ee:fd:25:4d:4d:b6:57:b7:12:ce:ba:30:c8:08:c5: de:f8:90:98:14:22:56:95:cc:fd:bd:a0:c2:f2:34:52:fd:62: ec:66:7a:6f:3e:8b:59:e8:df:72:10:5c:d9:43:a9:9d:ce:00: c6:49:1e:95:7b:19:fd:98:b1:42:3e:31:99:91:99:73:5b:92: 1d:01:67:10:c5:35:56:d4:75:33:32:1d:17:85:ea:42:5a:66: f6:95:7a:95:7a:e0:3f:ec:9b:f5:d7:1e:c5:81:13:46:16:ba: 01:b9:61:4b:59:05:13:58:7e:53:61:ba:28:c0:58:6e:a3:9d: cc:90:99:36:96:6d:cc:fe:1b:78:cd:a8:81:14:ee:f4:69:4f: ad:56:98:ed:c9:4b:75:a5:eb:f6:4f:b5:da:6f:d9:83:c4:56: ba:35:a4:8f:40:16:f6:ca:62:d5:e5:ec:9b:0e:36:55:8e:c3: 29:ad:1e:c1:0e:ac:46:8d:d1:05:96:33:e1:15:a5:0e:0f:71: f0:68:01:3a:29:7c:27:ea:46:f6:01:47:83:53:d5:b4:99:43: f5:81:d8:7a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUX7spY4u1hMcKvVzBOwdaHJCgKOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDNaFw0yNzAxMTkwMjA5NDNaMDMxMTAvBgNV BAMTKEU3QjRFOTExNDZBMTU1OTJCNEY0M0JBODBCM0VBMTQ2QUNGMzVBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+I2vUXfYpujAt8VG/IrLxYgI/ mk7lZr9cNks8XA/xAz5Hbr3mJK82io68jaRxZw3+AXilfWrme3pUahCPAQP70/MA B9MNXONM1IRtV8vRzX2krQ2nUiCa7bQWVrwud9rt24G9v+r4YmsFZiAY2CJkz3zU F8ar6xhqXFUdIWFYxZqL/fpoapz7myFja7WXhJ9TuBi31TTA3M2YmCEQuxrFw7aV tP60PPD14bSoQjcjO5765g9qf+X/OZ8ONFeBVQt41/Njbq1FneoztQcUF4dQUfIk tTzXxBpZ3AXqZbfSxkE5I7cHgVnsSadoxitZPg9vKMc05l/w1DQH8FWPbnpnAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU57TpEUahVZK09DuoCz6hRqzzWuswHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzEzNDJlMzEzMDMz MmUzNzMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEOZ0gwDQYJKoZIhvcNAQELBQADggEBAKBLGAfXKuwZ6rv5Z/FSzGRbVFR+9RZ/ qMpLGWna7xcCOIRrQh1rHu79JU1Ntle3Es66MMgIxd74kJgUIlaVzP29oMLyNFL9 Yuxmem8+i1no33IQXNlDqZ3OAMZJHpV7Gf2YsUI+MZmRmXNbkh0BZxDFNVbUdTMy HReF6kJaZvaVepV64D/sm/XXHsWBE0YWugG5YUtZBRNYflNhuijAWG6jncyQmTaW bcz+G3jNqIEU7vRpT61WmO3JS3Wl6/ZPtdpv2YPEVro1pI9AFvbKYtXl7JsONlWO wymtHsEOrEaN0QWWM+EVpQ4PcfBoATopfCfqRvYBR4NT1bSZQ/WB2Ho= -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:43 2026 by rpki-client