This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa File: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (raw, json) Hash identifier: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ= Subject key identifier: 99:E0:60:A6:4D:4F:88:BF:A5:64:65:1E:07:1D:F3:D6:A3:F6:05:CC Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 2C2F9B179F8F880754AAA1E5A793B4BB13798D37 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa Signing time: Tue 20 Jan 2026 02:21:34 +0000 ROA not before: Tue 20 Jan 2026 02:16:34 +0000 ROA not after: Tue 19 Jan 2027 02:21:34 +0000 asID: 151232 IP address blocks: 103.45.144.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 22:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2f:9b:17:9f:8f:88:07:54:aa:a1:e5:a7:93:b4:bb:13:79:8d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jan 20 02:16:34 2026 GMT Not After : Jan 19 02:21:34 2027 GMT Subject: CN=99E060A64D4F88BFA564651E071DF3D6A3F605CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:8a:11:60:1b:ff:88:28:73:e3:ed:31:35: 80:30:71:30:32:c4:26:6b:ca:26:9e:37:44:60:21: 59:67:fe:a1:fc:1e:9b:57:27:96:6d:b4:4a:94:c7: 96:94:6f:85:b7:39:d8:7f:90:84:04:52:b2:05:97: aa:8b:cc:74:93:d5:74:95:94:d0:58:b6:b9:08:28: 8e:d9:98:27:61:a5:27:ee:75:bb:66:82:fc:92:cb: 8d:04:10:f8:da:e2:ae:d4:42:b0:0b:49:30:af:7a: 5b:86:8e:7c:0a:8a:61:61:a2:d7:02:21:02:3d:c5: 74:72:6b:37:78:ae:e6:2d:e0:94:fc:00:d3:6d:7a: 6e:79:25:b3:72:bd:3c:83:67:0a:eb:45:83:34:56: ec:03:30:c3:35:f1:6c:94:47:e1:c0:fc:22:dd:98: f4:53:b4:7e:ce:6c:94:84:24:36:1d:c2:67:ad:27: d4:56:00:d6:57:16:4c:30:aa:6a:51:0f:62:aa:56: 85:e6:7f:ce:aa:f6:8f:0b:68:22:4a:3e:e0:29:ce: d1:8a:b0:cd:f3:84:33:75:9f:51:aa:d5:f7:78:00: 3f:fe:82:53:e5:58:7c:21:74:38:4b:bb:d1:ff:bd: a5:30:d7:ca:fc:be:bd:f9:17:e0:d8:6a:95:03:7c: 99:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E0:60:A6:4D:4F:88:BF:A5:64:65:1E:07:1D:F3:D6:A3:F6:05:CC X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.45.144.0/24 Signature Algorithm: sha256WithRSAEncryption ac:36:75:b1:c0:43:fe:5d:57:c9:9f:5c:d7:e6:5f:09:73:33: 46:79:48:91:3e:8a:b5:fd:bf:cb:6b:74:df:c9:9f:bc:cb:87: 80:2f:c1:3a:78:06:c2:88:8d:7c:d2:a2:9d:9c:07:55:85:83: 8f:a0:ef:3c:f7:0f:b3:3d:f0:1d:1b:4e:8c:96:80:e6:d3:d2: b0:aa:f6:1c:c2:9b:64:da:89:6c:89:b7:9e:b3:49:e9:96:8f: be:23:38:3c:a3:17:2b:cd:c7:8b:02:25:50:b1:35:b6:9e:d7: f6:67:4f:4f:17:aa:e2:9e:43:bb:a0:29:1d:69:20:44:c3:dc: 0c:3d:52:da:ab:80:0f:3d:af:ba:89:7a:10:82:b8:30:50:44: e4:79:9d:a9:5e:89:c6:d4:c2:20:6e:bd:7e:e7:eb:69:fd:9c: b5:57:3c:39:6a:16:d4:21:0d:41:71:e3:2a:b9:a6:99:89:43: b1:83:8b:ee:e9:b3:28:54:2b:82:ce:e6:78:25:75:c3:cf:1e: cf:1c:bd:01:f4:a2:be:a0:23:e4:68:41:f7:d3:ea:69:ab:a8: 15:07:44:66:18:12:53:09:a2:f0:77:9f:6e:21:aa:41:36:77: 32:43:46:d0:e6:b7:6e:30:e0:21:62:c6:75:76:7e:fc:40:85: 03:80:0c:6d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULC+bF5+PiAdUqqHlp5O0uxN5jTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjAxMjAwMjE2MzRaFw0yNzAxMTkwMjIxMzRaMDMxMTAvBgNV BAMTKDk5RTA2MEE2NEQ0Rjg4QkZBNTY0NjUxRTA3MURGM0Q2QTNGNjA1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKUooRYBv/iChz4+0xNYAwcTAy xCZryiaeN0RgIVln/qH8HptXJ5ZttEqUx5aUb4W3Odh/kIQEUrIFl6qLzHST1XSV lNBYtrkIKI7ZmCdhpSfudbtmgvySy40EEPja4q7UQrALSTCveluGjnwKimFhotcC IQI9xXRyazd4ruYt4JT8ANNtem55JbNyvTyDZwrrRYM0VuwDMMM18WyUR+HA/CLd mPRTtH7ObJSEJDYdwmetJ9RWANZXFkwwqmpRD2KqVoXmf86q9o8LaCJKPuApztGK sM3zhDN1n1Gq1fd4AD/+glPlWHwhdDhLu9H/vaUw18r8vr35F+DYapUDfJn5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmeBgpk1PiL+lZGUeBx3z1qP2BcwwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTM0 MzUyZTMxMzQzNDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzUzMTMyMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGctkDANBgkqhkiG9w0BAQsFAAOCAQEArDZ1scBD/l1XyZ9c1+Zf CXMzRnlIkT6Ktf2/y2t038mfvMuHgC/BOngGwoiNfNKinZwHVYWDj6DvPPcPsz3w HRtOjJaA5tPSsKr2HMKbZNqJbIm3nrNJ6ZaPviM4PKMXK83HiwIlULE1tp7X9mdP Txeq4p5Du6ApHWkgRMPcDD1S2quADz2vuol6EIK4MFBE5HmdqV6JxtTCIG69fufr af2ctVc8OWoW1CENQXHjKrmmmYlDsYOL7umzKFQrgs7meCV1w88ezxy9AfSivqAj 5GhB99PqaauoFQdEZhgSUwmi8HefbiGqQTZ3MkNG0Oa3bjDgIWLGdXZ+/ECFA4AM bQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:19 2026 by rpki-client