This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa File: 3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa (raw, json) Hash identifier: I2uuWEd8qf4ct5ZLh+z7iLcyWwEtolLGJXavFEgmc/c= Subject key identifier: A4:40:20:38:02:5D:21:24:DD:3C:C0:10:EC:DE:3B:A1:8A:89:C6:BC Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 7E3FFDCD59B310AD5B2CB8277C794C7050983361 Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa Signing time: Tue 20 Jan 2026 02:14:12 +0000 ROA not before: Tue 20 Jan 2026 02:09:12 +0000 ROA not after: Tue 19 Jan 2027 02:14:12 +0000 asID: 133033 IP address blocks: 103.248.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3f:fd:cd:59:b3:10:ad:5b:2c:b8:27:7c:79:4c:70:50:98:33:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Jan 20 02:09:12 2026 GMT Not After : Jan 19 02:14:12 2027 GMT Subject: CN=A4402038025D2124DD3CC010ECDE3BA18A89C6BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:b9:36:21:57:ae:2c:27:97:c9:fd:4a:93: cc:6e:3d:9c:da:dd:71:85:2f:aa:cc:49:5d:a2:be: d1:87:2a:67:12:a4:e1:b0:2b:91:48:6a:7a:7f:b4: f4:c5:a8:06:be:63:f4:64:1f:0a:df:fe:bd:bb:5c: 53:c7:c6:fd:ea:de:0a:5e:7e:df:41:aa:32:b9:b4: bc:88:09:99:c9:56:7f:eb:45:26:87:c9:8e:2b:9f: 8d:1c:ec:dd:f9:bc:7e:aa:90:e3:36:4b:9f:4a:a1: 43:a2:fe:74:b5:73:04:13:ec:1d:8f:d4:52:3e:b5: ab:7b:c4:47:e5:0d:97:42:0f:69:9c:91:0a:30:a2: f7:ca:71:f7:73:5c:08:0d:89:45:2f:70:76:22:b3: 47:67:e5:4e:e4:5f:4a:e4:49:0e:5b:fd:32:f6:cd: f4:e1:ec:df:fb:17:d0:55:3b:78:e4:95:ff:5a:fb: 7b:d8:73:dc:ba:67:06:0e:ff:ab:0b:ad:07:b6:41: 90:e5:f9:8c:27:69:c2:96:01:41:b6:4b:78:ac:62: 77:e3:40:80:d5:31:e4:0f:1b:b8:0e:17:cf:f4:e6: 64:9c:4c:02:58:c1:cf:e4:f7:f4:d6:ba:55:b9:67: 48:67:9c:82:5f:a0:a2:13:6b:dc:a3:91:ab:c1:3e: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:40:20:38:02:5D:21:24:DD:3C:C0:10:EC:DE:3B:A1:8A:89:C6:BC X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.248.153.0/24 Signature Algorithm: sha256WithRSAEncryption a5:08:80:f2:ba:52:59:dc:e7:63:18:d6:6f:b5:51:3b:19:03: 01:a1:b2:8f:75:d6:3d:11:d0:20:25:48:39:eb:25:f3:b7:4d: 79:e2:57:64:ed:31:df:5e:c2:f3:b9:5e:0c:f4:12:0f:be:d3: ec:7c:ff:11:85:50:39:6c:5e:a7:3e:5a:17:da:ea:26:24:89: 58:1c:47:8e:44:12:0c:92:fc:97:b6:50:79:e0:2b:07:b2:c0: 66:96:ed:9e:69:0d:a6:29:d0:b1:fa:bc:a7:78:a5:73:ae:d0: b8:36:47:71:7d:64:f9:d2:1c:69:fa:2c:cf:f1:0a:c9:e9:96: d7:90:f9:2f:06:3b:43:a4:18:7f:7d:7b:6f:38:83:6b:aa:4d: 0e:1c:32:ea:8f:57:74:f7:0b:a8:4c:d7:28:c1:cb:51:62:1d: 2e:64:47:75:7c:e5:ec:26:c1:43:ed:ba:93:ef:11:e1:00:09: d8:1e:ce:71:0e:e8:90:63:91:23:69:1d:a0:9c:89:84:e3:b6: 4e:7a:75:01:dc:3d:f6:26:5f:e3:77:97:91:90:40:75:51:f6: cd:ed:3a:13:bf:94:0a:79:d3:17:ca:ca:9e:f9:60:00:2e:ce: d3:08:05:20:2c:57:13:22:2b:7f:29:d2:95:0d:54:09:6b:c4: 91:84:10:e6 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUfj/9zVmzEK1bLLgnfHlMcFCYM2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjAxMjAwMjA5MTJaFw0yNzAxMTkwMjE0MTJaMDMxMTAvBgNV BAMTKEE0NDAyMDM4MDI1RDIxMjRERDNDQzAxMEVDREUzQkExOEE4OUM2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFrk2IVeuLCeXyf1Kk8xuPZza 3XGFL6rMSV2ivtGHKmcSpOGwK5FIanp/tPTFqAa+Y/RkHwrf/r27XFPHxv3q3gpe ft9BqjK5tLyICZnJVn/rRSaHyY4rn40c7N35vH6qkOM2S59KoUOi/nS1cwQT7B2P 1FI+tat7xEflDZdCD2mckQowovfKcfdzXAgNiUUvcHYis0dn5U7kX0rkSQ5b/TL2 zfTh7N/7F9BVO3jklf9a+3vYc9y6ZwYO/6sLrQe2QZDl+YwnacKWAUG2S3isYnfj QIDVMeQPG7gOF8/05mScTAJYwc/k9/TWulW5Z0hnnIJfoKITa9yjkavBPg6pAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUpEAgOAJdISTdPMAQ7N47oYqJxrwwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE2OTk2MzU1LzAvMzEzMDMzMmUz MjM0MzgyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMzMwMzMz My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGf4mTANBgkqhkiG9w0BAQsFAAOCAQEApQiA8rpSWdznYxjW b7VROxkDAaGyj3XWPRHQICVIOesl87dNeeJXZO0x317C87leDPQSD77T7Hz/EYVQ OWxepz5aF9rqJiSJWBxHjkQSDJL8l7ZQeeArB7LAZpbtnmkNpinQsfq8p3ilc67Q uDZHcX1k+dIcafosz/EKyemW15D5LwY7Q6QYf317bziDa6pNDhwy6o9XdPcLqEzX KMHLUWIdLmRHdXzl7CbBQ+26k+8R4QAJ2B7OcQ7okGORI2kdoJyJhOO2Tnp1Adw9 9iZf43eXkZBAdVH2ze06E7+UCnnTF8rKnvlgAC7O0wgFICxXEyIrfynSlQ1UCWvE kYQQ5g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:39 2026 by rpki-client