This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3130332e322e3135372e302f32342d3234203d3e20313436373632.roa File: 3130332e322e3135372e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: 0lnVRbIs/e81a/ombdJYKhr/uI3gJ/7kYg5290LJFdI= Subject key identifier: 23:FD:D1:2B:FE:47:04:8E:FE:EF:57:BA:FF:93:BA:1E:7B:B7:01:D2 Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 79D8D4B29AE198445BBACAC8604343D7BE2854AD Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3130332e322e3135372e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:08 +0000 ROA not before: Tue 20 Jan 2026 02:21:08 +0000 ROA not after: Tue 19 Jan 2027 02:26:08 +0000 asID: 146762 IP address blocks: 103.2.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d8:d4:b2:9a:e1:98:44:5b:ba:ca:c8:60:43:43:d7:be:28:54:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:08 2026 GMT Not After : Jan 19 02:26:08 2027 GMT Subject: CN=23FDD12BFE47048EFEEF57BAFF93BA1E7BB701D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:f8:9c:36:e3:e6:fd:b3:51:bc:1c:d0:95: bb:dc:7e:ec:d6:ee:c0:7a:53:4f:3f:d7:a5:51:bf: fb:61:fc:5f:d7:f7:b6:7d:24:31:0d:1d:3d:c6:12: 4f:43:48:88:47:f5:ad:99:11:4d:01:f7:25:26:1d: c6:96:8f:d4:66:32:8a:aa:26:16:37:c0:45:ee:bb: b3:ee:a3:a7:35:ee:ed:1e:a0:c0:3d:4b:d3:f8:a3: 49:15:30:af:b2:9b:10:0e:c4:82:4a:62:12:11:e2: 9f:47:4e:f8:b1:0c:43:12:55:aa:a0:e6:33:bb:57: 45:7f:4d:ba:e0:61:0c:78:29:a2:07:c6:0b:ab:e2: 33:12:c3:20:15:72:be:0a:07:13:4c:5b:16:d1:26: 08:53:7d:58:4e:ab:d9:dd:30:30:81:1d:f1:63:0c: 50:f6:32:98:94:5a:e2:44:a1:7b:ac:44:91:13:90: fe:e9:6c:96:13:5c:a1:99:f9:78:e1:61:2d:4f:9f: 9a:c9:b9:0c:80:4a:de:04:31:54:2d:c6:da:cd:ed: 24:13:a7:d0:00:b6:8e:e5:80:71:b3:5b:ce:ea:fe: d0:e1:24:76:4f:ee:86:9f:51:36:72:8e:8e:57:d1: 8a:81:76:5f:96:82:58:92:a9:60:bb:6d:45:82:47: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FD:D1:2B:FE:47:04:8E:FE:EF:57:BA:FF:93:BA:1E:7B:B7:01:D2 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3130332e322e3135372e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.2.157.0/24 Signature Algorithm: sha256WithRSAEncryption a4:33:bc:69:1d:e6:0a:c4:f0:e6:38:18:63:6e:ad:b5:0b:52: d0:a6:ba:d7:87:f4:44:74:28:24:77:2a:81:bc:1b:87:81:fe: a8:1b:39:02:69:ee:ca:d6:de:c8:85:0f:fd:98:32:a0:e3:d3: 6c:49:7f:b3:86:10:63:d4:64:21:30:1b:b0:81:1c:95:e3:11: 06:24:f0:db:5b:8d:7e:36:8b:0a:c4:88:11:4b:21:8d:1b:a9: 1e:bb:25:06:ee:43:41:ff:df:ad:23:62:07:ec:64:7d:5e:89: b8:ec:19:5c:cd:9c:06:3c:9c:ff:c3:b1:cf:ac:5e:3e:fc:e4: 63:59:14:28:68:b3:2a:c8:34:22:03:69:0a:f3:58:ce:aa:6d: 48:00:2e:db:10:80:f3:4d:f1:0e:35:0a:7b:91:e5:b1:78:1d: df:79:93:d4:df:f2:0c:c8:6e:29:72:d5:47:01:d4:70:7a:96: db:55:04:f7:47:9e:44:e3:dc:d6:bd:e4:ca:d3:21:c9:61:22: 44:a2:cc:63:16:a3:7d:34:8b:e6:a5:39:1e:25:b1:67:f9:d5: d5:af:a4:50:dd:6e:e8:63:a8:95:d6:ed:6e:d1:bd:ee:86:c7: 63:23:89:0c:81:30:96:94:fc:c0:51:d1:1f:fe:76:84:9a:73: 4e:e9:47:28 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUedjUsprhmERbusrIYEND174oVK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDhaFw0yNzAxMTkwMjI2MDhaMDMxMTAvBgNV BAMTKDIzRkREMTJCRkU0NzA0OEVGRUVGNTdCQUZGOTNCQTFFN0JCNzAxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGeficNuPm/bNRvBzQlbvcfuzW 7sB6U08/16VRv/th/F/X97Z9JDENHT3GEk9DSIhH9a2ZEU0B9yUmHcaWj9RmMoqq JhY3wEXuu7Puo6c17u0eoMA9S9P4o0kVMK+ymxAOxIJKYhIR4p9HTvixDEMSVaqg 5jO7V0V/TbrgYQx4KaIHxgur4jMSwyAVcr4KBxNMWxbRJghTfVhOq9ndMDCBHfFj DFD2MpiUWuJEoXusRJETkP7pbJYTXKGZ+XjhYS1Pn5rJuQyASt4EMVQtxtrN7SQT p9AAto7lgHGzW87q/tDhJHZP7oafUTZyjo5X0YqBdl+WgliSqWC7bUWCR5LvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUI/3RK/5HBI7+71e6/5O6Hnu3AdIwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzMyNDAzNS8wLzMxMzAzMzJlMzIy ZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGcCnTANBgkqhkiG9w0BAQsFAAOCAQEApDO8aR3mCsTw5jgYY26ttQtS 0Ka614f0RHQoJHcqgbwbh4H+qBs5AmnuytbeyIUP/ZgyoOPTbEl/s4YQY9RkITAb sIEcleMRBiTw21uNfjaLCsSIEUshjRupHrslBu5DQf/frSNiB+xkfV6JuOwZXM2c Bjyc/8Oxz6xePvzkY1kUKGizKsg0IgNpCvNYzqptSAAu2xCA803xDjUKe5HlsXgd 33mT1N/yDMhuKXLVRwHUcHqW21UE90eeROPc1r3kytMhyWEiRKLMYxajfTSL5qU5 HiWxZ/nV1a+kUN1u6GOoldbtbtG97obHYyOJDIEwlpT8wFHRH/52hJpzTulHKA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:46 2026 by rpki-client