This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3130332e322e3135382e302f32342d3234203d3e20313436373632.roa File: 3130332e322e3135382e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: KmAN9co8g8woRBt62qGsshlijcSmsXQ7J65gVIPP3WY= Subject key identifier: 09:E6:2E:EF:70:40:09:5D:EB:4C:65:4B:86:A4:CF:C3:35:A3:AD:AD Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 6643124077EC0E70D28DD756BD33B9E88E7CD87B Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3130332e322e3135382e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:08 +0000 ROA not before: Tue 20 Jan 2026 02:21:08 +0000 ROA not after: Tue 19 Jan 2027 02:26:08 +0000 asID: 146762 IP address blocks: 103.2.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:43:12:40:77:ec:0e:70:d2:8d:d7:56:bd:33:b9:e8:8e:7c:d8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:08 2026 GMT Not After : Jan 19 02:26:08 2027 GMT Subject: CN=09E62EEF7040095DEB4C654B86A4CFC335A3ADAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:61:d6:86:c9:b6:84:01:e5:af:3f:eb:03: 02:a2:c7:a9:60:91:13:c4:da:01:40:14:2e:2d:71: 17:4d:85:0c:77:be:e2:9b:34:cf:dd:01:8e:41:92: e5:08:0e:e8:0f:58:2d:30:c1:4a:74:87:d6:57:01: ef:75:aa:5c:c8:d3:84:bc:b5:b3:ce:81:01:de:c5: 4b:59:9b:53:51:1c:5c:8d:40:66:da:3a:18:49:7f: ca:bd:ac:ec:6e:24:b1:55:51:35:d9:b7:59:2b:b3: 61:a4:89:21:b5:19:a2:14:52:97:74:5e:77:72:62: d2:84:07:ea:fa:16:72:d5:f5:5d:0b:83:64:06:48: 4e:8c:51:81:af:9a:e0:4c:b5:8b:a5:ec:e5:b6:37: 9d:96:9f:86:f7:72:4f:62:55:84:49:e8:a9:93:84: 2d:f1:54:57:8b:b3:4c:05:64:3d:e6:2f:fa:f7:76: 9e:4e:1b:f9:b3:5f:c0:47:65:d7:c0:6d:04:8e:d4: c8:fa:80:3b:46:c7:0c:09:cd:f7:ea:d5:23:27:97: 22:4c:71:df:75:f5:0a:cb:72:fc:c0:32:d3:7b:ee: 4c:52:ad:48:05:47:93:1c:6d:5d:5e:48:fe:01:ce: 8a:c1:87:25:39:51:d8:a3:0c:d9:51:21:03:5e:ce: 8c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E6:2E:EF:70:40:09:5D:EB:4C:65:4B:86:A4:CF:C3:35:A3:AD:AD X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3130332e322e3135382e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.2.158.0/24 Signature Algorithm: sha256WithRSAEncryption 37:5e:18:b0:87:6b:c9:a8:6d:bc:ae:26:e2:7c:dd:9a:ad:88: 95:7e:3e:f5:1c:b9:da:bd:bc:2b:2d:49:dc:83:ed:11:66:8b: b8:2d:9d:a8:b1:44:8b:f7:e2:db:f7:f7:70:d3:47:82:74:dc: 2b:05:a0:f1:9f:93:48:b3:27:6e:b1:0a:df:a1:b1:f6:21:ce: a7:c6:50:fa:19:9f:a0:be:75:6d:58:5a:19:b5:a0:ed:56:f2: 55:d3:04:8a:f0:fe:eb:72:9f:eb:1d:c1:10:c7:11:3f:74:cc: a7:d3:e7:98:7b:7e:a7:e5:10:c4:cb:f9:2c:f7:ac:a5:cf:0b: 89:36:96:65:94:68:26:3f:6a:78:ea:f5:1b:b5:78:43:a7:bc: b9:8c:dd:0e:df:97:fe:86:8a:1a:60:07:0d:36:6b:5c:16:38: 76:86:fa:c3:81:c7:18:09:42:5e:d5:15:e8:90:cf:90:61:b4: b7:e8:9d:10:d7:ff:2c:40:77:35:b5:09:cf:4c:4b:3d:43:90: b1:64:6b:1c:6e:bc:47:e0:9d:ed:0c:12:80:b6:ed:d0:03:ea: cc:2c:ee:65:88:fa:58:d4:7a:d8:0d:80:4a:64:bf:3d:00:a1: c2:7b:4d:2c:69:27:d4:bc:91:52:2a:36:cc:e3:40:27:36:88: c2:89:c3:25 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZkMSQHfsDnDSjddWvTO56I582HswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDhaFw0yNzAxMTkwMjI2MDhaMDMxMTAvBgNV BAMTKDA5RTYyRUVGNzA0MDA5NURFQjRDNjU0Qjg2QTRDRkMzMzVBM0FEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WGHWhsm2hAHlrz/rAwKix6lg kRPE2gFAFC4tcRdNhQx3vuKbNM/dAY5BkuUIDugPWC0wwUp0h9ZXAe91qlzI04S8 tbPOgQHexUtZm1NRHFyNQGbaOhhJf8q9rOxuJLFVUTXZt1krs2GkiSG1GaIUUpd0 XndyYtKEB+r6FnLV9V0Lg2QGSE6MUYGvmuBMtYul7OW2N52Wn4b3ck9iVYRJ6KmT hC3xVFeLs0wFZD3mL/r3dp5OG/mzX8BHZdfAbQSO1Mj6gDtGxwwJzffq1SMnlyJM cd919QrLcvzAMtN77kxSrUgFR5McbV1eSP4BzorBhyU5UdijDNlRIQNezowJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUCeYu73BACV3rTGVLhqTPwzWjra0wHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzMyNDAzNS8wLzMxMzAzMzJlMzIy ZTMxMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGcCnjANBgkqhkiG9w0BAQsFAAOCAQEAN14YsIdryahtvK4m4nzdmq2I lX4+9Ry52r28Ky1J3IPtEWaLuC2dqLFEi/fi2/f3cNNHgnTcKwWg8Z+TSLMnbrEK 36Gx9iHOp8ZQ+hmfoL51bVhaGbWg7VbyVdMEivD+63Kf6x3BEMcRP3TMp9PnmHt+ p+UQxMv5LPespc8LiTaWZZRoJj9qeOr1G7V4Q6e8uYzdDt+X/oaKGmAHDTZrXBY4 dob6w4HHGAlCXtUV6JDPkGG0t+idENf/LEB3NbUJz0xLPUOQsWRrHG68R+Cd7QwS gLbt0APqzCzuZYj6WNR62A2ASmS/PQChwntNLGkn1LyRUio2zONAJzaIwonDJQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:41 2026 by rpki-client