This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3130332e322e3135392e302f32342d3234203d3e20313436373632.roa File: 3130332e322e3135392e302f32342d3234203d3e20313436373632.roa (raw, json) Hash identifier: 9g0xW7AmpZhtlTL3yKRzbCzVa8h7KeJrq49B9jPei30= Subject key identifier: 74:11:27:EF:38:96:FF:71:A9:50:EE:C9:7E:70:61:1B:FD:66:15:F6 Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 3D77190B16A9E0BF40B45F511F2F00C86B460547 Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3130332e322e3135392e302f32342d3234203d3e20313436373632.roa Signing time: Tue 20 Jan 2026 02:26:08 +0000 ROA not before: Tue 20 Jan 2026 02:21:08 +0000 ROA not after: Tue 19 Jan 2027 02:26:08 +0000 asID: 146762 IP address blocks: 103.2.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:77:19:0b:16:a9:e0:bf:40:b4:5f:51:1f:2f:00:c8:6b:46:05:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Jan 20 02:21:08 2026 GMT Not After : Jan 19 02:26:08 2027 GMT Subject: CN=741127EF3896FF71A950EEC97E70611BFD6615F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cb:9f:71:49:ea:e7:f1:4e:18:e3:d3:cd:54: 01:11:ec:29:36:34:00:52:0f:54:33:a2:11:5b:03: 06:95:c3:9f:95:54:70:3a:99:e6:26:7f:a6:9f:2d: 6d:ba:af:24:60:b5:ef:2d:63:df:15:6d:f2:ad:ae: 51:88:83:88:50:43:f8:2d:34:1e:7f:8c:47:89:03: ae:a5:ea:2a:e3:f3:c2:5e:c5:51:be:e1:54:f3:1d: 80:28:62:90:11:fc:1b:41:e9:d5:72:24:88:5c:78: d6:a2:1b:11:f9:9b:c6:f2:61:8c:bc:28:8a:5b:51: eb:0b:f1:92:73:30:85:95:2d:7e:4a:75:14:48:77: eb:76:c4:7a:a9:3c:1d:95:fe:13:3e:af:09:db:ef: 6f:b9:f4:ba:13:90:12:d6:5f:4e:bd:bb:98:89:9e: 88:d4:08:5f:7a:2a:9f:8a:b5:a0:2f:cb:98:7f:af: 99:0d:b8:77:3a:7f:bb:b3:74:06:c8:7c:78:eb:29: 20:1e:89:c7:40:e3:2e:4e:c1:30:e0:21:f1:8c:b5: 1c:df:a1:9e:be:03:2f:4d:09:61:44:22:23:75:50: 14:55:db:13:9c:3b:12:7e:a9:0e:3d:f1:bd:63:54: 18:74:58:1d:ce:bf:f1:03:63:16:67:76:86:2f:b7: e7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:11:27:EF:38:96:FF:71:A9:50:EE:C9:7E:70:61:1B:FD:66:15:F6 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3130332e322e3135392e302f32342d3234203d3e20313436373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.2.159.0/24 Signature Algorithm: sha256WithRSAEncryption 85:28:e0:8c:21:90:aa:54:cd:c8:45:52:46:38:eb:ba:ce:a8: c1:05:37:b5:d8:4f:fd:0f:63:e6:bb:d2:35:d8:22:af:43:50: bc:65:fd:6f:4a:94:20:25:14:38:6d:87:5a:47:46:89:ff:24: a4:bc:b2:d8:f2:ce:cb:3e:33:ca:a2:20:27:0a:52:08:d4:92: 67:5f:86:8a:05:d0:ee:a5:70:43:65:56:ce:94:9d:15:ca:eb: 9a:a1:c5:56:4e:a0:03:94:15:fa:d4:e4:cb:ff:1d:dc:eb:db: f2:75:08:f6:04:db:f3:af:f8:52:13:58:96:fb:c7:67:8b:e2: 39:06:47:84:06:7b:83:d9:cd:3f:4e:8d:51:a3:98:d8:71:ed: 06:7a:1a:2c:41:f0:bb:11:7a:5b:82:c2:59:55:76:f1:2d:27: 13:5b:94:22:bb:a2:c4:af:57:e2:14:79:76:71:de:b4:aa:e2: cd:0a:5e:d0:f0:f9:71:25:be:06:88:81:1e:b8:1a:a9:c3:ee: 67:7f:f5:de:92:f3:94:cb:df:8e:e4:d8:a6:da:b5:1a:e3:c2: ba:c8:07:0c:06:19:12:82:e1:b9:7a:d3:7c:f5:d1:f7:80:24: 57:70:de:29:9e:29:b2:74:23:c5:ef:d7:81:7a:0f:f7:f7:4e: b9:ce:d1:fe -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPXcZCxap4L9AtF9RHy8AyGtGBUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAxMjAwMjIxMDhaFw0yNzAxMTkwMjI2MDhaMDMxMTAvBgNV BAMTKDc0MTEyN0VGMzg5NkZGNzFBOTUwRUVDOTdFNzA2MTFCRkQ2NjE1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWy59xSern8U4Y49PNVAER7Ck2 NABSD1QzohFbAwaVw5+VVHA6meYmf6afLW26ryRgte8tY98VbfKtrlGIg4hQQ/gt NB5/jEeJA66l6irj88JexVG+4VTzHYAoYpAR/BtB6dVyJIhceNaiGxH5m8byYYy8 KIpbUesL8ZJzMIWVLX5KdRRId+t2xHqpPB2V/hM+rwnb72+59LoTkBLWX069u5iJ nojUCF96Kp+KtaAvy5h/r5kNuHc6f7uzdAbIfHjrKSAeicdA4y5OwTDgIfGMtRzf oZ6+Ay9NCWFEIiN1UBRV2xOcOxJ+qQ498b1jVBh0WB3Ov/EDYxZndoYvt+ezAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUdBEn7ziW/3GpUO7JfnBhG/1mFfYwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzMyNDAzNS8wLzMxMzAzMzJlMzIy ZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGcCnzANBgkqhkiG9w0BAQsFAAOCAQEAhSjgjCGQqlTNyEVSRjjrus6o wQU3tdhP/Q9j5rvSNdgir0NQvGX9b0qUICUUOG2HWkdGif8kpLyy2PLOyz4zyqIg JwpSCNSSZ1+GigXQ7qVwQ2VWzpSdFcrrmqHFVk6gA5QV+tTky/8d3Ovb8nUI9gTb 86/4UhNYlvvHZ4viOQZHhAZ7g9nNP06NUaOY2HHtBnoaLEHwuxF6W4LCWVV28S0n E1uUIruixK9X4hR5dnHetKrizQpe0PD5cSW+BoiBHrgaqcPuZ3/13pLzlMvfjuTY ptq1GuPCusgHDAYZEoLhuXrTfPXR94AkV3DeKZ4psnQjxe/XgXoP9/dOuc7R/g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:39 2026 by rpki-client