This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa File: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (raw, json) Hash identifier: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ= Subject key identifier: CF:EE:14:64:4E:F2:61:88:70:AA:F2:87:3A:3D:79:A8:73:30:1E:40 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 7F4BDDF61883736A8A23B465F6B29ECD4ADC2892 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa Signing time: Tue 20 Jan 2026 02:26:06 +0000 ROA not before: Tue 20 Jan 2026 02:21:06 +0000 ROA not after: Tue 19 Jan 2027 02:26:06 +0000 asID: 151232 IP address blocks: 103.213.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4b:dd:f6:18:83:73:6a:8a:23:b4:65:f6:b2:9e:cd:4a:dc:28:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Jan 20 02:21:06 2026 GMT Not After : Jan 19 02:26:06 2027 GMT Subject: CN=CFEE14644EF2618870AAF2873A3D79A873301E40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:b3:a7:a2:f2:47:70:7d:fb:69:d5:3d:b7: 2c:98:8c:4c:a1:d7:2a:3f:8a:a0:f2:d8:45:15:71: 75:12:38:4c:d8:5d:fe:59:ff:69:88:92:0c:11:9c: 5f:67:b8:ad:2e:9f:40:be:24:14:a5:d2:32:f8:f9: f9:da:39:5f:c9:85:59:2f:e8:34:7d:c4:7f:b7:e1: 15:a9:b7:0e:89:19:77:a3:26:1d:89:e9:92:af:c1: cb:a7:80:25:ef:72:82:6e:97:5b:f7:93:27:0c:1e: 46:22:33:74:fc:c1:89:93:ab:44:d1:91:2e:3a:f4: a5:fe:85:b8:30:bd:62:06:07:e3:5c:e5:0a:20:7d: 98:f3:ea:3b:8c:f7:96:5c:f2:5f:f4:44:b2:b8:b2: 84:0d:2b:0a:12:58:da:19:c5:62:14:56:f6:f5:09: b5:e5:01:c3:66:fb:53:48:5d:23:30:c2:a8:04:c2: 8f:42:a9:c1:4d:e6:2a:4b:6f:c4:08:d6:56:4b:fd: 0c:a3:91:60:1a:8c:1c:af:c5:fb:81:5e:0e:e1:8b: 1b:62:bc:b2:e7:4a:97:31:a3:c1:0f:03:77:8c:a1: 4c:3a:12:a0:fe:b2:b1:58:b5:42:2b:d7:a0:bc:84: 26:3d:65:5a:e4:31:8c:35:a2:20:18:2c:9f:1c:ca: 82:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EE:14:64:4E:F2:61:88:70:AA:F2:87:3A:3D:79:A8:73:30:1E:40 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.144.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:8d:46:14:2b:95:7c:4e:01:91:89:39:54:73:ec:0d:b6:53: 43:7f:41:29:e9:f3:97:d3:2b:86:62:f5:12:7e:d4:6b:ee:69: 63:a2:13:cc:2b:6a:85:37:a5:8b:6b:0f:eb:41:91:f9:5e:9d: 17:11:56:d1:b2:24:62:0b:93:64:3b:bd:90:c7:81:49:ca:f6: 56:3f:4a:b5:72:b8:2c:51:1d:1f:56:79:30:81:a4:d3:ae:0c: 1e:23:a7:06:3b:87:77:c8:09:d4:24:f6:5a:b4:06:b0:c3:56: b4:9b:53:10:bb:87:40:92:4d:e4:0d:8f:3c:69:29:3a:e1:58: db:16:db:ac:62:4d:57:b2:72:f7:a4:d3:7b:28:0d:bd:ba:37: 8b:ae:3a:4a:72:1b:a6:e1:cd:4a:d9:40:63:6d:5c:31:e9:c8: 85:73:9c:cd:d7:c1:ff:83:56:7f:84:0a:b6:43:bb:8c:67:da: a1:17:6d:74:0d:10:69:78:d9:82:8d:5f:1f:59:cb:a4:49:30: a0:e4:15:91:65:dc:00:63:97:d2:83:b7:71:ee:44:60:eb:f8: 69:89:8f:8f:f1:84:3e:77:24:70:df:3d:8f:b2:58:04:2f:bb: 65:7c:1b:22:46:98:00:6b:b2:1e:96:46:8a:f3:40:7f:72:da: 78:45:5e:8f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUf0vd9hiDc2qKI7Rl9rKezUrcKJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjAxMjAwMjIxMDZaFw0yNzAxMTkwMjI2MDZaMDMxMTAvBgNV BAMTKENGRUUxNDY0NEVGMjYxODg3MEFBRjI4NzNBM0Q3OUE4NzMzMDFFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XrOnovJHcH37adU9tyyYjEyh 1yo/iqDy2EUVcXUSOEzYXf5Z/2mIkgwRnF9nuK0un0C+JBSl0jL4+fnaOV/JhVkv 6DR9xH+34RWptw6JGXejJh2J6ZKvwcungCXvcoJul1v3kycMHkYiM3T8wYmTq0TR kS469KX+hbgwvWIGB+Nc5QogfZjz6juM95Zc8l/0RLK4soQNKwoSWNoZxWIUVvb1 CbXlAcNm+1NIXSMwwqgEwo9CqcFN5ipLb8QI1lZL/QyjkWAajByvxfuBXg7hixti vLLnSpcxo8EPA3eMoUw6EqD+srFYtUIr16C8hCY9ZVrkMYw1oiAYLJ8cyoJZAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUz+4UZE7yYYhwqvKHOj15qHMwHkAwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0NzczODg5LzAvMzEzMDMzMmUz MjMxMzMyZTMxMzQzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzMz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWfVkDANBgkqhkiG9w0BAQsFAAOCAQEADI1GFCuVfE4BkYk5 VHPsDbZTQ39BKenzl9MrhmL1En7Ua+5pY6ITzCtqhTeli2sP60GR+V6dFxFW0bIk YguTZDu9kMeBScr2Vj9KtXK4LFEdH1Z5MIGk064MHiOnBjuHd8gJ1CT2WrQGsMNW tJtTELuHQJJN5A2PPGkpOuFY2xbbrGJNV7Jy96TTeygNvbo3i646SnIbpuHNStlA Y21cMenIhXOczdfB/4NWf4QKtkO7jGfaoRdtdA0QaXjZgo1fH1nLpEkwoOQVkWXc AGOX0oO3ce5EYOv4aYmPj/GEPnckcN89j7JYBC+7ZXwbIkaYAGuyHpZGivNAf3La eEVejw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:46 2026 by rpki-client