This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/3130332e31352e342e302f32322d3234203d3e2034383539.roa File: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (raw, json) Hash identifier: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo= Subject key identifier: AA:C3:22:7F:1D:8A:D4:CC:4A:F0:50:6E:70:B3:B8:B4:B6:86:6C:1F Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 6CA3FECEC924BCD32C5FCCC248BF98AC094B3F61 Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/3130332e31352e342e302f32322d3234203d3e2034383539.roa Signing time: Tue 20 Jan 2026 02:14:15 +0000 ROA not before: Tue 20 Jan 2026 02:09:15 +0000 ROA not after: Tue 19 Jan 2027 02:14:15 +0000 asID: 4859 IP address blocks: 103.15.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a3:fe:ce:c9:24:bc:d3:2c:5f:cc:c2:48:bf:98:ac:09:4b:3f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: Jan 20 02:09:15 2026 GMT Not After : Jan 19 02:14:15 2027 GMT Subject: CN=AAC3227F1D8AD4CC4AF0506E70B3B8B4B6866C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:29:9c:1b:34:92:bb:ae:e1:5e:91:97:3c: b5:77:c7:f8:f3:74:30:f5:51:2f:5f:03:7a:93:b4: b4:47:69:e5:24:69:00:d6:c2:f7:bf:a8:3a:f9:e3: 17:46:3b:95:63:bb:7b:b9:ab:d3:aa:9a:a1:ab:1d: e1:a6:c7:84:4f:e1:13:fe:e3:0c:6b:cc:d8:2a:04: 8f:fa:32:0d:7d:d6:88:48:6b:d8:06:1a:23:bd:19: c1:23:cb:fb:6a:7a:90:0d:aa:a7:2d:4d:06:a3:78: 0c:57:72:be:e2:64:2f:6f:65:22:61:d2:7d:32:2a: 5a:c9:4a:d8:4e:63:07:07:59:80:56:1f:12:a9:6f: db:12:46:7c:70:99:3b:e9:73:07:2c:82:7e:3a:80: 00:39:25:75:3c:28:db:6b:3a:82:07:9a:9d:2f:7b: 48:dd:c5:90:b0:97:b1:21:cf:ad:37:35:73:1d:65: 25:19:af:b7:19:ca:2e:43:b5:54:ba:6c:7e:46:6d: 98:9c:d4:50:b9:56:ab:bd:df:b8:17:6a:5c:13:1e: ac:0b:cb:06:77:dc:72:b0:5f:28:ed:f8:be:5d:96: c3:fc:03:be:dd:81:44:27:23:bb:91:17:01:e4:9d: 00:95:a0:25:d4:61:cb:58:7f:4b:a7:ec:3b:f4:e4: 54:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C3:22:7F:1D:8A:D4:CC:4A:F0:50:6E:70:B3:B8:B4:B6:86:6C:1F X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/3130332e31352e342e302f32322d3234203d3e2034383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.4.0/22 Signature Algorithm: sha256WithRSAEncryption 27:af:87:83:7c:97:ee:a5:0d:25:b7:18:58:ed:79:a8:23:e5: 87:99:60:38:28:36:41:25:b3:6a:f1:a6:fb:a3:93:e0:80:f7: a4:33:ca:3c:60:5f:31:98:fa:26:9b:56:11:4b:67:b3:c8:40: 1b:93:29:7d:d9:1b:14:59:e9:04:2a:05:56:9a:ee:ad:2c:98: c3:99:62:45:a0:be:e7:ee:4a:96:87:31:fd:ed:cf:21:f0:6b: 40:1f:43:b5:1b:91:ce:f6:cd:56:e1:4e:d0:bf:28:14:59:3a: 42:06:4d:1d:fe:f4:4c:d3:03:83:ea:8e:e0:7f:29:15:4d:71: 26:f7:d8:64:4c:8b:08:e2:1b:60:8a:da:6f:5c:54:d0:7c:3e: fc:f6:d2:d2:12:0a:c1:27:1c:c8:44:9b:cc:a4:37:ec:b8:83: d4:16:62:d1:2c:f2:dc:64:0e:79:31:87:78:66:89:40:57:2c: eb:86:65:c3:78:7b:80:26:ea:93:34:29:42:70:9e:0a:e4:c7: e0:a3:6e:06:fa:95:c9:e7:6f:22:d6:7b:bd:c2:95:39:2a:ec: 18:4f:c4:6a:03:aa:8e:93:2a:ca:15:cf:b3:8a:5c:4b:ce:4a: 42:83:92:a1:f9:84:a6:29:51:8a:ca:ae:39:43:c1:d1:71:06: b4:e0:40:35 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUbKP+zskkvNMsX8zCSL+YrAlLP2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjAxMjAwMjA5MTVaFw0yNzAxMTkwMjE0MTVaMDMxMTAvBgNV BAMTKEFBQzMyMjdGMUQ4QUQ0Q0M0QUYwNTA2RTcwQjNCOEI0QjY4NjZDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpuimcGzSSu67hXpGXPLV3x/jz dDD1US9fA3qTtLRHaeUkaQDWwve/qDr54xdGO5Vju3u5q9OqmqGrHeGmx4RP4RP+ 4wxrzNgqBI/6Mg191ohIa9gGGiO9GcEjy/tqepANqqctTQajeAxXcr7iZC9vZSJh 0n0yKlrJSthOYwcHWYBWHxKpb9sSRnxwmTvpcwcsgn46gAA5JXU8KNtrOoIHmp0v e0jdxZCwl7Ehz603NXMdZSUZr7cZyi5DtVS6bH5GbZic1FC5Vqu937gXalwTHqwL ywZ33HKwXyjt+L5dlsP8A77dgUQnI7uRFwHknQCVoCXUYctYf0un7Dv05FRfAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUqsMifx2K1MxK8FBucLO4tLaGbB8wHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0OTcwNDk3LzAvMzEzMDMzMmUzMTM1 MmUzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzgzNTM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Zw8EMA0GCSqGSIb3DQEBCwUAA4IBAQAnr4eDfJfupQ0ltxhY7XmoI+WHmWA4KDZB JbNq8ab7o5PggPekM8o8YF8xmPomm1YRS2ezyEAbkyl92RsUWekEKgVWmu6tLJjD mWJFoL7n7kqWhzH97c8h8GtAH0O1G5HO9s1W4U7QvygUWTpCBk0d/vRM0wOD6o7g fykVTXEm99hkTIsI4htgitpvXFTQfD789tLSEgrBJxzIRJvMpDfsuIPUFmLRLPLc ZA55MYd4ZolAVyzrhmXDeHuAJuqTNClCcJ4K5Mfgo24G+pXJ528i1nu9wpU5KuwY T8RqA6qOkyrKFc+zilxLzkpCg5Kh+YSmKVGKyq45Q8HRcQa04EA1 -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:09 2026 by rpki-client