This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3233302e302f32342d3234203d3e2034383337.roa File: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI= Subject key identifier: A6:A9:AC:A2:77:7B:73:46:CF:E5:83:9D:32:CC:83:2E:D2:F7:0E:87 Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Certificate serial: 2A52824B54C051D5E7EC683C844DEC22EC16262D Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3233302e302f32342d3234203d3e2034383337.roa Signing time: Tue 20 Jan 2026 02:26:10 +0000 ROA not before: Tue 20 Jan 2026 02:21:10 +0000 ROA not after: Tue 19 Jan 2027 02:26:10 +0000 asID: 4837 IP address blocks: 103.24.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:52:82:4b:54:c0:51:d5:e7:ec:68:3c:84:4d:ec:22:ec:16:26:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Validity Not Before: Jan 20 02:21:10 2026 GMT Not After : Jan 19 02:26:10 2027 GMT Subject: CN=A6A9ACA2777B7346CFE5839D32CC832ED2F70E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:6b:32:c5:f1:3d:e9:d5:f6:01:eb:7c:ea: 38:84:7d:a6:61:49:c4:fb:c4:9f:b4:cc:cd:5f:3f: 95:5b:95:8e:61:e0:54:14:dd:f3:6b:2f:a2:a3:e6: 0b:cf:b1:dc:ce:78:e6:49:f0:5a:77:98:d9:ee:96: ae:90:53:fe:ee:72:38:12:b1:7b:8a:da:9a:a8:05: 3f:d7:88:b2:f0:20:24:80:62:88:06:b9:a4:e1:9e: 38:92:83:b4:22:94:70:8e:65:44:12:a9:eb:22:fe: 0f:c4:36:02:c7:cc:10:34:a1:3e:38:19:55:6e:57: db:02:ac:d2:1b:ed:fe:01:82:f4:87:1a:38:c6:06: 3a:0c:93:7a:c9:fc:0b:19:d7:c5:bc:71:de:97:18: 8a:43:01:25:90:d8:e0:1c:00:6f:4e:40:1a:50:e0: 50:c6:af:83:18:c5:0a:78:b7:8f:45:ea:77:3e:c0: 16:bd:a8:85:ee:c9:87:c2:9e:1a:c7:7d:39:23:b2: 00:08:19:b0:b8:8f:e6:d7:06:42:8f:b9:b2:f8:a6: 24:33:50:f1:ec:be:90:07:b6:ad:eb:96:3f:87:7a: b7:1a:31:e8:de:ad:37:71:d1:c2:4b:a5:af:79:71: 27:db:95:91:bd:4a:33:cc:76:8f:07:5a:ae:ab:b3: d6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A9:AC:A2:77:7B:73:46:CF:E5:83:9D:32:CC:83:2E:D2:F7:0E:87 X509v3 Authority Key Identifier: keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3233302e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.230.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:75:aa:b6:b5:66:f4:79:68:a6:76:63:6e:c5:33:55:4d:6f: e7:3d:df:f2:77:b1:6a:9f:bb:ff:be:ba:97:3e:30:b9:78:7c: 44:b7:be:52:7a:bb:6f:2f:49:92:cf:ce:1f:41:e0:e3:53:f3: 6b:d5:44:a5:87:16:83:9f:09:d4:90:c1:bf:63:4d:84:56:df: 97:72:02:56:4b:ac:dd:52:6b:ce:2f:ed:fa:ca:cb:71:da:5c: a2:64:a2:63:9d:82:5f:ca:49:18:8e:f9:e9:72:6a:9c:fe:83: 61:a6:2f:95:da:0c:c9:8a:5a:33:d3:41:55:0a:58:f6:36:ce: 10:8e:bf:84:c5:86:43:83:96:ba:20:7c:bf:a3:f1:61:50:6f: f1:2b:eb:30:d6:2f:10:be:bb:7d:12:9c:b6:38:8d:6b:04:82: 71:c3:55:ad:7c:04:6a:cf:d7:a0:ff:29:a7:5d:b4:3b:9d:12: 83:46:a4:a4:4f:9b:65:03:9a:06:de:7d:b4:7d:f1:98:7b:4f: 51:ed:89:e6:4f:40:5c:f3:39:85:5c:b2:a3:20:60:a2:90:7c: bd:22:e5:d0:71:16:d6:77:10:75:24:8c:3e:1f:6a:7f:e3:42: bc:3e:ed:43:23:bf:f5:c8:8d:17:4f:e1:c0:9e:15:20:4d:eb: 60:24:43:38 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKlKCS1TAUdXn7Gg8hE3sIuwWJi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVE OUIzNzM1OTAeFw0yNjAxMjAwMjIxMTBaFw0yNzAxMTkwMjI2MTBaMDMxMTAvBgNV BAMTKEE2QTlBQ0EyNzc3QjczNDZDRkU1ODM5RDMyQ0M4MzJFRDJGNzBFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw22syxfE96dX2Aet86jiEfaZh ScT7xJ+0zM1fP5VblY5h4FQU3fNrL6Kj5gvPsdzOeOZJ8Fp3mNnulq6QU/7ucjgS sXuK2pqoBT/XiLLwICSAYogGuaThnjiSg7QilHCOZUQSqesi/g/ENgLHzBA0oT44 GVVuV9sCrNIb7f4BgvSHGjjGBjoMk3rJ/AsZ18W8cd6XGIpDASWQ2OAcAG9OQBpQ 4FDGr4MYxQp4t49F6nc+wBa9qIXuyYfCnhrHfTkjsgAIGbC4j+bXBkKPubL4piQz UPHsvpAHtq3rlj+HercaMejerTdx0cJLpa95cSfblZG9SjPMdo8HWq6rs9Z1AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUpqmsond7c0bP5YOdMsyDLtL3DocwHwYDVR0j BBgwFoAU61sIP5/Gq7cls/0eggJwbtmzc1kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTAzNjAzMy8wL0VCNUIwODNGOUZDNkFCQjcyNUIzRkQxRTgyMDI3 MDZFRDlCMzczNTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVEOUIzNzM1OS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI1MDM2MDMzLzAvMzEzMDMzMmUzMjM0 MmUzMjMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcY5jANBgkqhkiG9w0BAQsFAAOCAQEAT3WqtrVm9HlopnZjbsUzVU1v5z3f 8nexap+7/766lz4wuXh8RLe+Unq7by9Jks/OH0Hg41Pza9VEpYcWg58J1JDBv2NN hFbfl3ICVkus3VJrzi/t+srLcdpcomSiY52CX8pJGI756XJqnP6DYaYvldoMyYpa M9NBVQpY9jbOEI6/hMWGQ4OWuiB8v6PxYVBv8SvrMNYvEL67fRKctjiNawSCccNV rXwEas/XoP8pp120O50Sg0akpE+bZQOaBt59tH3xmHtPUe2J5k9AXPM5hVyyoyBg opB8vSLl0HEW1ncQdSSMPh9qf+NCvD7tQyO/9ciNF0/hwJ4VIE3rYCRDOA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:50 2026 by rpki-client