This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e203138313836.roa File: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (raw, json) Hash identifier: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY= Subject key identifier: 10:4A:04:D9:07:BC:4E:D7:43:6F:5E:85:3B:38:D3:08:AD:3B:C6:B2 Certificate issuer: /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86 Certificate serial: 151B9FC3D929B7EDBC1BE641FA210A8E20618EDA Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e203138313836.roa Signing time: Tue 20 Jan 2026 01:19:10 +0000 ROA not before: Tue 20 Jan 2026 01:14:10 +0000 ROA not after: Tue 19 Jan 2027 01:19:10 +0000 asID: 18186 IP address blocks: 103.99.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1b:9f:c3:d9:29:b7:ed:bc:1b:e6:41:fa:21:0a:8e:20:61:8e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86 Validity Not Before: Jan 20 01:14:10 2026 GMT Not After : Jan 19 01:19:10 2027 GMT Subject: CN=104A04D907BC4ED7436F5E853B38D308AD3BC6B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:7e:c5:df:81:2c:dd:af:77:52:2d:05:48: 89:51:b7:69:6c:2a:b6:85:93:9e:1a:c8:4d:f7:22: ce:89:c5:d9:14:a2:24:8c:f4:f6:11:ca:82:27:a8: 03:2e:d1:bb:32:41:22:3b:c9:68:12:90:0d:17:38: d4:d2:e2:ff:cf:47:06:b4:f6:92:9b:04:22:2b:93: b1:58:67:80:fc:15:ff:09:22:0d:7c:58:f1:db:f8: 42:11:a6:bb:9a:7a:e3:d5:3b:38:39:56:1e:4d:dc: c7:58:7c:70:c5:47:e1:ac:22:9a:45:da:b5:41:9a: dd:a6:42:e2:7a:96:66:fb:b7:3d:7b:66:f6:f5:d9: 23:17:2a:22:f2:94:18:73:3c:4e:f9:88:18:d0:66: 8e:37:ae:44:70:c9:fc:2f:41:41:c6:c1:cd:04:d4: 32:fd:4f:0c:86:3a:fb:6f:c4:99:fc:e6:7c:bb:fc: 29:17:c4:60:c6:c0:60:ca:04:8a:2c:8d:b1:fb:9c: b3:8b:51:d7:f5:9f:15:24:41:36:a6:1a:43:f6:d6: 50:a1:8c:78:f3:98:dd:83:c4:19:69:d5:d4:0e:78: c1:0e:cf:11:87:cf:dc:9b:c3:be:c2:97:88:18:02: 47:8b:e4:e2:3f:80:1a:48:2c:02:b0:4b:d0:7a:98: 8d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4A:04:D9:07:BC:4E:D7:43:6F:5E:85:3B:38:D3:08:AD:3B:C6:B2 X509v3 Authority Key Identifier: keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e203138313836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.99.76.0/24 Signature Algorithm: sha256WithRSAEncryption ca:2f:ae:81:41:0c:9d:4c:12:1b:0f:76:fd:26:9b:cd:1e:26: c3:c6:fd:c6:f1:b9:30:d7:fa:e4:8c:93:7a:a9:00:b1:e0:b0: 1e:e5:6a:2d:11:96:0d:16:3f:82:26:36:bd:ae:a6:b5:01:0a: dc:40:b9:53:11:df:de:b9:dd:aa:71:2c:da:20:53:03:27:06: dd:d0:92:62:98:44:84:ba:29:c2:43:70:b8:34:6c:5d:ea:2f: ad:41:88:9c:c0:92:a7:44:16:01:93:f0:6b:b4:7e:f3:dc:e3: d2:57:19:ea:af:34:30:80:56:54:85:64:26:db:26:0a:dd:04: 0c:5b:93:68:a1:3f:c8:28:99:9c:fb:5d:5f:b6:48:ea:94:ff: 47:ab:86:04:d0:e6:26:ac:58:c1:d8:f9:9f:a4:ef:ea:46:dc: da:45:e2:27:5b:b2:69:55:b9:32:c1:f9:5d:d3:93:87:eb:28: 81:81:47:5b:df:ff:51:2e:0e:64:5d:15:58:76:e0:67:3d:8a: 6a:02:33:98:52:4b:44:23:47:39:69:0a:70:c7:c4:71:a4:0b: f8:c6:97:16:55:8f:50:6f:9b:76:d5:df:a8:ec:7f:97:6b:84: 3f:90:21:1e:66:9d:ce:11:f4:c4:94:01:29:be:c4:5e:41:10: 6c:fc:4a:7d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUFRufw9kpt+28G+ZB+iEKjiBhjtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVF ODYwMkE4NjAeFw0yNjAxMjAwMTE0MTBaFw0yNzAxMTkwMTE5MTBaMDMxMTAvBgNV BAMTKDEwNEEwNEQ5MDdCQzRFRDc0MzZGNUU4NTNCMzhEMzA4QUQzQkM2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsS37F34Es3a93Ui0FSIlRt2ls KraFk54ayE33Is6JxdkUoiSM9PYRyoInqAMu0bsyQSI7yWgSkA0XONTS4v/PRwa0 9pKbBCIrk7FYZ4D8Ff8JIg18WPHb+EIRpruaeuPVOzg5Vh5N3MdYfHDFR+GsIppF 2rVBmt2mQuJ6lmb7tz17Zvb12SMXKiLylBhzPE75iBjQZo43rkRwyfwvQUHGwc0E 1DL9TwyGOvtvxJn85ny7/CkXxGDGwGDKBIosjbH7nLOLUdf1nxUkQTamGkP21lCh jHjzmN2DxBlp1dQOeMEOzxGHz9ybw77Cl4gYAkeL5OI/gBpILAKwS9B6mI1xAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUEEoE2Qe8TtdDb16FOzjTCK07xrIwHwYDVR0j BBgwFoAUbmVR3fFfy2SFAKcID6N9juhgKoYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTIzMjY0MS8wLzZFNjU1MURERjE1RkNCNjQ4NTAwQTcwODBGQTM3 RDhFRTg2MDJBODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVFODYwMkE4Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI1MjMyNjQxLzAvMzEzMDMzMmUzOTM5 MmUzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzgzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdjTDANBgkqhkiG9w0BAQsFAAOCAQEAyi+ugUEMnUwSGw92/SabzR4mw8b9 xvG5MNf65IyTeqkAseCwHuVqLRGWDRY/giY2va6mtQEK3EC5UxHf3rndqnEs2iBT AycG3dCSYphEhLopwkNwuDRsXeovrUGInMCSp0QWAZPwa7R+89zj0lcZ6q80MIBW VIVkJtsmCt0EDFuTaKE/yCiZnPtdX7ZI6pT/R6uGBNDmJqxYwdj5n6Tv6kbc2kXi J1uyaVW5MsH5XdOTh+sogYFHW9//US4OZF0VWHbgZz2KagIzmFJLRCNHOWkKcMfE caQL+MaXFlWPUG+bdtXfqOx/l2uEP5AhHmadzhH0xJQBKb7EXkEQbPxKfQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:41 2026 by rpki-client