This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3130332e32302e34362e302f32342d3234203d3e203137343038.roa File: 3130332e32302e34362e302f32342d3234203d3e203137343038.roa (raw, json) Hash identifier: Cqxt0WZEcv/CrX8zUgyTIyMtPh2X566qKRuS9+MgsQI= Subject key identifier: C0:6E:E4:04:6E:B4:6A:B0:79:F5:87:5E:25:F0:BA:AA:45:90:35:AE Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 3881A2B440159C3B16B2F5DB89629458C7C1B024 Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3130332e32302e34362e302f32342d3234203d3e203137343038.roa Signing time: Tue 20 Jan 2026 02:27:19 +0000 ROA not before: Tue 20 Jan 2026 02:22:19 +0000 ROA not after: Tue 19 Jan 2027 02:27:19 +0000 asID: 17408 IP address blocks: 103.20.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:81:a2:b4:40:15:9c:3b:16:b2:f5:db:89:62:94:58:c7:c1:b0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Jan 20 02:22:19 2026 GMT Not After : Jan 19 02:27:19 2027 GMT Subject: CN=C06EE4046EB46AB079F5875E25F0BAAA459035AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f7:4f:d7:41:a3:91:ec:38:bc:7c:f9:51:61: 65:4d:7d:b3:08:16:2b:c3:59:c8:cf:67:1f:f3:9a: d0:7b:bb:31:6c:db:73:c1:3a:e6:69:6b:d7:28:f8: c3:d1:ea:5a:64:92:79:39:5b:81:bc:c4:24:61:b4: 22:6f:92:f3:11:1b:15:57:da:f7:55:3a:93:84:2a: 9e:74:a9:55:02:7c:ff:e2:a5:bf:38:c9:26:1e:85: 37:02:e3:da:c6:8a:06:89:52:b1:c2:2d:76:21:4a: 88:1f:fd:f1:87:28:f0:aa:7a:f9:9f:71:b3:c9:58: b5:92:e8:ea:49:41:f1:a9:1b:5b:0e:38:26:71:02: 56:ca:5f:f9:2b:ec:e1:95:2f:85:8e:cc:8e:4f:0d: 16:39:02:f9:88:3d:71:b3:dc:95:bb:c6:c3:94:0e: 2d:2a:2b:50:02:32:f7:d1:0a:9e:08:69:f5:04:77: e8:19:e5:37:fc:69:48:48:11:96:af:d5:15:fd:58: 41:0b:9b:9c:2e:6b:1e:3f:2d:48:71:5f:7f:a0:41: 57:f8:62:d1:f6:37:54:19:82:35:5b:53:1c:1c:64: 38:ae:b9:c0:59:cd:f9:c4:db:82:33:da:fc:4f:b8: 2e:76:28:88:ec:b1:70:4f:e5:1b:66:0d:30:d6:c1: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6E:E4:04:6E:B4:6A:B0:79:F5:87:5E:25:F0:BA:AA:45:90:35:AE X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3130332e32302e34362e302f32342d3234203d3e203137343038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.46.0/24 Signature Algorithm: sha256WithRSAEncryption 76:d9:8a:3e:9e:6b:18:d7:7c:fa:08:07:5e:ac:0c:9b:00:7c: d1:76:92:72:27:e4:b5:71:e8:a7:54:d6:9f:5f:ba:82:61:4e: 28:db:14:c8:11:14:9f:04:cb:ad:3e:22:f8:f8:2a:9e:a0:0a: 64:3d:64:15:86:fc:bf:bc:1e:0d:40:67:e6:1a:21:4e:97:be: 0f:49:99:19:23:8a:17:5f:3f:77:82:ba:09:b4:8e:e2:fd:22: f9:f4:e1:d6:15:b1:61:99:ef:aa:3d:61:52:ba:b5:10:d1:35: f2:96:e4:0a:40:3a:0f:a9:92:19:f1:4d:72:b4:d8:11:c9:69: a2:8a:8d:f3:c0:a9:22:0a:0b:03:1f:d3:24:f0:5a:0e:65:16: ce:8b:c7:76:7e:ea:f4:7c:5d:c3:50:a9:92:14:58:5c:dc:1d: 80:10:46:00:7c:67:39:d6:35:b0:eb:66:fb:0c:74:d0:9a:21: 3d:1b:8f:7f:46:31:b0:2e:0b:1b:e4:7b:9d:fe:ec:6d:91:50: 30:b8:d1:ef:36:20:6b:11:14:75:f5:e7:a6:52:19:b1:f5:c0: 48:78:8d:1c:c1:94:9c:39:e7:14:4f:1f:28:d6:ba:91:c7:37: a4:dd:00:e8:0e:59:28:4b:85:f2:21:8a:c0:97:e4:43:49:dc: 32:93:8c:d8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUOIGitEAVnDsWsvXbiWKUWMfBsCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjAxMjAwMjIyMTlaFw0yNzAxMTkwMjI3MTlaMDMxMTAvBgNV BAMTKEMwNkVFNDA0NkVCNDZBQjA3OUY1ODc1RTI1RjBCQUFBNDU5MDM1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM90/XQaOR7Di8fPlRYWVNfbMI FivDWcjPZx/zmtB7uzFs23PBOuZpa9co+MPR6lpkknk5W4G8xCRhtCJvkvMRGxVX 2vdVOpOEKp50qVUCfP/ipb84ySYehTcC49rGigaJUrHCLXYhSogf/fGHKPCqevmf cbPJWLWS6OpJQfGpG1sOOCZxAlbKX/kr7OGVL4WOzI5PDRY5AvmIPXGz3JW7xsOU Di0qK1ACMvfRCp4IafUEd+gZ5Tf8aUhIEZav1RX9WEELm5wuax4/LUhxX3+gQVf4 YtH2N1QZgjVbUxwcZDiuucBZzfnE24Iz2vxPuC52KIjssXBP5RtmDTDWwVgRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUwG7kBG60arB59YdeJfC6qkWQNa4wHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTkwNzg3LzAvMzEzMDMzMmUzMjMw MmUzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM0MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcULjANBgkqhkiG9w0BAQsFAAOCAQEAdtmKPp5rGNd8+ggHXqwMmwB80XaS cifktXHop1TWn1+6gmFOKNsUyBEUnwTLrT4i+PgqnqAKZD1kFYb8v7weDUBn5hoh Tpe+D0mZGSOKF18/d4K6CbSO4v0i+fTh1hWxYZnvqj1hUrq1ENE18pbkCkA6D6mS GfFNcrTYEclpooqN88CpIgoLAx/TJPBaDmUWzovHdn7q9Hxdw1CpkhRYXNwdgBBG AHxnOdY1sOtm+wx00JohPRuPf0YxsC4LG+R7nf7sbZFQMLjR7zYgaxEUdfXnplIZ sfXASHiNHMGUnDnnFE8fKNa6kcc3pN0A6A5ZKEuF8iGKwJfkQ0ncMpOM2A== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:58 2026 by rpki-client