This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa File: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (raw, json) Hash identifier: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g= Subject key identifier: E5:C8:D1:82:1D:E3:3D:E8:85:AF:34:C4:6F:61:50:CB:FE:ED:F8:2A Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Certificate serial: 45354DEAF2CB990C2B184720FAF2E4E0DA8E4B1B Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa Signing time: Tue 20 Jan 2026 02:07:16 +0000 ROA not before: Tue 20 Jan 2026 02:02:16 +0000 ROA not after: Tue 19 Jan 2027 02:07:16 +0000 asID: 140224 IP address blocks: 103.116.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:35:4d:ea:f2:cb:99:0c:2b:18:47:20:fa:f2:e4:e0:da:8e:4b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Validity Not Before: Jan 20 02:02:16 2026 GMT Not After : Jan 19 02:07:16 2027 GMT Subject: CN=E5C8D1821DE33DE885AF34C46F6150CBFEEDF82A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:55:39:b5:d9:7c:63:4e:96:84:83:f0:90: 79:d8:79:31:c0:46:d3:14:79:e3:45:8f:7f:92:25: 03:a7:6a:a0:30:a7:fe:1a:af:4a:ea:66:a0:64:0d: 69:59:8e:81:22:02:09:5a:6d:aa:2a:90:f2:92:5e: e9:e6:34:e7:73:30:f4:9c:61:79:a1:18:52:b6:c8: 76:3b:7f:a3:67:0f:6c:39:5c:96:cc:43:84:ad:6c: c6:4c:f1:2a:a1:c4:43:26:77:ba:f5:e8:be:9d:7c: a0:ee:bb:e2:00:4c:2a:73:1c:1e:7d:fe:7d:14:41: 99:1b:51:8e:01:33:3d:97:d5:26:3e:5c:05:ef:85: 23:1f:71:c9:c4:fe:16:df:4e:e6:a4:31:9a:7d:a1: 1f:51:07:0a:20:e4:eb:3e:59:6c:ed:01:d9:2d:04: e2:c7:ef:ae:b0:c6:c1:01:74:f0:ae:14:79:74:c0: 78:10:f5:cc:89:c1:5c:72:bb:bd:07:8f:0a:4d:88: cb:18:e6:40:ef:01:6a:96:8e:5e:6e:7a:56:0e:d7: 0c:4f:7f:e8:ef:58:93:e1:f0:32:eb:a1:2e:8d:b0: a8:8b:a3:d0:e9:08:96:85:3b:65:ad:8d:06:16:eb: d6:d2:a0:10:64:d0:9d:78:bc:c0:e8:8d:f6:d1:e3: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C8:D1:82:1D:E3:3D:E8:85:AF:34:C4:6F:61:50:CB:FE:ED:F8:2A X509v3 Authority Key Identifier: keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.149.0/24 Signature Algorithm: sha256WithRSAEncryption b7:9a:ef:09:1c:b8:44:ed:a5:86:e4:81:c8:38:12:c1:2b:40: 46:de:62:56:7c:88:61:22:4e:b2:0b:04:c3:45:dc:30:ed:f1: f6:e0:4c:17:d1:18:0e:c6:c4:86:b2:69:87:32:93:d6:a9:d9: 5e:e6:4e:66:bc:06:48:86:4f:9e:f6:64:50:cb:b9:a7:f9:7c: 7a:dc:dc:f3:95:31:3b:b3:05:65:77:a6:c5:e2:4a:d0:e9:61: d5:bb:cc:46:06:0f:71:3b:83:7d:4b:4b:72:60:ff:dc:a8:c9: 32:17:96:e5:d9:a5:ea:4d:f0:aa:67:64:8d:de:01:23:79:31: 83:b3:89:52:7d:af:72:1d:8c:fa:71:b3:f3:71:f4:3c:70:c2: 19:29:aa:ae:98:81:da:67:9b:74:06:02:29:46:7b:61:1a:57: 7d:7a:aa:32:21:ae:9f:17:a9:e8:91:97:11:98:26:3f:e6:b2: 8d:a8:82:81:ed:ad:47:f0:e1:06:c1:46:b4:b0:6a:86:e0:1e: af:0c:cc:c7:37:cb:a4:b0:1d:ce:0b:64:b4:7d:00:43:98:71: 78:8e:7d:ce:c9:a1:4e:81:7f:87:b7:b2:e2:cb:aa:83:31:78: 11:4c:77:b2:1b:b5:67:72:07:2e:ac:96:a7:19:6e:6f:df:d8: 73:6c:13:7d -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIURTVN6vLLmQwrGEcg+vLk4NqOSxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3 M0JGNUZCRjAeFw0yNjAxMjAwMjAyMTZaFw0yNzAxMTkwMjA3MTZaMDMxMTAvBgNV BAMTKEU1QzhEMTgyMURFMzNERTg4NUFGMzRDNDZGNjE1MENCRkVFREY4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXFU5tdl8Y06WhIPwkHnYeTHA RtMUeeNFj3+SJQOnaqAwp/4ar0rqZqBkDWlZjoEiAglabaoqkPKSXunmNOdzMPSc YXmhGFK2yHY7f6NnD2w5XJbMQ4StbMZM8SqhxEMmd7r16L6dfKDuu+IATCpzHB59 /n0UQZkbUY4BMz2X1SY+XAXvhSMfccnE/hbfTuakMZp9oR9RBwog5Os+WWztAdkt BOLH766wxsEBdPCuFHl0wHgQ9cyJwVxyu70HjwpNiMsY5kDvAWqWjl5uelYO1wxP f+jvWJPh8DLroS6NsKiLo9DpCJaFO2WtjQYW69bSoBBk0J14vMDojfbR4xKjAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU5cjRgh3jPeiFrzTEb2FQy/7t+CowHwYDVR0j BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2 MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5OTg0MDAzLzAvMzEzMDMzMmUz MTMxMzYyZTMxMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDMyMzIz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGd0lTANBgkqhkiG9w0BAQsFAAOCAQEAt5rvCRy4RO2lhuSB yDgSwStARt5iVnyIYSJOsgsEw0XcMO3x9uBMF9EYDsbEhrJphzKT1qnZXuZOZrwG SIZPnvZkUMu5p/l8etzc85UxO7MFZXemxeJK0Olh1bvMRgYPcTuDfUtLcmD/3KjJ MheW5dml6k3wqmdkjd4BI3kxg7OJUn2vch2M+nGz83H0PHDCGSmqrpiB2mebdAYC KUZ7YRpXfXqqMiGunxep6JGXEZgmP+ayjaiCge2tR/DhBsFGtLBqhuAerwzMxzfL pLAdzgtktH0AQ5hxeI59zsmhToF/h7ey4suqgzF4EUx3shu1Z3IHLqyWpxlub9/Y c2wTfQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:33:49 2026 by rpki-client