This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa File: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (raw, json) Hash identifier: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw= Subject key identifier: C0:89:34:0E:ED:1D:D2:8F:64:3B:B4:9F:68:70:2D:B7:D5:05:58:0C Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Certificate serial: 392707A6A3B0299048D58FF0194422BBF35ED387 Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa Signing time: Tue 20 Jan 2026 02:07:16 +0000 ROA not before: Tue 20 Jan 2026 02:02:16 +0000 ROA not after: Tue 19 Jan 2027 02:07:16 +0000 asID: 18186 IP address blocks: 103.116.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:27:07:a6:a3:b0:29:90:48:d5:8f:f0:19:44:22:bb:f3:5e:d3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Validity Not Before: Jan 20 02:02:16 2026 GMT Not After : Jan 19 02:07:16 2027 GMT Subject: CN=C089340EED1DD28F643BB49F68702DB7D505580C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:3d:90:90:c2:26:04:99:26:ed:b4:2e:fd: 61:6d:cc:1d:cf:a4:3d:f0:3e:ba:d7:be:e9:dd:e9: d3:c8:98:bd:f7:c9:5d:f4:e2:55:a3:60:10:65:13: 89:21:66:4d:a6:b5:16:21:4e:81:96:36:8b:73:4b: a2:53:e8:5c:4c:f8:1e:9d:cb:a2:5f:f6:fe:ea:9c: 8f:a6:54:31:69:b4:32:28:6b:63:cd:8c:b7:69:e7: 33:e9:c6:31:13:21:7f:be:b0:bf:f5:9d:72:66:31: 25:ee:b0:55:c0:42:44:7f:b5:f4:01:9e:5c:09:71: fe:98:ce:6b:c4:7e:82:53:76:2c:ad:75:59:51:08: 99:af:15:4f:2b:3e:b8:7a:b8:0c:b5:87:48:02:ce: 9e:b0:12:d5:b2:cd:8a:6a:ab:81:cf:28:05:d0:c5: 16:8a:6c:6b:16:00:63:e9:36:e8:99:d4:3c:37:50: 52:5f:6b:c6:07:71:ef:c3:f6:94:98:c2:fe:70:51: 49:1e:91:84:ab:ff:5a:c9:6c:d8:f6:f1:31:84:07: 56:e6:d6:85:2b:d1:89:7e:e3:d7:59:80:0f:e0:05: cb:19:b8:0d:e2:89:a2:d3:c2:6a:11:0b:03:73:cd: f4:9c:d8:00:d2:8e:ad:57:4f:2f:5d:95:63:58:34: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:89:34:0E:ED:1D:D2:8F:64:3B:B4:9F:68:70:2D:B7:D5:05:58:0C X509v3 Authority Key Identifier: keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.149.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:42:f5:35:15:8a:00:f0:23:56:32:16:bd:14:f0:8c:ac:b6: 06:39:e4:d8:54:d7:24:3c:ff:b5:ca:09:64:ee:84:6d:4b:18: 62:f1:65:ac:0f:6e:c5:16:10:98:ec:f8:87:83:85:c3:fc:66: ef:f2:90:26:c5:02:ef:ea:03:bc:bf:e3:5b:b9:b2:04:07:31: 28:8c:a4:13:a3:4c:ad:38:2b:2e:fc:b4:50:73:c7:ce:a4:37: 26:22:04:04:c4:25:78:1c:68:4d:8a:10:e2:7a:f9:a8:47:53: c3:81:fc:3f:3d:65:79:60:b1:42:b3:70:3e:d5:00:16:64:38: 1c:f8:f5:4c:b2:2c:b6:d0:53:ad:f9:50:0b:bd:97:89:18:a3: 22:f4:6d:f4:81:7e:47:e1:db:19:4b:6a:d7:e8:81:97:0a:59: 3f:80:ff:05:7b:7c:1e:9a:63:70:39:b8:9b:22:03:bf:9f:7a: 5c:93:ae:0e:87:77:d6:0f:39:8c:48:40:b5:04:8f:15:5b:61: c6:76:73:17:00:6c:15:e0:63:e9:af:4b:9d:bb:39:44:a4:a5: a9:1d:48:d5:82:b5:6c:7f:a5:69:c3:90:94:10:1c:f4:1f:8a: 8c:20:bd:0b:a3:5c:50:e8:1f:6b:30:8c:f4:60:f5:0e:f6:b5: 7d:2e:db:4e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUOScHpqOwKZBI1Y/wGUQiu/Ne04cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3 M0JGNUZCRjAeFw0yNjAxMjAwMjAyMTZaFw0yNzAxMTkwMjA3MTZaMDMxMTAvBgNV BAMTKEMwODkzNDBFRUQxREQyOEY2NDNCQjQ5RjY4NzAyREI3RDUwNTU4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnz2QkMImBJkm7bQu/WFtzB3P pD3wPrrXvund6dPImL33yV304lWjYBBlE4khZk2mtRYhToGWNotzS6JT6FxM+B6d y6Jf9v7qnI+mVDFptDIoa2PNjLdp5zPpxjETIX++sL/1nXJmMSXusFXAQkR/tfQB nlwJcf6YzmvEfoJTdiytdVlRCJmvFU8rPrh6uAy1h0gCzp6wEtWyzYpqq4HPKAXQ xRaKbGsWAGPpNuiZ1Dw3UFJfa8YHce/D9pSYwv5wUUkekYSr/1rJbNj28TGEB1bm 1oUr0Yl+49dZgA/gBcsZuA3iiaLTwmoRCwNzzfSc2ADSjq1XTy9dlWNYNPq3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUwIk0Du0d0o9kO7SfaHAtt9UFWAwwHwYDVR0j BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2 MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5ODQwMDMvMC8zMTMwMzMyZTMx MzEzNjJlMzEzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzgzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGd0lTANBgkqhkiG9w0BAQsFAAOCAQEAmkL1NRWKAPAjVjIWvRTw jKy2Bjnk2FTXJDz/tcoJZO6EbUsYYvFlrA9uxRYQmOz4h4OFw/xm7/KQJsUC7+oD vL/jW7myBAcxKIykE6NMrTgrLvy0UHPHzqQ3JiIEBMQleBxoTYoQ4nr5qEdTw4H8 Pz1leWCxQrNwPtUAFmQ4HPj1TLIsttBTrflQC72XiRijIvRt9IF+R+HbGUtq1+iB lwpZP4D/BXt8HppjcDm4myIDv596XJOuDod31g85jEhAtQSPFVthxnZzFwBsFeBj 6a9Lnbs5RKSlqR1I1YK1bH+lacOQlBAc9B+KjCC9C6NcUOgfazCM9GD1Dva1fS7b Tg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:39 2026 by rpki-client