This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa File: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (raw, json) Hash identifier: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs= Subject key identifier: 04:85:9A:D0:0C:F7:46:79:AE:8A:FB:81:E3:5D:7C:A2:AC:7B:49:93 Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Certificate serial: 29FF3403082F058C3E982F27AB17EF7408C7730C Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa Signing time: Tue 20 Jan 2026 02:07:16 +0000 ROA not before: Tue 20 Jan 2026 02:02:16 +0000 ROA not after: Tue 19 Jan 2027 02:07:16 +0000 asID: 18186 IP address blocks: 103.116.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ff:34:03:08:2f:05:8c:3e:98:2f:27:ab:17:ef:74:08:c7:73:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Validity Not Before: Jan 20 02:02:16 2026 GMT Not After : Jan 19 02:07:16 2027 GMT Subject: CN=04859AD00CF74679AE8AFB81E35D7CA2AC7B4993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:b5:b1:e2:ef:0e:26:ba:2c:47:5e:9d:15: eb:77:c4:a3:7e:4d:b6:63:24:8e:c1:ee:9a:51:d7: 4a:60:d6:8a:b5:20:d5:f2:51:91:d3:b6:7c:03:50: 42:09:c4:e0:73:79:72:a0:26:38:5d:c2:91:db:12: 5a:3d:cd:18:99:1a:ea:67:6c:2e:64:5e:56:08:7e: e3:3f:55:58:7f:27:f4:50:ee:72:d0:41:cc:48:c9: 55:0a:b9:10:16:b1:ea:bc:2a:ad:16:88:26:51:e1: 7d:68:c5:95:68:48:ab:7c:ea:88:1f:e9:eb:99:6c: bf:1b:2c:5d:95:22:0c:d2:7c:6c:8e:68:7e:d3:ea: fb:6c:b6:d1:ea:e4:f5:7b:75:a6:43:77:ba:6f:8d: a5:35:35:63:6e:88:d0:c5:4d:dd:f8:1a:e9:ce:24: bd:f8:4e:8a:b4:1c:a2:d4:1e:8a:49:a6:59:4b:56: 80:39:7a:0b:bd:5c:47:d3:f3:b8:3a:c6:fb:25:b0: c9:fe:8c:1c:79:9d:ce:23:0d:f7:8c:6a:28:b5:ee: fd:d2:51:5c:9f:dd:59:d7:77:53:49:f2:0f:ee:16: ca:9e:42:ae:dd:b1:7a:22:fc:60:0e:6a:cf:f4:3d: 2d:2a:ce:fd:31:48:b1:47:11:22:1c:2a:aa:5d:a8: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:85:9A:D0:0C:F7:46:79:AE:8A:FB:81:E3:5D:7C:A2:AC:7B:49:93 X509v3 Authority Key Identifier: keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.150.0/24 Signature Algorithm: sha256WithRSAEncryption 09:36:b4:64:a7:a0:df:4b:98:b6:7f:03:f1:8c:0e:cf:63:d9: 9e:4f:2f:98:d3:4a:61:4c:9d:70:0f:3c:a9:bf:31:e9:7f:94: 66:ae:56:70:4f:19:fe:b6:50:8a:3d:61:ef:07:c1:61:84:fd: 2b:7c:51:19:9e:33:53:7c:5e:8f:d2:75:c8:98:33:9d:0f:0e: fb:61:51:ef:d3:05:c2:44:db:44:ad:3c:df:6c:ed:7a:b0:c5: 54:26:50:7c:f9:c6:95:8b:a9:db:8d:ab:8a:70:d7:69:a6:a3: 14:18:eb:82:39:00:05:09:ed:41:8c:55:10:f7:f9:0f:48:09: b6:24:4d:73:9f:08:fe:72:f8:53:35:0e:bb:60:ff:69:ce:07: 00:cd:4f:b9:8b:f9:d2:48:e8:3e:21:27:bd:98:57:22:06:67: 9a:b9:cf:c4:70:8e:89:41:c9:c8:b1:6d:14:2f:ca:da:68:70: 29:92:ef:1b:de:bb:cc:e8:40:d1:b9:c6:b5:b2:db:21:90:c3: 88:6f:c9:07:cd:b8:78:c5:0f:59:f5:2f:58:73:52:f5:6f:72: 16:8d:62:c9:75:a5:c2:c2:c3:89:db:6b:06:a0:68:52:8c:36: e4:28:16:3a:a0:ba:89:6e:75:fd:13:fc:fd:3e:13:c7:4c:24: 8b:3e:20:a3 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKf80AwgvBYw+mC8nqxfvdAjHcwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3 M0JGNUZCRjAeFw0yNjAxMjAwMjAyMTZaFw0yNzAxMTkwMjA3MTZaMDMxMTAvBgNV BAMTKDA0ODU5QUQwMENGNzQ2NzlBRThBRkI4MUUzNUQ3Q0EyQUM3QjQ5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkrWx4u8OJrosR16dFet3xKN+ TbZjJI7B7ppR10pg1oq1INXyUZHTtnwDUEIJxOBzeXKgJjhdwpHbElo9zRiZGupn bC5kXlYIfuM/VVh/J/RQ7nLQQcxIyVUKuRAWseq8Kq0WiCZR4X1oxZVoSKt86ogf 6euZbL8bLF2VIgzSfGyOaH7T6vtsttHq5PV7daZDd7pvjaU1NWNuiNDFTd34GunO JL34Toq0HKLUHopJpllLVoA5egu9XEfT87g6xvslsMn+jBx5nc4jDfeMaii17v3S UVyf3VnXd1NJ8g/uFsqeQq7dsXoi/GAOas/0PS0qzv0xSLFHESIcKqpdqChZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUBIWa0Az3RnmuivuB4118oqx7SZMwHwYDVR0j BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2 MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5ODQwMDMvMC8zMTMwMzMyZTMx MzEzNjJlMzEzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzgzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGd0ljANBgkqhkiG9w0BAQsFAAOCAQEACTa0ZKeg30uYtn8D8YwO z2PZnk8vmNNKYUydcA88qb8x6X+UZq5WcE8Z/rZQij1h7wfBYYT9K3xRGZ4zU3xe j9J1yJgznQ8O+2FR79MFwkTbRK0832zterDFVCZQfPnGlYup242rinDXaaajFBjr gjkABQntQYxVEPf5D0gJtiRNc58I/nL4UzUOu2D/ac4HAM1PuYv50kjoPiEnvZhX IgZnmrnPxHCOiUHJyLFtFC/K2mhwKZLvG967zOhA0bnGtbLbIZDDiG/JB824eMUP WfUvWHNS9W9yFo1iyXWlwsLDidtrBqBoUow25CgWOqC6iW51/RP8/T4Tx0wkiz4g ow== -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:45 2026 by rpki-client