This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa File: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (raw, json) Hash identifier: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU= Subject key identifier: 71:F2:43:45:B7:4D:8E:08:56:39:A0:BF:89:A4:4C:87:49:FD:B5:BD Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Certificate serial: 2761A2C7EBD99AEDCB9B780BDD3B56FD20A6E049 Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa Signing time: Tue 20 Jan 2026 02:07:15 +0000 ROA not before: Tue 20 Jan 2026 02:02:15 +0000 ROA not after: Tue 19 Jan 2027 02:07:15 +0000 asID: 140224 IP address blocks: 103.116.151.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:61:a2:c7:eb:d9:9a:ed:cb:9b:78:0b:dd:3b:56:fd:20:a6:e0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Validity Not Before: Jan 20 02:02:15 2026 GMT Not After : Jan 19 02:07:15 2027 GMT Subject: CN=71F24345B74D8E085639A0BF89A44C8749FDB5BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:c5:ae:43:9e:32:32:7c:56:a7:18:3d:df: 18:48:f5:fc:c8:a9:ae:f2:aa:57:1f:d0:f2:eb:3e: a0:73:17:20:96:cf:cc:96:38:41:8a:e9:f9:69:17: 73:05:06:73:f3:b1:2e:1f:a6:3b:c4:38:10:45:ad: db:b4:94:51:7e:1f:d4:68:96:74:71:bd:e7:71:0e: f5:a8:85:62:99:66:3c:f0:46:ea:5e:aa:47:47:44: b6:08:ec:0a:e3:5c:ec:6e:84:4e:e2:43:d8:04:d1: e9:98:c0:b3:3a:21:92:b6:33:e9:d8:3d:8d:98:dc: 1f:3a:cd:61:5a:53:6c:df:89:35:f1:09:3b:27:d6: 81:e0:db:72:85:0d:fc:bb:5b:6f:ea:e7:46:cc:7d: 2c:d2:c4:34:d7:b2:b6:3a:8a:8f:0b:f9:80:5d:9c: a7:54:3a:6f:b6:32:e6:fb:90:e8:55:10:aa:da:c2: e1:e0:0c:5b:06:82:bb:92:db:77:73:6c:37:a5:65: 9e:86:35:50:25:6a:b3:cb:8e:d8:cb:bb:b8:84:73: ff:b4:12:dd:4d:2a:df:09:4b:ed:2e:2e:80:06:a7: 94:ea:d0:ab:b8:53:81:02:e4:35:95:8d:bd:3e:fe: 3e:b6:a5:5d:f8:f2:8d:a3:81:3c:c2:4c:32:09:85: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F2:43:45:B7:4D:8E:08:56:39:A0:BF:89:A4:4C:87:49:FD:B5:BD X509v3 Authority Key Identifier: keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.151.0/24 Signature Algorithm: sha256WithRSAEncryption cd:d8:27:8e:ed:f5:33:a0:7d:40:e3:92:33:63:bb:82:9c:be: d5:cb:af:73:e1:79:7d:e3:4b:53:83:9f:2c:c7:9f:80:eb:e1: f3:2b:a0:47:e7:83:61:37:76:c4:de:39:b5:50:c2:1d:16:03: cd:64:cd:3b:fb:11:51:c7:a9:36:43:63:b7:84:84:17:bf:5a: 90:f4:a9:b8:ca:82:1e:80:11:9d:2d:61:21:44:b2:9f:41:c0: 01:17:18:9e:8e:b8:d0:fc:10:1a:83:c3:11:67:8a:3f:22:98: 8b:90:ae:7c:d7:aa:60:43:4c:d9:29:ea:87:f6:f1:9a:b0:65: 0e:2d:b6:bc:1c:62:84:ae:64:41:03:3d:b1:ac:37:a9:f2:46: 16:d0:aa:ba:87:b2:d4:15:72:59:23:d4:51:99:5c:d6:b8:1a: ee:9c:78:c7:cf:b2:1b:a1:8d:35:21:69:ad:7c:04:e5:76:1e: 5e:66:49:96:8b:e4:e3:80:7b:21:6e:5f:96:e2:bf:18:c0:c4: 22:40:4e:2c:5a:c1:ab:3c:46:d2:7d:c2:60:a8:64:e7:45:5b: de:90:e0:8a:c7:ff:15:fd:c3:5c:df:30:14:93:c9:e0:c2:55: 95:6c:35:56:22:ab:00:04:71:5f:86:15:7a:84:3e:e1:71:c1: 86:8c:a3:1b -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUJ2Gix+vZmu3Lm3gL3TtW/SCm4EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3 M0JGNUZCRjAeFw0yNjAxMjAwMjAyMTVaFw0yNzAxMTkwMjA3MTVaMDMxMTAvBgNV BAMTKDcxRjI0MzQ1Qjc0RDhFMDg1NjM5QTBCRjg5QTQ0Qzg3NDlGREI1QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2MWuQ54yMnxWpxg93xhI9fzI qa7yqlcf0PLrPqBzFyCWz8yWOEGK6flpF3MFBnPzsS4fpjvEOBBFrdu0lFF+H9Ro lnRxvedxDvWohWKZZjzwRupeqkdHRLYI7ArjXOxuhE7iQ9gE0emYwLM6IZK2M+nY PY2Y3B86zWFaU2zfiTXxCTsn1oHg23KFDfy7W2/q50bMfSzSxDTXsrY6io8L+YBd nKdUOm+2Mub7kOhVEKrawuHgDFsGgruS23dzbDelZZ6GNVAlarPLjtjLu7iEc/+0 Et1NKt8JS+0uLoAGp5Tq0Ku4U4EC5DWVjb0+/j62pV348o2jgTzCTDIJhZ/tAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUcfJDRbdNjghWOaC/iaRMh0n9tb0wHwYDVR0j BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2 MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5OTg0MDAzLzAvMzEzMDMzMmUz MTMxMzYyZTMxMzUzMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMDMyMzIz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGd0lzANBgkqhkiG9w0BAQsFAAOCAQEAzdgnju31M6B9QOOS M2O7gpy+1cuvc+F5feNLU4OfLMefgOvh8yugR+eDYTd2xN45tVDCHRYDzWTNO/sR UcepNkNjt4SEF79akPSpuMqCHoARnS1hIUSyn0HAARcYno640PwQGoPDEWeKPyKY i5CufNeqYENM2Snqh/bxmrBlDi22vBxihK5kQQM9saw3qfJGFtCquoey1BVyWSPU UZlc1rga7px4x8+yG6GNNSFprXwE5XYeXmZJlovk44B7IW5fluK/GMDEIkBOLFrB qzxG0n3CYKhk50Vb3pDgisf/Ff3DXN8wFJPJ4MJVlWw1ViKrAARxX4YVeoQ+4XHB hoyjGw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:33:48 2026 by rpki-client