This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa File: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (raw, json) Hash identifier: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8= Subject key identifier: 98:C3:B0:47:DA:6C:2F:E8:66:E1:78:DE:68:E9:52:33:0B:15:D4:BB Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 59A6BB225C9C4EB1327643D6AFBA13BA39753376 Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa Signing time: Tue 20 Jan 2026 02:08:25 +0000 ROA not before: Tue 20 Jan 2026 02:03:25 +0000 ROA not after: Tue 19 Jan 2027 02:08:25 +0000 asID: 137720 IP address blocks: 103.120.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a6:bb:22:5c:9c:4e:b1:32:76:43:d6:af:ba:13:ba:39:75:33:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Jan 20 02:03:25 2026 GMT Not After : Jan 19 02:08:25 2027 GMT Subject: CN=98C3B047DA6C2FE866E178DE68E952330B15D4BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:f5:28:81:56:43:4e:a0:69:5f:ea:0d:a2: b1:59:75:be:32:d8:8f:ad:a0:c5:70:7d:9e:aa:9d: 56:ab:67:28:e9:4b:61:0b:1d:f2:a4:fc:88:eb:ac: 9a:49:c8:52:68:8b:eb:27:21:37:1d:9a:a1:4a:8e: 23:78:17:9d:c4:a3:3a:a3:14:cc:fb:71:ce:e7:71: e7:6b:34:49:c0:5e:29:26:5e:d9:fa:77:c7:4d:19: e0:ed:8f:eb:34:fb:91:69:e7:a7:f0:ad:e0:a2:18: 3b:4f:2b:71:da:a6:41:99:62:0f:0e:bf:53:15:8c: 85:1a:aa:62:9f:9c:8b:8c:0e:33:45:97:a4:74:5e: 4a:7f:8b:68:22:3b:eb:22:33:db:bf:33:a6:4a:df: 12:44:b6:41:c6:15:ce:1b:f7:9d:e4:c6:9c:5a:25: 1c:b5:38:4e:61:9d:2f:1e:a0:fe:11:ef:ff:02:81: bf:75:e7:2c:da:6c:9d:af:95:57:c2:ad:be:45:33: 1f:f5:50:84:b9:4a:2f:cb:05:51:79:ec:11:cb:ad: c9:b2:cf:e0:ed:f8:10:8f:98:8d:7c:8e:1b:be:d6: 9f:d8:2a:c0:78:41:70:6a:56:af:94:76:cf:1b:51: 36:d2:49:a8:b7:4a:dd:4a:42:b4:e6:62:45:f6:08: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C3:B0:47:DA:6C:2F:E8:66:E1:78:DE:68:E9:52:33:0B:15:D4:BB X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.96.0/24 Signature Algorithm: sha256WithRSAEncryption 70:62:3c:6b:46:3f:f0:34:0f:f0:48:a8:5f:f4:05:2c:c3:c6: 70:11:cc:ec:40:56:41:17:c8:4f:e8:02:e2:94:12:fe:eb:26: 68:8e:55:1e:0e:14:5d:d9:ff:fd:02:74:23:30:73:b9:13:3b: 5f:6f:03:6c:60:75:ab:a0:04:43:b1:a1:a4:e1:a1:79:52:87: f2:20:46:d1:cc:2d:96:09:0a:07:d3:5b:27:a4:f9:bd:31:3b: 33:18:f9:61:69:6e:b3:0a:c7:d7:f7:b2:7c:a4:1e:59:00:15: 1f:71:67:d6:5f:89:31:bf:06:93:c2:ee:3e:cc:58:de:60:7f: 7a:fc:8b:55:af:15:42:22:79:3a:56:09:67:d5:38:5e:e1:7a: 9b:ce:b0:3e:7d:df:09:b9:d6:5f:d1:09:00:9e:09:fa:7b:d6: 22:ff:be:89:e2:c8:84:18:44:b8:57:09:50:da:14:a7:8c:f2: a2:c0:52:c9:4c:62:9e:8b:e6:12:ec:67:f7:aa:5d:ab:d1:72: f7:90:d9:7f:e9:4b:a3:61:74:a4:31:53:cc:bb:23:35:7c:7b: 26:cd:50:b0:61:55:75:70:54:fc:82:ad:4b:da:2d:08:59:30: ac:a9:65:aa:9f:96:2d:7f:38:ee:a8:c1:cc:d4:4c:8f:dc:72: 30:8c:8e:dd -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWaa7IlycTrEydkPWr7oTujl1M3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjAxMjAwMjAzMjVaFw0yNzAxMTkwMjA4MjVaMDMxMTAvBgNV BAMTKDk4QzNCMDQ3REE2QzJGRTg2NkUxNzhERTY4RTk1MjMzMEIxNUQ0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnPUogVZDTqBpX+oNorFZdb4y 2I+toMVwfZ6qnVarZyjpS2ELHfKk/IjrrJpJyFJoi+snITcdmqFKjiN4F53Eozqj FMz7cc7ncedrNEnAXikmXtn6d8dNGeDtj+s0+5Fp56fwreCiGDtPK3HapkGZYg8O v1MVjIUaqmKfnIuMDjNFl6R0Xkp/i2giO+siM9u/M6ZK3xJEtkHGFc4b953kxpxa JRy1OE5hnS8eoP4R7/8Cgb915yzabJ2vlVfCrb5FMx/1UIS5Si/LBVF57BHLrcmy z+Dt+BCPmI18jhu+1p/YKsB4QXBqVq+Uds8bUTbSSai3St1KQrTmYkX2CGpTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmMOwR9psL+hm4XjeaOlSMwsV1LswHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC8zMTMwMzMyZTMx MzIzMDJlMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzIzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGd4YDANBgkqhkiG9w0BAQsFAAOCAQEAcGI8a0Y/8DQP8EioX/QF LMPGcBHM7EBWQRfIT+gC4pQS/usmaI5VHg4UXdn//QJ0IzBzuRM7X28DbGB1q6AE Q7GhpOGheVKH8iBG0cwtlgkKB9NbJ6T5vTE7Mxj5YWluswrH1/eyfKQeWQAVH3Fn 1l+JMb8Gk8LuPsxY3mB/evyLVa8VQiJ5OlYJZ9U4XuF6m86wPn3fCbnWX9EJAJ4J +nvWIv++ieLIhBhEuFcJUNoUp4zyosBSyUxinovmEuxn96pdq9Fy95DZf+lLo2F0 pDFTzLsjNXx7Js1QsGFVdXBU/IKtS9otCFkwrKllqp+WLX847qjBzNRMj9xyMIyO 3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:59 2026 by rpki-client