This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa File: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (raw, json) Hash identifier: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w= Subject key identifier: 3E:BA:15:EE:70:F1:66:81:99:C9:A1:BE:C4:A2:0E:80:D5:16:E0:EA Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 24E0B43B6F4C64407B760A62E13DE6DB6322D64B Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa Signing time: Tue 20 Jan 2026 02:13:09 +0000 ROA not before: Tue 20 Jan 2026 02:08:09 +0000 ROA not after: Tue 19 Jan 2027 02:13:09 +0000 asID: 134765 IP address blocks: 103.20.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e0:b4:3b:6f:4c:64:40:7b:76:0a:62:e1:3d:e6:db:63:22:d6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Jan 20 02:08:09 2026 GMT Not After : Jan 19 02:13:09 2027 GMT Subject: CN=3EBA15EE70F1668199C9A1BEC4A20E80D516E0EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d2:a4:16:35:11:19:2a:e8:d8:99:b0:6f:33: 69:39:5f:b8:88:5f:25:72:8d:fc:c4:5a:67:34:5f: d8:d5:c1:e8:ca:d1:f5:8b:50:de:d6:55:a5:36:15: c2:af:28:c9:71:e6:17:c9:53:3f:14:54:e5:7d:60: 8d:72:12:5b:14:b6:f5:e7:1d:04:9d:03:d0:5f:11: 8d:89:99:71:e9:fa:29:a0:d6:d3:36:69:d1:d9:02: fc:00:d2:10:2e:45:b6:65:ec:c8:be:b1:a9:18:4f: 6b:cc:96:79:70:94:c5:0b:fb:ac:c8:6a:4d:67:2e: dc:f3:35:53:8e:ac:b4:85:f8:44:5d:8e:c6:06:63: 5a:14:4a:85:2b:ff:6c:82:a2:9f:21:f0:02:9f:9e: f4:fb:eb:0f:dc:0c:97:09:34:73:ec:c7:d0:d0:b7: a9:af:4a:be:57:0e:7b:90:5c:0e:3e:88:86:65:c2: 77:1e:be:fb:7a:db:4c:f1:ab:d5:e4:c7:e7:9f:6d: 24:22:6f:cb:d4:3b:7e:b5:06:ac:96:16:cd:cb:60: ea:68:d9:5f:d1:07:08:4b:8d:1e:5f:3e:85:4e:c3: ee:34:53:7c:d0:32:71:8a:ba:fa:38:a7:6a:00:32: a6:a2:49:82:a3:4d:68:eb:c8:95:36:4b:3b:c4:7a: c8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BA:15:EE:70:F1:66:81:99:C9:A1:BE:C4:A2:0E:80:D5:16:E0:EA X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.160.0/22 Signature Algorithm: sha256WithRSAEncryption 96:99:a0:26:f1:d2:2f:91:00:7e:e2:7a:57:03:2d:32:77:23: 48:d9:60:1b:e7:c2:89:69:d2:13:67:8a:88:c6:25:95:d3:ea: 64:b4:95:07:d8:c6:af:63:68:60:8a:45:56:de:89:48:3b:e7: 83:58:03:6d:b8:db:c8:b8:93:ff:2f:a5:40:45:23:8f:9d:69: f6:34:6f:16:28:41:15:54:ac:b1:c6:71:58:f4:f6:03:dd:f5: 4f:70:b9:f1:54:e8:4c:df:0e:bc:b0:71:b1:cc:78:b6:64:c7: 44:9e:50:26:24:0f:7d:14:66:f4:81:91:94:15:72:2a:fe:96: 1a:33:8c:27:e0:53:89:9f:39:70:2c:55:5e:76:5e:12:31:64: c0:d9:48:92:56:22:c9:49:46:80:36:5c:c1:9a:ff:b6:67:1b: 81:6a:2d:40:6b:66:58:23:ba:3a:53:e4:6e:25:aa:2e:9e:ec: 6f:9c:71:b4:d0:2d:bc:07:7f:0c:bc:fd:f3:17:77:0a:6c:38: db:df:88:a3:87:52:2f:f9:36:c7:7a:a1:97:f6:67:c1:5c:dc: 84:37:49:61:13:25:40:fb:c1:bb:0a:63:16:83:be:ec:91:f1: 4d:6f:c6:d2:2f:da:ba:bf:0c:d7:c6:ff:3a:e8:f3:0b:d9:5a: fd:d5:66:a9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJOC0O29MZEB7dgpi4T3m22Mi1kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjAxMjAwMjA4MDlaFw0yNzAxMTkwMjEzMDlaMDMxMTAvBgNV BAMTKDNFQkExNUVFNzBGMTY2ODE5OUM5QTFCRUM0QTIwRTgwRDUxNkUwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg0qQWNREZKujYmbBvM2k5X7iI XyVyjfzEWmc0X9jVwejK0fWLUN7WVaU2FcKvKMlx5hfJUz8UVOV9YI1yElsUtvXn HQSdA9BfEY2JmXHp+img1tM2adHZAvwA0hAuRbZl7Mi+sakYT2vMlnlwlMUL+6zI ak1nLtzzNVOOrLSF+ERdjsYGY1oUSoUr/2yCop8h8AKfnvT76w/cDJcJNHPsx9DQ t6mvSr5XDnuQXA4+iIZlwncevvt620zxq9Xkx+efbSQib8vUO361BqyWFs3LYOpo 2V/RBwhLjR5fPoVOw+40U3zQMnGKuvo4p2oAMqaiSYKjTWjryJU2SzvEesipAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUProV7nDxZoGZyaG+xKIOgNUW4OowHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC8zMTMwMzMyZTMy MzAyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNDM3MzYzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmcUoDANBgkqhkiG9w0BAQsFAAOCAQEAlpmgJvHSL5EAfuJ6VwMt MncjSNlgG+fCiWnSE2eKiMYlldPqZLSVB9jGr2NoYIpFVt6JSDvng1gDbbjbyLiT /y+lQEUjj51p9jRvFihBFVSsscZxWPT2A931T3C58VToTN8OvLBxscx4tmTHRJ5Q JiQPfRRm9IGRlBVyKv6WGjOMJ+BTiZ85cCxVXnZeEjFkwNlIklYiyUlGgDZcwZr/ tmcbgWotQGtmWCO6OlPkbiWqLp7sb5xxtNAtvAd/DLz98xd3Cmw429+Io4dSL/k2 x3qhl/ZnwVzchDdJYRMlQPvBuwpjFoO+7JHxTW/G0i/aur8M18b/OujzC9la/dVm qQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:28 2026 by rpki-client