This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa File: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (raw, json) Hash identifier: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA= Subject key identifier: 34:DB:A5:75:58:5E:B8:F1:19:B8:F9:60:1E:40:D8:46:79:98:AB:A8 Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 34704F2492E5303F4DE73D9B929591BA7997CE21 Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa Signing time: Tue 20 Jan 2026 02:19:12 +0000 ROA not before: Tue 20 Jan 2026 02:14:12 +0000 ROA not after: Tue 19 Jan 2027 02:19:12 +0000 asID: 137571 IP address blocks: 103.126.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:70:4f:24:92:e5:30:3f:4d:e7:3d:9b:92:95:91:ba:79:97:ce:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Jan 20 02:14:12 2026 GMT Not After : Jan 19 02:19:12 2027 GMT Subject: CN=34DBA575585EB8F119B8F9601E40D8467998ABA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:74:3e:ca:80:59:ac:28:63:2f:66:7e:0a:a8: 38:db:26:6b:29:45:61:9d:1c:98:a1:cf:b1:1a:bc: 16:cf:ca:29:63:28:98:a0:3c:d4:eb:1f:49:f6:71: b2:1c:d3:3a:0d:59:49:d8:9a:e9:50:a9:1e:ea:6b: a2:71:53:9f:61:5a:f3:0e:8f:5c:de:3e:67:1f:60: b9:5c:78:5e:d9:2f:0d:79:23:68:2a:ff:0c:6a:7d: 09:a5:38:08:f3:22:9d:c8:40:69:db:55:7c:9c:15: 6b:de:8c:ba:24:57:32:e9:66:b0:70:78:43:3e:b3: c5:2d:24:67:4e:aa:a5:e5:01:85:95:4d:a0:d6:7a: 0b:06:e3:9b:08:fe:00:0b:31:56:11:a2:e2:8e:f3: 90:5b:06:0f:61:e7:36:24:bc:0f:95:c5:ac:af:00: 61:81:2b:ac:ad:68:3c:ae:81:7a:e5:d0:2d:9b:1c: 09:5c:40:34:a0:2c:04:b9:2e:49:bc:57:30:53:a7: 2b:27:76:e5:95:4b:67:10:bb:53:96:d1:b2:80:77: ba:77:75:ae:b1:55:4b:b3:3f:86:11:85:fd:27:2c: 2c:90:58:55:4e:4d:99:81:e7:e4:b0:f1:b5:18:3f: 60:34:7f:20:28:9e:f8:d1:66:23:d6:bd:a2:39:52: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DB:A5:75:58:5E:B8:F1:19:B8:F9:60:1E:40:D8:46:79:98:AB:A8 X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.101.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:f2:25:10:1a:ce:67:f4:43:a9:f3:0b:67:71:ac:b8:6e:eb: 9f:ab:19:92:8c:3b:04:5c:a4:8f:2e:e0:fe:ff:89:fa:81:b7: d9:f8:b1:7c:34:da:b4:7e:f1:a5:86:38:1d:96:24:96:c8:c2: 99:02:ff:6c:7a:48:89:30:30:99:6f:f3:f3:2d:3b:0e:6d:f7: 4e:4b:da:29:cb:c3:0e:6b:e1:0c:9e:5a:d7:31:18:7b:d3:c3: bc:71:ed:40:7c:d7:e3:20:6c:0a:1c:c1:50:06:0c:62:db:40: 40:6d:4b:1c:2f:5f:9a:e1:fe:c0:d3:16:6e:2c:6d:9c:83:0c: 0c:1b:c5:42:65:c0:d8:b2:cf:82:fc:d5:ba:73:2c:48:73:fe: 6b:f7:6c:ef:e2:da:f0:c2:e2:25:9c:96:25:0f:83:54:87:c4: 7a:cd:e3:21:09:2a:5b:cd:bb:21:f1:8a:93:55:d4:79:0b:e0: d6:83:40:3a:3c:c9:52:79:2c:55:98:54:f0:ee:64:85:7f:8c: 9a:07:28:ce:ba:d4:9c:d8:6f:90:46:40:58:b3:86:6a:63:e7: 08:a0:63:94:80:8b:84:28:ed:b8:77:19:32:1c:fa:f9:33:56: 80:2e:4c:8c:8e:fa:01:47:f1:50:a7:09:93:f4:2e:f3:e4:47: cd:6f:d8:ee -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUNHBPJJLlMD9N5z2bkpWRunmXziEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjAxMjAwMjE0MTJaFw0yNzAxMTkwMjE5MTJaMDMxMTAvBgNV BAMTKDM0REJBNTc1NTg1RUI4RjExOUI4Rjk2MDFFNDBEODQ2Nzk5OEFCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/dD7KgFmsKGMvZn4KqDjbJmsp RWGdHJihz7EavBbPyiljKJigPNTrH0n2cbIc0zoNWUnYmulQqR7qa6JxU59hWvMO j1zePmcfYLlceF7ZLw15I2gq/wxqfQmlOAjzIp3IQGnbVXycFWvejLokVzLpZrBw eEM+s8UtJGdOqqXlAYWVTaDWegsG45sI/gALMVYRouKO85BbBg9h5zYkvA+Vxayv AGGBK6ytaDyugXrl0C2bHAlcQDSgLAS5Lkm8VzBTpysnduWVS2cQu1OW0bKAd7p3 da6xVUuzP4YRhf0nLCyQWFVOTZmB5+Sw8bUYP2A0fyAonvjRZiPWvaI5UuwRAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUNNuldVheuPEZuPlgHkDYRnmYq6gwHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxMzM0Nzg1LzAvMzEzMDMzMmUz MTMyMzYyZTMxMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM1Mzcz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGd+ZTANBgkqhkiG9w0BAQsFAAOCAQEAPvIlEBrOZ/RDqfML Z3GsuG7rn6sZkow7BFykjy7g/v+J+oG32fixfDTatH7xpYY4HZYklsjCmQL/bHpI iTAwmW/z8y07Dm33TkvaKcvDDmvhDJ5a1zEYe9PDvHHtQHzX4yBsChzBUAYMYttA QG1LHC9fmuH+wNMWbixtnIMMDBvFQmXA2LLPgvzVunMsSHP+a/ds7+La8MLiJZyW JQ+DVIfEes3jIQkqW827IfGKk1XUeQvg1oNAOjzJUnksVZhU8O5khX+MmgcozrrU nNhvkEZAWLOGamPnCKBjlICLhCjtuHcZMhz6+TNWgC5MjI76AUfxUKcJk/Qu8+RH zW/Y7g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:30 2026 by rpki-client