This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa File: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (raw, json) Hash identifier: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0= Subject key identifier: 39:35:D5:4E:14:12:DD:1C:C5:AD:00:AA:5A:A8:3E:69:22:E1:D8:77 Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 191B0DF24C2180A263E36D14E1C26B5B8C0D0E35 Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa Signing time: Tue 20 Jan 2026 02:19:12 +0000 ROA not before: Tue 20 Jan 2026 02:14:12 +0000 ROA not after: Tue 19 Jan 2027 02:19:12 +0000 asID: 137571 IP address blocks: 103.126.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1b:0d:f2:4c:21:80:a2:63:e3:6d:14:e1:c2:6b:5b:8c:0d:0e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Jan 20 02:14:12 2026 GMT Not After : Jan 19 02:19:12 2027 GMT Subject: CN=3935D54E1412DD1CC5AD00AA5AA83E6922E1D877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3c:0d:b2:8e:51:92:76:6c:52:dd:8e:99:72: 99:91:37:63:49:2c:16:40:60:9b:0e:d7:7f:76:4f: 7b:6f:b3:e5:9b:74:3f:2d:67:80:56:34:32:46:24: fb:2e:bf:8b:dd:eb:14:d8:19:3f:39:d1:d8:53:a5: e3:f7:37:46:e8:86:92:2e:53:5d:33:37:c3:6e:36: 09:20:4c:5d:11:f0:ff:09:ae:50:45:5d:5d:9b:b0: 63:a4:b7:c9:a9:c0:be:a0:e2:f9:bf:2d:6a:5b:56: de:b1:14:17:7a:bc:ad:e1:13:6a:11:09:03:ab:18: b1:41:c4:41:a0:ec:2a:a7:98:1d:86:e3:0e:4b:af: 47:28:7b:19:90:e2:0a:b1:df:40:21:58:60:1c:f4: 54:4f:4c:02:85:77:5d:ea:06:b4:a6:48:da:a6:b1: b5:b5:3a:5d:ca:81:ea:24:ce:1e:82:3b:b0:ec:69: 05:cb:b6:4b:a3:80:af:09:2a:b4:43:88:3f:ab:d6: d4:0a:15:38:33:c9:b8:8b:6f:92:78:73:76:3e:47: 93:28:4d:a0:a2:bd:a0:1f:23:f8:a0:bf:e3:f1:46: 58:08:b5:db:ac:3a:10:b8:11:05:a5:7f:a3:73:e5: 5e:24:bd:0f:32:50:b1:4b:80:11:c9:24:e3:40:8c: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:35:D5:4E:14:12:DD:1C:C5:AD:00:AA:5A:A8:3E:69:22:E1:D8:77 X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.102.0/24 Signature Algorithm: sha256WithRSAEncryption c6:94:77:b0:d2:82:df:21:9c:66:70:98:41:10:01:54:36:53: e8:70:f2:19:ee:c5:3c:25:df:ab:a2:9f:bf:3f:6b:10:6e:d6: a3:ed:3a:fa:71:a7:97:82:22:d1:d6:b3:74:57:77:10:5d:08: 5b:14:43:40:55:2e:55:ad:09:42:b0:19:2a:32:d8:1d:48:81: a5:45:47:3a:75:0c:05:78:35:b5:77:b3:90:df:c1:34:c8:f1: fa:90:69:d2:6e:82:29:32:92:40:78:04:be:58:67:ea:c4:5b: a8:95:e9:aa:39:c1:7d:d8:4d:bb:d7:16:7e:30:f0:5f:66:a2: 48:72:98:06:84:b4:a9:e8:d2:a6:51:ab:d0:17:5a:de:d7:58: 9f:bf:dc:b3:16:79:87:6f:b7:bb:27:59:63:93:af:5b:d3:04: e3:07:31:ca:ad:a8:4b:d1:91:d2:ca:0d:3e:cc:96:06:3f:f9: f3:a0:9e:54:5a:03:30:15:c6:86:78:31:72:81:39:44:4f:fc: 05:fb:cf:13:73:25:77:bd:ea:27:03:bc:9d:4d:fc:aa:bb:60: ba:4f:8b:38:33:65:28:f1:84:53:57:a4:d5:d9:64:4a:c0:bf: 6c:67:da:26:1a:44:c4:a4:22:a2:aa:d0:dd:87:ef:c1:30:2a: af:01:67:dc -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUGRsN8kwhgKJj420U4cJrW4wNDjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjAxMjAwMjE0MTJaFw0yNzAxMTkwMjE5MTJaMDMxMTAvBgNV BAMTKDM5MzVENTRFMTQxMkREMUNDNUFEMDBBQTVBQTgzRTY5MjJFMUQ4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVPA2yjlGSdmxS3Y6ZcpmRN2NJ LBZAYJsO1392T3tvs+WbdD8tZ4BWNDJGJPsuv4vd6xTYGT850dhTpeP3N0bohpIu U10zN8NuNgkgTF0R8P8JrlBFXV2bsGOkt8mpwL6g4vm/LWpbVt6xFBd6vK3hE2oR CQOrGLFBxEGg7CqnmB2G4w5Lr0coexmQ4gqx30AhWGAc9FRPTAKFd13qBrSmSNqm sbW1Ol3Kgeokzh6CO7DsaQXLtkujgK8JKrRDiD+r1tQKFTgzybiLb5J4c3Y+R5Mo TaCivaAfI/igv+PxRlgItdusOhC4EQWlf6Nz5V4kvQ8yULFLgBHJJONAjH1hAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUOTXVThQS3RzFrQCqWqg+aSLh2HcwHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxMzM0Nzg1LzAvMzEzMDMzMmUz MTMyMzYyZTMxMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM1Mzcz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGd+ZjANBgkqhkiG9w0BAQsFAAOCAQEAxpR3sNKC3yGcZnCY QRABVDZT6HDyGe7FPCXfq6Kfvz9rEG7Wo+06+nGnl4Ii0dazdFd3EF0IWxRDQFUu Va0JQrAZKjLYHUiBpUVHOnUMBXg1tXezkN/BNMjx+pBp0m6CKTKSQHgEvlhn6sRb qJXpqjnBfdhNu9cWfjDwX2aiSHKYBoS0qejSplGr0Bda3tdYn7/csxZ5h2+3uydZ Y5OvW9ME4wcxyq2oS9GR0soNPsyWBj/586CeVFoDMBXGhngxcoE5RE/8BfvPE3Ml d73qJwO8nU38qrtguk+LODNlKPGEU1ek1dlkSsC/bGfaJhpExKQioqrQ3YfvwTAq rwFn3A== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:28 2026 by rpki-client