This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa File: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (raw, json) Hash identifier: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ= Subject key identifier: 7C:F5:6F:52:96:85:45:20:67:80:BD:01:72:CC:4C:C3:BE:AB:4D:F4 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 4FD2E8035D7A29CF0EA62EB233618BA2F8696093 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:32 +0000 ROA not before: Tue 20 Jan 2026 02:16:32 +0000 ROA not after: Tue 19 Jan 2027 02:21:32 +0000 asID: 139021 IP address blocks: 103.108.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d2:e8:03:5d:7a:29:cf:0e:a6:2e:b2:33:61:8b:a2:f8:69:60:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:32 2026 GMT Not After : Jan 19 02:21:32 2027 GMT Subject: CN=7CF56F52968545206780BD0172CC4CC3BEAB4DF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2c:cb:42:5f:2c:27:5b:d1:04:5d:73:90:49: fe:af:0e:27:e1:43:e8:3a:60:8d:70:20:60:a8:21: 3c:92:40:e3:85:15:1a:b9:82:64:ef:60:a5:c0:64: 35:c0:2c:fd:a9:2d:58:86:e7:3d:f4:37:dc:16:71: 2c:11:f0:23:37:18:2a:95:bf:59:f8:19:83:e0:a2: 87:bc:5a:e6:d9:d4:f6:07:74:4c:2f:8f:5f:dc:a1: ce:4c:5e:07:58:69:6c:26:df:9e:73:7c:03:5d:b8: 63:e5:62:4a:5d:e5:2a:d6:9a:57:1f:0a:43:59:f9: fd:4d:b1:cd:23:f0:fe:2f:f0:cc:9b:06:cf:53:f2: 61:07:01:33:c0:35:3e:81:1f:1f:9c:1b:ff:f0:eb: b7:32:db:c6:69:ed:7c:65:46:05:7d:66:81:db:71: 67:57:32:c3:43:39:fa:06:34:5a:44:4d:0a:87:75: 91:85:90:5d:20:b6:cc:db:69:3d:f7:2e:46:22:a3: d3:0e:1a:a2:ba:9d:53:38:f8:b1:5d:09:cc:dc:e1: 23:e0:0a:77:63:d3:23:a5:4f:1a:bd:e9:84:84:24: c8:e7:18:db:8a:36:b4:98:a9:87:47:b9:b7:cf:bc: 32:58:32:ce:ea:f8:88:9d:7a:90:c4:f1:32:d2:f8: 05:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F5:6F:52:96:85:45:20:67:80:BD:01:72:CC:4C:C3:BE:AB:4D:F4 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.192.0/22 Signature Algorithm: sha256WithRSAEncryption 01:97:9d:20:9f:20:53:97:46:f7:3f:47:46:ae:83:ae:91:e4: 86:e9:16:7a:09:a2:83:80:4d:ab:0b:ae:84:85:1a:2f:ab:6e: a3:ef:39:7c:54:1f:f4:93:c8:f4:5c:0c:2b:cc:2b:7d:81:26: 44:c2:ac:38:28:e2:dc:aa:c5:a6:20:e4:dc:2a:33:ab:27:8b: 70:a7:17:db:8a:ea:d0:d7:dc:02:52:0d:44:bf:41:fd:d1:43: 0b:61:ff:78:d6:21:d7:ce:75:36:6d:e6:8b:5a:9d:13:52:9b: fe:40:75:46:1d:5e:ee:7d:31:17:db:0e:90:54:2c:db:90:46: 80:6e:d6:79:aa:d5:22:a0:e8:e6:85:58:91:8a:e7:13:f0:c1: ae:48:f0:05:fd:58:81:26:73:12:3c:0e:a7:ef:8a:0c:80:d5: 9b:b8:41:d2:8c:fd:2a:9b:56:7d:bc:d4:7d:08:a7:a2:a5:19: 4f:65:71:5f:2d:6b:8e:a7:04:d9:bc:ff:b6:40:83:61:a1:99: 34:7e:05:06:a1:e6:c7:db:6a:e4:a8:7f:4f:c1:9b:29:1e:98: f6:5b:aa:ab:9d:1b:62:0a:b0:1d:81:65:34:62:4b:b3:3f:85: 53:8d:77:a2:cf:8c:14:59:22:e2:ef:3a:5b:08:27:fd:cd:e1: c1:86:b3:e7 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUT9LoA116Kc8Opi6yM2GLovhpYJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzJaFw0yNzAxMTkwMjIxMzJaMDMxMTAvBgNV BAMTKDdDRjU2RjUyOTY4NTQ1MjA2NzgwQkQwMTcyQ0M0Q0MzQkVBQjRERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4LMtCXywnW9EEXXOQSf6vDifh Q+g6YI1wIGCoITySQOOFFRq5gmTvYKXAZDXALP2pLViG5z30N9wWcSwR8CM3GCqV v1n4GYPgooe8WubZ1PYHdEwvj1/coc5MXgdYaWwm355zfANduGPlYkpd5SrWmlcf CkNZ+f1Nsc0j8P4v8MybBs9T8mEHATPANT6BHx+cG//w67cy28Zp7XxlRgV9ZoHb cWdXMsNDOfoGNFpETQqHdZGFkF0gtszbaT33LkYio9MOGqK6nVM4+LFdCczc4SPg Cndj0yOlTxq96YSEJMjnGNuKNrSYqYdHubfPvDJYMs7q+IidepDE8TLS+AWnAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUfPVvUpaFRSBngL0BcsxMw76rTfQwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNDAwMzIxLzAvMzEzMDMzMmUz MTMwMzgyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzOTMwMzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmdswDANBgkqhkiG9w0BAQsFAAOCAQEAAZedIJ8gU5dG9z9H Rq6DrpHkhukWegmig4BNqwuuhIUaL6tuo+85fFQf9JPI9FwMK8wrfYEmRMKsOCji 3KrFpiDk3CozqyeLcKcX24rq0NfcAlINRL9B/dFDC2H/eNYh1851Nm3mi1qdE1Kb /kB1Rh1e7n0xF9sOkFQs25BGgG7WearVIqDo5oVYkYrnE/DBrkjwBf1YgSZzEjwO p++KDIDVm7hB0oz9KptWfbzUfQinoqUZT2VxXy1rjqcE2bz/tkCDYaGZNH4FBqHm x9tq5Kh/T8GbKR6Y9luqq50bYgqwHYFlNGJLsz+FU413os+MFFki4u86Wwgn/c3h wYaz5w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:35 2026 by rpki-client