This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3133392e302e302f32332d3233203d3e20313339303231.roa File: 3130332e3133392e302e302f32332d3233203d3e20313339303231.roa (raw, json) Hash identifier: jX9Cq4xrftQkgKe8M8W18N3LiOowzvHISoWn9fhDKJs= Subject key identifier: 18:3D:A2:31:DE:46:C9:A2:91:8A:37:71:6C:B0:D1:9B:46:47:B6:4C Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 5E683ACE3C6EA58AD871C5EA26CBACCC8DE4C89A Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3133392e302e302f32332d3233203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:33 +0000 ROA not before: Tue 20 Jan 2026 02:16:33 +0000 ROA not after: Tue 19 Jan 2027 02:21:33 +0000 asID: 139021 IP address blocks: 103.139.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:68:3a:ce:3c:6e:a5:8a:d8:71:c5:ea:26:cb:ac:cc:8d:e4:c8:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:33 2026 GMT Not After : Jan 19 02:21:33 2027 GMT Subject: CN=183DA231DE46C9A2918A37716CB0D19B4647B64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:35:d7:f9:90:79:5a:c3:2b:7b:c2:c1:b0: 32:d2:85:5e:ee:68:4a:82:db:76:32:39:4b:84:cd: ed:fb:d5:d7:52:86:40:78:a3:d7:7a:0c:19:9e:66: 42:62:17:de:fd:90:5e:74:20:da:b1:a0:f1:02:34: f2:4c:74:88:8c:11:50:c2:c9:16:33:40:cd:8b:fe: 01:4c:4f:9a:f4:a9:3d:da:ed:af:0d:7c:e9:68:f9: 63:51:7a:18:0b:f4:54:a0:c2:00:c4:19:e0:6e:cb: 36:a3:60:11:14:37:72:3d:5b:0a:bc:44:7f:bd:cc: 3a:37:4a:d3:71:0c:b8:eb:2d:e4:2d:7b:82:87:3a: 75:04:56:4d:98:c3:cb:39:96:78:b4:4d:da:0f:a1: eb:89:82:60:c9:14:b0:35:1c:36:86:31:36:4d:cd: d1:85:c7:fb:26:21:dc:ec:3b:fb:3f:0c:00:9b:dc: c4:f3:13:cb:1a:5e:cc:03:62:e1:76:a6:6a:fc:b8: df:78:01:2d:dc:8d:25:da:d7:08:9b:ae:38:43:aa: 3c:01:e7:36:c1:85:f4:3e:e7:da:54:ad:fc:78:a1: 81:4e:67:ab:64:1e:3d:85:8f:1b:63:62:3d:bd:7f: db:20:9c:bc:9b:22:07:37:4b:0a:94:0e:10:bc:0c: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3D:A2:31:DE:46:C9:A2:91:8A:37:71:6C:B0:D1:9B:46:47:B6:4C X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3133392e302e302f32332d3233203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.0.0/23 Signature Algorithm: sha256WithRSAEncryption 85:19:60:c7:39:ed:59:dd:98:08:1b:fc:52:5f:1f:06:80:2c: d7:97:b1:99:b7:2a:42:56:42:5a:56:91:a8:0a:95:6c:0e:b4: 19:c4:23:fe:8d:9d:50:0d:d9:4b:ab:7b:38:e1:c6:56:86:c3: 63:2e:bc:17:c6:fd:be:9c:74:1d:d8:75:7e:44:c9:ae:7e:6b: 18:9c:b4:d3:00:3c:28:8f:21:95:66:e1:df:71:87:8f:de:a7: 0f:b7:1b:8b:f9:65:84:a9:9f:07:75:59:03:df:00:a3:a8:eb: 92:5f:44:3f:3a:95:52:fd:65:48:c4:14:72:c5:89:d6:ff:b6: 10:7e:51:94:c5:73:3b:ca:aa:bf:a4:c2:9f:a8:86:75:87:24: 6e:33:39:35:0c:62:74:ad:a9:44:9f:67:67:af:03:53:53:b3: e0:c6:fd:1f:9d:6e:92:57:d0:2e:50:45:20:78:2e:e5:d9:f9: 9b:d7:0e:71:2c:7f:85:e9:21:e9:45:08:be:e8:09:57:4f:f2: a4:67:41:59:16:c9:8e:81:e3:19:7b:cb:de:6a:b3:5c:fb:83: 5f:2d:50:16:7a:c1:4f:6a:46:c9:c5:2a:ce:93:94:ea:cf:fc: 13:80:d3:f4:d8:ab:a5:7a:5c:dd:50:2b:8a:f1:4f:77:93:49: 36:45:f0:08 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXmg6zjxupYrYccXqJsuszI3kyJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzNaFw0yNzAxMTkwMjIxMzNaMDMxMTAvBgNV BAMTKDE4M0RBMjMxREU0NkM5QTI5MThBMzc3MTZDQjBEMTlCNDY0N0I2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YTXX+ZB5WsMre8LBsDLShV7u aEqC23YyOUuEze371ddShkB4o9d6DBmeZkJiF979kF50INqxoPECNPJMdIiMEVDC yRYzQM2L/gFMT5r0qT3a7a8NfOlo+WNRehgL9FSgwgDEGeBuyzajYBEUN3I9Wwq8 RH+9zDo3StNxDLjrLeQte4KHOnUEVk2Yw8s5lni0TdoPoeuJgmDJFLA1HDaGMTZN zdGFx/smIdzsO/s/DACb3MTzE8saXswDYuF2pmr8uN94AS3cjSXa1wibrjhDqjwB 5zbBhfQ+59pUrfx4oYFOZ6tkHj2FjxtjYj29f9sgnLybIgc3SwqUDhC8DNG1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUGD2iMd5GyaKRijdxbLDRm0ZHtkwwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTQwMDMyMS8wLzMxMzAzMzJlMzEz MzM5MmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzOTMwMzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWeLADANBgkqhkiG9w0BAQsFAAOCAQEAhRlgxzntWd2YCBv8Ul8fBoAs 15exmbcqQlZCWlaRqAqVbA60GcQj/o2dUA3ZS6t7OOHGVobDYy68F8b9vpx0Hdh1 fkTJrn5rGJy00wA8KI8hlWbh33GHj96nD7cbi/llhKmfB3VZA98Ao6jrkl9EPzqV Uv1lSMQUcsWJ1v+2EH5RlMVzO8qqv6TCn6iGdYckbjM5NQxidK2pRJ9nZ68DU1Oz 4Mb9H51uklfQLlBFIHgu5dn5m9cOcSx/hekh6UUIvugJV0/ypGdBWRbJjoHjGXvL 3mqzXPuDXy1QFnrBT2pGycUqzpOU6s/8E4DT9NirpXpc3VArivFPd5NJNkXwCA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:03 2026 by rpki-client