This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721531393/0/3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa File: 3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa (raw, json) Hash identifier: phf4Dfqb5M3Ykxs2j+sNy+Y1lZxL1CrzZ7fuUfc1kQM= Subject key identifier: 98:D5:BB:8C:AC:31:95:A4:EB:BC:16:34:E0:F2:E2:D2:E3:F7:69:C3 Certificate issuer: /CN=528FB7389148F9961BE07564A1BCC28DE1440954 Certificate serial: 61755E4C44906B2F175210AE61404DCB4C57C8AC Authority key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa Signing time: Tue 20 Jan 2026 02:12:03 +0000 ROA not before: Tue 20 Jan 2026 02:07:03 +0000 ROA not after: Tue 19 Jan 2027 02:12:03 +0000 asID: 152475 IP address blocks: 103.152.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:75:5e:4c:44:90:6b:2f:17:52:10:ae:61:40:4d:cb:4c:57:c8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Validity Not Before: Jan 20 02:07:03 2026 GMT Not After : Jan 19 02:12:03 2027 GMT Subject: CN=98D5BB8CAC3195A4EBBC1634E0F2E2D2E3F769C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d0:51:46:20:41:7e:3b:95:4c:04:c2:25:74: bc:20:d1:e5:f0:c6:28:6c:d4:15:4f:01:98:76:af: 13:b1:4b:bf:33:cd:42:48:03:16:d0:c4:50:fa:b5: d0:0f:12:93:11:9e:70:c2:4a:a0:5b:82:20:0d:e7: fe:88:94:50:7c:54:22:bc:46:cb:2f:07:14:45:77: a5:25:50:bf:4e:c8:f3:86:d5:ec:db:b8:5a:cd:16: 21:b2:37:01:03:4c:48:c8:ea:df:c7:91:8f:ec:7a: 4a:cc:16:6f:ef:d6:f7:2d:ab:82:f2:ab:3f:56:f1: a7:85:06:fb:5a:9a:a0:6c:6e:82:f5:f9:37:f0:42: c3:82:42:57:99:6d:86:54:3c:2d:4e:af:32:46:c9: fb:24:66:45:81:4a:4b:5c:5e:2f:c5:cc:9c:19:80: a9:9b:ab:b5:00:0c:b6:37:aa:c3:ab:04:e4:95:43: bf:16:30:b8:f3:53:09:9b:6a:27:9e:ad:29:8c:96: 0b:fe:1a:c9:cf:db:d9:90:92:65:93:b3:0c:70:81: 76:da:37:a4:55:5b:e6:fb:01:57:f7:6c:67:96:d0: 66:1f:f6:ae:83:0e:5e:b3:01:63:d2:98:10:49:53: 27:2e:aa:43:ff:20:4f:6a:bc:2b:ca:5d:62:d0:a7: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D5:BB:8C:AC:31:95:A4:EB:BC:16:34:E0:F2:E2:D2:E3:F7:69:C3 X509v3 Authority Key Identifier: keyid:52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.247.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c1:79:85:fb:15:70:64:f5:51:cd:c5:08:fc:05:92:93:24: 90:db:0d:da:8c:36:e6:f3:2f:b8:cc:c8:b8:b1:f8:9e:66:e6: f1:b3:bf:8c:74:8b:5b:18:70:05:c2:bb:0e:07:6d:48:7d:59: 14:64:ff:ef:bc:66:27:79:da:f0:17:b0:2d:15:7f:68:f8:5c: e0:7f:c4:99:94:68:23:5b:ec:bd:19:02:aa:d9:d7:73:63:52: 16:66:d6:f1:d5:ce:4a:9f:86:9c:97:6b:75:fa:e6:35:37:54: 2e:ba:97:c8:86:f3:bb:10:f1:47:1a:bb:6f:be:0b:e7:0e:f5: a5:54:bb:47:4a:b1:d9:ec:a1:9a:f1:cd:c1:34:97:53:e5:bd: 4f:e8:e2:82:03:d7:0a:c2:ea:e0:fc:c7:00:77:3a:62:ff:01: b2:b6:5b:e0:44:87:56:08:16:a8:81:be:93:3b:ee:3c:9a:5c: 43:57:b0:1a:7f:35:2a:e1:94:e1:89:f4:af:60:11:ac:0b:4f: 68:69:41:6b:af:51:1e:c7:bf:d8:c3:e6:6c:05:81:ed:73:54: 79:29:a0:a0:04:9b:af:4b:c5:b2:f6:49:8e:ca:0c:24:55:ca: 1d:cd:16:67:50:07:8a:98:74:76:59:03:a6:ad:ef:94:fb:76: 69:49:ee:d2 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUYXVeTESQay8XUhCuYUBNy0xXyKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERF MTQ0MDk1NDAeFw0yNjAxMjAwMjA3MDNaFw0yNzAxMTkwMjEyMDNaMDMxMTAvBgNV BAMTKDk4RDVCQjhDQUMzMTk1QTRFQkJDMTYzNEUwRjJFMkQyRTNGNzY5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk0FFGIEF+O5VMBMIldLwg0eXw xihs1BVPAZh2rxOxS78zzUJIAxbQxFD6tdAPEpMRnnDCSqBbgiAN5/6IlFB8VCK8 RssvBxRFd6UlUL9OyPOG1ezbuFrNFiGyNwEDTEjI6t/HkY/sekrMFm/v1vctq4Ly qz9W8aeFBvtamqBsboL1+TfwQsOCQleZbYZUPC1OrzJGyfskZkWBSktcXi/FzJwZ gKmbq7UADLY3qsOrBOSVQ78WMLjzUwmbaieerSmMlgv+GsnP29mQkmWTswxwgXba N6RVW+b7AVf3bGeW0GYf9q6DDl6zAWPSmBBJUycuqkP/IE9qvCvKXWLQp893AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUmNW7jKwxlaTrvBY04PLi0uP3acMwHwYDVR0j BBgwFoAUUo+3OJFI+ZYb4HVkobzCjeFECVQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTUzMTM5My8wLzUyOEZCNzM4OTE0OEY5OTYxQkUwNzU2NEExQkND MjhERTE0NDA5NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTMxMzkzLzAvMzEzMDMzMmUz MTM1MzIyZTMyMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM0Mzcz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeY9zANBgkqhkiG9w0BAQsFAAOCAQEAgsF5hfsVcGT1Uc3F CPwFkpMkkNsN2ow25vMvuMzIuLH4nmbm8bO/jHSLWxhwBcK7DgdtSH1ZFGT/77xm J3na8BewLRV/aPhc4H/EmZRoI1vsvRkCqtnXc2NSFmbW8dXOSp+GnJdrdfrmNTdU LrqXyIbzuxDxRxq7b74L5w71pVS7R0qx2eyhmvHNwTSXU+W9T+jiggPXCsLq4PzH AHc6Yv8BsrZb4ESHVggWqIG+kzvuPJpcQ1ewGn81KuGU4Yn0r2ARrAtPaGlBa69R Hse/2MPmbAWB7XNUeSmgoASbr0vFsvZJjsoMJFXKHc0WZ1AHiph0dlkDpq3vlPt2 aUnu0g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:40:40 2026 by rpki-client