This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061710850/0/3130332e3138362e3133362e302f32342d3234203d3e20313531343932.roa File: 3130332e3138362e3133362e302f32342d3234203d3e20313531343932.roa (raw, json) Hash identifier: InwrIECCt/d1uf5gUh70LzEcOK0KjnpOZ5M8ME7z0jE= Subject key identifier: 77:B7:F1:68:D9:AE:C3:8D:A4:1C:60:A2:4F:20:7B:D8:69:F4:44:5E Certificate issuer: /CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53 Certificate serial: 29A90358B7F521BED0FEEE37BFE1BC04E2777E65 Authority key identifier: DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/3130332e3138362e3133362e302f32342d3234203d3e20313531343932.roa Signing time: Tue 20 Jan 2026 02:08:27 +0000 ROA not before: Tue 20 Jan 2026 02:03:27 +0000 ROA not after: Tue 19 Jan 2027 02:08:27 +0000 asID: 151492 IP address blocks: 103.186.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a9:03:58:b7:f5:21:be:d0:fe:ee:37:bf:e1:bc:04:e2:77:7e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53 Validity Not Before: Jan 20 02:03:27 2026 GMT Not After : Jan 19 02:08:27 2027 GMT Subject: CN=77B7F168D9AEC38DA41C60A24F207BD869F4445E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:5b:ac:86:f6:39:5c:ee:a2:07:88:6f:b4: 2a:ca:60:0d:5b:67:b0:ab:6b:49:e3:41:a6:12:97: 42:34:9e:03:24:24:63:ca:d2:5a:cd:8f:65:61:11: 4c:54:dc:0d:48:21:ad:49:0b:32:09:67:c3:03:33: 58:96:5b:95:54:11:f4:0d:62:66:7d:c8:12:a5:7f: b0:57:32:69:1a:ba:98:fb:53:44:c0:24:f7:ed:cd: a1:af:d9:23:b8:29:37:60:39:27:e3:07:0b:88:77: 8e:6c:f6:46:79:f5:0f:ed:ac:6f:d9:5b:26:67:5c: 9e:06:4f:d3:df:4b:e7:85:79:18:61:34:a9:ad:49: 6e:27:70:e8:82:dc:b3:fb:c2:f1:90:76:8b:5c:7c: a4:d6:40:61:de:0b:81:e9:4e:d8:d5:63:e9:44:b8: 9d:99:63:33:73:8d:05:a9:4d:d0:4c:88:61:66:37: 96:b0:0d:d3:20:14:be:bb:a6:0b:3b:38:f9:17:8a: 00:cb:39:2e:c8:d4:f3:8e:9e:f8:46:55:79:94:12: cb:74:4e:d9:bd:27:24:83:a9:57:f9:ef:71:e8:db: db:79:10:a5:e1:ed:54:41:9a:88:e3:a5:d7:5b:bb: b5:61:1f:d2:8f:7b:ec:93:b1:f6:f3:32:bd:93:24: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B7:F1:68:D9:AE:C3:8D:A4:1C:60:A2:4F:20:7B:D8:69:F4:44:5E X509v3 Authority Key Identifier: keyid:DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/3130332e3138362e3133362e302f32342d3234203d3e20313531343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.136.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:7f:d2:78:5c:4a:be:51:bf:3e:25:ef:4e:7f:57:97:f0:e7: 4f:9a:1a:07:4b:24:3b:1d:3f:8d:9d:c7:8c:3b:6f:2e:54:29: 79:21:17:49:c4:f8:7b:2f:c7:6b:97:ad:a9:99:76:02:db:9a: 28:64:a4:08:5b:5f:7f:a0:17:d3:1d:e9:2d:b6:cf:fa:15:45: aa:ae:c9:a2:50:2e:14:44:f8:73:7e:ad:94:54:49:f8:82:02: 6d:d8:e7:0f:14:30:e2:69:85:44:b5:7e:67:cc:e6:05:83:10: a5:4e:2c:67:37:d7:f4:72:ab:1b:ee:ff:fb:74:36:dd:50:50: 85:b0:c3:d2:df:ad:b2:ff:be:c1:ba:cc:79:39:d4:4b:22:d5: 0e:bd:4a:0d:84:f5:f9:71:b8:cf:f4:78:40:af:64:55:3a:2a: 39:05:ba:2d:5b:d7:17:b4:17:d8:e9:be:55:66:ba:1a:51:5e: 37:e3:12:44:02:20:4b:cc:8f:04:55:a1:f2:9e:08:ac:19:55: 80:6a:43:27:cd:00:3c:04:bf:e8:f8:c4:c7:89:66:88:f8:83: 65:c3:3b:38:7e:5b:5f:8c:19:2a:8a:2a:0f:5b:fc:71:5f:f0: 89:d4:f0:88:57:76:02:fa:15:2c:8a:03:fe:af:39:68:77:5d: 04:ca:fc:36 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUKakDWLf1Ib7Q/u43v+G8BOJ3fmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDNkMzMTk5NEJBMjkyNDREMkRFRTFGODcyMDhGNDE2 RUVGN0U1MzAeFw0yNjAxMjAwMjAzMjdaFw0yNzAxMTkwMjA4MjdaMDMxMTAvBgNV BAMTKDc3QjdGMTY4RDlBRUMzOERBNDFDNjBBMjRGMjA3QkQ4NjlGNDQ0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPp1ushvY5XO6iB4hvtCrKYA1b Z7Cra0njQaYSl0I0ngMkJGPK0lrNj2VhEUxU3A1IIa1JCzIJZ8MDM1iWW5VUEfQN YmZ9yBKlf7BXMmkaupj7U0TAJPftzaGv2SO4KTdgOSfjBwuId45s9kZ59Q/trG/Z WyZnXJ4GT9PfS+eFeRhhNKmtSW4ncOiC3LP7wvGQdotcfKTWQGHeC4HpTtjVY+lE uJ2ZYzNzjQWpTdBMiGFmN5awDdMgFL67pgs7OPkXigDLOS7I1POOnvhGVXmUEst0 Ttm9JySDqVf573Ho29t5EKXh7VRBmojjpddbu7VhH9KPe+yTsfbzMr2TJMPLAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUd7fxaNmuw42kHGCiTyB72Gn0RF4wHwYDVR0j BBgwFoAU3cbDGZS6KSRNLe4fhyCPQW7vflMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTcxMDg1MC8wL0REQzZDMzE5OTRCQTI5MjQ0RDJERUUxRjg3MjA4 RjQxNkVFRjdFNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERDNkMzMTk5NEJBMjkyNDREMkRFRTFGODcyMDhGNDE2RUVGN0U1My5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxNjgzMDYxNzEwODUwLzAvMzEzMDMzMmUz MTM4MzYyZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTM0Mzkz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGe6iDANBgkqhkiG9w0BAQsFAAOCAQEAT3/SeFxKvlG/PiXv Tn9Xl/DnT5oaB0skOx0/jZ3HjDtvLlQpeSEXScT4ey/Ha5etqZl2AtuaKGSkCFtf f6AX0x3pLbbP+hVFqq7JolAuFET4c36tlFRJ+IICbdjnDxQw4mmFRLV+Z8zmBYMQ pU4sZzfX9HKrG+7/+3Q23VBQhbDD0t+tsv++wbrMeTnUSyLVDr1KDYT1+XG4z/R4 QK9kVToqOQW6LVvXF7QX2Om+VWa6GlFeN+MSRAIgS8yPBFWh8p4IrBlVgGpDJ80A PAS/6PjEx4lmiPiDZcM7OH5bX4wZKooqD1v8cV/widTwiFd2AvoVLIoD/q85aHdd BMr8Ng== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:27 2026 by rpki-client