This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39322e302f32342d3234203d3e20313337343433.roa File: 3130332e3231382e39322e302f32342d3234203d3e20313337343433.roa (raw, json) Hash identifier: 8EKSgS0+gVnmNhEYarOr5cOeWIoBPw3M3fATI4XYr+g= Subject key identifier: F1:F8:50:FA:BD:D7:9A:A4:ED:A7:E7:46:79:9C:24:3B:AF:1C:28:25 Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 28F6267B4762BFED0B6BA193FA0D404225B20746 Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39322e302f32342d3234203d3e20313337343433.roa Signing time: Tue 20 Jan 2026 02:18:05 +0000 ROA not before: Tue 20 Jan 2026 02:13:05 +0000 ROA not after: Tue 19 Jan 2027 02:18:05 +0000 asID: 137443 IP address blocks: 103.218.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f6:26:7b:47:62:bf:ed:0b:6b:a1:93:fa:0d:40:42:25:b2:07:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Jan 20 02:13:05 2026 GMT Not After : Jan 19 02:18:05 2027 GMT Subject: CN=F1F850FABDD79AA4EDA7E746799C243BAF1C2825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:47:1c:a9:fe:81:b0:c7:8c:de:16:df:b0: 02:71:65:f0:01:26:09:45:a5:53:74:cf:4d:31:10: 4d:ba:c9:2c:00:89:fd:ff:6c:ca:37:f4:3e:db:e2: 45:3f:1f:b2:cc:14:41:9e:b0:ff:e6:3a:3e:aa:b2: 35:d7:df:71:f3:e4:93:c9:0b:84:a0:9c:19:e7:69: a1:ee:c6:31:1c:4c:a2:c2:07:ae:ae:76:4a:b8:7a: 92:a4:5c:d7:fc:de:7c:82:61:ff:4f:e5:f0:5b:3c: b8:38:83:dd:4d:ec:ec:9c:89:e8:20:76:14:3e:c2: a1:63:5d:5c:ec:2a:0d:1d:bf:95:a8:4f:1a:2d:7e: 4a:2c:8c:c7:e1:df:9d:71:28:dd:7e:af:ac:a6:54: 0f:05:2b:6f:15:e8:a7:7e:f9:b2:a9:d2:7c:6b:32: a1:f1:cc:bc:fc:f5:cf:1c:f8:8b:cf:ee:85:11:22: 7b:7a:ef:9e:d1:a1:aa:40:a2:60:44:ec:1b:56:45: 10:0b:3f:cd:63:a3:f4:a5:63:8b:69:98:ce:93:97: 3e:6d:40:c3:9c:36:c8:11:00:a8:4f:db:36:39:73: d8:1b:35:9d:6f:67:f2:86:38:41:c5:b5:09:43:f9: dc:a3:93:59:7b:58:be:8f:ef:d8:cc:ef:78:74:7f: 05:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F8:50:FA:BD:D7:9A:A4:ED:A7:E7:46:79:9C:24:3B:AF:1C:28:25 X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39322e302f32342d3234203d3e20313337343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.218.92.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:44:e3:f4:ce:59:25:bd:ee:0e:9e:df:f4:85:2d:e7:ee:f2: 59:37:91:b2:b0:86:8a:0a:bf:5a:85:a8:59:5f:a6:74:8b:f5: dd:fd:95:ed:a9:8d:58:27:44:d2:32:1a:a7:79:e5:08:be:a8: 2e:ac:34:54:af:e3:82:7e:c4:58:2d:ed:7c:ee:52:47:c8:b4: 8f:60:3b:e6:23:5d:ff:ad:cc:87:6a:16:67:6f:42:6f:8a:f5: ca:f3:6c:99:e5:ab:86:87:3e:45:6f:3f:73:ff:2e:54:49:bc: 25:1b:58:15:bd:14:cd:c9:44:d9:2b:6f:ef:c6:ca:c2:8e:d8: 14:0f:18:e5:eb:da:c5:f9:33:67:02:50:fe:7c:fe:f6:09:99: f4:4e:5b:81:be:70:ef:27:eb:9a:af:94:60:d1:38:df:d8:65: 65:58:21:2b:0d:68:0c:76:92:d3:aa:0c:5f:27:13:d8:c0:e2: 8a:96:62:44:5d:e8:b2:e0:40:3e:f1:08:e3:00:b0:2e:20:d1: c9:d7:5c:58:eb:45:e8:6e:99:f6:9d:37:a1:13:e0:0c:ef:61: f4:c6:99:b0:7e:6f:0d:23:ac:7a:cf:36:fa:1d:73:ac:cc:d6: 1f:01:e1:92:2a:c1:d5:c2:02:23:91:6e:47:d0:e7:0a:97:e1: 78:56:54:2c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKPYme0div+0La6GT+g1AQiWyB0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjAxMjAwMjEzMDVaFw0yNzAxMTkwMjE4MDVaMDMxMTAvBgNV BAMTKEYxRjg1MEZBQkRENzlBQTRFREE3RTc0Njc5OUMyNDNCQUYxQzI4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1M0ccqf6BsMeM3hbfsAJxZfAB JglFpVN0z00xEE26ySwAif3/bMo39D7b4kU/H7LMFEGesP/mOj6qsjXX33Hz5JPJ C4SgnBnnaaHuxjEcTKLCB66udkq4epKkXNf83nyCYf9P5fBbPLg4g91N7Oyciegg dhQ+wqFjXVzsKg0dv5WoTxotfkosjMfh351xKN1+r6ymVA8FK28V6Kd++bKp0nxr MqHxzLz89c8c+IvP7oURInt6757RoapAomBE7BtWRRALP81jo/SlY4tpmM6Tlz5t QMOcNsgRAKhP2zY5c9gbNZ1vZ/KGOEHFtQlD+dyjk1l7WL6P79jM73h0fwUfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU8fhQ+r3XmqTtp+dGeZwkO68cKCUwHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8zMTMwMzMyZTMy MzEzODJlMzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfaXDANBgkqhkiG9w0BAQsFAAOCAQEASkTj9M5ZJb3uDp7f9IUt 5+7yWTeRsrCGigq/WoWoWV+mdIv13f2V7amNWCdE0jIap3nlCL6oLqw0VK/jgn7E WC3tfO5SR8i0j2A75iNd/63Mh2oWZ29Cb4r1yvNsmeWrhoc+RW8/c/8uVEm8JRtY Fb0UzclE2Stv78bKwo7YFA8Y5evaxfkzZwJQ/nz+9gmZ9E5bgb5w7yfrmq+UYNE4 39hlZVghKw1oDHaS06oMXycT2MDiipZiRF3osuBAPvEI4wCwLiDRyddcWOtF6G6Z 9p03oRPgDO9h9MaZsH5vDSOses82+h1zrMzWHwHhkirB1cICI5FuR9DnCpfheFZU LA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:04 2026 by rpki-client