This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39332e302f32342d3234203d3e20313337343433.roa File: 3130332e3231382e39332e302f32342d3234203d3e20313337343433.roa (raw, json) Hash identifier: 36IjhApk+lrNSl59xepON7qOQdcWPd2A44sgRugBZfM= Subject key identifier: 16:00:63:4F:C1:DC:62:FE:4F:02:26:4E:14:48:2F:C1:9E:8D:13:CE Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 2A40E76ABB6DCDD86E03B975BA084AC361449974 Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39332e302f32342d3234203d3e20313337343433.roa Signing time: Tue 20 Jan 2026 02:18:04 +0000 ROA not before: Tue 20 Jan 2026 02:13:04 +0000 ROA not after: Tue 19 Jan 2027 02:18:04 +0000 asID: 137443 IP address blocks: 103.218.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:40:e7:6a:bb:6d:cd:d8:6e:03:b9:75:ba:08:4a:c3:61:44:99:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Jan 20 02:13:04 2026 GMT Not After : Jan 19 02:18:04 2027 GMT Subject: CN=1600634FC1DC62FE4F02264E14482FC19E8D13CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:8a:f0:c1:54:04:2b:4d:31:ba:5c:51:49: 0f:0a:df:8e:80:cc:a0:c8:78:65:8b:94:84:c1:8f: e4:89:a7:db:12:df:6e:48:86:4e:5d:67:3e:a2:eb: 3f:54:5b:66:d2:7d:74:8f:fe:90:28:e5:4e:07:8d: ce:60:41:f3:9b:37:af:ef:b1:84:ba:ac:21:81:f7: dc:ef:b6:57:03:66:c9:5d:69:2c:e5:db:48:5a:39: 50:de:15:a4:33:75:ea:3a:97:ae:74:63:ea:e6:9f: 38:c9:ef:8f:7f:9a:f8:00:e3:3f:e3:cc:92:3e:ed: c4:a4:a7:da:80:8e:1f:be:09:03:59:54:d7:0d:5b: 02:cd:f1:1b:a4:7a:6f:75:a0:83:a2:3d:6a:e3:62: 7f:40:d6:81:06:c4:8b:98:cf:53:4f:cb:5b:f3:3e: 6e:9e:9d:1e:87:2f:d6:2c:53:49:87:a0:50:bd:99: 36:69:17:f8:27:97:1b:20:9e:af:f2:78:ad:1d:5a: 2a:39:17:a2:75:19:f7:73:3f:c0:5e:60:e7:26:12: 12:d8:9d:22:15:2c:e5:02:20:90:f1:56:50:38:7b: 69:09:f1:15:bd:27:a1:61:df:7e:56:ce:e9:ad:33: 62:11:1f:92:7f:21:55:65:54:05:16:42:21:4e:45: 0a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:00:63:4F:C1:DC:62:FE:4F:02:26:4E:14:48:2F:C1:9E:8D:13:CE X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39332e302f32342d3234203d3e20313337343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.218.93.0/24 Signature Algorithm: sha256WithRSAEncryption a3:21:56:0d:be:f3:26:7d:7e:c5:2f:fe:21:d2:f3:4a:fb:34: 02:34:e3:70:97:71:32:a0:b4:6d:3a:13:67:9a:81:c4:e5:52: b1:fb:ac:d9:28:49:3a:af:5e:a2:b8:bb:01:54:02:43:02:54: 49:0e:f7:d9:2a:9d:05:85:4c:a8:d6:ab:21:0b:62:0f:f5:39: ca:3f:7b:e2:e1:7e:28:c4:d7:fb:5d:03:9f:fb:30:b0:37:dd: 02:86:95:7b:e4:cf:35:41:a5:5f:d7:8d:da:3d:79:74:d4:41: 7f:ad:0a:85:46:bc:32:a3:9d:e8:f1:6e:ce:3c:54:ec:6c:4f: 47:55:90:63:0d:a2:d5:c5:af:3e:81:65:3c:8a:ef:14:ee:5d: 73:6e:b4:d0:48:73:fa:3f:c4:0f:ba:66:2a:a2:df:ba:ac:fc: df:99:d3:4d:06:5a:4e:03:96:90:d3:db:18:f5:9f:28:95:80: 97:20:22:18:d2:33:f2:bb:70:26:6a:38:25:b8:b1:f2:66:22: ff:1f:3b:2f:fa:31:63:64:49:47:7f:8f:c9:06:7a:94:6c:15: c7:70:dc:d2:5a:59:d1:77:b8:a5:19:57:50:73:9d:c6:ac:c7: 69:4c:32:e0:c0:7c:06:e5:89:0d:bc:ae:5d:e3:92:03:1b:9c: 89:b7:55:e3 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKkDnarttzdhuA7l1ughKw2FEmXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjAxMjAwMjEzMDRaFw0yNzAxMTkwMjE4MDRaMDMxMTAvBgNV BAMTKDE2MDA2MzRGQzFEQzYyRkU0RjAyMjY0RTE0NDgyRkMxOUU4RDEzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMm4rwwVQEK00xulxRSQ8K346A zKDIeGWLlITBj+SJp9sS325Ihk5dZz6i6z9UW2bSfXSP/pAo5U4Hjc5gQfObN6/v sYS6rCGB99zvtlcDZsldaSzl20haOVDeFaQzdeo6l650Y+rmnzjJ749/mvgA4z/j zJI+7cSkp9qAjh++CQNZVNcNWwLN8Rukem91oIOiPWrjYn9A1oEGxIuYz1NPy1vz Pm6enR6HL9YsU0mHoFC9mTZpF/gnlxsgnq/yeK0dWio5F6J1GfdzP8BeYOcmEhLY nSIVLOUCIJDxVlA4e2kJ8RW9J6Fh335WzumtM2IRH5J/IVVlVAUWQiFORQonAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUFgBjT8HcYv5PAiZOFEgvwZ6NE84wHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8zMTMwMzMyZTMy MzEzODJlMzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfaXTANBgkqhkiG9w0BAQsFAAOCAQEAoyFWDb7zJn1+xS/+IdLz Svs0AjTjcJdxMqC0bToTZ5qBxOVSsfus2ShJOq9eori7AVQCQwJUSQ732SqdBYVM qNarIQtiD/U5yj974uF+KMTX+10Dn/swsDfdAoaVe+TPNUGlX9eN2j15dNRBf60K hUa8MqOd6PFuzjxU7GxPR1WQYw2i1cWvPoFlPIrvFO5dc2600Ehz+j/ED7pmKqLf uqz835nTTQZaTgOWkNPbGPWfKJWAlyAiGNIz8rtwJmo4Jbix8mYi/x87L/oxY2RJ R3+PyQZ6lGwVx3Dc0lpZ0Xe4pRlXUHOdxqzHaUwy4MB8BuWJDbyuXeOSAxucibdV 4w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:09 2026 by rpki-client