This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32332d3234203d3e2034383132.roa File: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (raw, json) Hash identifier: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI= Subject key identifier: 08:75:03:9A:5A:D8:7C:4F:41:1B:B1:F5:B0:97:E8:17:1E:B1:8C:F0 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 0CD20EF9D99A584E0F6E45D523E0168205630A39 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32332d3234203d3e2034383132.roa Signing time: Tue 20 Jan 2026 02:13:10 +0000 ROA not before: Tue 20 Jan 2026 02:08:10 +0000 ROA not after: Tue 19 Jan 2027 02:13:10 +0000 asID: 4812 IP address blocks: 103.96.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d2:0e:f9:d9:9a:58:4e:0f:6e:45:d5:23:e0:16:82:05:63:0a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Jan 20 02:08:10 2026 GMT Not After : Jan 19 02:13:10 2027 GMT Subject: CN=0875039A5AD87C4F411BB1F5B097E8171EB18CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:da:e4:ba:a4:e3:db:e9:72:8a:fc:bc:ef: 49:4b:a2:58:6f:c2:3c:08:bb:ce:4c:f4:0f:6e:29: bb:45:f8:c4:f7:c9:7b:35:e3:e3:69:dd:01:ac:d2: e2:48:ac:0a:a5:9a:27:53:c3:86:d7:73:a7:5a:db: ac:a3:4d:1f:b8:ca:7b:49:40:44:22:1a:b6:cd:1d: 69:18:0b:af:22:b0:a9:79:20:b5:77:5c:bd:91:99: 10:98:19:46:88:7b:53:44:df:7d:c6:e2:fc:2f:d5: e6:3b:1f:46:2f:83:af:62:e4:36:6a:de:2f:65:16: b1:e7:fe:ec:5e:d6:79:aa:82:05:34:af:cd:7f:ba: 63:3d:f1:6e:e9:f4:3e:9d:c3:75:e3:32:b2:89:2f: 93:b7:90:0f:0f:c3:9e:d2:25:88:14:1b:d9:88:e4: 35:9c:f4:05:a5:db:e1:7c:f5:ba:5b:05:dd:fb:69: c8:e0:9d:63:a3:59:16:cd:9b:30:77:20:df:fb:8c: b2:27:a7:a8:d5:1a:fa:f8:d9:c6:24:c6:9f:4b:10: 15:0a:b2:1e:6d:cf:2e:21:b9:83:26:83:a8:17:97: cf:b0:03:eb:84:cb:94:aa:42:cb:16:38:2d:30:ef: aa:db:06:e9:df:e5:63:84:72:fe:df:10:ef:f8:1a: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:75:03:9A:5A:D8:7C:4F:41:1B:B1:F5:B0:97:E8:17:1E:B1:8C:F0 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32332d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.224.0/23 Signature Algorithm: sha256WithRSAEncryption 77:95:09:d8:e6:81:6e:ef:b1:12:02:b5:1a:2b:01:ec:d0:5b: ac:56:83:de:24:7e:82:9b:bc:60:da:d4:b7:d1:c9:7d:d1:9f: 73:59:c0:8e:f6:fd:26:cd:f2:2d:4a:e2:04:7d:06:4c:7d:79: 00:1b:17:75:57:5f:ee:b4:96:d3:39:14:05:54:12:1d:98:0f: a8:95:eb:ab:97:57:6f:5e:5e:c7:2f:f2:1e:97:74:70:83:e2: 97:64:e6:92:fe:b8:f9:07:b0:75:a6:0a:0b:e5:2d:a3:44:d2: 14:a3:a3:ce:f1:98:7e:ca:9d:53:38:1b:63:e0:1f:2a:8d:7c: 57:43:be:38:6d:0a:f9:f9:4f:ea:1c:79:29:05:d0:b5:c5:27: 57:36:56:c5:83:07:04:d8:40:67:da:97:48:9b:2a:70:1e:d3: db:46:44:6e:52:23:05:46:cb:9c:ad:e9:16:05:68:9d:c3:7e: 4a:38:e9:fe:e9:ed:f8:4d:59:57:6f:c4:47:02:56:aa:c5:0a: 97:b2:e1:d6:6c:0e:4d:6d:06:92:e3:18:2e:b5:bb:7a:c2:47: 6a:33:e1:b6:1d:7f:26:1c:5c:75:2a:45:c5:07:b0:59:b4:53: 2f:f7:ab:26:b2:da:ed:07:20:51:c6:9e:ed:a2:a0:43:de:ca: 68:4c:4a:21 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDNIO+dmaWE4PbkXVI+AWggVjCjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjAxMjAwMjA4MTBaFw0yNzAxMTkwMjEzMTBaMDMxMTAvBgNV BAMTKDA4NzUwMzlBNUFEODdDNEY0MTFCQjFGNUIwOTdFODE3MUVCMThDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoNrkuqTj2+lyivy870lLolhv wjwIu85M9A9uKbtF+MT3yXs14+Np3QGs0uJIrAqlmidTw4bXc6da26yjTR+4yntJ QEQiGrbNHWkYC68isKl5ILV3XL2RmRCYGUaIe1NE333G4vwv1eY7H0Yvg69i5DZq 3i9lFrHn/uxe1nmqggU0r81/umM98W7p9D6dw3XjMrKJL5O3kA8Pw57SJYgUG9mI 5DWc9AWl2+F89bpbBd37acjgnWOjWRbNmzB3IN/7jLInp6jVGvr42cYkxp9LEBUK sh5tzy4huYMmg6gXl8+wA+uEy5SqQssWOC0w76rbBunf5WOEcv7fEO/4GhLNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUCHUDmlrYfE9BG7H1sJfoFx6xjPAwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxNjgzMDYxODQxOTIyLzAvMzEzMDMzMmUzOTM2 MmUzMjMyMzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdg4DANBgkqhkiG9w0BAQsFAAOCAQEAd5UJ2OaBbu+xEgK1GisB7NBbrFaD 3iR+gpu8YNrUt9HJfdGfc1nAjvb9Js3yLUriBH0GTH15ABsXdVdf7rSW0zkUBVQS HZgPqJXrq5dXb15exy/yHpd0cIPil2Tmkv64+QewdaYKC+Uto0TSFKOjzvGYfsqd UzgbY+AfKo18V0O+OG0K+flP6hx5KQXQtcUnVzZWxYMHBNhAZ9qXSJsqcB7T20ZE blIjBUbLnK3pFgVoncN+Sjjp/unt+E1ZV2/ERwJWqsUKl7Lh1mwOTW0GkuMYLrW7 esJHajPhth1/JhxcdSpFxQewWbRTL/erJrLa7QcgUcae7aKgQ97KaExKIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:07 2026 by rpki-client