This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/3130332e32392e32342e302f32332d3234203d3e203338333738.roa File: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (raw, json) Hash identifier: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w= Subject key identifier: 1F:F4:B0:F4:0A:33:D9:C5:8A:D4:4A:96:8D:96:1E:0E:1C:62:69:2E Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Certificate serial: 4A850B7694C1A286259506E153A504B39E768E71 Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/3130332e32392e32342e302f32332d3234203d3e203338333738.roa Signing time: Mon 19 Jan 2026 10:08:31 +0000 ROA not before: Mon 19 Jan 2026 10:03:31 +0000 ROA not after: Mon 18 Jan 2027 10:08:31 +0000 asID: 38378 IP address blocks: 103.29.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 11:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:85:0b:76:94:c1:a2:86:25:95:06:e1:53:a5:04:b3:9e:76:8e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Validity Not Before: Jan 19 10:03:31 2026 GMT Not After : Jan 18 10:08:31 2027 GMT Subject: CN=1FF4B0F40A33D9C58AD44A968D961E0E1C62692E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:d7:0a:2b:a2:5b:57:ce:da:e1:cb:ca:63: 5b:0b:c3:f4:76:9a:7f:a2:dd:99:23:88:16:03:00: 1b:ed:c9:ba:e0:0f:07:11:91:d7:a1:92:29:86:27: 71:34:ea:e2:f1:ff:0e:e3:c9:36:88:43:2d:a6:73: 95:38:b7:d7:5d:37:a1:80:7c:31:e4:4b:0a:02:91: 57:35:cf:d3:40:4b:01:50:38:84:0a:df:a8:76:f3: e9:b0:49:f2:00:6e:00:00:50:6e:fa:71:47:78:94: 87:83:22:1e:e8:62:cd:99:90:19:fc:4e:6a:7c:bc: d2:21:3d:26:33:a5:a5:53:e9:2b:64:54:7f:2c:ba: 48:b1:58:7f:51:29:b2:f1:d2:06:fb:85:ee:7d:fe: 99:5d:d2:51:1d:e4:ca:60:fa:17:98:0b:1d:f0:76: 9d:6a:8d:e6:78:47:bf:9f:84:6a:38:f2:f1:c4:82: 6b:b2:38:27:99:65:46:e2:87:75:95:e7:4b:dd:81: 76:1d:32:aa:c9:37:a0:31:26:d1:eb:71:88:ab:60: d2:d2:5f:83:31:66:9d:f0:1c:8d:89:2f:15:60:e9: 0a:da:39:c3:06:35:f1:35:10:b5:8c:90:6a:8b:26: 7a:c6:17:e6:77:ad:f4:00:81:06:95:14:5e:e6:c8: 70:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:B0:F4:0A:33:D9:C5:8A:D4:4A:96:8D:96:1E:0E:1C:62:69:2E X509v3 Authority Key Identifier: keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/3130332e32392e32342e302f32332d3234203d3e203338333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.24.0/23 Signature Algorithm: sha256WithRSAEncryption 04:66:38:86:22:a2:8e:24:e0:f5:5b:a9:42:c4:5d:55:f2:53: 6d:0d:1f:e7:cf:b6:f7:39:a4:d5:17:07:9a:08:a1:5c:d8:8f: 69:23:13:89:78:45:a6:a2:11:d0:d4:4a:ba:fe:fb:e6:fb:f3: 75:a5:63:83:57:16:f7:5b:9e:ec:79:11:32:c3:85:ab:01:04: 97:d5:ed:2a:ee:29:b4:e7:87:b2:ae:ef:2d:2f:29:20:8f:22: b3:7a:e0:b1:5a:31:8a:72:a8:a6:c8:04:97:73:23:bc:5a:b3: c4:2c:e9:4d:f3:ce:06:24:23:81:46:4e:3c:a3:80:8a:08:da: e5:82:58:cb:36:7e:bf:5a:eb:2b:01:0c:05:a0:3f:50:bf:2f: b4:53:ef:05:0d:b7:ac:5e:49:4a:75:a2:85:9e:9a:b4:0d:d3: cc:4c:95:8c:08:82:39:d4:84:10:a9:55:b9:87:69:bf:90:99: 6e:18:66:cc:46:06:71:cc:e4:1d:77:78:19:f7:10:6c:03:53: eb:7e:a3:0c:8b:9c:4e:18:63:97:63:d2:3a:ee:31:7f:c8:aa: ec:19:4d:8d:ac:2f:a9:9f:b6:f5:3d:dc:e4:04:71:e7:85:29: 8e:bb:f2:b4:1c:98:36:5f:6c:a0:bd:a3:4b:72:b3:25:2a:5c: 15:6d:76:03 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUSoULdpTBooYllQbhU6UEs552jnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMw MURBMkVGMTAeFw0yNjAxMTkxMDAzMzFaFw0yNzAxMTgxMDA4MzFaMDMxMTAvBgNV BAMTKDFGRjRCMEY0MEEzM0Q5QzU4QUQ0NEE5NjhEOTYxRTBFMUM2MjY5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5tcKK6JbV87a4cvKY1sLw/R2 mn+i3ZkjiBYDABvtybrgDwcRkdehkimGJ3E06uLx/w7jyTaIQy2mc5U4t9ddN6GA fDHkSwoCkVc1z9NASwFQOIQK36h28+mwSfIAbgAAUG76cUd4lIeDIh7oYs2ZkBn8 Tmp8vNIhPSYzpaVT6StkVH8sukixWH9RKbLx0gb7he59/pld0lEd5Mpg+heYCx3w dp1qjeZ4R7+fhGo48vHEgmuyOCeZZUbih3WV50vdgXYdMqrJN6AxJtHrcYirYNLS X4MxZp3wHI2JLxVg6QraOcMGNfE1ELWMkGqLJnrGF+Z3rfQAgQaVFF7myHDtAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUH/Sw9Aoz2cWK1EqWjZYeDhxiaS4wHwYDVR0j BBgwFoAUfVDr3aAkJDZSRfGafflYwwHaLvEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3MzE2NjQzMDAyNzc3OS8wLzdENTBFQkREQTAyNDI0MzY1MjQ1RjE5QTdERjk1 OEMzMDFEQTJFRjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMwMURBMkVGMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTczMTY2NDMwMDI3Nzc5LzAvMzEzMDMzMmUzMjM5 MmUzMjM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzMzODMzMzczOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWcdGDANBgkqhkiG9w0BAQsFAAOCAQEABGY4hiKijiTg9VupQsRdVfJTbQ0f 58+29zmk1RcHmgihXNiPaSMTiXhFpqIR0NRKuv775vvzdaVjg1cW91ue7HkRMsOF qwEEl9XtKu4ptOeHsq7vLS8pII8is3rgsVoxinKopsgEl3MjvFqzxCzpTfPOBiQj gUZOPKOAigja5YJYyzZ+v1rrKwEMBaA/UL8vtFPvBQ23rF5JSnWihZ6atA3TzEyV jAiCOdSEEKlVuYdpv5CZbhhmzEYGcczkHXd4GfcQbANT636jDIucThhjl2PSOu4x f8iq7BlNjawvqZ+29T3c5ARx54UpjrvytByYNl9soL2jS3KzJSpcFW12Aw== -----END CERTIFICATE-----Generated at Mon Jan 19 18:26:08 2026 by rpki-client