This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e34332e3234302e302f32342d3234203d3e2034383038.roa File: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU= Subject key identifier: D5:B1:F1:0D:D1:CD:53:AF:4B:C9:48:40:6B:A4:63:51:8D:F7:E3:61 Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Certificate serial: 1F3B4F96F669A1B468E49E280F68A9839288B97C Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e34332e3234302e302f32342d3234203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:10:55 +0000 ROA not before: Tue 20 Jan 2026 02:05:55 +0000 ROA not after: Tue 19 Jan 2027 02:10:55 +0000 asID: 4808 IP address blocks: 103.43.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 22:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3b:4f:96:f6:69:a1:b4:68:e4:9e:28:0f:68:a9:83:92:88:b9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Validity Not Before: Jan 20 02:05:55 2026 GMT Not After : Jan 19 02:10:55 2027 GMT Subject: CN=D5B1F10DD1CD53AF4BC948406BA463518DF7E361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4e:b5:05:a0:c5:a5:18:6f:e8:15:0f:01:7e: d9:97:78:03:5a:49:91:81:8b:22:7e:4f:f9:5c:cb: 1b:a3:e7:10:11:f5:8d:58:09:b6:40:4e:ff:e3:3f: 74:b4:55:0b:fe:ff:08:cd:a9:08:c7:ba:2c:2a:d4: 33:9b:f5:9b:62:e1:af:37:c8:cd:bc:f7:e6:4d:9b: 53:87:56:09:f5:3a:37:1f:36:fe:b6:6a:03:d0:ac: 59:17:9b:80:96:cd:f2:d4:63:d5:fe:de:54:18:eb: 68:19:0f:37:32:af:5e:6e:f8:24:66:57:3e:89:b2: c9:13:09:8f:ac:dd:4b:3f:c0:0f:b7:7e:d5:68:e1: 23:28:b2:92:88:27:a1:99:79:69:c0:b9:7e:ab:36: 99:ea:02:13:95:cf:d3:93:7b:e0:37:4e:bf:1e:2b: 70:7b:f5:4c:05:67:08:75:db:68:63:55:54:4f:49: 33:8a:5a:fe:60:c7:7e:db:b8:76:ea:b8:29:29:5c: f0:e3:8d:95:55:ef:36:e4:9b:28:86:14:60:15:ad: e2:29:df:24:50:47:ae:cb:4f:0a:4a:bd:93:40:ae: a3:6a:80:ab:80:4d:f7:eb:3e:06:5f:60:1c:ff:cb: fd:ac:d0:5b:38:c3:c6:db:ec:62:0d:93:ef:16:50: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:F1:0D:D1:CD:53:AF:4B:C9:48:40:6B:A4:63:51:8D:F7:E3:61 X509v3 Authority Key Identifier: keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e34332e3234302e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.240.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:c0:fb:c9:c5:4b:6f:6d:eb:eb:53:2f:d4:60:ae:ac:61:94: f9:14:a2:f8:c0:1f:20:83:14:67:e4:53:0a:e8:3b:54:f5:96: ca:9f:f7:33:83:11:06:07:a8:ae:3e:ac:6c:56:a5:7a:d7:0f: 79:73:bf:99:e9:32:3b:1d:c1:12:43:55:35:9c:2f:9d:a2:fd: 1c:0a:95:b2:d5:62:45:ca:a0:ea:83:2e:34:7d:fc:6f:67:af: 97:3e:6b:e7:c2:a4:c0:48:38:fc:97:e6:c2:b4:a7:5e:19:56: fb:29:c8:e5:af:20:02:87:d3:70:73:47:d8:59:52:58:94:96: 4b:3d:a8:c3:4e:5a:e3:99:4d:8b:ef:60:d9:03:78:26:33:9f: b8:ba:f4:a9:bb:67:28:ab:13:a4:c9:79:fb:92:16:75:a1:59: 50:a4:84:78:68:35:20:eb:20:ac:95:42:d5:98:c9:82:52:ed: 26:88:ff:68:06:58:2b:fc:20:08:6d:45:84:b3:da:cf:6d:9d: d5:ce:c4:5d:fa:c5:f9:11:fb:25:eb:00:bd:6e:c7:4b:78:4c: ba:67:b4:e1:a7:26:bd:c5:e0:0d:00:76:87:6c:74:e9:11:af: a5:85:f4:a3:3f:e1:98:06:3c:61:c5:86:35:13:ee:db:d3:cf: d6:47:b6:63 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHztPlvZpobRo5J4oD2ipg5KIuXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez REIwMDQyNzAeFw0yNjAxMjAwMjA1NTVaFw0yNzAxMTkwMjEwNTVaMDMxMTAvBgNV BAMTKEQ1QjFGMTBERDFDRDUzQUY0QkM5NDg0MDZCQTQ2MzUxOERGN0UzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeTrUFoMWlGG/oFQ8BftmXeANa SZGBiyJ+T/lcyxuj5xAR9Y1YCbZATv/jP3S0VQv+/wjNqQjHuiwq1DOb9Zti4a83 yM289+ZNm1OHVgn1OjcfNv62agPQrFkXm4CWzfLUY9X+3lQY62gZDzcyr15u+CRm Vz6JsskTCY+s3Us/wA+3ftVo4SMospKIJ6GZeWnAuX6rNpnqAhOVz9OTe+A3Tr8e K3B79UwFZwh122hjVVRPSTOKWv5gx37buHbquCkpXPDjjZVV7zbkmyiGFGAVreIp 3yRQR67LTwpKvZNArqNqgKuATffrPgZfYBz/y/2s0Fs4w8bb7GINk+8WUHbjAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU1bHxDdHNU69LyUhAa6RjUY3342EwHwYDVR0j BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNjkwNjI2LzAvMzEzMDMzMmUzNDMz MmUzMjM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcr8DANBgkqhkiG9w0BAQsFAAOCAQEALcD7ycVLb23r61Mv1GCurGGU+RSi +MAfIIMUZ+RTCug7VPWWyp/3M4MRBgeorj6sbFaletcPeXO/mekyOx3BEkNVNZwv naL9HAqVstViRcqg6oMuNH38b2evlz5r58KkwEg4/JfmwrSnXhlW+ynI5a8gAofT cHNH2FlSWJSWSz2ow05a45lNi+9g2QN4JjOfuLr0qbtnKKsTpMl5+5IWdaFZUKSE eGg1IOsgrJVC1ZjJglLtJoj/aAZYK/wgCG1FhLPaz22d1c7EXfrF+RH7JesAvW7H S3hMume04acmvcXgDQB2h2x06RGvpYX0oz/hmAY8YcWGNRPu29PP1ke2Yw== -----END CERTIFICATE-----Generated at Fri Jan 23 16:29:23 2026 by rpki-client