This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e33322e302f31392d3234203d3e203234313437.roa File: 3230332e38362e33322e302f31392d3234203d3e203234313437.roa (raw, json) Hash identifier: XDCVULdB42agXinP9bNu7bR26p/WgU+Ydt0+EBrlVrI= Subject key identifier: BB:5C:43:0F:F3:DD:A3:78:21:D5:5F:50:6C:9A:46:65:51:67:17:60 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 1FC9885997DF899749B80E2348CA0D11A779C661 Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e33322e302f31392d3234203d3e203234313437.roa Signing time: Tue 20 Jan 2026 02:25:02 +0000 ROA not before: Tue 20 Jan 2026 02:20:02 +0000 ROA not after: Tue 19 Jan 2027 02:25:02 +0000 asID: 24147 IP address blocks: 203.86.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c9:88:59:97:df:89:97:49:b8:0e:23:48:ca:0d:11:a7:79:c6:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:02 2026 GMT Not After : Jan 19 02:25:02 2027 GMT Subject: CN=BB5C430FF3DDA37821D55F506C9A466551671760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:db:67:89:10:71:b8:da:91:74:14:30:61: ad:44:c7:1e:2a:b7:7a:da:10:d1:db:b1:84:1f:ff: 49:84:ed:5d:9c:95:98:98:2a:c8:e7:11:76:8a:60: d5:b1:a4:3d:88:1a:90:6f:be:9e:78:26:d3:d7:ff: d7:3f:e2:a7:eb:37:0a:a4:91:85:e9:8d:d4:55:99: 1e:22:fb:75:c5:9f:11:a7:4a:10:4c:41:e9:43:1e: e1:3b:ea:1b:e3:f4:e7:a0:be:34:53:ac:25:1e:79: e8:9d:8e:8f:b2:c1:23:f8:18:db:df:99:ab:61:b4: ba:74:b1:f2:35:03:9e:b2:ee:b9:d8:50:27:3e:97: 80:3e:66:ca:64:63:df:2e:07:93:63:e4:13:6f:5f: 13:42:ed:60:6f:50:04:97:ef:46:45:9f:5b:e6:7b: 97:9c:17:ba:a6:69:12:33:88:5d:17:2f:76:50:a2: 79:4a:ff:3e:2e:fa:d0:6d:ee:4f:e0:b1:8b:a6:66: af:e2:14:70:d4:d3:d2:21:c0:e1:ba:03:49:54:c5: 76:ac:4e:ec:b3:1d:73:83:bc:58:01:3d:62:71:4e: c6:99:a1:62:58:21:bb:7f:5e:61:5c:81:bd:ee:1a: 8a:97:a5:69:2d:fa:ea:b2:89:64:84:5e:e6:77:f7: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5C:43:0F:F3:DD:A3:78:21:D5:5F:50:6C:9A:46:65:51:67:17:60 X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e33322e302f31392d3234203d3e203234313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.32.0/19 Signature Algorithm: sha256WithRSAEncryption 6c:13:00:d8:43:17:49:bf:fd:f1:69:d5:19:03:dd:52:92:dd: 88:8a:c5:6d:df:4c:7e:fd:db:0f:54:88:81:7e:c1:3b:d4:8c: 88:6c:de:d3:42:61:47:24:fe:61:63:75:89:69:96:53:e2:93: bf:09:52:dd:04:e1:15:ff:4e:80:bb:d9:0e:43:1d:90:b3:c3: b5:4c:86:29:01:04:c9:06:9e:53:b1:3b:64:b2:dd:20:46:6d: 5c:00:57:97:40:3f:94:70:64:56:62:7b:84:7c:1d:02:f6:81: bb:2f:f9:9d:43:de:fe:08:13:0e:30:05:4c:f6:07:70:f4:05: fa:ba:57:07:97:8d:f8:be:86:50:13:f6:aa:d9:70:03:73:9a: 92:bd:e6:79:21:30:c5:c2:3f:39:ba:90:ca:d0:6b:9b:d0:97: 46:77:90:73:6d:57:11:3e:21:09:79:e2:4a:cb:71:e6:ad:25: d7:56:f4:ad:59:8c:20:89:c4:b7:a0:0b:3d:9a:12:d7:bb:ab: 0f:0b:56:a2:2f:00:58:55:86:ce:0b:1e:ff:32:15:f2:1e:f9: c8:d3:22:d2:0b:3e:7a:59:b7:c2:91:a0:e5:a5:be:9e:b8:70: ff:b8:83:01:6d:41:ba:9a:3b:1b:5a:9b:53:be:71:ce:76:e7: 3f:43:5a:16 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUH8mIWZffiZdJuA4jSMoNEad5xmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDJaFw0yNzAxMTkwMjI1MDJaMDMxMTAvBgNV BAMTKEJCNUM0MzBGRjNEREEzNzgyMUQ1NUY1MDZDOUE0NjY1NTE2NzE3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/NtniRBxuNqRdBQwYa1Exx4q t3raENHbsYQf/0mE7V2clZiYKsjnEXaKYNWxpD2IGpBvvp54JtPX/9c/4qfrNwqk kYXpjdRVmR4i+3XFnxGnShBMQelDHuE76hvj9OegvjRTrCUeeeidjo+ywSP4GNvf mathtLp0sfI1A56y7rnYUCc+l4A+ZspkY98uB5Nj5BNvXxNC7WBvUASX70ZFn1vm e5ecF7qmaRIziF0XL3ZQonlK/z4u+tBt7k/gsYumZq/iFHDU09IhwOG6A0lUxXas TuyzHXODvFgBPWJxTsaZoWJYIbt/XmFcgb3uGoqXpWkt+uqyiWSEXuZ399mVAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUu1xDD/Pdo3gh1V9QbJpGZVFnF2AwHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2 MmUzMzMyMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBctWIDANBgkqhkiG9w0BAQsFAAOCAQEAbBMA2EMXSb/98WnVGQPdUpLdiIrF bd9Mfv3bD1SIgX7BO9SMiGze00JhRyT+YWN1iWmWU+KTvwlS3QThFf9OgLvZDkMd kLPDtUyGKQEEyQaeU7E7ZLLdIEZtXABXl0A/lHBkVmJ7hHwdAvaBuy/5nUPe/ggT DjAFTPYHcPQF+rpXB5eN+L6GUBP2qtlwA3Oakr3meSEwxcI/ObqQytBrm9CXRneQ c21XET4hCXniSstx5q0l11b0rVmMIInEt6ALPZoS17urDwtWoi8AWFWGzgse/zIV 8h75yNMi0gs+elm3wpGg5aW+nrhw/7iDAW1Bupo7G1qbU75xznbnP0NaFg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:27 2026 by rpki-client