This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e34342e302f32342d3234203d3e203234313437.roa File: 3230332e38362e34342e302f32342d3234203d3e203234313437.roa (raw, json) Hash identifier: wIHg02Mx683aITJJCQSu1ItskF03DI8H6fuVpC8rq74= Subject key identifier: C1:53:47:4C:C5:DD:A6:B6:44:C5:2F:C2:21:7B:B5:DB:6F:8D:05:11 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 471BDC47F462C01B55B0530400C80999C027B06A Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e34342e302f32342d3234203d3e203234313437.roa Signing time: Tue 20 Jan 2026 02:25:02 +0000 ROA not before: Tue 20 Jan 2026 02:20:02 +0000 ROA not after: Tue 19 Jan 2027 02:25:02 +0000 asID: 24147 IP address blocks: 203.86.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:1b:dc:47:f4:62:c0:1b:55:b0:53:04:00:c8:09:99:c0:27:b0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:02 2026 GMT Not After : Jan 19 02:25:02 2027 GMT Subject: CN=C153474CC5DDA6B644C52FC2217BB5DB6F8D0511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:f4:ce:5b:62:4d:fc:0e:94:09:68:b5:df: 9a:d0:54:08:2c:f0:69:b0:c6:ef:5d:55:45:d3:9a: 43:dc:f4:37:02:4c:1b:c1:cf:54:58:b7:c2:f6:5c: ef:7b:33:db:11:be:d2:f2:e4:14:11:6f:39:10:a5: 25:14:2e:21:f7:f6:e6:0e:0f:5d:07:e8:6e:48:6f: 44:90:a8:03:0c:dc:96:1b:04:c3:59:de:77:5b:79: 61:23:4e:29:b6:94:cc:92:e3:3d:27:90:71:ff:10: 5e:0a:b6:44:3e:2f:d0:40:3e:eb:bb:ad:75:2b:c5: bf:1b:1d:ca:30:34:e3:bd:cf:ca:57:e8:0e:ba:75: a2:e0:ba:a1:04:f5:bb:49:ef:80:c5:59:78:8e:db: ae:9d:f5:ad:77:ef:c5:bf:52:6e:50:dd:c0:02:3b: 27:a2:ba:b4:8d:74:45:82:8b:da:22:10:d7:e3:4d: 45:88:db:5c:28:54:04:ee:55:b1:8b:91:13:1a:62: b3:69:d3:e5:1d:da:40:64:a6:a3:49:86:51:3d:c2: d9:af:c9:c8:41:e9:1e:89:11:24:6c:b8:72:b7:89: 30:62:9f:d2:a6:2e:8d:dd:22:a5:ef:0a:da:4a:cf: ce:79:b4:67:32:20:9e:e1:6c:3a:5c:1b:12:e7:23: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:53:47:4C:C5:DD:A6:B6:44:C5:2F:C2:21:7B:B5:DB:6F:8D:05:11 X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e34342e302f32342d3234203d3e203234313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.44.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:f8:7c:a3:7e:18:4d:eb:75:d1:08:5d:53:dd:41:77:b3:45: 5e:b5:c1:80:6c:64:f7:7d:d9:44:a4:ee:ea:4e:3f:1f:8c:a9: f7:3c:61:91:be:59:ac:1f:a5:1a:ce:41:07:95:87:4e:a5:fb: dc:a3:2c:79:5f:55:29:ca:28:57:6a:7a:c9:9c:f1:b7:dc:0b: ff:1e:81:c6:fc:9e:70:dd:ca:c9:c0:2c:0e:e1:98:cb:82:32: 5b:e1:42:e6:2a:03:9f:56:50:fc:1b:84:cf:57:e8:39:eb:76: bb:6c:ea:86:30:c8:39:ea:0d:2b:a3:4f:c6:e5:f6:ef:55:95: e3:17:31:c8:59:9c:ad:17:93:bd:77:dd:5b:97:82:71:d2:0c: 89:e1:9d:e5:e0:d2:9f:53:e6:da:ff:33:0f:32:c7:11:40:6a: 86:c5:fd:d0:c8:52:90:54:e1:13:3e:b5:f5:dc:28:5e:8b:1e: 9f:24:10:b1:a0:a4:ca:94:7f:93:6c:ec:1a:f2:02:40:f7:a5: d5:6e:c5:7a:6c:f8:55:9c:c4:e9:b1:ee:03:49:d9:3c:51:96: d7:e3:31:85:0f:ce:79:af:b5:d1:d3:b4:84:92:41:c8:fb:e3: 0a:dd:10:ad:b3:93:bb:2e:e8:76:e0:92:59:d2:18:a4:e9:59: 07:52:c3:7a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIURxvcR/RiwBtVsFMEAMgJmcAnsGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDJaFw0yNzAxMTkwMjI1MDJaMDMxMTAvBgNV BAMTKEMxNTM0NzRDQzVEREE2QjY0NEM1MkZDMjIxN0JCNURCNkY4RDA1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMvTOW2JN/A6UCWi135rQVAgs 8Gmwxu9dVUXTmkPc9DcCTBvBz1RYt8L2XO97M9sRvtLy5BQRbzkQpSUULiH39uYO D10H6G5Ib0SQqAMM3JYbBMNZ3ndbeWEjTim2lMyS4z0nkHH/EF4KtkQ+L9BAPuu7 rXUrxb8bHcowNOO9z8pX6A66daLguqEE9btJ74DFWXiO266d9a1378W/Um5Q3cAC OyeiurSNdEWCi9oiENfjTUWI21woVATuVbGLkRMaYrNp0+Ud2kBkpqNJhlE9wtmv ychB6R6JESRsuHK3iTBin9KmLo3dIqXvCtpKz855tGcyIJ7hbDpcGxLnI86xAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUwVNHTMXdprZExS/CIXu122+NBREwHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2 MmUzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtWLDANBgkqhkiG9w0BAQsFAAOCAQEAS/h8o34YTet10QhdU91Bd7NFXrXB gGxk933ZRKTu6k4/H4yp9zxhkb5ZrB+lGs5BB5WHTqX73KMseV9VKcooV2p6yZzx t9wL/x6BxvyecN3KycAsDuGYy4IyW+FC5ioDn1ZQ/BuEz1foOet2u2zqhjDIOeoN K6NPxuX271WV4xcxyFmcrReTvXfdW5eCcdIMieGd5eDSn1Pm2v8zDzLHEUBqhsX9 0MhSkFThEz619dwoXosenyQQsaCkypR/k2zsGvICQPel1W7Femz4VZzE6bHuA0nZ PFGW1+MxhQ/Oea+10dO0hJJByPvjCt0QrbOTuy7oduCSWdIYpOlZB1LDeg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:34 2026 by rpki-client