This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e34352e302f32342d3234203d3e203234313437.roa File: 3230332e38362e34352e302f32342d3234203d3e203234313437.roa (raw, json) Hash identifier: Nnd05xuUr2b4yGoh1bQE2fwywCCOmLsbEnz6TIRDa1k= Subject key identifier: 71:D4:9E:3F:36:FC:A0:D9:D1:55:2F:B0:D1:D6:03:05:D5:CD:9A:E1 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 635EA77358568C3208BB9EE5AE2A921710EEAC1E Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e34352e302f32342d3234203d3e203234313437.roa Signing time: Tue 20 Jan 2026 02:25:01 +0000 ROA not before: Tue 20 Jan 2026 02:20:01 +0000 ROA not after: Tue 19 Jan 2027 02:25:01 +0000 asID: 24147 IP address blocks: 203.86.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5e:a7:73:58:56:8c:32:08:bb:9e:e5:ae:2a:92:17:10:ee:ac:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:01 2026 GMT Not After : Jan 19 02:25:01 2027 GMT Subject: CN=71D49E3F36FCA0D9D1552FB0D1D60305D5CD9AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:3d:ca:56:8b:60:75:ef:b3:e7:c0:d8:4c: 8c:a2:cb:1d:e0:51:86:23:28:da:09:68:32:78:8e: 41:8b:67:f2:07:46:42:02:9f:5f:9c:8a:56:82:00: 35:ec:71:86:41:24:d9:ce:5f:ae:2f:e3:ab:69:da: 6c:08:a0:99:d5:d5:d3:5b:2d:4a:d6:6b:21:fd:7b: 33:96:c5:5f:b2:57:a2:6f:81:74:81:99:a3:70:94: c8:5e:d4:0e:da:6b:20:d3:6c:15:7c:cb:65:01:c1: e2:40:4a:e0:8b:81:77:ba:25:9c:73:e5:be:fc:b3: d9:dc:1c:51:0b:52:62:ed:05:a8:03:cf:8e:cc:9d: dd:a1:61:df:2e:b6:4f:ef:69:7a:c1:24:43:b7:db: 34:aa:b9:83:2c:90:a5:56:57:e7:67:e4:ce:94:bd: 4a:eb:fb:48:99:bc:8f:98:f4:f8:99:8f:ca:be:ed: 7e:2d:74:4a:78:94:25:8e:6a:4a:32:ba:77:ea:15: 50:25:77:01:7d:61:0f:9a:da:1e:60:88:1f:29:63: 8d:54:6e:e0:cf:9e:4e:de:5f:29:13:54:d2:89:5b: a8:13:29:7e:d4:75:8c:ef:4f:df:9a:c9:74:e6:0d: be:05:e5:c0:39:70:d4:bb:a8:ff:9c:c2:65:cd:81: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D4:9E:3F:36:FC:A0:D9:D1:55:2F:B0:D1:D6:03:05:D5:CD:9A:E1 X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e34352e302f32342d3234203d3e203234313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.45.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:e1:9f:a8:76:bb:7d:9e:b7:a2:93:84:0e:5d:32:2a:e4:3b: 16:ed:9d:ba:00:12:34:50:9e:15:1f:10:01:05:1a:77:73:a1: 93:5f:3e:7e:23:e0:84:d9:76:3d:92:fb:5b:c8:28:55:66:bd: 2f:a3:45:4f:d7:53:ad:36:bd:69:cd:3a:a3:15:a1:33:da:1c: 3e:68:3b:24:5d:11:ed:50:03:e1:8f:84:31:89:70:5e:85:34: 5e:5d:00:ed:bd:3e:eb:53:4f:e4:33:cd:f5:22:f0:60:d3:7f: 52:39:9f:58:7b:be:c6:88:80:a1:74:34:ae:36:66:8e:2f:0d: 57:f1:2f:85:69:a3:d3:65:7b:d0:22:5b:90:f3:86:ad:74:6f: 46:85:9f:ab:28:fa:2d:ed:da:2f:27:91:f9:40:dc:59:be:33: fe:29:22:be:4b:97:5f:46:b7:db:5d:a9:1e:0f:18:27:2a:62: 26:98:0d:20:78:97:46:d8:3f:e5:87:3b:4e:c3:55:32:d2:59: d6:0b:93:09:67:25:e8:08:cb:73:b2:30:3b:0f:da:8b:bc:61: 6f:9f:a8:12:94:18:16:f1:70:77:94:99:b6:86:6e:4d:bf:54: 40:69:c2:90:7b:2a:19:45:b4:81:a9:1c:f2:11:7b:be:98:e2: d0:61:12:c0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUY16nc1hWjDIIu57lriqSFxDurB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDFaFw0yNzAxMTkwMjI1MDFaMDMxMTAvBgNV BAMTKDcxRDQ5RTNGMzZGQ0EwRDlEMTU1MkZCMEQxRDYwMzA1RDVDRDlBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtz3KVotgde+z58DYTIyiyx3g UYYjKNoJaDJ4jkGLZ/IHRkICn1+cilaCADXscYZBJNnOX64v46tp2mwIoJnV1dNb LUrWayH9ezOWxV+yV6JvgXSBmaNwlMhe1A7aayDTbBV8y2UBweJASuCLgXe6JZxz 5b78s9ncHFELUmLtBagDz47Mnd2hYd8utk/vaXrBJEO32zSquYMskKVWV+dn5M6U vUrr+0iZvI+Y9PiZj8q+7X4tdEp4lCWOakoyunfqFVAldwF9YQ+a2h5giB8pY41U buDPnk7eXykTVNKJW6gTKX7UdYzvT9+ayXTmDb4F5cA5cNS7qP+cwmXNgXMTAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUcdSePzb8oNnRVS+w0dYDBdXNmuEwHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2 MmUzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtWLTANBgkqhkiG9w0BAQsFAAOCAQEALuGfqHa7fZ63opOEDl0yKuQ7Fu2d ugASNFCeFR8QAQUad3Ohk18+fiPghNl2PZL7W8goVWa9L6NFT9dTrTa9ac06oxWh M9ocPmg7JF0R7VAD4Y+EMYlwXoU0Xl0A7b0+61NP5DPN9SLwYNN/UjmfWHu+xoiA oXQ0rjZmji8NV/EvhWmj02V70CJbkPOGrXRvRoWfqyj6Le3aLyeR+UDcWb4z/iki vkuXX0a3212pHg8YJypiJpgNIHiXRtg/5Yc7TsNVMtJZ1guTCWcl6AjLc7IwOw/a i7xhb5+oEpQYFvFwd5SZtoZuTb9UQGnCkHsqGUW0gakc8hF7vpji0GESwA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:31 2026 by rpki-client