This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e34392e302f32342d3234203d3e203234313437.roa File: 3230332e38362e34392e302f32342d3234203d3e203234313437.roa (raw, json) Hash identifier: GxtOA4gw3IUgIx3k4sXIueBQkr72Q7f98AQ06CTYthw= Subject key identifier: 49:70:B9:DB:F7:31:73:CF:12:1D:F7:DE:C2:B9:BF:4C:B9:C6:14:4C Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 5734FD6FC72DF7C746EA9FBED8DF94176BF7603A Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e34392e302f32342d3234203d3e203234313437.roa Signing time: Tue 20 Jan 2026 02:25:01 +0000 ROA not before: Tue 20 Jan 2026 02:20:01 +0000 ROA not after: Tue 19 Jan 2027 02:25:01 +0000 asID: 24147 IP address blocks: 203.86.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:34:fd:6f:c7:2d:f7:c7:46:ea:9f:be:d8:df:94:17:6b:f7:60:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:01 2026 GMT Not After : Jan 19 02:25:01 2027 GMT Subject: CN=4970B9DBF73173CF121DF7DEC2B9BF4CB9C6144C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:41:c1:c0:ce:3c:27:58:c7:72:2b:e4:9e: 15:ce:73:05:e4:7d:20:05:37:81:4e:fa:8a:65:75: 4d:f8:fa:e8:9b:f8:25:30:2d:74:77:7e:2d:f6:4d: 24:c0:1c:08:93:9e:21:ea:35:00:0d:e8:56:c4:f0: bb:aa:8b:c1:df:39:92:24:fe:c0:9c:e6:c2:3b:3d: 3e:51:7e:33:37:05:7b:24:db:21:a1:69:1d:16:4f: 86:91:63:99:4a:7a:f7:99:fd:0a:a1:a8:65:80:f7: 11:9c:64:88:1b:f6:a1:19:de:f8:db:3a:af:8a:03: 5c:52:28:d5:93:bc:fe:af:7f:5a:3b:4e:ab:3a:f6: 9b:54:4b:b4:2b:cb:3e:4f:22:32:31:98:e7:43:b7: 6c:f2:43:1f:0b:a5:b9:5e:5b:e2:86:40:19:94:9a: de:25:ea:48:7c:fc:6e:58:48:bb:b9:2a:eb:c0:12: 22:3b:13:70:a6:ac:e8:41:40:51:92:07:c4:f3:af: 21:d4:3e:0a:a7:24:60:3b:4d:b0:f0:6a:ee:69:76: 4b:c7:d3:de:7d:0c:3d:1d:73:0b:8e:ce:69:93:ea: bd:16:82:b4:34:20:66:ab:cd:47:ba:54:f3:e0:92: 6a:d6:a1:47:ca:2e:14:8a:88:d7:51:13:31:53:25: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:70:B9:DB:F7:31:73:CF:12:1D:F7:DE:C2:B9:BF:4C:B9:C6:14:4C X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e34392e302f32342d3234203d3e203234313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.49.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:e8:86:27:8e:ed:1e:30:23:13:93:3a:d4:b4:ad:82:e2:d8: 26:5b:ef:98:a7:c0:80:cf:88:8e:46:aa:9f:ba:b7:4b:67:2c: 80:a6:d9:d6:d3:51:4c:07:a5:be:52:9e:c8:c3:ba:69:5b:16: 28:7f:4d:84:9a:e2:3a:fd:4c:8a:26:27:0f:28:78:54:48:65: d4:32:55:f6:d8:dc:6e:1e:85:ee:75:3f:28:db:11:0f:65:1f: 40:4a:04:93:68:e6:17:6f:1a:5c:1c:37:88:b1:7b:39:af:f0: 90:ec:ae:5f:6e:79:bf:76:28:33:6e:4b:06:95:cd:cf:b3:e0: 9b:1e:3d:a7:e2:7e:27:e3:d7:6c:cf:d8:2f:71:d4:c5:75:fe: 51:f2:ec:5c:d5:4c:08:7f:bd:df:8e:9c:d5:97:c9:82:03:bc: 08:44:96:4e:76:fe:0a:e9:a3:9f:8c:a8:ac:99:56:2b:a3:fc: 8c:ea:7d:75:11:4c:bd:b1:4c:38:65:33:00:a0:53:b7:d3:df: e9:28:9c:bf:e3:e7:88:9d:b3:6e:ee:4d:5d:63:59:db:9f:99: a4:16:70:48:76:73:93:51:ef:91:25:7d:fa:35:57:50:10:7b: 6e:0a:d5:0f:35:65:6d:07:d8:b3:d9:36:e5:6c:4e:ef:64:77: 92:a0:89:7b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUVzT9b8ct98dG6p++2N+UF2v3YDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDFaFw0yNzAxMTkwMjI1MDFaMDMxMTAvBgNV BAMTKDQ5NzBCOURCRjczMTczQ0YxMjFERjdERUMyQjlCRjRDQjlDNjE0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY4kHBwM48J1jHcivknhXOcwXk fSAFN4FO+opldU34+uib+CUwLXR3fi32TSTAHAiTniHqNQAN6FbE8Luqi8HfOZIk /sCc5sI7PT5RfjM3BXsk2yGhaR0WT4aRY5lKeveZ/QqhqGWA9xGcZIgb9qEZ3vjb Oq+KA1xSKNWTvP6vf1o7Tqs69ptUS7Qryz5PIjIxmOdDt2zyQx8LpbleW+KGQBmU mt4l6kh8/G5YSLu5KuvAEiI7E3CmrOhBQFGSB8TzryHUPgqnJGA7TbDwau5pdkvH 0959DD0dcwuOzmmT6r0WgrQ0IGarzUe6VPPgkmrWoUfKLhSKiNdREzFTJeBJAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUSXC52/cxc88SHffewrm/TLnGFEwwHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2 MmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtWMTANBgkqhkiG9w0BAQsFAAOCAQEAP+iGJ47tHjAjE5M61LStguLYJlvv mKfAgM+Ijkaqn7q3S2csgKbZ1tNRTAelvlKeyMO6aVsWKH9NhJriOv1MiiYnDyh4 VEhl1DJV9tjcbh6F7nU/KNsRD2UfQEoEk2jmF28aXBw3iLF7Oa/wkOyuX255v3Yo M25LBpXNz7Pgmx49p+J+J+PXbM/YL3HUxXX+UfLsXNVMCH+9346c1ZfJggO8CESW Tnb+Cumjn4yorJlWK6P8jOp9dRFMvbFMOGUzAKBTt9Pf6Sicv+PniJ2zbu5NXWNZ 25+ZpBZwSHZzk1HvkSV9+jVXUBB7bgrVDzVlbQfYs9k25WxO72R3kqCJew== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:26 2026 by rpki-client