This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35312e302f32342d3234203d3e203234313437.roa File: 3230332e38362e35312e302f32342d3234203d3e203234313437.roa (raw, json) Hash identifier: 5Nl4P4yjyaYsIWRUhf5zhO8ZOngx1vp1Piv9zXxY44w= Subject key identifier: 59:9B:A1:1F:BA:56:E5:1B:9F:88:A6:A8:A8:38:98:FE:39:77:0D:25 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 3BA3FB204BB167A557B18D0B8EA2BAF6CD168D07 Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35312e302f32342d3234203d3e203234313437.roa Signing time: Tue 20 Jan 2026 02:25:00 +0000 ROA not before: Tue 20 Jan 2026 02:20:00 +0000 ROA not after: Tue 19 Jan 2027 02:25:00 +0000 asID: 24147 IP address blocks: 203.86.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a3:fb:20:4b:b1:67:a5:57:b1:8d:0b:8e:a2:ba:f6:cd:16:8d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:00 2026 GMT Not After : Jan 19 02:25:00 2027 GMT Subject: CN=599BA11FBA56E51B9F88A6A8A83898FE39770D25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:01:12:0c:8a:1b:a4:8f:f0:58:37:e6:fa: 8b:0f:01:d2:e1:22:09:c5:13:c2:88:98:5f:d3:83: 26:ba:db:26:be:3f:7d:0a:ef:eb:4f:99:78:7f:47: eb:11:30:5d:3f:c8:41:5e:39:9a:9b:55:aa:88:1f: 61:59:c3:4a:b0:5e:6f:9c:24:e3:21:39:b5:8c:5e: e2:30:93:44:36:e3:a0:5d:b9:d1:36:38:01:c0:97: 7e:46:85:1c:38:59:43:55:07:39:fe:10:d4:fc:85: 77:52:ac:3f:6b:8d:f6:83:7d:7e:3b:86:74:0d:43: 50:a8:30:0d:9b:82:a0:f5:c4:90:a4:01:3a:68:d2: b8:88:90:29:25:a4:ab:55:a5:2e:09:5d:63:18:e9: d0:0f:56:c0:83:5c:24:ea:cb:84:db:ae:35:ba:2a: 4d:f2:97:c0:61:c7:2c:71:2d:a4:cf:91:df:f8:eb: 69:c9:e8:28:25:74:05:57:d6:99:1d:2e:63:34:bb: bc:54:c5:7d:f1:4f:58:13:86:d6:bb:49:81:be:b0: 34:a4:bc:e0:27:f3:e2:31:c6:e8:4e:26:81:57:a9: 28:88:f0:ee:ae:ba:1b:cd:46:2e:98:ed:f2:eb:5e: e7:b9:54:0f:e2:7d:d5:e0:ee:c5:8b:a2:10:6a:c0: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9B:A1:1F:BA:56:E5:1B:9F:88:A6:A8:A8:38:98:FE:39:77:0D:25 X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35312e302f32342d3234203d3e203234313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.51.0/24 Signature Algorithm: sha256WithRSAEncryption 32:26:70:17:bf:47:cf:d8:b9:5e:d1:e1:4b:8f:d2:50:15:c0: ed:73:36:b9:27:dd:3c:1e:c5:33:8d:61:b1:a4:1a:02:54:da: 8e:bd:8e:e1:3b:fe:23:de:09:cb:72:98:8b:bc:81:cd:2d:73: 46:c9:9b:bc:0b:4e:a2:b8:30:a6:8f:06:14:e2:3d:34:64:19: d7:a7:8e:56:e1:fd:2d:a5:7a:b6:01:e5:ec:38:f4:e4:e6:c1: 78:42:32:e1:e6:2f:bd:fa:e6:6c:28:e6:49:43:22:24:a1:da: df:b3:84:19:7b:0f:78:a8:f7:bb:70:9b:79:79:52:3c:17:49: b2:ac:e8:b3:54:a8:55:3e:3d:7f:1a:da:de:0b:0d:83:35:d4: e4:26:b3:29:2c:ab:4b:e4:5a:3f:47:c0:33:5b:d8:b0:20:d9: c1:a6:57:44:df:01:07:4b:42:07:e0:80:26:46:d0:0e:24:88: 7f:88:f0:e7:a3:ce:87:c6:42:9c:52:10:14:fd:7b:90:6e:a6: 91:4d:e0:60:5f:ed:c1:26:f3:cc:ac:8f:0f:50:8b:2e:f8:d7: cb:4f:2c:4d:d9:03:3d:10:bb:7a:7f:c9:fa:09:86:df:03:42: 9f:87:fc:4c:6a:58:b2:f7:ad:38:59:df:b9:49:2d:fb:ae:a4: c8:99:4c:09 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUO6P7IEuxZ6VXsY0LjqK69s0WjQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDBaFw0yNzAxMTkwMjI1MDBaMDMxMTAvBgNV BAMTKDU5OUJBMTFGQkE1NkU1MUI5Rjg4QTZBOEE4Mzg5OEZFMzk3NzBEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIAESDIobpI/wWDfm+osPAdLh IgnFE8KImF/Tgya62ya+P30K7+tPmXh/R+sRMF0/yEFeOZqbVaqIH2FZw0qwXm+c JOMhObWMXuIwk0Q246BdudE2OAHAl35GhRw4WUNVBzn+ENT8hXdSrD9rjfaDfX47 hnQNQ1CoMA2bgqD1xJCkATpo0riIkCklpKtVpS4JXWMY6dAPVsCDXCTqy4TbrjW6 Kk3yl8BhxyxxLaTPkd/462nJ6CgldAVX1pkdLmM0u7xUxX3xT1gThta7SYG+sDSk vOAn8+IxxuhOJoFXqSiI8O6uuhvNRi6Y7fLrXue5VA/ifdXg7sWLohBqwA/1AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUWZuhH7pW5RufiKaoqDiY/jl3DSUwHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2 MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtWMzANBgkqhkiG9w0BAQsFAAOCAQEAMiZwF79Hz9i5XtHhS4/SUBXA7XM2 uSfdPB7FM41hsaQaAlTajr2O4Tv+I94Jy3KYi7yBzS1zRsmbvAtOorgwpo8GFOI9 NGQZ16eOVuH9LaV6tgHl7Dj05ObBeEIy4eYvvfrmbCjmSUMiJKHa37OEGXsPeKj3 u3CbeXlSPBdJsqzos1SoVT49fxra3gsNgzXU5CazKSyrS+RaP0fAM1vYsCDZwaZX RN8BB0tCB+CAJkbQDiSIf4jw56POh8ZCnFIQFP17kG6mkU3gYF/twSbzzKyPD1CL LvjXy08sTdkDPRC7en/J+gmG3wNCn4f8TGpYsvetOFnfuUkt+66kyJlMCQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:29 2026 by rpki-client