This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35332e302f32342d3234203d3e203234313437.roa File: 3230332e38362e35332e302f32342d3234203d3e203234313437.roa (raw, json) Hash identifier: GZW0aT1mI2ydEgJpv0mu4u+h/q8ra7gJ/fnnxsz7CP0= Subject key identifier: 12:B1:79:35:55:4D:CC:D8:87:E0:43:D6:E4:AE:11:E1:F1:E5:06:37 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 3A9F8163BD120C5066C7D09785B85A8F20412D8A Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35332e302f32342d3234203d3e203234313437.roa Signing time: Tue 20 Jan 2026 02:25:01 +0000 ROA not before: Tue 20 Jan 2026 02:20:01 +0000 ROA not after: Tue 19 Jan 2027 02:25:01 +0000 asID: 24147 IP address blocks: 203.86.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9f:81:63:bd:12:0c:50:66:c7:d0:97:85:b8:5a:8f:20:41:2d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:01 2026 GMT Not After : Jan 19 02:25:01 2027 GMT Subject: CN=12B17935554DCCD887E043D6E4AE11E1F1E50637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:4a:62:3d:a5:90:f0:0c:6c:e2:e9:0e:a6: 79:37:66:a9:fc:8c:ed:c7:2f:61:57:69:0a:7d:49: e7:49:a1:45:0b:79:8f:dd:5c:b4:d9:e9:04:38:02: c6:39:9e:16:cd:b2:13:ec:2d:d5:09:70:db:2b:52: 9d:85:46:1c:1d:53:8f:4c:63:16:9b:59:bc:96:f1: 2e:15:69:b3:04:c3:b0:d4:c1:74:de:c1:03:73:0b: 5e:05:75:11:26:63:91:35:96:ff:1f:ba:30:89:2d: 45:70:c3:60:27:07:a1:71:65:0b:9e:50:0f:17:b6: e0:ee:19:8a:14:0d:2e:aa:b1:20:7c:f7:73:82:77: d4:13:15:b1:72:9b:76:95:8d:50:ea:a7:2e:6c:e2: 65:c6:71:21:72:72:90:2c:d8:a6:4c:14:41:6e:d8: 92:55:b8:51:d8:ce:ec:c2:9f:00:74:90:0a:60:05: b6:8a:77:e5:5a:cd:24:58:d3:d7:56:02:fe:e9:05: ad:3b:2b:09:f2:62:52:37:27:44:54:63:89:69:db: 40:03:e1:3a:0d:dc:1d:c9:c2:4b:dc:1d:e2:1a:e9: f2:d4:71:1b:7a:67:86:3b:ae:73:e4:d7:05:87:0d: c5:04:b0:7b:41:11:ee:9f:85:b8:e5:01:b1:78:7a: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B1:79:35:55:4D:CC:D8:87:E0:43:D6:E4:AE:11:E1:F1:E5:06:37 X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35332e302f32342d3234203d3e203234313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.53.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:a0:d8:9b:93:b0:be:33:36:0d:bf:1a:b6:d3:67:5a:41:88: 07:7b:e3:c3:60:4b:1a:96:6f:9e:94:b1:a7:ff:dc:35:35:75: 41:25:5f:61:48:ac:62:8a:2c:aa:08:d9:6d:99:95:ea:e8:e4: ed:1e:83:e5:f5:1a:09:b6:06:95:41:c4:14:bd:0f:0f:0a:a4: 61:80:64:2e:e3:55:0f:e6:6a:ec:4e:c6:e6:81:f7:65:20:3e: 0a:d1:f2:7d:e5:ac:9b:32:1a:4f:b5:e7:5d:94:bd:97:a1:68: 9c:d2:df:b1:30:c2:83:0b:96:00:89:5f:42:c0:95:5f:ba:dc: 8a:77:33:57:3d:ae:30:f9:a5:63:d4:85:ab:e6:15:e9:19:e7: 49:96:34:8c:66:7b:69:9c:78:72:f1:12:b1:c4:94:a0:1f:4d: f5:67:da:c9:d1:78:6e:ef:58:f0:ac:7a:43:d9:63:56:2f:f8: 88:73:df:25:bb:80:9f:29:6f:f0:c7:31:87:9e:bc:88:89:1d: e2:23:e6:40:c1:61:25:6c:70:9d:a2:a8:03:c5:5c:d4:d7:12: fc:85:ae:65:e1:ca:5e:0c:a3:c9:07:34:52:6e:02:06:c8:f3: 7d:2f:5c:ba:1d:17:81:af:48:73:bc:dd:34:04:9c:ee:91:81: 3a:c5:c3:57 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUOp+BY70SDFBmx9CXhbhajyBBLYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDFaFw0yNzAxMTkwMjI1MDFaMDMxMTAvBgNV BAMTKDEyQjE3OTM1NTU0RENDRDg4N0UwNDNENkU0QUUxMUUxRjFFNTA2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeJkpiPaWQ8Axs4ukOpnk3Zqn8 jO3HL2FXaQp9SedJoUULeY/dXLTZ6QQ4AsY5nhbNshPsLdUJcNsrUp2FRhwdU49M YxabWbyW8S4VabMEw7DUwXTewQNzC14FdREmY5E1lv8fujCJLUVww2AnB6FxZQue UA8XtuDuGYoUDS6qsSB893OCd9QTFbFym3aVjVDqpy5s4mXGcSFycpAs2KZMFEFu 2JJVuFHYzuzCnwB0kApgBbaKd+VazSRY09dWAv7pBa07KwnyYlI3J0RUY4lp20AD 4ToN3B3JwkvcHeIa6fLUcRt6Z4Y7rnPk1wWHDcUEsHtBEe6fhbjlAbF4eli3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUErF5NVVNzNiH4EPW5K4R4fHlBjcwHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2 MmUzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtWNTANBgkqhkiG9w0BAQsFAAOCAQEAP6DYm5OwvjM2Db8attNnWkGIB3vj w2BLGpZvnpSxp//cNTV1QSVfYUisYoosqgjZbZmV6ujk7R6D5fUaCbYGlUHEFL0P DwqkYYBkLuNVD+Zq7E7G5oH3ZSA+CtHyfeWsmzIaT7XnXZS9l6FonNLfsTDCgwuW AIlfQsCVX7rcinczVz2uMPmlY9SFq+YV6RnnSZY0jGZ7aZx4cvESscSUoB9N9Wfa ydF4bu9Y8Kx6Q9ljVi/4iHPfJbuAnylv8Mcxh568iIkd4iPmQMFhJWxwnaKoA8Vc 1NcS/IWuZeHKXgyjyQc0Um4CBsjzfS9cuh0Xga9Ic7zdNASc7pGBOsXDVw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:33 2026 by rpki-client