This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35342e302f32342d3234203d3e203234313437.roa File: 3230332e38362e35342e302f32342d3234203d3e203234313437.roa (raw, json) Hash identifier: JIBRdGWpBW+adIGFLzrSbUhh/kt/vlw9SyeRkgMCJM8= Subject key identifier: E9:91:6B:E8:4F:60:21:05:F6:63:28:A1:25:E6:06:6D:83:CF:92:44 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 55A63B8D38E9353A654D20038E06AE8114307F38 Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35342e302f32342d3234203d3e203234313437.roa Signing time: Tue 20 Jan 2026 02:25:01 +0000 ROA not before: Tue 20 Jan 2026 02:20:01 +0000 ROA not after: Tue 19 Jan 2027 02:25:01 +0000 asID: 24147 IP address blocks: 203.86.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a6:3b:8d:38:e9:35:3a:65:4d:20:03:8e:06:ae:81:14:30:7f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:01 2026 GMT Not After : Jan 19 02:25:01 2027 GMT Subject: CN=E9916BE84F602105F66328A125E6066D83CF9244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:68:cc:29:b9:e8:5b:02:72:bd:12:94:f8:59: f5:27:d0:f1:5f:f5:08:e9:df:14:94:2b:31:73:ce: 0a:4e:cb:25:7d:e5:48:f9:6a:4c:12:a1:0f:2c:3b: 09:f4:30:24:76:ad:b9:67:f5:bf:90:89:3b:21:0f: cc:30:5a:8c:a5:1e:76:f3:fb:6a:41:00:92:65:10: a7:c1:74:ab:ec:83:37:88:09:2e:dd:46:59:0b:e2: 72:b7:9e:0e:fe:43:54:b1:32:1c:64:09:f8:a0:cf: 2b:cc:fd:7e:5a:9e:e8:a0:ac:b3:6c:eb:31:c6:1d: b0:c2:c3:4a:38:12:6f:cc:f8:f5:5a:6f:b2:5a:bd: 2d:53:f3:1d:84:c7:0f:b0:10:02:e5:a5:48:4f:47: 83:e2:6b:5c:6c:04:6c:34:2b:5c:5e:49:e6:c9:02: a5:65:3f:b7:c5:b3:e8:9d:31:9f:c7:89:9f:a9:0d: 4d:c9:92:a7:6a:bd:5d:31:42:66:4a:82:c1:c9:8d: a1:1a:54:6b:8d:87:bf:c2:1a:4a:53:b7:40:ec:36: b6:72:11:de:50:18:b9:d5:e3:7b:75:ae:4b:b1:6b: 11:7e:a6:70:34:b8:64:d7:1b:58:7d:ae:69:7c:08: 14:6e:af:93:b6:08:8f:a4:9b:30:65:fd:5e:cf:43: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:91:6B:E8:4F:60:21:05:F6:63:28:A1:25:E6:06:6D:83:CF:92:44 X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35342e302f32342d3234203d3e203234313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.54.0/24 Signature Algorithm: sha256WithRSAEncryption 66:90:13:7a:fd:8f:08:b9:52:09:1d:7f:77:11:f4:e0:b2:6f: b6:ce:55:b2:8d:6c:33:76:4b:18:b3:91:c6:a4:c4:1e:d8:7c: 46:d4:ea:9f:f6:41:63:17:07:8c:e4:3f:bb:eb:d8:ce:1e:53: 35:01:cc:e7:33:c7:c1:e8:c1:2b:c1:2e:c2:e0:13:b5:5d:c1: 60:9a:b3:66:3c:2e:ba:01:a7:87:ce:22:5f:96:14:92:ae:c4: 6d:38:fc:fb:5c:b1:0c:db:ee:77:3a:04:b3:23:67:f3:9a:36: 9f:e9:a7:cf:5a:21:ee:61:84:c7:ee:4f:0a:b8:98:7c:d8:3d: 82:91:8f:3d:b0:3a:aa:2b:be:74:49:d9:b9:46:16:8c:8b:e0: e2:95:7e:f2:a4:b9:72:ba:2c:38:31:d0:5a:4b:83:c1:12:f2: 21:04:41:77:0f:65:92:04:0a:65:90:15:6f:ac:80:1a:85:b9: 15:34:52:8d:3b:75:bf:25:14:6d:52:6c:ac:f8:28:64:54:1e: 93:5a:d3:8f:8d:17:30:c3:79:36:ad:d2:4a:e0:12:0c:af:e9: 63:39:dd:c7:f2:12:4d:a1:d7:f2:55:56:22:01:f5:99:0d:68: 2d:78:ac:77:06:3b:44:f6:1d:b5:a1:1a:6d:c5:58:73:31:e0: 09:f5:cc:ba -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUVaY7jTjpNTplTSADjgaugRQwfzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDFaFw0yNzAxMTkwMjI1MDFaMDMxMTAvBgNV BAMTKEU5OTE2QkU4NEY2MDIxMDVGNjYzMjhBMTI1RTYwNjZEODNDRjkyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaMwpuehbAnK9EpT4WfUn0PFf 9Qjp3xSUKzFzzgpOyyV95Uj5akwSoQ8sOwn0MCR2rbln9b+QiTshD8wwWoylHnbz +2pBAJJlEKfBdKvsgzeICS7dRlkL4nK3ng7+Q1SxMhxkCfigzyvM/X5anuigrLNs 6zHGHbDCw0o4Em/M+PVab7JavS1T8x2Exw+wEALlpUhPR4Pia1xsBGw0K1xeSebJ AqVlP7fFs+idMZ/HiZ+pDU3JkqdqvV0xQmZKgsHJjaEaVGuNh7/CGkpTt0DsNrZy Ed5QGLnV43t1rkuxaxF+pnA0uGTXG1h9rml8CBRur5O2CI+kmzBl/V7PQ1dhAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU6ZFr6E9gIQX2YyihJeYGbYPPkkQwHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2 MmUzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtWNjANBgkqhkiG9w0BAQsFAAOCAQEAZpATev2PCLlSCR1/dxH04LJvts5V so1sM3ZLGLORxqTEHth8RtTqn/ZBYxcHjOQ/u+vYzh5TNQHM5zPHwejBK8EuwuAT tV3BYJqzZjwuugGnh84iX5YUkq7EbTj8+1yxDNvudzoEsyNn85o2n+mnz1oh7mGE x+5PCriYfNg9gpGPPbA6qiu+dEnZuUYWjIvg4pV+8qS5crosODHQWkuDwRLyIQRB dw9lkgQKZZAVb6yAGoW5FTRSjTt1vyUUbVJsrPgoZFQek1rTj40XMMN5Nq3SSuAS DK/pYzndx/ISTaHX8lVWIgH1mQ1oLXisdwY7RPYdtaEabcVYczHgCfXMug== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:45 2026 by rpki-client