This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e36302e302f32342d3234203d3e203234313437.roa File: 3230332e38362e36302e302f32342d3234203d3e203234313437.roa (raw, json) Hash identifier: BJZbR0lfoznCin3ZjtaBIQgGi5zQKhes89YrWdoFQs8= Subject key identifier: 12:B0:6B:15:71:9F:C2:7F:E4:CF:FB:9B:0C:A0:2E:20:B3:EE:CA:6D Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 2A03331B09BD44C1FB7E5AF6B935E1CE6CD98D61 Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e36302e302f32342d3234203d3e203234313437.roa Signing time: Tue 20 Jan 2026 02:25:02 +0000 ROA not before: Tue 20 Jan 2026 02:20:02 +0000 ROA not after: Tue 19 Jan 2027 02:25:02 +0000 asID: 24147 IP address blocks: 203.86.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:03:33:1b:09:bd:44:c1:fb:7e:5a:f6:b9:35:e1:ce:6c:d9:8d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:02 2026 GMT Not After : Jan 19 02:25:02 2027 GMT Subject: CN=12B06B15719FC27FE4CFFB9B0CA02E20B3EECA6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:fa:d9:d0:dd:14:8f:02:a7:10:ca:86:a8: f8:6f:6d:40:42:11:66:4b:59:b6:24:6d:cf:27:f9: ed:5c:73:29:00:d7:db:a2:a7:96:ee:d7:3e:19:ed: fd:d6:31:38:38:b3:75:23:da:b8:59:b6:03:22:09: 22:a3:87:69:88:d8:89:d0:4c:88:ff:b7:0d:39:65: f3:57:1c:da:5b:64:e9:9a:8a:eb:c5:fc:ec:8e:ea: b5:3a:a1:43:10:c2:4e:41:99:cb:40:30:8b:d1:d6: 8f:e6:44:3d:e9:82:ad:b9:74:01:f8:c1:31:31:da: ae:2c:c4:02:f7:ef:52:45:5b:8b:13:39:6f:8c:6e: 5a:5f:90:00:54:2c:3b:a5:54:ec:02:88:31:3a:bc: cf:e5:ae:57:df:8e:d1:aa:bf:ae:8b:dc:06:cd:52: d1:29:0b:03:31:e7:94:39:7d:4d:0c:13:c8:37:db: 59:10:55:db:fe:e9:1d:87:54:b7:4c:ae:27:70:ff: cf:5f:0f:77:c3:6c:89:b4:ed:31:60:92:a6:a3:64: 05:f4:34:5d:4e:13:d5:75:24:fb:96:d5:7c:14:64: 14:0c:5a:ae:1f:76:a9:67:5c:97:d2:15:41:43:68: 8f:19:47:cb:e7:9e:d7:c1:f1:f9:ea:af:01:37:aa: 10:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B0:6B:15:71:9F:C2:7F:E4:CF:FB:9B:0C:A0:2E:20:B3:EE:CA:6D X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e36302e302f32342d3234203d3e203234313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.60.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:f0:eb:59:cf:89:c2:d0:aa:c4:19:bc:69:e3:33:02:72:14: 2d:23:85:16:5d:f5:7b:8c:af:bd:c8:64:03:6d:bf:d8:f3:4a: ed:d3:75:38:7f:be:27:c3:7c:e3:4a:f2:c7:86:70:f0:a1:fa: b8:fe:15:1e:8e:ab:b5:06:77:29:ee:90:83:42:6f:97:85:1d: 77:72:45:8b:d0:e9:fd:aa:83:21:de:01:a4:7e:9f:e3:66:7d: bb:b2:b1:2e:0a:f5:98:11:ef:a1:79:93:57:f3:89:e8:5c:65: 60:ef:30:91:98:7b:51:31:a7:69:c5:0c:c4:74:26:9d:4b:ba: dc:11:96:ec:b6:aa:86:b8:69:78:d0:cb:0d:1f:79:20:6a:a3: 18:6e:c2:c3:3f:71:ca:6a:85:ef:cc:eb:1a:92:b3:87:94:5c: e6:09:7c:3a:57:4b:c0:19:38:63:17:31:ae:5f:ab:f9:3c:92: 6e:51:f3:0f:8c:06:55:7a:f8:64:1b:58:be:67:ce:f7:87:95: a0:6c:b9:92:19:2c:49:52:a3:25:cc:16:05:35:4b:a9:56:fc: 45:85:8d:54:a9:80:87:c4:11:09:de:59:d8:f9:18:b6:86:5b: d4:a5:4a:a1:99:f3:47:38:fe:6e:28:a3:b2:49:ab:13:46:06: f6:b3:e0:8a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKgMzGwm9RMH7flr2uTXhzmzZjWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDJaFw0yNzAxMTkwMjI1MDJaMDMxMTAvBgNV BAMTKDEyQjA2QjE1NzE5RkMyN0ZFNENGRkI5QjBDQTAyRTIwQjNFRUNBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWPrZ0N0UjwKnEMqGqPhvbUBC EWZLWbYkbc8n+e1ccykA19uip5bu1z4Z7f3WMTg4s3Uj2rhZtgMiCSKjh2mI2InQ TIj/tw05ZfNXHNpbZOmaiuvF/OyO6rU6oUMQwk5BmctAMIvR1o/mRD3pgq25dAH4 wTEx2q4sxAL371JFW4sTOW+MblpfkABULDulVOwCiDE6vM/lrlffjtGqv66L3AbN UtEpCwMx55Q5fU0ME8g321kQVdv+6R2HVLdMridw/89fD3fDbIm07TFgkqajZAX0 NF1OE9V1JPuW1XwUZBQMWq4fdqlnXJfSFUFDaI8ZR8vnntfB8fnqrwE3qhA5AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUErBrFXGfwn/kz/ubDKAuILPuym0wHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2 MmUzNjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtWPDANBgkqhkiG9w0BAQsFAAOCAQEADvDrWc+JwtCqxBm8aeMzAnIULSOF Fl31e4yvvchkA22/2PNK7dN1OH++J8N840ryx4Zw8KH6uP4VHo6rtQZ3Ke6Qg0Jv l4Udd3JFi9Dp/aqDId4BpH6f42Z9u7KxLgr1mBHvoXmTV/OJ6FxlYO8wkZh7UTGn acUMxHQmnUu63BGW7LaqhrhpeNDLDR95IGqjGG7Cwz9xymqF78zrGpKzh5Rc5gl8 OldLwBk4Yxcxrl+r+TySblHzD4wGVXr4ZBtYvmfO94eVoGy5khksSVKjJcwWBTVL qVb8RYWNVKmAh8QRCd5Z2PkYtoZb1KVKoZnzRzj+biijskmrE0YG9rPgig== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:39 2026 by rpki-client