This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e36312e302f32342d3234203d3e203234313437.roa File: 3230332e38362e36312e302f32342d3234203d3e203234313437.roa (raw, json) Hash identifier: BDN34o2PeLUuH7mUNKqvJMOmkHM7PlrsPh5Q9Hsq5P4= Subject key identifier: EA:C5:18:A4:06:68:0E:96:E1:88:54:DE:8D:AA:B8:79:68:01:11:AE Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 2F2BD20C9F6F7697C58EDFF92243EBA2D98A4604 Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e36312e302f32342d3234203d3e203234313437.roa Signing time: Tue 20 Jan 2026 02:25:01 +0000 ROA not before: Tue 20 Jan 2026 02:20:01 +0000 ROA not after: Tue 19 Jan 2027 02:25:01 +0000 asID: 24147 IP address blocks: 203.86.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2b:d2:0c:9f:6f:76:97:c5:8e:df:f9:22:43:eb:a2:d9:8a:46:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:01 2026 GMT Not After : Jan 19 02:25:01 2027 GMT Subject: CN=EAC518A406680E96E18854DE8DAAB879680111AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:d3:59:9e:ae:96:54:37:36:ce:05:22:cf: aa:5c:74:42:b4:61:44:2f:4d:0d:f5:b7:6e:12:25: f6:eb:d9:9a:a0:03:84:52:09:19:6f:db:ce:73:71: 81:fe:f7:f2:0d:99:58:6a:bc:83:48:e5:48:95:7c: 82:f9:87:7b:02:95:80:fe:14:f2:c4:86:68:6a:45: d9:4f:40:55:d5:0f:c3:3d:45:ca:3a:92:f2:58:f6: 9e:40:b2:40:9d:54:38:4a:f7:73:a6:8d:4f:48:55: 4a:e5:f7:22:ad:d8:c7:e0:d9:29:c2:e0:26:01:85: 25:ec:b5:ec:b4:99:b6:04:6b:70:67:c6:3f:a9:75: fc:d2:55:c7:e7:c2:a7:0d:df:52:84:95:cd:5f:8f: e7:94:75:10:d1:85:45:12:26:b4:41:f0:6e:8c:b8: a5:65:09:c6:40:d5:9c:9a:fe:ce:d1:87:bb:35:06: 6e:ac:3a:a0:4f:0b:20:14:29:33:39:2c:89:c8:a2: 4f:b0:08:ee:48:c6:da:d6:b9:09:8f:4f:19:9f:b4: 3c:54:33:78:17:61:87:1e:c1:c9:04:f8:6f:c1:fd: fc:b6:32:86:94:98:c7:e3:5f:98:7d:35:4c:c7:af: 0b:5c:c3:7b:a4:2a:3f:52:30:3b:86:4f:1b:cd:0a: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C5:18:A4:06:68:0E:96:E1:88:54:DE:8D:AA:B8:79:68:01:11:AE X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e36312e302f32342d3234203d3e203234313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.61.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:cd:5b:21:04:3a:1e:c9:ed:0d:8f:ab:90:da:87:b3:ee:82: 2d:da:17:9d:e6:5b:56:1b:ca:3a:f6:81:13:64:8c:f6:85:68: 3a:49:17:20:66:7b:4f:fc:88:4f:dd:dd:a0:35:3f:1c:a0:8f: 8f:f0:9b:5c:50:37:76:db:28:7b:ef:58:20:65:19:d3:a9:ba: dd:c1:f3:07:06:dd:69:f7:01:24:0b:22:f2:66:59:d1:74:06: a3:06:67:36:62:25:50:72:88:bb:77:c5:94:cb:c7:b8:4a:22: 0f:bc:96:24:49:2c:0a:ca:cb:a3:91:39:9d:a3:0e:50:e6:5c: 37:7b:98:08:81:5d:d0:6c:a3:86:7e:87:6d:23:0d:b4:b7:c6: 7b:82:c9:0a:96:41:82:93:42:ac:67:69:98:95:d6:6d:33:ec: a2:2b:ab:83:14:93:3b:44:f9:4a:22:4e:0c:fa:c3:52:ec:62: 6b:11:37:7c:76:06:81:70:15:1d:bd:d9:f7:1f:ab:e3:03:98: 1b:03:5d:b4:5b:64:c2:ed:11:c4:f8:36:f3:3e:7d:a4:8b:87: 3c:c5:ae:60:c3:ac:a6:2b:56:ec:e5:b4:3d:ca:1e:29:af:9b: ff:73:41:27:5b:6d:39:aa:a2:cb:c0:ec:12:11:83:af:c6:a6: 6f:67:39:aa -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULyvSDJ9vdpfFjt/5IkProtmKRgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDFaFw0yNzAxMTkwMjI1MDFaMDMxMTAvBgNV BAMTKEVBQzUxOEE0MDY2ODBFOTZFMTg4NTRERThEQUFCODc5NjgwMTExQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+NNZnq6WVDc2zgUiz6pcdEK0 YUQvTQ31t24SJfbr2ZqgA4RSCRlv285zcYH+9/INmVhqvINI5UiVfIL5h3sClYD+ FPLEhmhqRdlPQFXVD8M9Rco6kvJY9p5AskCdVDhK93OmjU9IVUrl9yKt2Mfg2SnC 4CYBhSXstey0mbYEa3Bnxj+pdfzSVcfnwqcN31KElc1fj+eUdRDRhUUSJrRB8G6M uKVlCcZA1Zya/s7Rh7s1Bm6sOqBPCyAUKTM5LInIok+wCO5IxtrWuQmPTxmftDxU M3gXYYcewckE+G/B/fy2MoaUmMfjX5h9NUzHrwtcw3ukKj9SMDuGTxvNCq6jAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU6sUYpAZoDpbhiFTejaq4eWgBEa4wHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2 MmUzNjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtWPTANBgkqhkiG9w0BAQsFAAOCAQEALs1bIQQ6HsntDY+rkNqHs+6CLdoX neZbVhvKOvaBE2SM9oVoOkkXIGZ7T/yIT93doDU/HKCPj/CbXFA3dtsoe+9YIGUZ 06m63cHzBwbdafcBJAsi8mZZ0XQGowZnNmIlUHKIu3fFlMvHuEoiD7yWJEksCsrL o5E5naMOUOZcN3uYCIFd0Gyjhn6HbSMNtLfGe4LJCpZBgpNCrGdpmJXWbTPsoiur gxSTO0T5SiJODPrDUuxiaxE3fHYGgXAVHb3Z9x+r4wOYGwNdtFtkwu0RxPg28z59 pIuHPMWuYMOspitW7OW0PcoeKa+b/3NBJ1ttOaqiy8DsEhGDr8amb2c5qg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:33 2026 by rpki-client