This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e302e302f32322d3232203d3e203234343236.roa File: 3130332e3233362e302e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: 6NVwrt23sNikizOqaKz26gZnNbAKpxQNndl/ZTXgM6U= Subject key identifier: 0D:05:EF:04:A6:3C:87:D0:F6:A3:53:31:C3:86:FE:CA:9A:00:C8:21 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 632D079386448474EAB7480D3FB2B18329D24305 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e302e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:05 +0000 ROA not before: Tue 20 Jan 2026 01:14:05 +0000 ROA not after: Tue 19 Jan 2027 01:19:05 +0000 asID: 24426 IP address blocks: 103.236.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2d:07:93:86:44:84:74:ea:b7:48:0d:3f:b2:b1:83:29:d2:43:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:05 2026 GMT Not After : Jan 19 01:19:05 2027 GMT Subject: CN=0D05EF04A63C87D0F6A35331C386FECA9A00C821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a2:e0:dc:cd:66:ba:45:e9:9e:dd:25:d8:d0: ce:7d:91:24:61:05:ad:02:ab:9f:35:93:5b:e1:3a: 70:29:2f:4b:e6:4a:df:5d:77:ef:eb:fd:e9:ff:24: dc:3f:82:e2:17:8a:34:a8:08:f3:6b:34:81:38:1b: d7:e4:b0:a2:a2:8d:d6:28:e3:88:90:29:56:93:c6: d9:45:49:35:75:a8:f2:7e:7a:7e:78:a0:08:11:ca: df:1b:62:7f:b3:bd:63:91:9b:70:78:f7:52:b1:ae: 53:16:32:00:c2:ab:bd:c5:78:56:f4:17:b3:dc:17: 6b:35:5d:99:13:7d:e2:a0:75:4a:5f:d2:4a:19:7e: 6e:f9:38:33:2d:25:64:c6:25:97:ba:17:1f:62:09: b9:75:32:7a:68:38:f2:75:a4:1b:3e:39:4f:1d:24: bd:c8:9d:8b:db:cf:8d:d5:f8:c0:67:80:74:a6:c0: e0:5b:f7:95:3b:9f:11:52:9e:34:93:89:41:a2:cc: 4b:20:da:3d:4e:86:0f:71:7d:eb:86:66:59:93:81: 33:f5:a2:94:18:cf:6c:26:48:48:47:17:7e:f9:ee: b0:a7:19:fc:10:46:bc:44:ab:d3:d0:32:1e:82:74: 55:30:d9:b8:91:f4:48:bb:b6:da:88:f9:d5:8c:da: 87:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:05:EF:04:A6:3C:87:D0:F6:A3:53:31:C3:86:FE:CA:9A:00:C8:21 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e302e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.0.0/22 Signature Algorithm: sha256WithRSAEncryption c1:5d:70:af:e9:9c:11:c2:7c:f7:34:33:1f:3d:e6:32:59:d3: 4f:ef:9f:d2:79:b4:6f:5a:a3:2e:44:e5:95:a4:ac:bd:c0:dd: 05:f9:69:ba:78:22:9b:9e:9a:80:2c:7e:dd:0f:d7:37:52:59: fa:44:2c:e5:58:38:e7:28:22:a8:d4:b8:17:99:63:64:03:41: e4:29:d9:a9:2e:29:6d:37:4d:1e:bf:82:a6:87:25:ba:64:9b: b5:43:09:9a:36:69:08:6f:4b:82:60:98:46:d8:72:62:a3:8b: 33:b9:d1:49:af:1f:39:b0:13:51:d2:96:4e:cb:c9:aa:74:09: 91:5b:51:f6:c8:86:da:35:3a:af:cf:24:c8:c9:dc:2b:6e:c4: a9:22:57:e1:b2:32:ed:fb:a2:95:fa:d3:c8:43:ce:af:4e:db: ae:ed:3a:dc:cd:d3:80:64:a4:6a:2c:56:ad:ac:cd:cf:b5:d5: 2d:e1:b7:99:1e:d7:22:e4:af:69:ac:86:21:14:d5:84:50:5c: c7:ee:8d:59:3d:58:8a:60:ab:6d:75:6b:6c:50:ee:63:ae:d4: 4f:85:56:c8:37:c2:c7:85:11:93:ff:5c:b3:80:41:18:c1:f0: ed:14:ce:54:24:62:92:fa:e5:87:ca:28:4c:f9:46:db:bd:0c: c3:20:7c:1b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUYy0Hk4ZEhHTqt0gNP7KxgynSQwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDVaFw0yNzAxMTkwMTE5MDVaMDMxMTAvBgNV BAMTKDBEMDVFRjA0QTYzQzg3RDBGNkEzNTMzMUMzODZGRUNBOUEwMEM4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSouDczWa6Reme3SXY0M59kSRh Ba0Cq581k1vhOnApL0vmSt9dd+/r/en/JNw/guIXijSoCPNrNIE4G9fksKKijdYo 44iQKVaTxtlFSTV1qPJ+en54oAgRyt8bYn+zvWORm3B491KxrlMWMgDCq73FeFb0 F7PcF2s1XZkTfeKgdUpf0koZfm75ODMtJWTGJZe6Fx9iCbl1MnpoOPJ1pBs+OU8d JL3InYvbz43V+MBngHSmwOBb95U7nxFSnjSTiUGizEsg2j1Ohg9xfeuGZlmTgTP1 opQYz2wmSEhHF3757rCnGfwQRrxEq9PQMh6CdFUw2biR9Ei7ttqI+dWM2oc/AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUDQXvBKY8h9D2o1Mxw4b+ypoAyCEwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzEzMDMzMmUzMjMz MzYyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfsADANBgkqhkiG9w0BAQsFAAOCAQEAwV1wr+mcEcJ89zQzHz3mMlnTT++f 0nm0b1qjLkTllaSsvcDdBflpungim56agCx+3Q/XN1JZ+kQs5Vg45ygiqNS4F5lj ZANB5CnZqS4pbTdNHr+CpoclumSbtUMJmjZpCG9LgmCYRthyYqOLM7nRSa8fObAT UdKWTsvJqnQJkVtR9siG2jU6r88kyMncK27EqSJX4bIy7fuilfrTyEPOr07bru06 3M3TgGSkaixWrazNz7XVLeG3mR7XIuSvaayGIRTVhFBcx+6NWT1YimCrbXVrbFDu Y67UT4VWyDfCx4URk/9cs4BBGMHw7RTOVCRikvrlh8ooTPlG270MwyB8Gw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:49 2026 by rpki-client