This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33362e302f32322d3232203d3e203234343236.roa File: 3130332e3233362e33362e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: zWIQ1SAKhgbUZcs/ZGURlcdjTU0Ydw63cNnqEy1Uvh8= Subject key identifier: B3:97:5D:0E:F1:BB:AC:74:BE:5D:07:FA:AA:17:50:2F:98:05:5B:F1 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 45CD53D992348934140650CE37FD44A6AD636435 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33362e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:05 +0000 ROA not before: Tue 20 Jan 2026 01:14:05 +0000 ROA not after: Tue 19 Jan 2027 01:19:05 +0000 asID: 24426 IP address blocks: 103.236.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cd:53:d9:92:34:89:34:14:06:50:ce:37:fd:44:a6:ad:63:64:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:05 2026 GMT Not After : Jan 19 01:19:05 2027 GMT Subject: CN=B3975D0EF1BBAC74BE5D07FAAA17502F98055BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:a3:6f:7d:78:17:64:59:9f:d4:ef:26:ec: 9b:bc:1a:6e:27:4e:a5:7b:95:1d:a9:2e:5d:54:cd: 1c:2d:99:4d:0f:d2:e2:3a:0a:64:25:22:be:19:b5: 8f:6b:60:fe:33:a6:c3:78:d1:0b:c1:05:bb:1d:f0: cd:e5:89:97:b1:51:96:cc:c1:a2:78:e2:4c:52:1b: 39:85:83:cd:7a:85:b7:ec:e4:83:0c:58:73:40:d2: 78:20:57:ac:75:58:72:95:14:35:d7:24:38:82:a6: 13:cb:62:19:8e:c1:11:2f:9b:88:86:d4:94:87:93: d7:3a:5e:93:e1:be:2e:7f:88:b3:a0:35:d1:a9:1e: 0d:49:97:ba:4d:2b:21:a1:0c:15:ed:74:3e:6c:7d: b2:3a:02:00:1f:1c:18:c7:86:28:f4:80:b5:ef:7f: a9:05:a7:f6:57:8f:ae:24:17:ea:86:cd:ed:68:39: 2a:f1:c1:a5:97:75:22:53:20:31:48:a7:3c:c2:4e: 60:b8:0d:55:08:cc:8a:01:e5:e6:17:c7:88:0d:c5: a4:94:3e:67:83:c6:17:0e:b8:68:c8:57:70:33:d7: 4a:2e:ec:ec:41:b4:03:18:a4:6e:04:6d:ae:13:16: 09:32:fd:ce:f1:77:2e:11:88:fe:32:0d:e9:69:45: db:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:97:5D:0E:F1:BB:AC:74:BE:5D:07:FA:AA:17:50:2F:98:05:5B:F1 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33362e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.36.0/22 Signature Algorithm: sha256WithRSAEncryption c6:ec:ec:24:94:fe:a9:4d:fa:63:5a:98:b4:0b:af:2a:26:aa: dd:60:48:e6:01:ff:57:56:dd:b3:53:06:5f:a9:a6:50:83:9b: 82:0a:9c:cd:79:ce:7c:c8:ce:13:41:67:ec:0d:58:8e:7b:d1: c1:26:16:bf:c0:b0:e4:2a:08:94:56:b6:6a:43:41:f7:7f:ea: 64:34:59:e8:15:fa:b4:a7:2d:4d:40:e7:8f:34:f0:3a:b1:85: a7:c6:f4:d3:a4:ba:75:3d:f5:be:84:bf:5e:e2:f3:e3:8f:ca: 1c:24:22:2d:96:27:84:8c:7c:05:58:61:28:16:37:b1:09:d0: ee:11:bd:75:9d:93:20:73:5a:03:a5:c0:7b:ef:2c:fd:58:b2: 8f:a7:3d:0b:08:8a:b8:fd:fc:9e:4e:e4:8e:b6:dd:f4:74:d3: 9f:dd:33:fb:7a:58:96:97:bd:b6:fd:07:e2:46:3d:20:5b:6f: 6a:a8:24:63:d0:50:a9:68:cb:3c:51:83:08:47:be:ba:bb:78: 17:93:5a:81:2c:ce:fe:92:21:04:fa:35:29:9e:c8:cd:8b:3e: 9e:db:34:93:5d:e3:ea:6c:70:26:c5:e7:9c:a0:4b:62:f7:d0: aa:c9:66:d9:88:96:0d:ff:26:fd:70:c1:ca:40:56:65:b3:17: 1f:3a:50:50 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIURc1T2ZI0iTQUBlDON/1Epq1jZDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDVaFw0yNzAxMTkwMTE5MDVaMDMxMTAvBgNV BAMTKEIzOTc1RDBFRjFCQkFDNzRCRTVEMDdGQUFBMTc1MDJGOTgwNTVCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxoKNvfXgXZFmf1O8m7Ju8Gm4n TqV7lR2pLl1UzRwtmU0P0uI6CmQlIr4ZtY9rYP4zpsN40QvBBbsd8M3liZexUZbM waJ44kxSGzmFg816hbfs5IMMWHNA0nggV6x1WHKVFDXXJDiCphPLYhmOwREvm4iG 1JSHk9c6XpPhvi5/iLOgNdGpHg1Jl7pNKyGhDBXtdD5sfbI6AgAfHBjHhij0gLXv f6kFp/ZXj64kF+qGze1oOSrxwaWXdSJTIDFIpzzCTmC4DVUIzIoB5eYXx4gNxaSU PmeDxhcOuGjIV3Az10ou7OxBtAMYpG4Eba4TFgky/c7xdy4RiP4yDelpRdtTAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUs5ddDvG7rHS+XQf6qhdQL5gFW/EwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODE0MDU0Ny8wLzMxMzAzMzJlMzIz MzM2MmUzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfsJDANBgkqhkiG9w0BAQsFAAOCAQEAxuzsJJT+qU36Y1qYtAuvKiaq 3WBI5gH/V1bds1MGX6mmUIObggqczXnOfMjOE0Fn7A1YjnvRwSYWv8Cw5CoIlFa2 akNB93/qZDRZ6BX6tKctTUDnjzTwOrGFp8b006S6dT31voS/XuLz44/KHCQiLZYn hIx8BVhhKBY3sQnQ7hG9dZ2TIHNaA6XAe+8s/Viyj6c9CwiKuP38nk7kjrbd9HTT n90z+3pYlpe9tv0H4kY9IFtvaqgkY9BQqWjLPFGDCEe+urt4F5NagSzO/pIhBPo1 KZ7IzYs+nts0k13j6mxwJsXnnKBLYvfQqslm2YiWDf8m/XDBykBWZbMXHzpQUA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:46 2026 by rpki-client