This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e342e302f32322d3232203d3e203234343236.roa File: 3130332e3233362e342e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: Y567v4imLwlbZhutywmnzet13XPxmNcJnbaIkTjPA2k= Subject key identifier: 32:50:18:72:1F:54:4A:33:02:4C:2F:4A:4C:AF:38:B6:2C:34:C0:57 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 5EF2ED2A5B573FE58781348758696C36DB178512 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e342e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:06 +0000 ROA not before: Tue 20 Jan 2026 01:14:06 +0000 ROA not after: Tue 19 Jan 2027 01:19:06 +0000 asID: 24426 IP address blocks: 103.236.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f2:ed:2a:5b:57:3f:e5:87:81:34:87:58:69:6c:36:db:17:85:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:06 2026 GMT Not After : Jan 19 01:19:06 2027 GMT Subject: CN=325018721F544A33024C2F4A4CAF38B62C34C057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:37:66:6b:5c:e7:bb:12:ff:00:d1:89:e1: 09:85:b7:3d:ca:32:84:2f:2e:be:20:f0:7d:7e:52: 4e:c1:ae:8e:42:e4:55:50:25:ba:37:09:74:24:da: eb:f5:fb:4f:7c:4d:1c:2a:c1:d5:a8:4d:1e:26:1f: b1:da:3c:8e:0f:d4:70:e8:2d:ef:1e:cc:b2:24:38: 8b:4f:69:03:77:1f:67:0a:30:f3:89:34:f6:d3:7a: b6:75:05:0d:e1:1d:df:cc:fb:e9:c9:dc:83:c9:d2: 37:22:5a:ba:5c:69:16:f0:3f:b9:a5:af:0f:2b:29: 82:ce:bb:07:7d:2a:ad:e7:5b:5a:61:2a:77:2f:ac: 8a:54:71:3d:69:3e:07:9b:77:ef:15:a6:98:f6:6e: 92:ab:dc:9e:88:b5:f1:5b:33:3f:07:2b:f5:65:b3: 23:6d:a5:4e:9e:66:da:66:69:9d:27:db:57:43:5b: cc:70:37:c0:6c:07:71:c2:b1:b6:dd:ec:cc:64:83: f0:96:f5:08:5f:fe:fc:3d:71:11:92:6e:58:8b:92: 29:3a:e2:8d:25:47:93:3b:dc:5c:fa:bc:ff:cc:1d: fd:19:ce:21:28:d1:24:f2:cf:17:81:bc:be:84:9c: 88:b7:35:43:0e:29:37:45:02:ba:f0:f1:dc:f8:de: f6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:50:18:72:1F:54:4A:33:02:4C:2F:4A:4C:AF:38:B6:2C:34:C0:57 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e342e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.4.0/22 Signature Algorithm: sha256WithRSAEncryption c7:32:26:8f:d4:af:81:81:61:72:16:48:6f:ce:ba:05:c4:23: c2:e5:07:ba:0d:9e:ce:9a:69:af:db:05:dd:56:fd:50:12:c5: 29:44:c7:07:4f:44:8f:91:07:06:88:56:09:4f:04:91:ef:c2: 44:13:9b:8a:88:f5:c5:a5:9a:49:22:49:c5:a7:43:5b:0a:10: 49:74:18:0e:6d:2a:c3:ad:4e:5d:ff:74:7d:72:8f:81:b3:95: e5:ba:55:cc:a3:f2:d6:62:bb:cc:19:c1:68:09:c7:7c:4e:93: 33:45:07:f8:38:70:93:c7:d3:48:84:1f:0c:cd:b2:7a:08:4d: 48:b9:72:c8:60:18:1b:d9:ed:a4:2d:67:d9:64:c7:65:d7:ae: 7f:8a:b0:95:96:8a:82:bc:d9:80:e5:df:0c:65:b5:ef:df:71: 3b:87:ce:7d:77:66:21:f9:27:a3:cd:36:6c:81:59:bf:ef:5b: 00:4b:0e:1c:fa:19:be:59:30:20:f5:da:44:13:69:ec:bf:2d: da:0b:7c:b1:32:8e:81:0b:3a:35:5e:87:df:6f:7e:54:d2:1d: b7:3d:67:c9:56:63:9d:a3:e8:fc:22:94:ed:b9:0c:98:68:6f: 9c:bf:76:f5:03:51:06:f6:f9:cf:14:61:09:a0:1f:ff:5f:60: fc:0c:41:c2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUXvLtKltXP+WHgTSHWGlsNtsXhRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDZaFw0yNzAxMTkwMTE5MDZaMDMxMTAvBgNV BAMTKDMyNTAxODcyMUY1NDRBMzMwMjRDMkY0QTRDQUYzOEI2MkMzNEMwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvDdma1znuxL/ANGJ4QmFtz3K MoQvLr4g8H1+Uk7Bro5C5FVQJbo3CXQk2uv1+098TRwqwdWoTR4mH7HaPI4P1HDo Le8ezLIkOItPaQN3H2cKMPOJNPbTerZ1BQ3hHd/M++nJ3IPJ0jciWrpcaRbwP7ml rw8rKYLOuwd9Kq3nW1phKncvrIpUcT1pPgebd+8Vppj2bpKr3J6ItfFbMz8HK/Vl syNtpU6eZtpmaZ0n21dDW8xwN8BsB3HCsbbd7Mxkg/CW9Qhf/vw9cRGSbliLkik6 4o0lR5M73Fz6vP/MHf0ZziEo0STyzxeBvL6EnIi3NUMOKTdFArrw8dz43vbfAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUMlAYch9USjMCTC9KTK84tiw0wFcwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzEzMDMzMmUzMjMz MzYyZTM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfsBDANBgkqhkiG9w0BAQsFAAOCAQEAxzImj9SvgYFhchZIb866BcQjwuUH ug2ezpppr9sF3Vb9UBLFKUTHB09Ej5EHBohWCU8Eke/CRBObioj1xaWaSSJJxadD WwoQSXQYDm0qw61OXf90fXKPgbOV5bpVzKPy1mK7zBnBaAnHfE6TM0UH+Dhwk8fT SIQfDM2yeghNSLlyyGAYG9ntpC1n2WTHZdeuf4qwlZaKgrzZgOXfDGW1799xO4fO fXdmIfkno802bIFZv+9bAEsOHPoZvlkwIPXaRBNp7L8t2gt8sTKOgQs6NV6H329+ VNIdtz1nyVZjnaPo/CKU7bkMmGhvnL929QNRBvb5zxRhCaAf/19g/AxBwg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:44 2026 by rpki-client