This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e382e302f32322d3232203d3e203234343236.roa File: 3130332e3233362e382e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: fNgONnmlucc/Y3D7rjQldw9qVIsFrhHNPULXKsSDYIQ= Subject key identifier: 27:30:97:12:01:7C:57:4B:9A:8D:C7:09:F2:1E:FE:2D:23:F2:0C:A4 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 0DF9C37ECCC8BE48B601217583B62DAE214134C0 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e382e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:07 +0000 ROA not before: Tue 20 Jan 2026 01:14:07 +0000 ROA not after: Tue 19 Jan 2027 01:19:07 +0000 asID: 24426 IP address blocks: 103.236.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f9:c3:7e:cc:c8:be:48:b6:01:21:75:83:b6:2d:ae:21:41:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:07 2026 GMT Not After : Jan 19 01:19:07 2027 GMT Subject: CN=27309712017C574B9A8DC709F21EFE2D23F20CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:28:56:94:da:1b:34:b1:7e:40:c7:3a:8b:5a: 50:11:a5:87:4f:64:89:25:79:19:4a:b5:32:97:95: d0:c0:7e:c3:aa:ac:6b:c0:11:e9:c4:ca:51:02:dc: 4f:06:7f:80:f6:32:a3:9f:e4:ef:fb:44:db:99:d9: d1:f2:ac:11:06:21:12:55:34:0d:41:8f:bd:7c:1f: 4b:bb:a9:67:89:b0:d7:2d:c5:57:9a:e7:5e:75:44: 5a:8f:f1:c3:5c:dc:9a:db:52:43:f0:a3:e6:cd:63: 9d:36:11:99:bc:bb:37:34:a1:f7:ff:0e:67:86:90: 46:7e:57:83:29:38:b8:02:5e:20:68:9a:be:42:2c: 06:6f:e7:30:7e:f2:a1:83:2e:55:27:85:3b:78:b7: e1:c8:bb:84:29:dd:63:53:c6:a7:e8:76:28:99:32: f7:e6:f5:d6:b8:64:29:57:30:b6:d9:77:ab:e7:57: af:9c:2d:b7:12:a8:7a:60:f3:62:3d:b4:43:25:54: d1:be:83:cc:62:41:6a:d4:08:d3:f2:af:2e:05:36: f3:c4:d6:ce:19:66:cd:85:7f:94:9f:6b:9c:60:54: f7:6c:c0:5e:6b:8c:07:d9:07:47:ca:77:53:ce:4b: 94:8c:17:26:51:f8:d0:70:e5:10:59:01:29:7e:b9: 67:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:30:97:12:01:7C:57:4B:9A:8D:C7:09:F2:1E:FE:2D:23:F2:0C:A4 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e382e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.8.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:b5:97:8b:b1:de:a3:ea:28:a2:14:5b:c5:d3:7f:51:5a:31: b3:90:77:3b:2a:24:96:a9:c5:48:bb:89:ad:b1:2d:5a:ec:2e: 54:ab:9e:21:44:32:d3:e5:ec:21:4b:ca:6b:bb:26:0a:00:c8: 0a:71:44:66:0e:c6:74:f9:57:9c:da:5b:98:ba:30:a4:90:fe: 0c:dd:35:e6:09:0a:23:09:d3:16:6d:c4:3c:38:b9:ad:c3:63: 76:82:97:91:9b:09:55:ed:d3:7a:a4:5d:eb:42:f0:2c:92:1b: 31:f0:4e:7b:a1:60:6f:f0:eb:43:b6:08:57:3b:fb:d3:69:f0: b5:c4:e7:83:c0:ca:f5:30:9a:92:a4:92:96:f0:ef:c5:92:8d: 42:85:09:55:5f:99:dc:30:1f:c4:54:95:ad:cd:cf:7c:f8:65: e2:5a:93:f6:b9:8b:21:10:71:0f:eb:66:06:8c:df:aa:68:39: a2:dc:23:84:61:b7:f3:a8:8c:bf:85:16:0f:96:3b:b6:97:e3: 3c:b0:b8:6d:d6:df:65:83:8a:46:54:e2:59:2c:7b:f5:d5:e6: a7:4a:e0:e7:18:80:17:29:23:03:32:c9:c9:7c:e1:6a:d0:a1: a0:4e:b8:36:9a:2a:84:55:49:bd:7b:9d:b8:b6:d0:2e:0c:02: 65:8c:eb:48 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDfnDfszIvki2ASF1g7YtriFBNMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDdaFw0yNzAxMTkwMTE5MDdaMDMxMTAvBgNV BAMTKDI3MzA5NzEyMDE3QzU3NEI5QThEQzcwOUYyMUVGRTJEMjNGMjBDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOKFaU2hs0sX5AxzqLWlARpYdP ZIkleRlKtTKXldDAfsOqrGvAEenEylEC3E8Gf4D2MqOf5O/7RNuZ2dHyrBEGIRJV NA1Bj718H0u7qWeJsNctxVea5151RFqP8cNc3JrbUkPwo+bNY502EZm8uzc0off/ DmeGkEZ+V4MpOLgCXiBomr5CLAZv5zB+8qGDLlUnhTt4t+HIu4Qp3WNTxqfodiiZ Mvfm9da4ZClXMLbZd6vnV6+cLbcSqHpg82I9tEMlVNG+g8xiQWrUCNPyry4FNvPE 1s4ZZs2Ff5Sfa5xgVPdswF5rjAfZB0fKd1POS5SMFyZR+NBw5RBZASl+uWcRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUJzCXEgF8V0uajccJ8h7+LSPyDKQwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzEzMDMzMmUzMjMz MzYyZTM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfsCDANBgkqhkiG9w0BAQsFAAOCAQEALrWXi7Heo+ooohRbxdN/UVoxs5B3 OyoklqnFSLuJrbEtWuwuVKueIUQy0+XsIUvKa7smCgDICnFEZg7GdPlXnNpbmLow pJD+DN015gkKIwnTFm3EPDi5rcNjdoKXkZsJVe3TeqRd60LwLJIbMfBOe6Fgb/Dr Q7YIVzv702nwtcTng8DK9TCakqSSlvDvxZKNQoUJVV+Z3DAfxFSVrc3PfPhl4lqT 9rmLIRBxD+tmBozfqmg5otwjhGG386iMv4UWD5Y7tpfjPLC4bdbfZYOKRlTiWSx7 9dXmp0rg5xiAFykjAzLJyXzhatChoE64NpoqhFVJvXuduLbQLgwCZYzrSA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:50 2026 by rpki-client