This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e34382e302f32322d3232203d3e203234343236.roa File: 3130332e33352e34382e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: C3eR/ZBh1tj/IFvovYEncXrIRPI6yBfpBEtFdUu2uxQ= Subject key identifier: 84:56:9B:BC:00:E0:2A:92:AA:8E:A8:54:40:62:80:52:5F:C7:DF:69 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 47E76438FE0406409BBA2A64B7BED97E9BCAA114 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e34382e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:06 +0000 ROA not before: Tue 20 Jan 2026 01:14:06 +0000 ROA not after: Tue 19 Jan 2027 01:19:06 +0000 asID: 24426 IP address blocks: 103.35.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e7:64:38:fe:04:06:40:9b:ba:2a:64:b7:be:d9:7e:9b:ca:a1:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:06 2026 GMT Not After : Jan 19 01:19:06 2027 GMT Subject: CN=84569BBC00E02A92AA8EA854406280525FC7DF69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:77:59:5c:88:69:a4:c2:7b:9b:60:34:0f: 7b:b8:f1:91:ad:5a:80:f1:c2:e9:d2:de:c6:86:c8: 2c:f6:63:2f:f9:36:a9:0d:56:91:f0:ac:83:5b:6e: 2a:a1:64:e6:0e:fe:64:1d:30:84:c7:5a:c0:37:5a: c9:c2:93:4b:6f:e8:02:10:bb:55:6b:16:17:27:c8: 33:a8:fc:c8:8a:6c:b9:7e:2e:1e:36:c0:cf:52:24: bc:54:c5:5f:c8:96:9e:4c:3d:5e:0a:b7:6f:13:d8: c5:d3:a1:c5:02:bd:48:f9:de:ce:38:77:b8:2d:ec: 47:67:e6:8e:66:9d:9c:56:94:f1:93:9f:18:e0:73: e7:9d:1d:29:2d:24:97:3e:ec:b8:fe:c1:d1:54:fc: 5c:c7:62:41:5d:59:60:f7:0f:25:0b:32:61:30:0a: d3:73:8d:58:43:1f:be:36:39:30:73:92:63:7b:61: 72:e9:cc:fc:a6:cd:ea:da:79:54:eb:87:ad:42:fd: 77:38:58:6f:aa:72:0e:6b:97:ba:b2:fa:b9:d9:a1: 61:22:d0:36:12:ba:90:57:45:b4:25:19:9d:f0:72: ad:d4:71:b8:04:49:90:86:3d:04:85:55:90:13:48: 08:ad:cd:11:87:a9:5f:cc:c4:17:21:d2:b1:20:5b: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:56:9B:BC:00:E0:2A:92:AA:8E:A8:54:40:62:80:52:5F:C7:DF:69 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e34382e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.48.0/22 Signature Algorithm: sha256WithRSAEncryption 88:69:7c:65:77:ca:77:34:22:8a:72:49:f1:59:7a:2c:cf:db: cb:23:92:69:a4:d9:c1:3d:c6:1a:ca:17:4d:51:a0:3d:fc:c6: 14:c5:7a:b9:6f:f1:72:a4:38:fe:80:fd:3f:9d:fa:e8:d1:a5: 26:6b:c1:43:da:83:5e:a8:ce:c2:64:20:33:75:1c:82:8e:e3: 8f:9d:f0:f1:1a:b9:ec:cd:31:48:3a:23:b9:93:94:84:5b:a1: e9:1e:e2:24:fb:7c:86:a7:e7:63:2d:30:09:1b:b0:f8:d5:50: e0:80:3d:ca:3c:35:dc:7f:f5:6a:c0:8b:2f:8f:3f:25:74:cf: 17:3f:dd:3a:2a:f8:3c:07:39:a9:ec:f3:76:39:63:5b:d2:a5: a6:66:d5:4a:51:50:d8:18:07:8b:0b:20:c7:3d:48:57:fc:64: 1c:a0:18:f8:15:3b:59:3f:f3:6f:21:f4:e9:7d:c2:84:77:2f: 28:71:bc:85:d8:6f:5e:89:b4:fa:11:f0:01:73:cc:55:f7:b4: df:49:06:96:35:8e:e8:34:4a:26:d2:31:0b:70:5e:7c:c4:93: 03:9a:28:83:14:04:a7:b0:c3:6f:58:00:d7:54:8f:a4:e4:a7: be:f7:3d:66:fd:59:45:34:e3:e5:d5:ee:66:6f:48:89:8f:e3: a1:e2:8e:ad -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUR+dkOP4EBkCbuipkt77ZfpvKoRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDZaFw0yNzAxMTkwMTE5MDZaMDMxMTAvBgNV BAMTKDg0NTY5QkJDMDBFMDJBOTJBQThFQTg1NDQwNjI4MDUyNUZDN0RGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2ndZXIhppMJ7m2A0D3u48ZGt WoDxwunS3saGyCz2Yy/5NqkNVpHwrINbbiqhZOYO/mQdMITHWsA3WsnCk0tv6AIQ u1VrFhcnyDOo/MiKbLl+Lh42wM9SJLxUxV/Ilp5MPV4Kt28T2MXTocUCvUj53s44 d7gt7Edn5o5mnZxWlPGTnxjgc+edHSktJJc+7Lj+wdFU/FzHYkFdWWD3DyULMmEw CtNzjVhDH742OTBzkmN7YXLpzPymzeraeVTrh61C/Xc4WG+qcg5rl7qy+rnZoWEi 0DYSupBXRbQlGZ3wcq3UcbgESZCGPQSFVZATSAitzRGHqV/MxBch0rEgWyzbAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUhFabvADgKpKqjqhUQGKAUl/H32kwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzEzMDMzMmUzMzM1 MmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcjMDANBgkqhkiG9w0BAQsFAAOCAQEAiGl8ZXfKdzQiinJJ8Vl6LM/byyOS aaTZwT3GGsoXTVGgPfzGFMV6uW/xcqQ4/oD9P5366NGlJmvBQ9qDXqjOwmQgM3Uc go7jj53w8Rq57M0xSDojuZOUhFuh6R7iJPt8hqfnYy0wCRuw+NVQ4IA9yjw13H/1 asCLL48/JXTPFz/dOir4PAc5qezzdjljW9KlpmbVSlFQ2BgHiwsgxz1IV/xkHKAY +BU7WT/zbyH06X3ChHcvKHG8hdhvXom0+hHwAXPMVfe030kGljWO6DRKJtIxC3Be fMSTA5oogxQEp7DDb1gA11SPpOSnvvc9Zv1ZRTTj5dXuZm9IiY/joeKOrQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:45 2026 by rpki-client