This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3130332e3231362e3130382e302f32322d3234203d3e203337393633.roa File: 3130332e3231362e3130382e302f32322d3234203d3e203337393633.roa (raw, json) Hash identifier: PVj8AKXZGpqgnyXN3N+0GWqD3qDlP6MOzJ8PFhiOdb4= Subject key identifier: ED:9B:2B:74:60:9E:74:56:AA:6F:F2:61:8C:C9:25:54:60:23:00:75 Certificate issuer: /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Certificate serial: 2C1C37E932DC32FDE2FFD7D89920935BC0C6C932 Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3130332e3231362e3130382e302f32322d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 02:20:17 +0000 ROA not before: Tue 20 Jan 2026 02:15:17 +0000 ROA not after: Tue 19 Jan 2027 02:20:17 +0000 asID: 37963 IP address blocks: 103.216.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1c:37:e9:32:dc:32:fd:e2:ff:d7:d8:99:20:93:5b:c0:c6:c9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Validity Not Before: Jan 20 02:15:17 2026 GMT Not After : Jan 19 02:20:17 2027 GMT Subject: CN=ED9B2B74609E7456AA6FF2618CC9255460230075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:2c:26:c1:69:fd:aa:85:2d:7c:a4:71:5c: fd:d7:ef:00:e3:55:bf:5a:d5:e2:cb:cb:84:be:b5: ac:cf:fd:71:35:52:8f:02:c7:85:03:8c:f4:95:4b: d1:12:c2:db:5f:b4:1d:2e:fa:85:58:92:b7:78:74: 8b:41:39:e1:4d:8a:8e:a7:6c:73:56:4a:d0:d3:14: bc:c8:19:12:f4:a1:64:90:1a:54:9c:61:74:dd:b1: 16:c8:d5:e2:24:77:68:28:1e:11:ac:d1:bb:ec:13: 9b:80:b7:d5:61:30:9c:b6:2d:e2:0d:bf:c3:f1:f0: ad:7c:05:30:86:d4:d8:34:af:0d:d2:57:1f:f9:f8: 8f:fa:8b:3f:05:fa:38:0a:c5:04:cb:13:37:0a:6f: a1:29:b3:5f:84:d8:6f:c2:6a:69:bd:fb:97:06:0a: f5:0e:76:09:46:7e:80:fd:e0:77:c4:47:41:15:5b: c7:46:36:1d:42:91:49:03:83:8a:3c:74:ad:9e:85: 48:fd:e1:01:f1:e8:95:69:ce:f6:6f:d3:17:7a:a2: f0:71:00:dd:5a:2e:dc:b5:69:fe:00:cd:96:21:06: c6:ce:80:55:be:6e:c9:af:3f:62:ed:f0:20:e4:50: b9:c9:d4:92:c0:a5:bb:60:0b:d7:a7:6a:a8:d1:08: 38:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9B:2B:74:60:9E:74:56:AA:6F:F2:61:8C:C9:25:54:60:23:00:75 X509v3 Authority Key Identifier: keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3130332e3231362e3130382e302f32322d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.108.0/22 Signature Algorithm: sha256WithRSAEncryption 18:6a:92:3d:65:9e:25:dc:49:5c:df:2c:dc:8b:67:8a:d1:5d: 9c:aa:bb:1f:b3:13:41:b2:85:29:75:52:17:f4:4b:b6:4d:d4: e6:95:4e:52:01:c3:fe:5d:0d:b2:fa:c5:c6:51:1a:10:48:3d: 76:e5:f4:58:c4:90:b2:13:8b:b6:14:25:7a:cb:7c:e9:8e:bf: c9:03:51:1f:32:b4:ff:2f:0a:e1:10:17:4c:cd:39:c4:9a:57: 31:92:0e:49:4d:32:e3:a0:1c:41:0d:ae:21:c2:7b:2d:bf:8c: 32:84:1f:d0:64:ef:44:f1:3f:7e:29:d5:b0:cb:90:fe:71:26: cf:9f:fb:b5:8a:c9:49:d9:2e:66:bb:eb:87:a1:26:63:08:4c: 29:b6:fa:ab:d8:ad:b3:92:ec:b6:c9:9c:09:3d:18:42:d2:bd: c7:72:73:40:9b:b7:b7:7f:56:72:ac:52:9e:a6:c5:dd:43:22: 1d:75:b5:6e:26:2a:80:08:9f:e2:fd:6a:43:26:73:72:df:1c: 46:77:cc:89:76:82:ad:a8:2a:9d:fb:29:1d:84:68:51:13:35: fe:9d:af:5b:ff:5b:eb:d2:6e:c2:74:cb:f4:a7:c7:9d:a7:bc: 32:5f:82:14:26:ce:d9:18:81:77:e3:d3:ef:a4:62:01:19:9b: 2e:00:09:d2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULBw36TLcMv3i/9fYmSCTW8DGyTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFD MENGMTU3RjAeFw0yNjAxMjAwMjE1MTdaFw0yNzAxMTkwMjIwMTdaMDMxMTAvBgNV BAMTKEVEOUIyQjc0NjA5RTc0NTZBQTZGRjI2MThDQzkyNTU0NjAyMzAwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnaywmwWn9qoUtfKRxXP3X7wDj Vb9a1eLLy4S+tazP/XE1Uo8Cx4UDjPSVS9ESwttftB0u+oVYkrd4dItBOeFNio6n bHNWStDTFLzIGRL0oWSQGlScYXTdsRbI1eIkd2goHhGs0bvsE5uAt9VhMJy2LeIN v8Px8K18BTCG1Ng0rw3SVx/5+I/6iz8F+jgKxQTLEzcKb6Eps1+E2G/Camm9+5cG CvUOdglGfoD94HfER0EVW8dGNh1CkUkDg4o8dK2ehUj94QHx6JVpzvZv0xd6ovBx AN1aLty1af4AzZYhBsbOgFW+bsmvP2Lt8CDkULnJ1JLApbtgC9enaqjRCDgnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU7ZsrdGCedFaqb/JhjMklVGAjAHUwHwYDVR0j BBgwFoAUBW9/ngNYfd/sagSeoPIPocDPFX8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODMzNzE1NS8wLzA1NkY3RjlFMDM1ODdEREZFQzZBMDQ5RUEwRjIw RkExQzBDRjE1N0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFDMENGMTU3Ri5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgzMzcxNTUvMC8zMTMwMzMyZTMy MzEzNjJlMzEzMDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfYbDANBgkqhkiG9w0BAQsFAAOCAQEAGGqSPWWeJdxJXN8s3Itn itFdnKq7H7MTQbKFKXVSF/RLtk3U5pVOUgHD/l0NsvrFxlEaEEg9duX0WMSQshOL thQlest86Y6/yQNRHzK0/y8K4RAXTM05xJpXMZIOSU0y46AcQQ2uIcJ7Lb+MMoQf 0GTvRPE/finVsMuQ/nEmz5/7tYrJSdkuZrvrh6EmYwhMKbb6q9its5LstsmcCT0Y QtK9x3JzQJu3t39WcqxSnqbF3UMiHXW1biYqgAif4v1qQyZzct8cRnfMiXaCragq nfspHYRoURM1/p2vW/9b69JuwnTL9KfHnae8Ml+CFCbO2RiBd+PT76RiARmbLgAJ 0g== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:21 2026 by rpki-client