This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232302e302f32322d3234203d3e203137363231.roa File: 3130332e3230302e3232302e302f32322d3234203d3e203137363231.roa (raw, json) Hash identifier: z8k2fN2Pdv0kR4aQFAD9lFiI0sJXlm/SuhSkv2n308w= Subject key identifier: 34:FD:B2:71:CF:A1:B8:A8:EB:06:16:2F:F8:89:9D:69:00:40:9A:AF Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 3172839F963179EBA68CCB0AEA5FACDFF4102B4F Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232302e302f32322d3234203d3e203137363231.roa Signing time: Tue 20 Jan 2026 01:19:14 +0000 ROA not before: Tue 20 Jan 2026 01:14:14 +0000 ROA not after: Tue 19 Jan 2027 01:19:14 +0000 asID: 17621 IP address blocks: 103.200.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:72:83:9f:96:31:79:eb:a6:8c:cb:0a:ea:5f:ac:df:f4:10:2b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jan 20 01:14:14 2026 GMT Not After : Jan 19 01:19:14 2027 GMT Subject: CN=34FDB271CFA1B8A8EB06162FF8899D6900409AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:b7:be:c3:52:e1:bb:34:28:f6:ed:3f:ea: 07:63:b9:72:16:88:55:c3:73:64:ff:29:f1:67:99: 8a:a9:0e:71:87:34:7c:4a:30:fe:64:e6:94:ce:c5: e7:f6:57:bd:71:f6:7d:1c:df:2c:17:1d:bc:d2:0a: df:1c:74:c3:06:52:a5:fb:9e:03:95:e8:85:a8:8e: 95:9f:0f:59:dd:d2:18:58:73:ec:24:7f:6a:a5:f4: 72:9a:f3:53:40:82:be:5e:b4:1b:c0:01:a4:f0:67: 6f:e2:5a:fc:76:de:02:33:a0:48:70:fe:52:14:7f: f1:a6:e8:f5:7a:4f:72:91:38:59:78:a9:5c:c9:eb: 62:b0:f7:7e:fd:e8:fd:df:55:7a:93:78:65:33:6d: e6:a1:f8:93:2f:8e:22:03:d2:8f:d5:02:54:9b:97: 46:9f:f1:68:d1:93:74:6d:62:42:d2:13:c8:74:90: 8f:9b:f4:fe:a7:5d:4b:4e:99:8a:80:76:ff:eb:e0: d9:cf:cb:86:25:45:ba:2e:07:d2:ed:0e:04:72:cb: 8a:ba:83:23:12:88:f4:0a:d8:29:c7:47:92:74:e4: 3a:d1:50:e7:83:5a:4e:e3:24:8f:9a:f8:f8:ec:df: 2a:ce:2f:57:83:96:2a:61:01:bd:5d:c0:8b:20:db: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FD:B2:71:CF:A1:B8:A8:EB:06:16:2F:F8:89:9D:69:00:40:9A:AF X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232302e302f32322d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.200.220.0/22 Signature Algorithm: sha256WithRSAEncryption ad:49:66:2e:fa:81:b1:d9:3c:7d:85:07:2d:77:6d:07:d7:f2: 7f:d3:15:d6:99:40:5a:94:9a:80:72:d2:8e:42:1b:14:23:e1: 5d:e9:27:b7:d6:38:95:01:7d:5f:b7:09:f9:69:1b:6e:2e:d9: 07:3f:37:5b:76:f3:31:33:16:5b:65:e6:e7:c0:1b:f1:88:a6: 29:2a:55:1f:5a:0c:b8:2f:2d:e3:c9:29:89:c7:17:a0:31:20: dd:fa:81:7c:13:bc:ff:8d:f4:b5:09:a8:ac:63:dc:52:ff:12: 13:1c:fe:6c:bd:9c:e1:a6:ba:46:90:b0:88:db:30:f5:1f:9f: 80:b3:93:e1:53:fe:a7:c8:a2:3b:d2:8a:43:70:3e:d0:b0:21: 22:b3:0f:33:a8:c8:44:8e:c2:6e:55:cd:8e:4d:32:5d:37:23: c7:2b:45:be:5a:95:53:a6:1e:32:77:5a:94:e0:4b:8f:d1:bf: 00:3e:3f:c0:31:5b:c9:b8:63:6e:27:0f:37:a3:8a:df:21:41: 54:0d:44:f3:b8:0f:5e:0b:80:69:40:68:ac:9e:40:3c:f6:1f: e5:e9:72:37:4a:3b:aa:69:86:66:61:13:d5:7a:86:95:35:e0: 4e:b4:ee:39:38:69:83:11:99:a3:34:3d:bd:bc:79:29:7b:68: b5:d8:51:18 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMXKDn5YxeeumjMsK6l+s3/QQK08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAxMjAwMTE0MTRaFw0yNzAxMTkwMTE5MTRaMDMxMTAvBgNV BAMTKDM0RkRCMjcxQ0ZBMUI4QThFQjA2MTYyRkY4ODk5RDY5MDA0MDlBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF2re+w1LhuzQo9u0/6gdjuXIW iFXDc2T/KfFnmYqpDnGHNHxKMP5k5pTOxef2V71x9n0c3ywXHbzSCt8cdMMGUqX7 ngOV6IWojpWfD1nd0hhYc+wkf2ql9HKa81NAgr5etBvAAaTwZ2/iWvx23gIzoEhw /lIUf/Gm6PV6T3KROFl4qVzJ62Kw93796P3fVXqTeGUzbeah+JMvjiID0o/VAlSb l0af8WjRk3RtYkLSE8h0kI+b9P6nXUtOmYqAdv/r4NnPy4YlRbouB9LtDgRyy4q6 gyMSiPQK2CnHR5J05DrRUOeDWk7jJI+a+Pjs3yrOL1eDliphAb1dwIsg29RxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUNP2ycc+huKjrBhYv+ImdaQBAmq8wHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC8zMTMwMzMyZTMy MzAzMDJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfI3DANBgkqhkiG9w0BAQsFAAOCAQEArUlmLvqBsdk8fYUHLXdt B9fyf9MV1plAWpSagHLSjkIbFCPhXeknt9Y4lQF9X7cJ+Wkbbi7ZBz83W3bzMTMW W2Xm58Ab8YimKSpVH1oMuC8t48kpiccXoDEg3fqBfBO8/430tQmorGPcUv8SExz+ bL2c4aa6RpCwiNsw9R+fgLOT4VP+p8iiO9KKQ3A+0LAhIrMPM6jIRI7CblXNjk0y XTcjxytFvlqVU6YeMndalOBLj9G/AD4/wDFbybhjbicPN6OK3yFBVA1E87gPXguA aUBorJ5APPYf5elyN0o7qmmGZmET1XqGlTXgTrTuOThpgxGZozQ9vbx5KXtotdhR GA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:49 2026 by rpki-client