This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/3130332e39322e38382e302f32322d3234203d3e203338333738.roa File: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (raw, json) Hash identifier: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA= Subject key identifier: 8B:37:95:AC:BE:03:33:15:5C:26:91:36:65:02:0B:A5:8F:86:EA:78 Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 03AC22F5AD5CB80D1D6C5FE97178BC132147F2CC Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/3130332e39322e38382e302f32322d3234203d3e203338333738.roa Signing time: Tue 20 Jan 2026 02:22:44 +0000 ROA not before: Tue 20 Jan 2026 02:17:44 +0000 ROA not after: Tue 19 Jan 2027 02:22:44 +0000 asID: 38378 IP address blocks: 103.92.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ac:22:f5:ad:5c:b8:0d:1d:6c:5f:e9:71:78:bc:13:21:47:f2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Jan 20 02:17:44 2026 GMT Not After : Jan 19 02:22:44 2027 GMT Subject: CN=8B3795ACBE0333155C26913665020BA58F86EA78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:5b:56:c0:21:a1:94:d4:8a:f6:55:81:bf: c5:4d:f8:14:00:03:c4:cc:6d:6a:3e:04:51:ab:9d: 75:7a:0c:ce:dc:bd:ec:f3:6e:9f:95:56:66:c2:8b: e6:06:89:69:b2:8f:e6:af:f8:9f:c4:13:16:91:60: b9:13:4a:c6:07:98:c8:34:4d:c1:e2:02:af:7a:d3: a9:35:cc:1a:87:55:30:23:d1:85:44:45:9b:7b:e3: 4b:91:ec:ee:4e:8a:c8:00:b2:02:92:82:6d:dc:64: a3:80:37:27:c6:92:4a:9e:38:18:55:ce:dc:8f:3a: b3:f6:28:02:41:a3:67:16:f7:a3:5c:c2:10:ab:73: 5b:8b:08:60:68:72:36:d8:18:25:8a:85:26:95:47: d2:6d:ec:30:ad:41:7d:83:9e:13:3d:7e:9e:d0:03: c5:3a:90:e8:78:26:24:42:ba:34:c0:c6:d6:08:63: 69:44:20:83:02:18:5c:10:c1:fa:41:10:86:7e:05: 38:73:0a:07:54:0d:48:71:a5:13:44:f1:3e:61:06: de:e3:a9:c1:8b:5b:9b:d6:9a:d1:8d:42:69:fd:a0: ea:b1:69:e2:4b:c5:0c:b5:66:71:d4:4c:c9:61:79: a2:bc:99:65:8b:87:23:87:3f:77:c8:d3:47:53:ee: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:37:95:AC:BE:03:33:15:5C:26:91:36:65:02:0B:A5:8F:86:EA:78 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/3130332e39322e38382e302f32322d3234203d3e203338333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.92.88.0/22 Signature Algorithm: sha256WithRSAEncryption bd:a4:e5:b2:df:2b:de:be:bc:f6:8b:fd:c5:59:f7:67:9d:77: 4e:20:dd:a0:fd:59:17:da:02:72:e8:27:e3:30:0e:6d:5f:a8: 90:86:c6:ad:ec:50:63:95:72:4d:32:96:fd:a1:5b:ac:7e:66: 9d:c7:15:1f:55:cb:de:7d:1d:8f:60:57:cb:ae:a4:6f:12:33: e6:d5:ab:41:58:17:da:f5:7a:05:67:92:bc:48:c6:c7:81:f9: 5d:7b:7b:8c:60:fc:6b:33:c9:d1:cc:ff:7a:25:ea:9b:ec:4d: 09:8d:3f:e4:b7:62:7d:e4:53:b2:a3:82:1a:65:78:73:76:37: 62:99:90:3f:3c:55:f1:0c:1d:42:3a:92:8e:20:f4:67:bb:52: 3d:fa:8c:93:ae:2e:72:f2:6d:0d:05:04:07:74:d9:0b:4e:28: 36:89:f9:5f:83:9d:a9:1b:e4:79:2e:2a:50:65:d8:6c:04:39: ed:85:50:3e:55:44:b0:c9:ec:4d:7f:d8:8c:1d:4a:69:4a:d5: 2a:de:96:29:13:ff:7c:fc:df:a0:f3:7e:d4:82:2b:2e:b9:63: 98:eb:ee:5e:e5:84:68:2a:b1:86:86:8f:b8:f9:ed:a5:80:48: d7:21:28:54:de:a0:21:4f:2a:07:7f:bc:85:20:eb:ae:32:89: a2:50:98:cf -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUA6wi9a1cuA0dbF/pcXi8EyFH8swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjAxMjAwMjE3NDRaFw0yNzAxMTkwMjIyNDRaMDMxMTAvBgNV BAMTKDhCMzc5NUFDQkUwMzMzMTU1QzI2OTEzNjY1MDIwQkE1OEY4NkVBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCFtWwCGhlNSK9lWBv8VN+BQA A8TMbWo+BFGrnXV6DM7cvezzbp+VVmbCi+YGiWmyj+av+J/EExaRYLkTSsYHmMg0 TcHiAq9606k1zBqHVTAj0YVERZt740uR7O5OisgAsgKSgm3cZKOANyfGkkqeOBhV ztyPOrP2KAJBo2cW96NcwhCrc1uLCGBocjbYGCWKhSaVR9Jt7DCtQX2DnhM9fp7Q A8U6kOh4JiRCujTAxtYIY2lEIIMCGFwQwfpBEIZ+BThzCgdUDUhxpRNE8T5hBt7j qcGLW5vWmtGNQmn9oOqxaeJLxQy1ZnHUTMlheaK8mWWLhyOHP3fI00dT7k9hAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUizeVrL4DMxVcJpE2ZQILpY+G6ngwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MzQwODAxLzAvMzEzMDMzMmUzOTMy MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzODMzMzczOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdcWDANBgkqhkiG9w0BAQsFAAOCAQEAvaTlst8r3r689ov9xVn3Z513TiDd oP1ZF9oCcugn4zAObV+okIbGrexQY5VyTTKW/aFbrH5mnccVH1XL3n0dj2BXy66k bxIz5tWrQVgX2vV6BWeSvEjGx4H5XXt7jGD8azPJ0cz/eiXqm+xNCY0/5LdifeRT sqOCGmV4c3Y3YpmQPzxV8QwdQjqSjiD0Z7tSPfqMk64ucvJtDQUEB3TZC04oNon5 X4OdqRvkeS4qUGXYbAQ57YVQPlVEsMnsTX/YjB1KaUrVKt6WKRP/fPzfoPN+1IIr LrljmOvuXuWEaCqxhoaPuPntpYBI1yEoVN6gIU8qB3+8hSDrrjKJolCYzw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:16 2026 by rpki-client