This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/3130332e3233382e39362e302f32322d3234203d3e203539303733.roa File: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (raw, json) Hash identifier: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ= Subject key identifier: 59:BF:A9:94:31:92:7C:1D:7B:17:CF:67:51:4E:BB:B9:D6:5F:94:D2 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 4C869837AFB84013898DA76766BF490F4BC20BCA Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/3130332e3233382e39362e302f32322d3234203d3e203539303733.roa Signing time: Tue 20 Jan 2026 02:20:18 +0000 ROA not before: Tue 20 Jan 2026 02:15:18 +0000 ROA not after: Tue 19 Jan 2027 02:20:18 +0000 asID: 59073 IP address blocks: 103.238.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:86:98:37:af:b8:40:13:89:8d:a7:67:66:bf:49:0f:4b:c2:0b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Jan 20 02:15:18 2026 GMT Not After : Jan 19 02:20:18 2027 GMT Subject: CN=59BFA99431927C1D7B17CF67514EBBB9D65F94D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5f:70:71:c5:01:f6:8c:b7:5d:62:df:8a:00: c4:8d:bd:71:c1:5f:84:9c:43:a2:91:13:8d:a8:2e: 0e:32:c3:36:3a:fb:15:c7:f6:a5:bb:e8:7a:12:5a: 75:6b:f3:8c:be:cd:2f:97:e3:0f:ec:96:77:7b:e5: a6:70:6a:1f:99:57:70:6b:5e:a9:b2:2a:00:14:5f: e1:e4:ef:cf:a1:71:19:38:64:9a:5a:e9:65:cd:52: e7:16:fc:03:76:f7:47:96:fd:e2:a4:48:47:02:36: 55:2a:f0:01:e5:81:09:71:53:29:5d:45:09:06:e8: 41:1e:a5:61:9c:50:d6:0a:70:67:40:9b:df:35:2c: b3:13:de:1b:35:38:b0:d8:e5:0c:74:06:c7:5c:f2: f5:d6:e7:90:51:33:4e:b3:39:29:c1:a9:e8:49:7c: 20:aa:94:db:16:80:fd:ac:c4:be:f1:8d:d4:f5:ff: 41:cd:54:97:37:10:ca:c2:b1:cb:87:8f:98:30:bf: 4b:27:21:18:61:98:11:36:a8:98:a4:87:69:4a:2a: 62:eb:ac:47:43:44:9e:e0:5d:47:d6:f5:74:a8:63: 34:8d:6f:a0:4e:2d:9b:25:64:fd:09:1c:98:d0:db: 1b:c0:bf:6f:66:71:a7:26:6f:fd:b5:ff:88:08:06: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BF:A9:94:31:92:7C:1D:7B:17:CF:67:51:4E:BB:B9:D6:5F:94:D2 X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/3130332e3233382e39362e302f32322d3234203d3e203539303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.96.0/22 Signature Algorithm: sha256WithRSAEncryption ce:25:01:3f:23:a6:82:4e:60:8e:85:c8:2a:58:17:7f:f6:70: 3b:94:99:05:14:fc:ef:31:ae:67:ec:59:de:57:e3:d2:3f:68: cb:2b:36:59:03:4b:fe:90:f1:e7:81:52:7a:04:bc:66:0e:8d: c8:e1:aa:e9:1d:10:27:22:3f:c8:27:b8:c4:09:14:82:18:f2: 52:88:b2:80:49:c6:7c:8a:5c:b5:d3:42:de:b8:36:22:35:d5: 24:1e:61:2a:48:1c:9e:d6:67:59:d4:5a:f9:fc:62:e3:64:54: bb:8d:32:0a:96:48:f4:6d:4c:d7:1b:28:a7:f4:9e:2e:12:ee: d3:c2:cc:a3:97:3c:fc:bb:7a:42:25:dd:0f:32:02:ec:c6:bb: 8f:c6:c7:b7:1d:3e:16:06:dc:4b:61:f5:a6:85:4f:aa:5c:d0: b5:08:3f:fd:94:19:c3:7d:ec:e7:20:7c:25:a5:0c:c2:d2:85: 20:ba:20:04:18:2a:5d:1e:78:44:7c:e7:80:b9:89:e3:9f:5e: a3:74:d7:ff:c6:8b:f9:e1:ec:15:d0:f2:87:34:67:a3:fb:0d: 35:10:59:de:3c:d7:07:90:14:2e:6e:3f:2b:ad:09:69:ff:57: 6a:6f:86:8d:29:32:c1:63:8a:c3:4f:c1:77:28:69:74:4a:0d: ca:a4:cf:4c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTIaYN6+4QBOJjadnZr9JD0vCC8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjAxMjAwMjE1MThaFw0yNzAxMTkwMjIwMThaMDMxMTAvBgNV BAMTKDU5QkZBOTk0MzE5MjdDMUQ3QjE3Q0Y2NzUxNEVCQkI5RDY1Rjk0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhX3BxxQH2jLddYt+KAMSNvXHB X4ScQ6KRE42oLg4ywzY6+xXH9qW76HoSWnVr84y+zS+X4w/slnd75aZwah+ZV3Br XqmyKgAUX+Hk78+hcRk4ZJpa6WXNUucW/AN290eW/eKkSEcCNlUq8AHlgQlxUyld RQkG6EEepWGcUNYKcGdAm981LLMT3hs1OLDY5Qx0Bsdc8vXW55BRM06zOSnBqehJ fCCqlNsWgP2sxL7xjdT1/0HNVJc3EMrCscuHj5gwv0snIRhhmBE2qJikh2lKKmLr rEdDRJ7gXUfW9XSoYzSNb6BOLZslZP0JHJjQ2xvAv29mcacmb/21/4gIBjo5AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUWb+plDGSfB17F89nUU67udZflNIwHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDY1NDcyMy8wLzMxMzAzMzJlMzIz MzM4MmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzOTMwMzczMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfuYDANBgkqhkiG9w0BAQsFAAOCAQEAziUBPyOmgk5gjoXIKlgXf/Zw O5SZBRT87zGuZ+xZ3lfj0j9oyys2WQNL/pDx54FSegS8Zg6NyOGq6R0QJyI/yCe4 xAkUghjyUoiygEnGfIpctdNC3rg2IjXVJB5hKkgcntZnWdRa+fxi42RUu40yCpZI 9G1M1xsop/SeLhLu08LMo5c8/Lt6QiXdDzIC7Ma7j8bHtx0+FgbcS2H1poVPqlzQ tQg//ZQZw33s5yB8JaUMwtKFILogBBgqXR54RHzngLmJ459eo3TX/8aL+eHsFdDy hzRno/sNNRBZ3jzXB5AULm4/K60Jaf9Xam+GjSkywWOKw0/BdyhpdEoNyqTPTA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:14:02 2026 by rpki-client