This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138362e302f32342d3234203d3e203539303433.roa File: 3130332e35362e3138362e302f32342d3234203d3e203539303433.roa (raw, json) Hash identifier: 185Jozw9t6OPsftx2I3cbH+cAXu8MqzSEVvP5Bvz/0w= Subject key identifier: 12:CF:00:A2:66:0F:4B:03:2C:F3:AC:ED:DA:47:07:9E:F3:21:8E:DD Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: DFE5BFA97540D53610C7162D01CFCE60AAA2EE Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138362e302f32342d3234203d3e203539303433.roa Signing time: Tue 20 Jan 2026 02:18:08 +0000 ROA not before: Tue 20 Jan 2026 02:13:08 +0000 ROA not after: Tue 19 Jan 2027 02:18:08 +0000 asID: 59043 IP address blocks: 103.56.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: df:e5:bf:a9:75:40:d5:36:10:c7:16:2d:01:cf:ce:60:aa:a2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Jan 20 02:13:08 2026 GMT Not After : Jan 19 02:18:08 2027 GMT Subject: CN=12CF00A2660F4B032CF3ACEDDA47079EF3218EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c6:88:d4:9b:56:45:94:28:a6:d9:d0:ab:29: 3d:96:10:8e:cb:69:80:f6:00:39:be:1b:40:d4:e2: ac:6e:0e:d4:c2:94:e9:af:48:1a:34:f4:88:94:6a: 78:ed:2c:87:75:f4:ea:f4:a0:cd:67:df:75:c7:13: ac:a1:78:43:f2:40:18:a9:1e:e0:71:13:c0:bf:db: 3d:e3:df:7d:5a:54:8b:6d:ae:0c:45:fb:28:d8:0b: a8:91:18:b0:ce:9a:96:40:ea:c5:a2:d7:d8:49:70: 93:fb:58:82:c4:e5:76:4a:7e:fa:db:85:d3:f5:cf: f9:ee:31:c6:5e:f4:f0:a7:af:7c:96:63:53:0a:8d: 84:c8:f6:39:85:a6:24:c4:29:c7:cd:6f:24:59:13: 20:13:37:0f:0a:f9:a1:65:36:51:c6:08:ff:6f:00: 37:b9:c1:00:8b:f2:53:be:c8:7d:fe:28:00:0d:fe: 49:a7:49:2a:27:79:0a:41:4a:11:1b:f9:80:9f:b0: 24:f5:21:45:91:03:10:82:8e:4e:2a:7c:78:cd:ed: 2c:78:0c:41:27:6e:bc:ed:37:ba:81:07:41:d3:af: 0a:a6:a0:dc:2e:84:c9:80:23:93:06:b1:da:ac:77: ee:48:3e:03:a2:98:33:a6:e4:cc:3d:e9:86:e4:f7: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CF:00:A2:66:0F:4B:03:2C:F3:AC:ED:DA:47:07:9E:F3:21:8E:DD X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138362e302f32342d3234203d3e203539303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.186.0/24 Signature Algorithm: sha256WithRSAEncryption 56:0f:10:de:0a:68:d0:c9:c6:24:85:ed:ae:c1:e5:71:6e:37: 80:9a:8a:68:11:68:c0:d7:a2:41:4b:93:08:9d:a7:31:38:c3: f2:55:2d:61:7e:0f:28:a4:49:26:42:c6:06:d2:90:a6:9e:93: 2a:55:7b:0e:5f:c9:9b:32:26:8e:34:20:bd:59:dc:0f:9a:b5: ad:b6:99:52:da:98:f8:ab:22:b8:59:43:79:ae:ea:b4:05:7b: e4:aa:1a:2d:d9:28:60:46:aa:96:ec:d4:27:9b:a2:53:ca:49: 35:7c:7d:3d:51:58:1e:8c:dd:c9:5f:f0:a1:ad:7b:42:ba:db: 9b:7e:c4:44:69:99:e7:5e:d6:1e:58:62:7e:96:60:22:a0:0e: 73:eb:84:19:f5:6d:f3:68:fa:c5:68:3e:58:a7:67:cc:6d:c6: 7b:42:7c:3e:37:5b:cc:a6:1b:f4:29:32:1f:c1:6a:57:fd:e3: f3:f8:9e:b1:41:33:8e:0b:73:55:99:cb:f2:87:48:0b:85:86: 72:52:3e:77:1e:93:84:da:db:e0:5e:11:43:1f:41:65:74:c8: 7c:f6:6f:1b:b7:87:ef:33:5e:fb:91:42:24:ac:e8:bf:d8:ff: 4c:45:43:74:64:0b:98:9e:76:2e:19:ba:13:9d:44:5f:ca:ba: b4:e5:d2:24 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAN/lv6l1QNU2EMcWLQHPzmCqou4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjAxMjAwMjEzMDhaFw0yNzAxMTkwMjE4MDhaMDMxMTAvBgNV BAMTKDEyQ0YwMEEyNjYwRjRCMDMyQ0YzQUNFRERBNDcwNzlFRjMyMThFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIxojUm1ZFlCim2dCrKT2WEI7L aYD2ADm+G0DU4qxuDtTClOmvSBo09IiUanjtLId19Or0oM1n33XHE6yheEPyQBip HuBxE8C/2z3j331aVIttrgxF+yjYC6iRGLDOmpZA6sWi19hJcJP7WILE5XZKfvrb hdP1z/nuMcZe9PCnr3yWY1MKjYTI9jmFpiTEKcfNbyRZEyATNw8K+aFlNlHGCP9v ADe5wQCL8lO+yH3+KAAN/kmnSSoneQpBShEb+YCfsCT1IUWRAxCCjk4qfHjN7Sx4 DEEnbrztN7qBB0HTrwqmoNwuhMmAI5MGsdqsd+5IPgOimDOm5Mw96Ybk9zkPAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUEs8AomYPSwMs86zt2kcHnvMhjt0wHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDcyMDI1OS8wLzMxMzAzMzJlMzUz NjJlMzEzODM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGc4ujANBgkqhkiG9w0BAQsFAAOCAQEAVg8Q3gpo0MnGJIXtrsHlcW43 gJqKaBFowNeiQUuTCJ2nMTjD8lUtYX4PKKRJJkLGBtKQpp6TKlV7Dl/JmzImjjQg vVncD5q1rbaZUtqY+KsiuFlDea7qtAV75KoaLdkoYEaqluzUJ5uiU8pJNXx9PVFY HozdyV/woa17Qrrbm37ERGmZ517WHlhifpZgIqAOc+uEGfVt82j6xWg+WKdnzG3G e0J8PjdbzKYb9CkyH8FqV/3j8/iesUEzjgtzVZnL8odIC4WGclI+dx6ThNrb4F4R Qx9BZXTIfPZvG7eH7zNe+5FCJKzov9j/TEVDdGQLmJ52Lhm6E51EX8q6tOXSJA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:48 2026 by rpki-client