This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/3130332e3232372e3232382e302f32322d3232203d3e20313331353236.roa File: 3130332e3232372e3232382e302f32322d3232203d3e20313331353236.roa (raw, json) Hash identifier: nYDYkZddHjE9LpPNDCfoTzhw2hIepJ22IneS6IcaytI= Subject key identifier: 09:CC:21:12:34:A9:C3:62:35:B3:EB:39:0C:31:00:72:28:78:95:3C Certificate issuer: /CN=6E171695D3EF09F7A49B6AF0022DA63420988631 Certificate serial: 4BA2B7CEBF9B2AA815B9394348DC51F9C024F434 Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/3130332e3232372e3232382e302f32322d3232203d3e20313331353236.roa Signing time: Tue 20 Jan 2026 02:21:37 +0000 ROA not before: Tue 20 Jan 2026 02:16:37 +0000 ROA not after: Tue 19 Jan 2027 02:21:37 +0000 asID: 131526 IP address blocks: 103.227.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a2:b7:ce:bf:9b:2a:a8:15:b9:39:43:48:dc:51:f9:c0:24:f4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631 Validity Not Before: Jan 20 02:16:37 2026 GMT Not After : Jan 19 02:21:37 2027 GMT Subject: CN=09CC211234A9C36235B3EB390C3100722878953C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:2c:c3:fc:4d:69:a2:24:28:de:1b:2b:d2: c8:5d:d7:38:9d:31:f8:a0:83:72:2d:8b:bb:03:08: e2:00:a1:bb:f1:fb:f9:e1:0e:ef:9a:f6:9d:42:1c: 17:d7:e7:a5:c4:16:09:ec:0e:19:52:a5:2e:07:d0: 35:98:39:df:f5:8f:6e:16:dc:cb:66:1e:a2:b9:4b: 5b:8c:8c:b3:f1:de:a1:3d:56:fe:aa:ed:76:48:37: ff:29:27:c9:84:b5:d4:e5:a8:cd:80:75:92:91:ef: a6:02:e9:3f:3a:80:36:7d:2c:0f:13:c6:37:63:8d: af:08:a6:d9:fb:ad:ee:85:a6:ff:32:bf:c3:14:12: 8b:60:af:41:9f:a8:06:c9:96:19:22:83:82:1a:9f: 0a:d3:3e:6b:5b:8d:17:bb:28:b6:44:9a:04:59:d3: 26:55:04:c4:41:06:66:2a:42:34:f4:82:ca:f8:06: 65:0a:67:03:24:7d:11:6f:c7:a7:cf:ba:27:35:2b: 10:65:01:eb:8b:97:29:9c:36:98:7a:2f:18:e1:92: 11:d8:fa:4a:bb:b8:a2:52:15:00:24:9c:50:c6:f2: 80:85:0d:33:20:07:f4:f4:34:0c:48:5f:81:ec:11: 14:77:56:75:90:4c:99:c6:bd:17:5b:5f:e3:e9:17: a9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CC:21:12:34:A9:C3:62:35:B3:EB:39:0C:31:00:72:28:78:95:3C X509v3 Authority Key Identifier: keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/3130332e3232372e3232382e302f32322d3232203d3e20313331353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.228.0/22 Signature Algorithm: sha256WithRSAEncryption b9:8e:f0:56:4e:f6:9d:b1:8e:43:ce:c5:38:fd:f9:f6:cc:82: 6b:30:fb:36:37:9a:eb:bb:28:6a:e0:ba:19:8d:19:92:a7:5e: ba:eb:2e:cd:ef:78:06:36:08:ca:4c:7e:8c:ba:59:d3:7d:b8: 3e:35:27:1b:ec:bb:21:db:e8:19:e0:ab:53:78:a0:de:f9:93: 19:8e:e1:ab:33:b7:16:64:37:f0:8d:55:8b:fd:81:e5:7e:0c: b8:34:71:a6:fb:73:ab:83:94:0b:fc:fc:05:a7:c7:6f:2c:79: 5d:46:73:33:4f:2f:f8:e5:4e:31:5e:c7:ae:72:d3:cf:28:bc: 57:79:df:3f:51:1c:95:a5:82:9c:e5:bc:fe:25:44:e6:ba:a1: ea:bf:2c:71:ee:65:5c:6f:a5:c5:15:e2:aa:bf:0d:18:d1:80: 57:b4:e5:b3:f1:80:0a:31:0a:6e:e4:66:6e:c6:57:7c:ea:04: 64:f3:d9:3d:d3:a1:16:08:4f:3f:72:ed:ec:d7:b5:b3:78:18: 89:f6:bc:c5:13:45:2c:6d:cf:aa:c9:14:45:c7:08:bf:8a:25: d2:26:7e:ec:f0:48:89:87:cf:6b:53:73:ee:73:d6:81:bc:1c: 59:50:1b:1d:57:c8:f3:72:f8:63:da:7a:86:b8:10:14:3b:0c: 7f:c8:ad:50 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUS6K3zr+bKqgVuTlDSNxR+cAk9DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxNzE2OTVEM0VGMDlGN0E0OUI2QUYwMDIyREE2MzQy MDk4ODYzMTAeFw0yNjAxMjAwMjE2MzdaFw0yNzAxMTkwMjIxMzdaMDMxMTAvBgNV BAMTKDA5Q0MyMTEyMzRBOUMzNjIzNUIzRUIzOTBDMzEwMDcyMjg3ODk1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaCzD/E1poiQo3hsr0shd1zid Mfigg3Iti7sDCOIAobvx+/nhDu+a9p1CHBfX56XEFgnsDhlSpS4H0DWYOd/1j24W 3MtmHqK5S1uMjLPx3qE9Vv6q7XZIN/8pJ8mEtdTlqM2AdZKR76YC6T86gDZ9LA8T xjdjja8Iptn7re6Fpv8yv8MUEotgr0GfqAbJlhkig4IanwrTPmtbjRe7KLZEmgRZ 0yZVBMRBBmYqQjT0gsr4BmUKZwMkfRFvx6fPuic1KxBlAeuLlymcNph6LxjhkhHY +kq7uKJSFQAknFDG8oCFDTMgB/T0NAxIX4HsERR3VnWQTJnGvRdbX+PpF6krAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUCcwhEjSpw2I1s+s5DDEAcih4lTwwHwYDVR0j BBgwFoAUbhcWldPvCfekm2rwAi2mNCCYhjEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTQ5NDAxOC8wLzZFMTcxNjk1RDNFRjA5RjdBNDlCNkFGMDAyMkRB NjM0MjA5ODg2MzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkUxNzE2OTVEM0VGMDlGN0E0OUI2QUYwMDIyREE2MzQyMDk4ODYzMS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNDk0MDE4LzAvMzEzMDMzMmUz MjMyMzcyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMTM1MzIz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfj5DANBgkqhkiG9w0BAQsFAAOCAQEAuY7wVk72nbGOQ87F OP359syCazD7Njea67soauC6GY0Zkqdeuusuze94BjYIykx+jLpZ0324PjUnG+y7 IdvoGeCrU3ig3vmTGY7hqzO3FmQ38I1Vi/2B5X4MuDRxpvtzq4OUC/z8BafHbyx5 XUZzM08v+OVOMV7HrnLTzyi8V3nfP1EclaWCnOW8/iVE5rqh6r8sce5lXG+lxRXi qr8NGNGAV7Tls/GACjEKbuRmbsZXfOoEZPPZPdOhFghPP3Lt7Ne1s3gYifa8xRNF LG3PqskURccIv4ol0iZ+7PBIiYfPa1Nz7nPWgbwcWVAbHVfI83L4Y9p6hrgQFDsM f8itUA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:46 2026 by rpki-client