This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/3130332e32322e3138382e302f32342d3234203d3e203536303035.roa File: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (raw, json) Hash identifier: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE= Subject key identifier: CF:A9:92:91:05:68:1F:9C:63:08:EF:51:E7:2F:E6:3C:AE:99:29:11 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 527593753ACFB52D6163A9C1C32F5D79E5A1824F Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/3130332e32322e3138382e302f32342d3234203d3e203536303035.roa Signing time: Tue 20 Jan 2026 02:14:14 +0000 ROA not before: Tue 20 Jan 2026 02:09:14 +0000 ROA not after: Tue 19 Jan 2027 02:14:14 +0000 asID: 56005 IP address blocks: 103.22.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:75:93:75:3a:cf:b5:2d:61:63:a9:c1:c3:2f:5d:79:e5:a1:82:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Jan 20 02:09:14 2026 GMT Not After : Jan 19 02:14:14 2027 GMT Subject: CN=CFA9929105681F9C6308EF51E72FE63CAE992911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:12:e4:d1:9d:c5:8a:de:21:8b:06:d6:02: 24:37:a6:61:96:4c:de:91:ef:96:55:06:c9:48:f8: e8:1c:b9:37:45:a4:c4:9d:f6:0d:9a:29:23:40:f1: a5:aa:0d:81:10:ea:78:23:8b:5e:4f:c4:d3:53:8a: 56:af:6b:0f:f8:96:71:ec:da:e0:21:36:13:31:51: ad:dc:a4:8e:3c:b8:68:63:e2:3e:7a:56:be:6d:3e: d2:05:48:69:23:de:12:8c:6c:60:58:83:b9:04:96: ab:b6:c6:71:42:84:3f:4a:e9:35:4e:ab:71:52:de: 57:20:66:dc:f7:b5:8b:8d:fb:0e:20:46:c4:e7:4c: 56:d3:3b:18:90:e5:8d:8f:93:0d:65:c4:38:5c:23: 7f:40:81:52:b5:17:e6:cc:ff:a7:71:cc:a4:33:88: 76:48:3d:34:a0:fe:b3:21:9f:6a:bb:64:95:8a:2e: 2d:95:52:06:9d:29:17:18:7c:d6:5f:43:db:a3:7e: 42:61:aa:76:08:68:98:d5:ad:3c:8d:b7:ab:19:df: cd:1c:3b:e3:08:68:e2:18:41:a8:3b:41:48:1a:4b: 83:53:c8:4c:fa:68:2d:c5:d5:65:1b:5c:72:2a:57: 61:f0:40:c2:15:cb:90:55:e4:21:ee:54:fb:45:62: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:92:91:05:68:1F:9C:63:08:EF:51:E7:2F:E6:3C:AE:99:29:11 X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/3130332e32322e3138382e302f32342d3234203d3e203536303035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.22.188.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:16:28:ad:a2:e2:85:95:74:7e:6d:8d:ef:e0:8d:31:6d:99: fa:a3:61:3b:5b:b8:71:c3:d3:64:09:3d:d5:59:32:ef:db:25: 9f:7a:45:69:a6:50:d5:c0:52:cb:b7:40:9f:bd:03:c7:f5:fa: 2e:f2:0b:1c:b8:33:b4:4a:42:1f:95:77:3a:bc:6a:71:a9:15: 93:46:f5:6c:8d:c2:a8:45:1f:00:c5:d5:ec:c7:12:15:8a:98: 21:c2:a3:39:4f:5e:2d:a9:ae:33:f3:93:55:96:52:df:25:5d: 1b:bb:b3:fb:4a:74:40:ed:3c:c1:69:1d:0a:11:3c:f3:40:3b: ac:1b:a0:1e:11:17:bd:79:0c:9f:90:29:0f:27:2f:a5:97:d9: 80:4a:d7:70:69:91:77:5d:d9:d4:4e:59:b6:7a:86:40:38:d4: b2:27:ea:f6:66:00:89:5b:ed:c1:ca:71:c7:c5:ef:bb:9b:aa: da:f9:62:6c:54:6e:67:fd:67:fa:16:8b:8c:d3:70:7c:c9:ef: 0f:ab:7e:96:5b:ab:34:e9:a4:52:a9:0f:58:86:ea:0a:a6:4a: 12:bb:66:17:26:7b:6b:aa:8e:26:fa:11:f0:7b:e9:0f:32:7c: a4:6d:9b:62:c8:07:11:ad:28:99:69:4b:da:87:28:70:64:57: 26:45:6e:6e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUUnWTdTrPtS1hY6nBwy9deeWhgk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjAxMjAwMjA5MTRaFw0yNzAxMTkwMjE0MTRaMDMxMTAvBgNV BAMTKENGQTk5MjkxMDU2ODFGOUM2MzA4RUY1MUU3MkZFNjNDQUU5OTI5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnixLk0Z3Fit4hiwbWAiQ3pmGW TN6R75ZVBslI+OgcuTdFpMSd9g2aKSNA8aWqDYEQ6ngji15PxNNTilavaw/4lnHs 2uAhNhMxUa3cpI48uGhj4j56Vr5tPtIFSGkj3hKMbGBYg7kElqu2xnFChD9K6TVO q3FS3lcgZtz3tYuN+w4gRsTnTFbTOxiQ5Y2Pkw1lxDhcI39AgVK1F+bM/6dxzKQz iHZIPTSg/rMhn2q7ZJWKLi2VUgadKRcYfNZfQ9ujfkJhqnYIaJjVrTyNt6sZ380c O+MIaOIYQag7QUgaS4NTyEz6aC3F1WUbXHIqV2HwQMIVy5BV5CHuVPtFYi3DAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUz6mSkQVoH5xjCO9R5y/mPK6ZKREwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0NzE5MjMyMS8wLzMxMzAzMzJlMzIz MjJlMzEzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzAzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGcWvDANBgkqhkiG9w0BAQsFAAOCAQEAjhYoraLihZV0fm2N7+CNMW2Z +qNhO1u4ccPTZAk91Vky79sln3pFaaZQ1cBSy7dAn70Dx/X6LvILHLgztEpCH5V3 OrxqcakVk0b1bI3CqEUfAMXV7McSFYqYIcKjOU9eLamuM/OTVZZS3yVdG7uz+0p0 QO08wWkdChE880A7rBugHhEXvXkMn5ApDycvpZfZgErXcGmRd13Z1E5ZtnqGQDjU sifq9mYAiVvtwcpxx8Xvu5uq2vlibFRuZ/1n+haLjNNwfMnvD6t+llurNOmkUqkP WIbqCqZKErtmFyZ7a6qOJvoR8HvpDzJ8pG2bYsgHEa0omWlL2ococGRXJkVubg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:53 2026 by rpki-client