This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa File: 3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa (raw, json) Hash identifier: 4DEH4Fk4BDxr9Vha6E1J1M4/mfTr2k2F+9iMhfx9RXE= Subject key identifier: 22:6C:93:EF:6B:2F:34:40:77:93:74:37:95:FB:D6:87:46:04:47:3C Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 23E553684522693E764F7D0D03DAC16CABF4BB38 Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa Signing time: Tue 20 Jan 2026 02:10:55 +0000 ROA not before: Tue 20 Jan 2026 02:05:55 +0000 ROA not after: Tue 19 Jan 2027 02:10:55 +0000 asID: 63566 IP address blocks: 103.252.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e5:53:68:45:22:69:3e:76:4f:7d:0d:03:da:c1:6c:ab:f4:bb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Jan 20 02:05:55 2026 GMT Not After : Jan 19 02:10:55 2027 GMT Subject: CN=226C93EF6B2F34407793743795FBD6874604473C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:18:a3:af:20:49:d5:60:ce:57:d0:a9:39:99: e9:3a:57:49:80:2d:0f:45:4b:36:58:40:14:1c:28: c0:c4:81:f1:01:3c:de:9e:cc:dc:f2:83:9b:f4:79: 5f:6e:7e:8f:4b:38:d2:57:e1:ed:ef:9f:61:23:d3: bd:d5:c1:ad:e4:44:f2:33:38:e6:a4:03:a9:d2:7a: aa:9a:d8:7d:63:48:38:9c:92:7d:e9:dc:cc:79:f5: e3:be:ca:0f:d8:33:19:ee:17:68:47:45:60:fe:a5: cc:41:46:54:70:23:5b:8a:ff:35:aa:2d:9d:c3:b9: 00:7d:0f:b4:cd:18:7c:e5:79:42:10:30:b7:ff:53: a7:00:43:ac:1e:47:6d:42:09:48:96:41:c6:db:a1: 07:63:aa:7e:4f:f0:f1:73:e0:84:98:4a:30:b0:c4: f9:60:b0:90:47:e1:aa:dc:5a:6a:09:f6:18:8b:2e: 99:7e:73:ea:49:61:33:dd:3c:94:2d:cc:14:70:da: 82:f0:6b:38:c1:e9:82:ad:f0:f1:3b:c0:f7:e9:5e: 5d:8b:6b:4b:fd:62:d7:df:e6:11:ad:5a:97:63:17: 0d:f9:6a:13:af:25:fa:cd:dc:66:10:39:13:15:79: aa:e0:b9:46:60:c8:e2:7a:52:d5:e6:2c:6c:37:f0: 41:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6C:93:EF:6B:2F:34:40:77:93:74:37:95:FB:D6:87:46:04:47:3C X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.252.248.0/24 Signature Algorithm: sha256WithRSAEncryption bc:2b:75:80:64:51:54:89:ff:39:22:d1:89:73:a6:a7:31:74: 8b:9e:b8:d4:4b:d9:a2:ae:ae:b3:e7:bf:40:64:79:1c:e3:42: 0d:64:fb:97:09:c6:6d:11:15:01:c6:0a:92:19:2f:b5:1a:dc: 1e:ff:0e:cd:2e:f0:65:8d:99:28:2f:01:27:79:b5:82:d2:0e: 59:28:54:46:b4:b5:ea:8c:36:61:9d:4c:32:81:74:5f:ec:db: 60:d8:91:dc:e6:ef:e6:b9:75:0d:50:bd:88:93:c5:8c:2f:a8: b7:67:f8:f0:43:01:96:c7:39:ce:bd:0f:8a:8b:d1:9b:35:a4: f4:1f:e2:6b:44:ac:c4:85:e3:fc:a0:c4:66:92:57:4e:2a:e4: 76:6a:9d:24:24:2a:62:98:f6:9d:f1:ee:5c:46:ea:ea:ab:e7: 2a:1b:33:0e:3a:1e:6e:4b:54:c3:06:79:ad:6e:86:da:cc:76: d2:c1:83:a3:81:e6:d1:60:4f:24:f2:c8:05:08:d0:20:9f:e2: fb:6e:f0:cf:f2:11:5b:3c:11:d7:30:46:a3:33:28:21:98:ec: f5:10:e7:f1:fb:d1:42:1b:08:a8:55:a1:ab:dc:b9:60:99:21: 7f:43:7e:34:d8:ce:e4:42:dc:94:94:0a:1d:01:37:95:42:91: 2a:0a:35:e9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUI+VTaEUiaT52T30NA9rBbKv0uzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjAxMjAwMjA1NTVaFw0yNzAxMTkwMjEwNTVaMDMxMTAvBgNV BAMTKDIyNkM5M0VGNkIyRjM0NDA3NzkzNzQzNzk1RkJENjg3NDYwNDQ3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGKOvIEnVYM5X0Kk5mek6V0mA LQ9FSzZYQBQcKMDEgfEBPN6ezNzyg5v0eV9ufo9LONJX4e3vn2Ej073Vwa3kRPIz OOakA6nSeqqa2H1jSDickn3p3Mx59eO+yg/YMxnuF2hHRWD+pcxBRlRwI1uK/zWq LZ3DuQB9D7TNGHzleUIQMLf/U6cAQ6weR21CCUiWQcbboQdjqn5P8PFz4ISYSjCw xPlgsJBH4arcWmoJ9hiLLpl+c+pJYTPdPJQtzBRw2oLwazjB6YKt8PE7wPfpXl2L a0v9Ytff5hGtWpdjFw35ahOvJfrN3GYQORMVearguUZgyOJ6UtXmLGw38EFpAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUImyT72svNEB3k3Q3lfvWh0YERzwwHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc2NjI0NjYvMC8zMTMwMzMyZTMy MzUzMjJlMzIzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGf8+DANBgkqhkiG9w0BAQsFAAOCAQEAvCt1gGRRVIn/OSLRiXOm pzF0i5641EvZoq6us+e/QGR5HONCDWT7lwnGbREVAcYKkhkvtRrcHv8OzS7wZY2Z KC8BJ3m1gtIOWShURrS16ow2YZ1MMoF0X+zbYNiR3Obv5rl1DVC9iJPFjC+ot2f4 8EMBlsc5zr0PiovRmzWk9B/ia0SsxIXj/KDEZpJXTirkdmqdJCQqYpj2nfHuXEbq 6qvnKhszDjoebktUwwZ5rW6G2sx20sGDo4Hm0WBPJPLIBQjQIJ/i+27wz/IRWzwR 1zBGozMoIZjs9RDn8fvRQhsIqFWhq9y5YJkhf0N+NNjO5ELclJQKHQE3lUKRKgo1 6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 00:16:56 2026 by rpki-client