This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38352e302f32342d3234203d3e20313532333230.roa File: 3130332e3231392e38352e302f32342d3234203d3e20313532333230.roa (raw, json) Hash identifier: m2V99zSF93yuAoBUSJ81tqRCkxDUa+Q9dv+b/3LsrzA= Subject key identifier: 3D:3C:AA:2B:F1:22:03:84:80:A9:96:7A:FA:FC:71:B9:67:D8:C1:F5 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 20A06E51E3A942AF082A343E118398EEDDC44641 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38352e302f32342d3234203d3e20313532333230.roa Signing time: Tue 20 Jan 2026 02:10:56 +0000 ROA not before: Tue 20 Jan 2026 02:05:56 +0000 ROA not after: Tue 19 Jan 2027 02:10:56 +0000 asID: 152320 IP address blocks: 103.219.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a0:6e:51:e3:a9:42:af:08:2a:34:3e:11:83:98:ee:dd:c4:46:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Jan 20 02:05:56 2026 GMT Not After : Jan 19 02:10:56 2027 GMT Subject: CN=3D3CAA2BF122038480A9967AFAFC71B967D8C1F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:b9:b4:ce:af:50:8d:2b:4c:7d:c2:18:33: 49:de:28:12:49:c2:6f:b1:45:a2:43:cf:f8:0e:dd: 2d:4c:86:60:56:bd:83:d1:10:6b:55:b0:fa:47:dc: 68:a3:3c:bd:d0:06:c7:98:9c:cc:b8:1b:8e:50:75: 2f:c9:30:0b:04:a9:2c:b3:b1:f5:b9:63:42:e5:77: e2:58:d8:ae:5b:82:7c:af:67:fb:84:17:d0:8c:8c: b0:94:9d:4e:bb:a4:ef:b4:a1:78:95:27:78:22:d2: 83:18:ef:16:42:23:85:f5:78:9a:69:c2:9c:ca:93: b3:45:1a:f0:64:63:d2:48:e7:20:ea:12:fa:47:4f: 42:57:70:db:82:bd:25:c6:0f:36:6c:28:29:d9:97: 1f:9d:20:a7:7e:57:fb:42:85:ea:a1:38:6c:cb:2c: 59:4f:cc:b3:87:2e:80:5d:c8:bf:36:7a:a7:07:20: 73:33:9d:d3:94:73:09:a5:5f:61:06:e8:4f:d9:94: 48:2b:12:71:ab:55:99:0b:9a:37:f2:d0:20:81:0b: 0f:01:c5:a1:bb:a0:3e:ff:3e:ac:30:ff:09:72:45: 29:f6:9a:d3:0d:98:97:0e:15:4c:eb:81:df:43:ce: c4:39:65:d3:fd:7c:48:82:ab:10:d3:22:62:4c:1a: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3C:AA:2B:F1:22:03:84:80:A9:96:7A:FA:FC:71:B9:67:D8:C1:F5 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38352e302f32342d3234203d3e20313532333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.219.85.0/24 Signature Algorithm: sha256WithRSAEncryption 25:9a:b1:8e:65:56:cf:d7:c6:65:d9:55:f7:1e:de:57:fa:ac: 64:61:a4:80:c2:4a:d6:26:b4:b9:d5:e1:0d:d3:cd:a0:d2:02: c2:d5:24:bc:bf:59:38:03:6a:96:3b:45:11:75:a4:5b:80:07: 84:c1:84:32:f9:e5:4e:22:01:01:05:2a:33:81:01:37:d4:1c: 22:f0:98:f3:33:51:11:fb:88:69:ff:31:c2:48:31:a4:65:66: 1b:a3:cc:f6:d8:e4:48:ac:be:f9:40:91:28:16:e5:1b:01:b0: 30:5d:b8:fa:d1:01:5c:5c:a7:0a:19:70:6e:80:f7:1f:70:3a: 30:bf:79:ed:01:f4:63:d2:2c:89:30:68:cc:10:61:d3:97:ff: 2f:38:2d:1d:17:37:eb:32:e6:15:ad:40:96:8d:6d:dc:78:a7: 5b:3b:ba:ba:d9:0a:d6:18:a5:4f:56:eb:91:13:77:8a:54:b4: 7f:13:9b:ba:3c:40:ab:8c:4d:30:df:94:e4:46:07:84:ff:32: 77:0e:5c:be:ca:32:34:a6:25:4e:d4:a2:3e:ac:f6:95:50:82: 0d:0f:b2:78:8e:92:79:19:ce:ad:79:a8:97:60:1e:6c:e3:9c: 30:30:16:19:c0:ac:e3:e1:b0:ea:2a:dd:ef:52:7c:94:e2:60: 70:e4:2f:dc -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIKBuUeOpQq8IKjQ+EYOY7t3ERkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjAxMjAwMjA1NTZaFw0yNzAxMTkwMjEwNTZaMDMxMTAvBgNV BAMTKDNEM0NBQTJCRjEyMjAzODQ4MEE5OTY3QUZBRkM3MUI5NjdEOEMxRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAiLm0zq9QjStMfcIYM0neKBJJ wm+xRaJDz/gO3S1MhmBWvYPREGtVsPpH3GijPL3QBseYnMy4G45QdS/JMAsEqSyz sfW5Y0Lld+JY2K5bgnyvZ/uEF9CMjLCUnU67pO+0oXiVJ3gi0oMY7xZCI4X1eJpp wpzKk7NFGvBkY9JI5yDqEvpHT0JXcNuCvSXGDzZsKCnZlx+dIKd+V/tCheqhOGzL LFlPzLOHLoBdyL82eqcHIHMzndOUcwmlX2EG6E/ZlEgrEnGrVZkLmjfy0CCBCw8B xaG7oD7/Pqww/wlyRSn2mtMNmJcOFUzrgd9DzsQ5ZdP9fEiCqxDTImJMGu71AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUPTyqK/EiA4SAqZZ6+vxxuWfYwfUwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zMTMwMzMyZTMy MzEzOTJlMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzIzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfbVTANBgkqhkiG9w0BAQsFAAOCAQEAJZqxjmVWz9fGZdlV9x7e V/qsZGGkgMJK1ia0udXhDdPNoNICwtUkvL9ZOANqljtFEXWkW4AHhMGEMvnlTiIB AQUqM4EBN9QcIvCY8zNREfuIaf8xwkgxpGVmG6PM9tjkSKy++UCRKBblGwGwMF24 +tEBXFynChlwboD3H3A6ML957QH0Y9IsiTBozBBh05f/LzgtHRc36zLmFa1Alo1t 3HinWzu6utkK1hilT1brkRN3ilS0fxObujxAq4xNMN+U5EYHhP8ydw5cvsoyNKYl TtSiPqz2lVCCDQ+yeI6SeRnOrXmol2AebOOcMDAWGcCs4+Gw6ird71J8lOJgcOQv 3A== -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:33 2026 by rpki-client