This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38362e302f32332d3234203d3e20313532333230.roa File: 3130332e3231392e38362e302f32332d3234203d3e20313532333230.roa (raw, json) Hash identifier: y9Nb3BhAesAhC0Yz2nuugVvW5UakXURGQvAzLngRYos= Subject key identifier: B3:2E:52:AE:8F:87:4B:ED:E0:03:8B:85:F1:9A:D9:14:BF:CF:58:2F Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 588E054DFFC238BA6A888BACA2CAA287D2DA850A Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38362e302f32332d3234203d3e20313532333230.roa Signing time: Tue 20 Jan 2026 02:10:56 +0000 ROA not before: Tue 20 Jan 2026 02:05:56 +0000 ROA not after: Tue 19 Jan 2027 02:10:56 +0000 asID: 152320 IP address blocks: 103.219.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8e:05:4d:ff:c2:38:ba:6a:88:8b:ac:a2:ca:a2:87:d2:da:85:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Jan 20 02:05:56 2026 GMT Not After : Jan 19 02:10:56 2027 GMT Subject: CN=B32E52AE8F874BEDE0038B85F19AD914BFCF582F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:33:fd:d6:cd:60:5a:c9:f7:30:b2:8b:18:cd: 73:c9:de:01:c0:54:60:c1:be:00:51:b9:69:bf:b7: 24:5e:70:f7:51:61:69:af:7f:f7:05:95:4d:44:c9: 45:90:78:e8:8b:b5:a2:69:5d:f4:8e:05:0d:ea:1b: 4e:27:b4:70:7f:36:39:65:14:88:39:35:07:a4:b1: a7:99:86:27:e2:9e:07:1d:90:3c:60:ab:a6:2d:9e: 42:ee:01:95:96:3d:b1:d3:75:16:b4:97:41:19:48: b0:b5:0a:0a:f8:58:ad:be:ef:2a:ed:7b:03:83:82: ae:ca:42:40:97:e5:2a:9d:c6:73:c2:7e:cb:84:3d: ae:fc:91:41:71:d0:f9:5d:23:da:81:27:d7:dd:79: 27:7d:f2:21:78:4a:ba:8e:34:a5:ee:c8:2e:51:6d: 7d:76:76:ad:98:bb:44:a1:15:ff:7b:02:25:27:58: 37:a6:a8:e7:4a:8f:a6:e9:84:e8:97:08:b1:02:23: f9:cf:37:d8:ef:b5:4c:3e:2a:11:d7:ff:2f:f6:69: 89:25:2b:78:50:79:18:2a:d7:b7:5d:ca:28:d9:b1: dc:c6:ba:02:68:c4:cf:00:64:61:ab:33:62:00:23: ed:c0:6c:31:8c:d6:90:dc:91:1b:5d:0e:e2:08:9f: 87:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2E:52:AE:8F:87:4B:ED:E0:03:8B:85:F1:9A:D9:14:BF:CF:58:2F X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38362e302f32332d3234203d3e20313532333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.219.86.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:8b:bb:23:3c:6d:db:24:f1:42:ea:b1:a7:f2:ce:60:22:cc: 26:9f:c7:96:f5:d6:54:e4:a1:17:1a:65:13:ab:ce:59:57:77: e7:ae:82:c1:7c:62:bc:b9:8e:c9:40:bc:21:3f:55:94:b0:89: 36:98:87:18:63:78:fd:67:13:d3:d4:59:c6:72:1e:c8:ff:0c: 6b:d9:19:84:97:32:28:80:52:db:04:31:bd:a6:a8:8b:ef:89: ad:3d:f8:06:39:44:33:dd:a2:fb:5f:84:20:4a:b8:0d:69:c0: f5:1f:74:fa:92:99:12:2a:37:45:d2:41:74:39:74:7e:14:21: 03:07:aa:6f:85:51:e1:6a:b5:0a:83:0d:02:c0:37:ea:f2:52: 9e:32:66:67:f9:bd:31:85:38:9a:2d:41:80:6c:b5:e3:aa:7f: 03:61:1b:65:7d:37:73:56:82:0e:85:23:03:09:01:cf:68:53: 27:3d:8b:6c:2d:9b:c3:0e:98:47:3b:8a:66:98:bf:59:76:04: 31:bb:75:e8:26:b9:aa:47:85:96:bd:75:e2:ff:31:02:dc:36: 82:c9:8d:dc:04:76:d8:3b:e1:e2:8f:89:05:d5:a2:38:31:88: 9d:19:29:47:2a:13:f1:2f:a4:25:af:66:ed:14:1d:64:99:90: a6:f7:ae:4d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWI4FTf/COLpqiIusosqih9LahQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjAxMjAwMjA1NTZaFw0yNzAxMTkwMjEwNTZaMDMxMTAvBgNV BAMTKEIzMkU1MkFFOEY4NzRCRURFMDAzOEI4NUYxOUFEOTE0QkZDRjU4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUM/3WzWBayfcwsosYzXPJ3gHA VGDBvgBRuWm/tyRecPdRYWmvf/cFlU1EyUWQeOiLtaJpXfSOBQ3qG04ntHB/Njll FIg5NQeksaeZhifingcdkDxgq6YtnkLuAZWWPbHTdRa0l0EZSLC1Cgr4WK2+7yrt ewODgq7KQkCX5SqdxnPCfsuEPa78kUFx0PldI9qBJ9fdeSd98iF4SrqONKXuyC5R bX12dq2Yu0ShFf97AiUnWDemqOdKj6bphOiXCLECI/nPN9jvtUw+KhHX/y/2aYkl K3hQeRgq17ddyijZsdzGugJoxM8AZGGrM2IAI+3AbDGM1pDckRtdDuIIn4fvAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUsy5Sro+HS+3gA4uF8ZrZFL/PWC8wHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zMTMwMzMyZTMy MzEzOTJlMzgzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzIzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfbVjANBgkqhkiG9w0BAQsFAAOCAQEAfou7Izxt2yTxQuqxp/LO YCLMJp/HlvXWVOShFxplE6vOWVd3566CwXxivLmOyUC8IT9VlLCJNpiHGGN4/WcT 09RZxnIeyP8Ma9kZhJcyKIBS2wQxvaaoi++JrT34BjlEM92i+1+EIEq4DWnA9R90 +pKZEio3RdJBdDl0fhQhAweqb4VR4Wq1CoMNAsA36vJSnjJmZ/m9MYU4mi1BgGy1 46p/A2EbZX03c1aCDoUjAwkBz2hTJz2LbC2bww6YRzuKZpi/WXYEMbt16Ca5qkeF lr114v8xAtw2gsmN3AR22Dvh4o+JBdWiODGInRkpRyoT8S+kJa9m7RQdZJmQpveu TQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:00 2026 by rpki-client