This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32332d3233203d3e20323131333932.roa File: 3130332e37392e3232382e302f32332d3233203d3e20323131333932.roa (raw, json) Hash identifier: nQ2RcArBBQkhVo1Emo9ZIAoeHt8GKg/Z3i5VAZfD0D0= Subject key identifier: AD:C3:47:0F:37:23:49:F4:7F:78:B4:CB:DA:DD:47:FC:6C:28:A8:F5 Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 026D9E4FD6869E959683E6F31A7A52DF12D0F627 Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32332d3233203d3e20323131333932.roa Signing time: Tue 20 Jan 2026 02:20:20 +0000 ROA not before: Tue 20 Jan 2026 02:15:20 +0000 ROA not after: Tue 19 Jan 2027 02:20:20 +0000 asID: 211392 IP address blocks: 103.79.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6d:9e:4f:d6:86:9e:95:96:83:e6:f3:1a:7a:52:df:12:d0:f6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:20 2026 GMT Not After : Jan 19 02:20:20 2027 GMT Subject: CN=ADC3470F372349F47F78B4CBDADD47FC6C28A8F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9b:bb:46:64:dd:9b:4e:db:98:a7:c2:b2:40: 12:74:b3:66:d3:9b:b9:2f:12:60:4d:f1:10:09:81: 64:e6:9e:06:36:8d:f6:9d:b6:51:30:e6:18:af:54: 6f:21:25:ee:e0:fe:26:77:60:33:ae:b8:dc:e5:0d: 04:cd:f0:f1:91:68:e0:00:5a:72:03:7d:11:08:02: 14:2e:85:05:50:30:3e:5b:df:f3:6b:c2:0f:bd:e5: 11:01:ff:b7:57:8a:dc:dd:f2:78:7f:fe:a6:69:dd: e4:be:c1:c9:2b:f8:f4:10:0d:ce:ec:7d:2c:97:2e: e5:7f:c6:a9:02:f5:6c:d5:c4:91:14:d6:e7:dc:02: 21:e5:e4:78:9d:05:cc:37:3a:0e:1d:87:d5:d2:69: 52:3e:9f:d9:29:21:a5:95:e2:44:c3:b2:22:30:17: c7:aa:e5:b5:fc:6b:1e:f4:d6:84:35:11:46:35:b5: ff:6d:4f:b0:7b:07:38:1f:d9:fe:b7:25:63:15:69: 32:75:2b:16:b1:07:d5:31:ac:07:17:2d:0b:23:2f: 87:6c:26:91:36:8f:57:b9:0b:08:59:63:06:8f:49: cb:a2:4a:fa:25:06:eb:68:20:51:d0:bf:a8:d3:04: 98:1f:25:4e:34:c9:81:48:4c:cb:e0:c0:ea:d6:70: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C3:47:0F:37:23:49:F4:7F:78:B4:CB:DA:DD:47:FC:6C:28:A8:F5 X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32332d3233203d3e20323131333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/23 Signature Algorithm: sha256WithRSAEncryption d8:ac:79:f9:70:56:ac:f6:3f:e0:e1:46:fa:54:54:85:81:e5: 22:b6:ea:11:e0:80:0c:06:a7:43:63:5c:3e:fc:c3:ac:d5:f3: 56:6b:8c:e6:4e:32:47:80:6b:09:96:e1:5f:ca:95:84:41:f0: 0d:9d:81:41:f7:8e:dc:84:da:26:de:83:88:ab:20:07:d2:a3: 50:3e:0e:ac:9e:bf:86:49:c1:c5:b2:40:fa:64:05:da:85:ca: 8a:96:82:f6:ce:13:08:29:f4:31:31:9d:e8:ff:99:6e:8a:4f: a7:15:e4:6a:d1:0c:5f:d1:6d:e3:37:8a:e2:91:a6:e4:d3:18: 2c:53:ed:1c:36:65:25:68:b8:b8:96:28:70:76:4f:db:23:5d: 62:81:24:85:2b:33:f7:dd:6d:19:b5:f7:b3:aa:21:f3:08:64: 52:08:75:d3:9a:ad:00:7f:35:f3:71:98:b4:24:be:fc:22:fe: ab:43:27:05:27:5a:50:3b:6c:32:9f:32:45:fe:75:37:d9:bf: 14:15:b6:30:3b:64:45:a1:57:72:3d:bc:b1:45:c9:cc:af:c4: 67:d1:a1:50:a7:da:2e:bb:ab:ca:f9:ec:c6:08:b3:d4:ea:9f: c8:c9:dd:b3:e9:b2:17:e9:b6:56:41:19:ea:ac:ba:69:43:18: e7:d0:f3:db -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUAm2eT9aGnpWWg+bzGnpS3xLQ9icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjBaFw0yNzAxMTkwMjIwMjBaMDMxMTAvBgNV BAMTKEFEQzM0NzBGMzcyMzQ5RjQ3Rjc4QjRDQkRBREQ0N0ZDNkMyOEE4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHm7tGZN2bTtuYp8KyQBJ0s2bT m7kvEmBN8RAJgWTmngY2jfadtlEw5hivVG8hJe7g/iZ3YDOuuNzlDQTN8PGRaOAA WnIDfREIAhQuhQVQMD5b3/Nrwg+95REB/7dXitzd8nh//qZp3eS+wckr+PQQDc7s fSyXLuV/xqkC9WzVxJEU1ufcAiHl5HidBcw3Og4dh9XSaVI+n9kpIaWV4kTDsiIw F8eq5bX8ax701oQ1EUY1tf9tT7B7Bzgf2f63JWMVaTJ1KxaxB9UxrAcXLQsjL4ds JpE2j1e5CwhZYwaPScuiSvolButoIFHQv6jTBJgfJU40yYFITMvgwOrWcI+nAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUrcNHDzcjSfR/eLTL2t1H/GwoqPUwHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zMTMwMzMyZTM3 MzkyZTMyMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzEzMTMzMzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEA2Kx5+XBWrPY/4OFG+lRU hYHlIrbqEeCADAanQ2NcPvzDrNXzVmuM5k4yR4BrCZbhX8qVhEHwDZ2BQfeO3ITa Jt6DiKsgB9KjUD4OrJ6/hknBxbJA+mQF2oXKipaC9s4TCCn0MTGd6P+ZbopPpxXk atEMX9Ft4zeK4pGm5NMYLFPtHDZlJWi4uJYocHZP2yNdYoEkhSsz991tGbX3s6oh 8whkUgh105qtAH8183GYtCS+/CL+q0MnBSdaUDtsMp8yRf51N9m/FBW2MDtkRaFX cj28sUXJzK/EZ9GhUKfaLruryvnsxgiz1OqfyMnds+myF+m2VkEZ6qy6aUMY59Dz 2w== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:57 2026 by rpki-client