This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37302e302f32342d3234203d3e20313334373638.roa File: 3130332e3233362e37302e302f32342d3234203d3e20313334373638.roa (raw, json) Hash identifier: 8NRH5n54A+Qo3GLq5eI2WtTA6iwZS5Gm03pI9w2d5to= Subject key identifier: 9B:E7:3F:B0:C0:32:62:1F:53:F5:A0:0D:07:47:60:25:40:C7:BE:99 Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 17A52CBC7F9CA6B77760AFE1C28524D39538E9DE Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37302e302f32342d3234203d3e20313334373638.roa Signing time: Tue 20 Jan 2026 02:21:36 +0000 ROA not before: Tue 20 Jan 2026 02:16:36 +0000 ROA not after: Tue 19 Jan 2027 02:21:36 +0000 asID: 134768 IP address blocks: 103.236.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a5:2c:bc:7f:9c:a6:b7:77:60:af:e1:c2:85:24:d3:95:38:e9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: Jan 20 02:16:36 2026 GMT Not After : Jan 19 02:21:36 2027 GMT Subject: CN=9BE73FB0C032621F53F5A00D0747602540C7BE99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:98:0c:e5:f9:a3:b3:e2:a0:21:9f:f4:81: 9e:60:f1:7f:15:df:8a:cc:f4:87:60:b0:06:3b:e5: fd:ca:37:d0:1b:9b:d6:62:5c:0c:b5:63:90:1a:66: f9:72:de:73:50:5f:0e:e2:8f:1a:ab:fb:fd:db:8f: 22:f8:6d:ab:ee:1f:be:de:3c:5f:16:21:02:7b:3d: c1:99:3d:fb:32:e6:ea:5c:9e:e6:5b:27:b4:69:f6: 33:8c:ed:6d:5d:f1:29:87:73:8f:dd:7d:d6:9e:b6: e9:1b:15:88:78:23:6d:ea:15:68:ff:6b:4e:2a:bd: 26:d1:93:38:ea:1d:2b:a0:4a:99:44:0e:4f:1e:0f: 9e:7a:0a:c2:99:ba:77:50:88:64:cd:09:07:69:ed: e8:e4:39:1f:18:44:93:3f:c7:03:af:60:48:43:ee: 3d:c2:6b:1b:49:fe:c5:31:e2:9c:77:89:d4:fe:7c: e8:58:fc:8a:7a:1b:4d:3c:ba:16:0f:d7:22:e2:7e: bb:ed:a8:4f:a2:49:67:fe:dd:72:d5:51:65:9a:56: a0:af:01:8c:85:92:80:d3:51:12:02:b5:b0:55:b5: 37:a7:b7:13:80:c9:29:c3:3c:be:13:5b:97:13:92: 30:b8:21:d0:25:e4:b9:23:eb:f5:59:6c:32:f7:76: 88:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E7:3F:B0:C0:32:62:1F:53:F5:A0:0D:07:47:60:25:40:C7:BE:99 X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37302e302f32342d3234203d3e20313334373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.70.0/24 Signature Algorithm: sha256WithRSAEncryption 23:fb:ec:21:4e:3a:26:a2:b7:b0:fb:a6:5a:9a:7f:4e:cf:4e: fd:3c:5e:d5:14:9f:ba:07:4b:85:9b:7a:2b:a7:ca:63:cf:d1: 74:11:09:db:19:18:51:5b:03:17:e5:28:24:7b:17:0f:40:90: 1c:b2:38:97:ba:f9:45:2c:2d:1b:38:99:d0:f7:ad:70:78:ef: 4d:c1:2e:1f:a0:e4:b0:66:ea:ae:58:38:07:a4:00:f1:29:d7: 9c:e0:5e:26:7f:3f:42:8e:c3:f7:65:69:03:9e:9f:78:d8:da: 07:08:84:68:3d:79:b2:eb:6d:d0:79:61:50:b3:30:54:7e:a0: 68:af:54:ce:d4:05:20:26:73:28:ea:6b:53:60:45:d8:27:1b: 98:6a:35:35:8f:89:0d:23:bc:50:7b:ce:ae:78:3b:70:1e:91: 01:5e:37:44:1b:78:d2:d1:a2:e2:e4:c8:62:2c:4c:b5:92:50: 39:16:bb:89:81:84:dd:bd:06:7f:82:ab:04:4e:78:b9:84:db: 68:c6:16:d1:61:d7:62:69:bf:b3:cf:68:1e:a9:55:56:98:bf: c1:37:e4:c5:95:cc:f1:f2:a3:56:ad:65:ea:78:35:2a:d1:3c: b1:bf:d8:19:13:43:19:39:6c:85:c3:00:78:99:30:f8:19:7b: ee:70:89:2d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUF6UsvH+cprd3YK/hwoUk05U46d4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjAxMjAwMjE2MzZaFw0yNzAxMTkwMjIxMzZaMDMxMTAvBgNV BAMTKDlCRTczRkIwQzAzMjYyMUY1M0Y1QTAwRDA3NDc2MDI1NDBDN0JFOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0SZgM5fmjs+KgIZ/0gZ5g8X8V 34rM9IdgsAY75f3KN9Abm9ZiXAy1Y5AaZvly3nNQXw7ijxqr+/3bjyL4bavuH77e PF8WIQJ7PcGZPfsy5upcnuZbJ7Rp9jOM7W1d8SmHc4/dfdaetukbFYh4I23qFWj/ a04qvSbRkzjqHSugSplEDk8eD556CsKZundQiGTNCQdp7ejkOR8YRJM/xwOvYEhD 7j3CaxtJ/sUx4px3idT+fOhY/Ip6G008uhYP1yLifrvtqE+iSWf+3XLVUWWaVqCv AYyFkoDTURICtbBVtTentxOAySnDPL4TW5cTkjC4IdAl5Lkj6/VZbDL3doj9AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUm+c/sMAyYh9T9aANB0dgJUDHvpkwHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfsRjANBgkqhkiG9w0BAQsFAAOCAQEAI/vsIU46JqK3sPumWpp/ Ts9O/Txe1RSfugdLhZt6K6fKY8/RdBEJ2xkYUVsDF+UoJHsXD0CQHLI4l7r5RSwt GziZ0PetcHjvTcEuH6DksGbqrlg4B6QA8SnXnOBeJn8/Qo7D92VpA56feNjaBwiE aD15sutt0HlhULMwVH6gaK9UztQFICZzKOprU2BF2CcbmGo1NY+JDSO8UHvOrng7 cB6RAV43RBt40tGi4uTIYixMtZJQORa7iYGE3b0Gf4KrBE54uYTbaMYW0WHXYmm/ s89oHqlVVpi/wTfkxZXM8fKjVq1l6ng1KtE8sb/YGRNDGTlshcMAeJkw+Bl77nCJ LQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:04 2026 by rpki-client