This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38352e302f32342d3234203d3e20313334373638.roa File: 3130332e3233362e38352e302f32342d3234203d3e20313334373638.roa (raw, json) Hash identifier: nQwgtFazh553of0nOCSsWp9u6CBYm40gNqmLYOOlfO0= Subject key identifier: 2D:42:2C:63:74:8E:08:49:FF:28:40:FF:3E:A7:E6:75:C4:7A:27:CE Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 45892EAF6A757951D3F05FD9D143658A480047A6 Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38352e302f32342d3234203d3e20313334373638.roa Signing time: Tue 20 Jan 2026 02:21:36 +0000 ROA not before: Tue 20 Jan 2026 02:16:36 +0000 ROA not after: Tue 19 Jan 2027 02:21:36 +0000 asID: 134768 IP address blocks: 103.236.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:89:2e:af:6a:75:79:51:d3:f0:5f:d9:d1:43:65:8a:48:00:47:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: Jan 20 02:16:36 2026 GMT Not After : Jan 19 02:21:36 2027 GMT Subject: CN=2D422C63748E0849FF2840FF3EA7E675C47A27CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:ad:3e:ae:6d:8c:90:23:01:cf:98:f4:4b: 1b:fb:b7:81:c2:b2:23:c8:0c:0a:a9:10:63:45:f3: 7d:bd:12:ea:dc:41:95:ef:6c:c8:04:a1:39:9d:e0: 44:9b:c9:af:77:2c:11:fe:b6:5f:d5:d7:c5:86:1c: 26:0c:f3:49:63:b2:fc:07:03:a1:04:b2:e6:f4:20: b2:d6:fc:ba:f5:55:1a:29:de:09:48:91:5f:af:f5: f5:00:be:a1:8b:c4:64:40:6d:46:ca:3f:e1:9d:9f: a9:c7:e4:a0:8d:b8:4c:63:f3:b2:78:44:7b:aa:ca: fe:8c:aa:7c:de:b4:18:a6:19:71:a1:b5:07:4b:2e: 3e:03:3e:aa:ca:e5:69:f2:f8:9d:75:f0:b6:2d:df: 96:86:8a:73:4f:2e:10:44:de:09:ae:b1:38:b0:f7: b7:d6:22:24:8b:09:5c:16:9c:97:97:3e:08:5f:c0: b9:fd:d6:d2:a5:65:cb:9b:7c:a6:7d:ca:b6:a0:bc: 31:a2:98:11:14:2f:2f:70:58:ee:b4:d8:56:6d:5d: 90:04:f6:8d:71:bf:86:f0:d1:ae:80:c7:24:da:5e: 19:54:c2:a8:c9:ed:57:ad:be:c6:ff:73:bb:5a:7a: 4c:64:e2:50:f7:d2:ed:ff:88:5d:da:f7:2e:7f:26: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:42:2C:63:74:8E:08:49:FF:28:40:FF:3E:A7:E6:75:C4:7A:27:CE X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38352e302f32342d3234203d3e20313334373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.85.0/24 Signature Algorithm: sha256WithRSAEncryption a7:c5:84:5c:9d:24:df:e9:f5:bf:20:f3:35:6b:d7:9d:b8:55: 53:d8:23:33:de:13:02:3a:b8:13:cb:6d:54:57:ab:1b:5b:53: 54:ea:bc:69:9f:b3:ad:34:6e:89:c2:df:d8:84:e6:dd:a0:55: 07:25:1f:4d:64:77:28:21:d3:b7:c6:2e:05:ec:20:1a:2a:65: 37:c6:8e:08:40:0b:32:3c:18:ba:e6:a8:6c:85:10:4e:57:cf: ea:bb:95:9d:d1:74:c3:0b:e2:33:e2:36:c6:50:1a:bf:e3:33: 72:14:3e:03:a2:93:5b:8f:c3:52:50:e3:96:1e:ec:f7:4b:76: a7:42:8e:f8:d4:f2:cb:39:b3:dc:ee:54:62:bc:67:2c:e4:67: dd:38:79:f5:19:8c:49:d3:e1:81:c2:dc:9e:31:1c:f3:b4:b5: ff:33:69:29:11:db:4a:d1:80:28:5e:a3:5d:61:c0:ac:a5:55: 01:40:8c:54:41:16:88:12:cd:8c:65:65:fc:8c:8c:b6:b7:92: db:fa:00:c9:30:0e:55:ce:48:83:54:a4:d4:b1:97:b1:f3:c6: ec:90:64:7c:06:af:90:44:c9:09:97:1a:e1:1c:26:96:02:94: 22:73:e5:a0:66:bc:17:dc:ce:ad:d5:81:ab:da:55:f2:e7:95: e9:d8:f3:84 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIURYkur2p1eVHT8F/Z0UNlikgAR6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjAxMjAwMjE2MzZaFw0yNzAxMTkwMjIxMzZaMDMxMTAvBgNV BAMTKDJENDIyQzYzNzQ4RTA4NDlGRjI4NDBGRjNFQTdFNjc1QzQ3QTI3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVK0+rm2MkCMBz5j0Sxv7t4HC siPIDAqpEGNF8329EurcQZXvbMgEoTmd4ESbya93LBH+tl/V18WGHCYM80ljsvwH A6EEsub0ILLW/Lr1VRop3glIkV+v9fUAvqGLxGRAbUbKP+Gdn6nH5KCNuExj87J4 RHuqyv6MqnzetBimGXGhtQdLLj4DPqrK5Wny+J118LYt35aGinNPLhBE3gmusTiw 97fWIiSLCVwWnJeXPghfwLn91tKlZcubfKZ9yragvDGimBEULy9wWO602FZtXZAE 9o1xv4bw0a6AxyTaXhlUwqjJ7Vetvsb/c7taekxk4lD30u3/iF3a9y5/JrXbAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQULUIsY3SOCEn/KED/PqfmdcR6J84wHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfsVTANBgkqhkiG9w0BAQsFAAOCAQEAp8WEXJ0k3+n1vyDzNWvX nbhVU9gjM94TAjq4E8ttVFerG1tTVOq8aZ+zrTRuicLf2ITm3aBVByUfTWR3KCHT t8YuBewgGiplN8aOCEALMjwYuuaobIUQTlfP6ruVndF0wwviM+I2xlAav+MzchQ+ A6KTW4/DUlDjlh7s90t2p0KO+NTyyzmz3O5UYrxnLORn3Th59RmMSdPhgcLcnjEc 87S1/zNpKRHbStGAKF6jXWHArKVVAUCMVEEWiBLNjGVl/IyMtreS2/oAyTAOVc5I g1Sk1LGXsfPG7JBkfAavkETJCZca4RwmlgKUInPloGa8F9zOrdWBq9pV8ueV6djz hA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:49 2026 by rpki-client