This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38392e302f32342d3234203d3e20313334373638.roa File: 3130332e3233362e38392e302f32342d3234203d3e20313334373638.roa (raw, json) Hash identifier: M3opxa5gGAylRYonQYZ+qHIK6VRmNi/+U0FXncYr7lw= Subject key identifier: D0:A5:B2:E3:B2:D1:D9:82:AE:5F:01:E1:D5:D1:C3:6D:84:67:15:1B Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 6AF68B67710C1BCABA882B5619F9467F11192D0B Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38392e302f32342d3234203d3e20313334373638.roa Signing time: Tue 20 Jan 2026 02:21:34 +0000 ROA not before: Tue 20 Jan 2026 02:16:34 +0000 ROA not after: Tue 19 Jan 2027 02:21:34 +0000 asID: 134768 IP address blocks: 103.236.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f6:8b:67:71:0c:1b:ca:ba:88:2b:56:19:f9:46:7f:11:19:2d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: Jan 20 02:16:34 2026 GMT Not After : Jan 19 02:21:34 2027 GMT Subject: CN=D0A5B2E3B2D1D982AE5F01E1D5D1C36D8467151B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:5c:5a:f6:d1:7a:2f:c9:88:b2:9a:33:01: ac:15:4f:3b:81:8e:9f:10:c5:72:96:7f:7b:d5:ac: 05:70:de:7c:47:93:86:8a:a8:46:5a:ef:e5:9d:65: 99:08:98:16:81:52:11:1f:9a:8c:71:4e:e3:ac:77: 92:24:eb:b0:54:89:24:cc:c2:d5:91:8b:8c:55:23: 9d:22:ce:df:ee:ba:41:8b:f1:74:8c:4d:85:3a:fe: cc:50:a2:7c:21:4b:ef:5c:fa:55:32:6f:d8:ba:0b: ce:59:96:23:e9:7f:95:a5:83:7e:68:bd:26:13:f2: 6b:68:1a:b2:8e:96:73:1a:ad:b6:64:e7:d7:4d:03: 3d:d9:29:35:3f:8f:1e:52:37:b4:59:a4:4a:59:1a: 65:88:5b:82:87:75:cc:6c:d7:90:69:8a:e1:d8:29: c6:89:85:14:71:eb:47:7c:c3:41:c8:f2:a3:8f:c0: ca:ee:12:82:2a:34:0d:b2:00:db:a6:9c:a6:29:af: d0:17:c4:4b:d0:5f:14:c3:31:2a:a2:5a:9f:cb:f0: 78:7c:ab:ab:23:6c:94:aa:ea:90:ab:95:be:14:a8: d4:34:bf:ac:93:79:db:c1:f0:ae:36:f9:80:1c:f6: 40:d3:b1:73:e6:8c:15:8c:ab:b1:ae:e7:a8:21:16: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A5:B2:E3:B2:D1:D9:82:AE:5F:01:E1:D5:D1:C3:6D:84:67:15:1B X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38392e302f32342d3234203d3e20313334373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.89.0/24 Signature Algorithm: sha256WithRSAEncryption a4:96:c2:3e:54:7a:49:22:38:7f:5a:12:d7:35:07:5d:3a:02: 19:ae:37:b4:c9:55:3a:13:5a:96:99:c1:db:98:3b:26:38:84: 38:bc:47:f6:25:d1:93:fb:75:43:09:6a:0c:af:f9:29:17:19: f9:e8:ef:e1:aa:e1:a7:0a:c9:98:6a:68:35:9a:8b:d8:15:d7: 63:8a:f9:18:0f:89:ab:68:c7:67:78:6c:ff:bf:17:1a:b1:01: 46:23:ba:c8:f9:27:81:2f:9d:17:cb:ba:a4:f7:b6:21:29:df: 7b:b8:79:ca:2c:6b:ac:1e:2e:00:23:cc:f2:8a:10:15:d4:aa: 14:fd:75:02:1d:1d:94:78:a7:fa:25:bc:97:f3:2c:61:26:66: 67:1b:f9:24:a3:34:f3:b1:a8:8b:bc:91:72:bb:62:94:2c:31: a5:28:96:fe:2d:a2:ca:3c:99:08:bf:87:c2:b0:00:9e:55:b2: 3c:33:ed:2e:28:3f:6b:d6:e9:f4:27:ce:26:83:8b:e5:6b:42: 22:d4:08:a2:b9:0d:68:d2:db:71:c2:46:d9:de:fe:70:4f:51: 1b:70:87:3d:20:38:2b:91:48:69:b7:75:99:81:cd:97:78:f9: 3c:a1:21:f2:9f:ba:86:1a:c5:e7:bc:fb:07:54:d6:90:71:bb: 2b:3f:37:c9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUavaLZ3EMG8q6iCtWGflGfxEZLQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjAxMjAwMjE2MzRaFw0yNzAxMTkwMjIxMzRaMDMxMTAvBgNV BAMTKEQwQTVCMkUzQjJEMUQ5ODJBRTVGMDFFMUQ1RDFDMzZEODQ2NzE1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCFxa9tF6L8mIspozAawVTzuB jp8QxXKWf3vVrAVw3nxHk4aKqEZa7+WdZZkImBaBUhEfmoxxTuOsd5Ik67BUiSTM wtWRi4xVI50izt/uukGL8XSMTYU6/sxQonwhS+9c+lUyb9i6C85ZliPpf5Wlg35o vSYT8mtoGrKOlnMarbZk59dNAz3ZKTU/jx5SN7RZpEpZGmWIW4KHdcxs15BpiuHY KcaJhRRx60d8w0HI8qOPwMruEoIqNA2yANumnKYpr9AXxEvQXxTDMSqiWp/L8Hh8 q6sjbJSq6pCrlb4UqNQ0v6yTedvB8K42+YAc9kDTsXPmjBWMq7Gu56ghFvytAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU0KWy47LR2YKuXwHh1dHDbYRnFRswHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfsWTANBgkqhkiG9w0BAQsFAAOCAQEApJbCPlR6SSI4f1oS1zUH XToCGa43tMlVOhNalpnB25g7JjiEOLxH9iXRk/t1QwlqDK/5KRcZ+ejv4arhpwrJ mGpoNZqL2BXXY4r5GA+Jq2jHZ3hs/78XGrEBRiO6yPkngS+dF8u6pPe2ISnfe7h5 yixrrB4uACPM8ooQFdSqFP11Ah0dlHin+iW8l/MsYSZmZxv5JKM087Goi7yRcrti lCwxpSiW/i2iyjyZCL+HwrAAnlWyPDPtLig/a9bp9CfOJoOL5WtCItQIorkNaNLb ccJG2d7+cE9RG3CHPSA4K5FIabd1mYHNl3j5PKEh8p+6hhrF57z7B1TWkHG7Kz83 yQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:43 2026 by rpki-client