This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39372e302f32342d3234203d3e20313334373638.roa File: 3130332e3233362e39372e302f32342d3234203d3e20313334373638.roa (raw, json) Hash identifier: bItldB39oxonqIXx3wmQbfaYYjzssJ843I0Z4afmSRk= Subject key identifier: CE:42:56:60:A7:72:7B:A3:E2:B8:1A:F9:99:09:EA:B2:AE:78:EE:09 Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 616655940FE614DDADACF6A30810DE5AF14B0C12 Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39372e302f32342d3234203d3e20313334373638.roa Signing time: Tue 20 Jan 2026 02:21:35 +0000 ROA not before: Tue 20 Jan 2026 02:16:35 +0000 ROA not after: Tue 19 Jan 2027 02:21:35 +0000 asID: 134768 IP address blocks: 103.236.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:66:55:94:0f:e6:14:dd:ad:ac:f6:a3:08:10:de:5a:f1:4b:0c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: Jan 20 02:16:35 2026 GMT Not After : Jan 19 02:21:35 2027 GMT Subject: CN=CE425660A7727BA3E2B81AF99909EAB2AE78EE09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:93:cc:cc:23:f1:aa:c3:53:e2:11:44:06: d7:34:f6:24:e6:19:37:f4:eb:c2:1b:73:ed:e0:7e: 1c:cd:f7:d3:03:a5:42:2c:ba:80:a3:4b:7f:d7:25: 0a:c8:7a:2b:9c:8f:ee:71:59:7b:30:04:05:d6:e5: 0e:e2:f5:5c:66:f2:20:e8:0b:11:cd:62:15:d9:a8: 31:55:a0:fc:8a:71:56:d4:21:39:d8:ec:32:d9:a0: 36:26:12:c9:84:e8:64:4a:3e:4c:0a:99:00:64:5f: ca:c5:ee:f0:e1:71:b1:91:58:84:ba:d5:58:72:cf: dc:b9:a3:ad:98:11:28:d6:ae:02:f8:18:77:96:13: 77:8a:15:55:ba:9f:9f:32:21:ec:34:bd:0f:64:a8: 71:61:dc:26:0b:22:7f:4a:38:81:e9:df:1c:03:ba: 2e:92:d8:62:73:ae:78:31:fc:9b:fd:c0:54:20:68: dc:5f:e2:14:7f:4e:d3:ec:e0:ed:f0:0a:1d:75:f3: b7:af:fe:36:c2:e1:8d:aa:fa:d5:61:b3:2f:fa:84: b2:0e:92:ac:70:7f:cf:25:26:41:2a:e5:17:37:5f: d5:9e:c9:27:98:a0:68:cc:f4:91:c9:1b:06:a4:d1: 25:b7:da:9e:2a:04:96:77:f3:fe:41:c4:37:b5:7b: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:42:56:60:A7:72:7B:A3:E2:B8:1A:F9:99:09:EA:B2:AE:78:EE:09 X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39372e302f32342d3234203d3e20313334373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.97.0/24 Signature Algorithm: sha256WithRSAEncryption 25:ae:50:f8:63:51:9d:95:57:41:4a:55:ae:23:b7:e3:35:1a: af:41:0d:1a:c9:b6:e1:d4:27:b9:dc:80:39:6f:bd:5a:02:5a: 42:56:3f:12:4f:70:e4:81:e2:62:de:86:f4:07:a1:af:82:4e: f4:ce:31:ab:1b:fa:ea:f3:53:29:46:ef:40:59:f0:87:b0:d5: 5b:89:08:b3:41:c0:ae:0c:01:e2:18:92:45:8b:9c:c7:30:e5: 31:56:c7:ba:d6:50:e5:41:43:d5:b1:a4:56:4b:a4:b8:0f:67: 60:10:5c:58:0e:53:2d:24:33:b9:7a:c6:60:da:a1:39:cc:66: 63:5d:e5:8a:20:20:06:c0:0c:44:0f:0e:db:26:0a:de:ec:47: 8c:14:68:19:15:86:a7:ee:d1:84:0a:19:2b:21:b4:1c:3d:27: a5:50:d3:32:bb:38:0c:82:c7:79:87:46:45:56:02:5e:84:3e: 2e:5c:da:d2:a0:fb:ac:1f:3e:b9:11:f1:67:2b:cd:98:de:56: 9a:47:3c:bb:a1:c0:11:70:3d:2a:87:d6:db:d3:2f:89:9b:19: 32:1d:ac:69:7c:65:7b:69:3f:b4:b7:41:97:c9:2c:3a:1f:ab: c0:34:e7:75:f2:3a:d5:3c:bb:70:d9:ca:a9:f0:3b:f3:20:fb: 70:a3:d3:ca -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYWZVlA/mFN2trPajCBDeWvFLDBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjAxMjAwMjE2MzVaFw0yNzAxMTkwMjIxMzVaMDMxMTAvBgNV BAMTKENFNDI1NjYwQTc3MjdCQTNFMkI4MUFGOTk5MDlFQUIyQUU3OEVFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWsZPMzCPxqsNT4hFEBtc09iTm GTf068Ibc+3gfhzN99MDpUIsuoCjS3/XJQrIeiucj+5xWXswBAXW5Q7i9Vxm8iDo CxHNYhXZqDFVoPyKcVbUITnY7DLZoDYmEsmE6GRKPkwKmQBkX8rF7vDhcbGRWIS6 1Vhyz9y5o62YESjWrgL4GHeWE3eKFVW6n58yIew0vQ9kqHFh3CYLIn9KOIHp3xwD ui6S2GJzrngx/Jv9wFQgaNxf4hR/TtPs4O3wCh1187ev/jbC4Y2q+tVhsy/6hLIO kqxwf88lJkEq5Rc3X9WeySeYoGjM9JHJGwak0SW32p4qBJZ38/5BxDe1e4ilAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUzkJWYKdye6PiuBr5mQnqsq547gkwHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfsYTANBgkqhkiG9w0BAQsFAAOCAQEAJa5Q+GNRnZVXQUpVriO3 4zUar0ENGsm24dQnudyAOW+9WgJaQlY/Ek9w5IHiYt6G9Aehr4JO9M4xqxv66vNT KUbvQFnwh7DVW4kIs0HArgwB4hiSRYucxzDlMVbHutZQ5UFD1bGkVkukuA9nYBBc WA5TLSQzuXrGYNqhOcxmY13liiAgBsAMRA8O2yYK3uxHjBRoGRWGp+7RhAoZKyG0 HD0npVDTMrs4DILHeYdGRVYCXoQ+Llza0qD7rB8+uRHxZyvNmN5Wmkc8u6HAEXA9 KofW29MviZsZMh2saXxle2k/tLdBl8ksOh+rwDTndfI61Ty7cNnKqfA78yD7cKPT yg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:51 2026 by rpki-client