This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39382e302f32342d3234203d3e20313334373638.roa File: 3130332e3233362e39382e302f32342d3234203d3e20313334373638.roa (raw, json) Hash identifier: lY96rjr+h+jMdmDvNPLQ7SG46FmeCK0mnjQey58AFyg= Subject key identifier: 12:F3:77:BC:19:BE:9A:AB:5C:90:12:E8:8C:80:35:97:A2:8C:0F:34 Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 66F7BC89974E0096882690E7B554A1B00191A309 Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39382e302f32342d3234203d3e20313334373638.roa Signing time: Tue 20 Jan 2026 02:21:36 +0000 ROA not before: Tue 20 Jan 2026 02:16:36 +0000 ROA not after: Tue 19 Jan 2027 02:21:36 +0000 asID: 134768 IP address blocks: 103.236.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f7:bc:89:97:4e:00:96:88:26:90:e7:b5:54:a1:b0:01:91:a3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: Jan 20 02:16:36 2026 GMT Not After : Jan 19 02:21:36 2027 GMT Subject: CN=12F377BC19BE9AAB5C9012E88C803597A28C0F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0b:dc:1c:22:10:b8:31:a4:85:1a:6f:6c:25: e4:bd:88:6a:0e:34:6d:df:31:a0:7b:a8:8a:f5:07: cc:a0:1e:f7:bc:89:fd:77:70:f3:1e:43:a8:7b:89: 32:da:d8:c1:d1:d8:70:0f:be:31:80:5d:fe:ff:7b: 07:82:66:ae:9a:16:49:af:26:2e:a8:4f:53:c7:d3: a2:df:89:81:74:2f:4b:0c:7d:3d:b9:27:c9:30:06: 67:07:7c:ab:d0:6e:10:2b:73:09:00:fb:77:b8:86: 46:af:c1:45:09:b4:da:5d:82:b7:32:70:86:20:9d: 09:48:b7:9e:9b:d3:4c:e8:11:64:d0:1d:7b:23:e6: bc:2d:06:1b:74:74:14:32:98:8c:54:7f:f4:cc:34: 9d:ff:8d:eb:e0:59:99:f9:1f:3d:46:91:36:31:b1: 7f:ac:0c:99:7d:c8:f1:3f:30:78:70:5c:74:6e:41: 88:95:40:03:51:4a:65:02:b5:e3:4c:70:e1:b3:ab: 75:8f:70:45:14:4b:4f:54:d8:0f:30:76:9b:34:6d: 49:ce:be:dd:16:86:ce:09:c7:e5:b7:ce:6a:1c:e3: 3b:e5:ec:34:0e:64:1f:83:fb:c6:02:cb:79:50:31: ba:eb:08:6b:6c:e6:3d:3d:50:ed:dd:6c:23:75:98: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F3:77:BC:19:BE:9A:AB:5C:90:12:E8:8C:80:35:97:A2:8C:0F:34 X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39382e302f32342d3234203d3e20313334373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.98.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:36:6d:61:0b:63:d3:2c:a4:3c:2d:30:55:cb:16:f0:a0:60: 24:27:2f:ff:03:81:81:fd:f4:12:65:10:7d:58:78:03:c3:03: 97:6c:5d:44:aa:a4:27:2a:e3:ee:ba:63:0b:c9:0d:b4:3e:b5: 6b:57:15:be:99:fc:bc:b4:32:2d:3b:c4:6c:11:02:fc:09:a7: 56:47:56:13:05:ad:c2:b6:e7:8a:21:a4:cc:8c:52:59:28:23: fa:ad:1a:e9:da:e0:0c:b7:a1:d1:72:4e:a3:5a:5b:8b:cd:7f: cb:9a:45:e8:ae:07:f6:f4:0e:f8:3b:07:37:98:be:e8:fc:7c: fc:e8:25:36:28:4e:78:63:54:f6:90:dc:f6:58:66:82:37:d3: 60:09:11:ed:61:04:e5:8c:ef:f1:e5:bf:e5:64:05:ec:49:c7: e1:78:f1:39:03:3b:22:4b:7d:98:5e:c7:65:0b:6e:ce:63:18: 6f:0c:70:ca:eb:54:f8:9c:04:a2:84:ac:26:4e:ec:ef:8e:a0: 5f:c6:c3:73:4c:3e:b5:cd:32:12:10:7b:7d:92:1d:0c:11:85: 68:66:7d:f5:f1:e1:2d:0c:65:71:4d:d5:90:61:0a:f3:17:87: 19:7a:a3:2a:b7:24:78:71:9c:47:39:e8:76:5e:3c:3e:52:87: 71:25:8a:26 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZve8iZdOAJaIJpDntVShsAGRowkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjAxMjAwMjE2MzZaFw0yNzAxMTkwMjIxMzZaMDMxMTAvBgNV BAMTKDEyRjM3N0JDMTlCRTlBQUI1QzkwMTJFODhDODAzNTk3QTI4QzBGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjC9wcIhC4MaSFGm9sJeS9iGoO NG3fMaB7qIr1B8ygHve8if13cPMeQ6h7iTLa2MHR2HAPvjGAXf7/eweCZq6aFkmv Ji6oT1PH06LfiYF0L0sMfT25J8kwBmcHfKvQbhArcwkA+3e4hkavwUUJtNpdgrcy cIYgnQlIt56b00zoEWTQHXsj5rwtBht0dBQymIxUf/TMNJ3/jevgWZn5Hz1GkTYx sX+sDJl9yPE/MHhwXHRuQYiVQANRSmUCteNMcOGzq3WPcEUUS09U2A8wdps0bUnO vt0Whs4Jx+W3zmoc4zvl7DQOZB+D+8YCy3lQMbrrCGts5j09UO3dbCN1mAmVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUEvN3vBm+mqtckBLojIA1l6KMDzQwHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfsYjANBgkqhkiG9w0BAQsFAAOCAQEALzZtYQtj0yykPC0wVcsW 8KBgJCcv/wOBgf30EmUQfVh4A8MDl2xdRKqkJyrj7rpjC8kNtD61a1cVvpn8vLQy LTvEbBEC/AmnVkdWEwWtwrbniiGkzIxSWSgj+q0a6drgDLeh0XJOo1pbi81/y5pF 6K4H9vQO+DsHN5i+6Px8/OglNihOeGNU9pDc9lhmgjfTYAkR7WEE5Yzv8eW/5WQF 7EnH4XjxOQM7Ikt9mF7HZQtuzmMYbwxwyutU+JwEooSsJk7s746gX8bDc0w+tc0y EhB7fZIdDBGFaGZ99fHhLQxlcU3VkGEK8xeHGXqjKrckeHGcRznodl48PlKHcSWK Jg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:29 2026 by rpki-client