This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e35362e302f32322d3234203d3e2034383136.roa File: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (raw, json) Hash identifier: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w= Subject key identifier: 9D:6F:32:F5:0A:9C:5A:1F:39:43:33:9B:B8:38:F4:42:B1:F8:46:C2 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 3E31D88A833B9C808CA2AE6D40B158AE9C721539 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e35362e302f32322d3234203d3e2034383136.roa Signing time: Tue 20 Jan 2026 02:08:26 +0000 ROA not before: Tue 20 Jan 2026 02:03:26 +0000 ROA not after: Tue 19 Jan 2027 02:08:26 +0000 asID: 4816 IP address blocks: 103.236.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:31:d8:8a:83:3b:9c:80:8c:a2:ae:6d:40:b1:58:ae:9c:72:15:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Jan 20 02:03:26 2026 GMT Not After : Jan 19 02:08:26 2027 GMT Subject: CN=9D6F32F50A9C5A1F3943339BB838F442B1F846C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:33:b9:af:c3:94:c3:df:23:9a:ba:5c:d4:5e: 55:8b:ac:e8:2f:d0:e3:e0:33:e2:ef:a4:e5:69:2e: df:8d:7b:d7:fc:d6:a9:61:a8:1b:06:14:64:24:f0: a1:a7:fc:cd:53:12:4a:40:8f:39:52:82:d9:86:b7: a8:82:cb:78:ea:b8:ad:1d:c6:8e:2b:db:60:a7:d0: 00:09:0a:e9:76:0e:07:67:1f:2c:98:fd:26:eb:96: 35:66:d8:7a:62:dc:ba:c9:7d:5e:1d:7f:f0:d6:e5: ae:85:01:51:55:85:32:ee:1c:db:fa:73:e1:99:bc: 3d:11:d4:62:d0:07:62:08:63:f4:46:c8:96:c5:f6: 3e:72:7b:0d:02:be:6a:56:00:fb:18:d0:4d:af:39: e7:0f:1c:26:fc:23:fe:d9:97:81:31:6d:3d:b7:8f: 6d:33:f4:03:1c:26:d8:94:8d:d5:d9:d5:46:04:fa: a1:d1:74:67:a0:19:07:2b:2c:62:e9:c2:60:01:b9: a7:f0:e3:78:ad:4a:49:ae:36:61:bb:af:92:b1:6e: 37:09:76:a5:0a:d9:9b:e1:67:2d:5f:e0:28:89:f3: 51:42:af:90:f8:8f:f7:4c:e4:8f:a0:f3:28:1c:f8: f1:8c:97:d8:10:7e:75:bc:29:a6:28:83:a5:44:f0: e1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6F:32:F5:0A:9C:5A:1F:39:43:33:9B:B8:38:F4:42:B1:F8:46:C2 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e35362e302f32322d3234203d3e2034383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.56.0/22 Signature Algorithm: sha256WithRSAEncryption 06:05:58:e7:72:4b:0b:f5:26:cf:6e:5e:40:35:1d:08:0f:b1: 6c:25:eb:9d:53:98:36:9e:c0:8e:b7:a8:f5:d1:87:c3:b3:69: 21:d5:0f:05:e9:74:26:35:77:fb:88:12:4c:ba:66:32:e2:18: 24:4f:84:f3:40:cd:1b:a7:90:ff:9b:22:57:95:29:89:de:3b: 0f:24:27:ad:ab:93:1a:28:f3:2e:43:bc:45:03:86:3a:d6:ae: ec:b4:b4:3a:91:78:c6:df:97:3d:79:d3:45:43:50:b0:b8:8f: 76:e2:67:0d:6a:8b:8a:d4:86:c1:e0:15:a5:35:b6:aa:92:6d: 5c:cf:30:c6:0c:0c:56:b9:43:e9:c8:9e:f5:79:a6:a6:ae:e3: ea:d5:0d:07:53:47:d2:b9:8d:1d:20:8d:54:90:06:be:ae:8a: 97:b9:fa:21:42:07:cf:b6:2d:1b:fa:25:d4:0d:ca:0e:64:a9: 3b:7c:c4:06:1f:d0:29:af:8f:ee:f6:41:8e:c5:09:05:e6:fa: b7:36:55:fa:30:b0:70:f5:f6:b9:1d:47:3b:44:32:86:66:d9: 70:ff:19:da:a2:3c:a3:30:d4:e4:32:89:7f:68:78:57:30:1d: b7:3d:6d:00:33:0d:91:26:8d:9b:4e:f8:5c:41:f7:8b:e8:17: 8d:a7:48:ba -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUPjHYioM7nICMoq5tQLFYrpxyFTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjAxMjAwMjAzMjZaFw0yNzAxMTkwMjA4MjZaMDMxMTAvBgNV BAMTKDlENkYzMkY1MEE5QzVBMUYzOTQzMzM5QkI4MzhGNDQyQjFGODQ2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTM7mvw5TD3yOaulzUXlWLrOgv 0OPgM+LvpOVpLt+Ne9f81qlhqBsGFGQk8KGn/M1TEkpAjzlSgtmGt6iCy3jquK0d xo4r22Cn0AAJCul2DgdnHyyY/SbrljVm2Hpi3LrJfV4df/DW5a6FAVFVhTLuHNv6 c+GZvD0R1GLQB2IIY/RGyJbF9j5yew0CvmpWAPsY0E2vOecPHCb8I/7Zl4ExbT23 j20z9AMcJtiUjdXZ1UYE+qHRdGegGQcrLGLpwmABuafw43itSkmuNmG7r5KxbjcJ dqUK2ZvhZy1f4CiJ81FCr5D4j/dM5I+g8ygc+PGMl9gQfnW8KaYog6VE8OG7AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUnW8y9QqcWh85QzObuDj0QrH4RsIwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTIwNjQzLzAvMzEzMDMzMmUzMjMz MzYyZTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfsODANBgkqhkiG9w0BAQsFAAOCAQEABgVY53JLC/Umz25eQDUdCA+xbCXr nVOYNp7Ajreo9dGHw7NpIdUPBel0JjV3+4gSTLpmMuIYJE+E80DNG6eQ/5siV5Up id47DyQnrauTGijzLkO8RQOGOtau7LS0OpF4xt+XPXnTRUNQsLiPduJnDWqLitSG weAVpTW2qpJtXM8wxgwMVrlD6cie9Xmmpq7j6tUNB1NH0rmNHSCNVJAGvq6Kl7n6 IUIHz7YtG/ol1A3KDmSpO3zEBh/QKa+P7vZBjsUJBeb6tzZV+jCwcPX2uR1HO0Qy hmbZcP8Z2qI8ozDU5DKJf2h4VzAdtz1tADMNkSaNm074XEH3i+gXjadIug== -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:15 2026 by rpki-client