This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e36302e302f32322d3234203d3e2034383136.roa File: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (raw, json) Hash identifier: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg= Subject key identifier: E5:C2:8F:EB:18:16:57:3E:54:30:3E:00:9B:01:56:FB:B4:6E:1E:B6 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 320F1B08C84DB61A5E70FF7CDEE243023DB48C85 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e36302e302f32322d3234203d3e2034383136.roa Signing time: Tue 20 Jan 2026 02:08:26 +0000 ROA not before: Tue 20 Jan 2026 02:03:26 +0000 ROA not after: Tue 19 Jan 2027 02:08:26 +0000 asID: 4816 IP address blocks: 103.236.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0f:1b:08:c8:4d:b6:1a:5e:70:ff:7c:de:e2:43:02:3d:b4:8c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Jan 20 02:03:26 2026 GMT Not After : Jan 19 02:08:26 2027 GMT Subject: CN=E5C28FEB1816573E54303E009B0156FBB46E1EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:28:ee:69:53:04:b9:36:df:59:e2:e1:ae:b7: bd:f3:14:c0:4c:84:f4:55:68:72:71:d6:f4:c5:76: fa:2d:7e:32:e8:63:ec:d0:d2:ae:a4:41:6e:e1:db: e5:fc:be:2d:47:c0:4e:f0:17:c6:64:39:69:fa:4f: bf:14:29:5f:f1:87:3a:7e:e7:51:87:04:d0:20:dc: c4:e5:6b:38:23:44:3f:fd:0f:5b:0c:83:1a:53:48: 10:30:ec:f4:d2:67:f1:35:31:7f:36:02:f7:42:b2: 23:aa:03:29:bd:c3:fe:20:d2:e0:a2:22:e6:1f:e2: b8:3e:88:45:95:80:6d:b6:9b:62:52:87:a2:e9:ac: 9d:cf:55:4f:10:c8:c5:ff:13:1b:14:ed:14:e3:6f: 4e:69:7f:2d:55:ec:81:65:45:5d:fb:cd:38:b6:14: de:39:35:f2:8c:4c:7b:d1:21:17:2b:cc:0e:7a:01: dc:13:db:a4:5f:87:03:11:ed:bf:1d:0f:5f:73:f4: 3f:c6:5d:7b:de:71:f8:68:f5:4b:d2:1b:88:54:2b: 5e:f5:03:e6:5d:6f:92:4b:67:5a:4e:a4:11:ab:9b: 3d:13:d1:99:e9:f6:30:60:af:22:b6:b3:81:a3:a4: fe:42:30:b0:94:d3:f8:02:a7:d3:e0:f5:5c:77:db: 2e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C2:8F:EB:18:16:57:3E:54:30:3E:00:9B:01:56:FB:B4:6E:1E:B6 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e36302e302f32322d3234203d3e2034383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.60.0/22 Signature Algorithm: sha256WithRSAEncryption 39:8c:08:01:8b:67:02:c9:b8:eb:84:97:d1:58:a2:a6:f1:64: 0f:63:05:88:0e:2d:56:33:68:c0:84:f0:c1:74:41:06:4f:f4: 43:39:4e:b5:6f:75:a2:f5:d3:60:c7:c9:52:31:c1:10:37:b6: 03:5a:47:6d:6c:7e:a4:34:d0:ee:02:f2:c5:ec:b8:ff:b1:8f: 14:3d:e0:dc:14:e4:f8:49:64:1c:9b:00:9e:aa:82:10:66:b3: 04:3c:6e:5f:0e:98:40:92:73:19:8f:c5:3a:1e:fa:68:f8:53: 87:b5:ad:b6:8d:50:75:0f:a5:14:ae:3f:6f:28:bb:35:9f:51: 15:61:1f:f5:5b:8c:d7:d9:ed:8e:2f:9b:71:db:2e:36:66:32: 23:d6:d6:2b:f1:98:b3:ea:8a:92:53:9e:75:e5:4c:c4:9d:02: da:22:dc:4e:e3:fc:99:8d:f5:c9:c3:cf:da:e7:8f:81:51:13: 97:f0:d4:d6:0b:aa:e1:7c:0d:26:86:79:bf:6d:6d:e1:62:b2: 25:fb:ba:5c:ef:9d:b7:db:7f:22:b8:76:19:a9:4d:64:f9:a3: 72:e7:29:f8:5d:05:7f:e4:46:c8:6e:57:be:d0:c1:d9:8f:cc: d9:69:41:05:68:d6:3f:57:fd:1d:18:2a:80:04:45:4c:47:66: 8a:0d:4a:80 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUMg8bCMhNthpecP983uJDAj20jIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjAxMjAwMjAzMjZaFw0yNzAxMTkwMjA4MjZaMDMxMTAvBgNV BAMTKEU1QzI4RkVCMTgxNjU3M0U1NDMwM0UwMDlCMDE1NkZCQjQ2RTFFQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKO5pUwS5Nt9Z4uGut73zFMBM hPRVaHJx1vTFdvotfjLoY+zQ0q6kQW7h2+X8vi1HwE7wF8ZkOWn6T78UKV/xhzp+ 51GHBNAg3MTlazgjRD/9D1sMgxpTSBAw7PTSZ/E1MX82AvdCsiOqAym9w/4g0uCi IuYf4rg+iEWVgG22m2JSh6LprJ3PVU8QyMX/ExsU7RTjb05pfy1V7IFlRV37zTi2 FN45NfKMTHvRIRcrzA56AdwT26RfhwMR7b8dD19z9D/GXXvecfho9UvSG4hUK171 A+Zdb5JLZ1pOpBGrmz0T0Znp9jBgryK2s4GjpP5CMLCU0/gCp9Pg9Vx32y5ZAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU5cKP6xgWVz5UMD4AmwFW+7RuHrYwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTIwNjQzLzAvMzEzMDMzMmUzMjMz MzYyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfsPDANBgkqhkiG9w0BAQsFAAOCAQEAOYwIAYtnAsm464SX0ViipvFkD2MF iA4tVjNowITwwXRBBk/0QzlOtW91ovXTYMfJUjHBEDe2A1pHbWx+pDTQ7gLyxey4 /7GPFD3g3BTk+ElkHJsAnqqCEGazBDxuXw6YQJJzGY/FOh76aPhTh7Wtto1QdQ+l FK4/byi7NZ9RFWEf9VuM19ntji+bcdsuNmYyI9bWK/GYs+qKklOedeVMxJ0C2iLc TuP8mY31ycPP2uePgVETl/DU1guq4XwNJoZ5v21t4WKyJfu6XO+dt9t/Irh2GalN ZPmjcucp+F0Ff+RGyG5XvtDB2Y/M2WlBBWjWP1f9HRgqgARFTEdmig1KgA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:28 2026 by rpki-client