This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232382e302f32322d3234203d3e2034383337.roa File: 3130332e32342e3232382e302f32322d3234203d3e2034383337.roa (raw, json) Hash identifier: OovHk1dM5SRegXrOoxHUF4YMH6s4+waRg57vn/cYkAk= Subject key identifier: 14:A8:52:80:02:D6:47:1A:4F:A9:E8:E8:95:85:81:E1:76:CF:A4:8E Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Certificate serial: 0D54EBE36767FEC91BEB55E0E8A4D196EB240F25 Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232382e302f32322d3234203d3e2034383337.roa Signing time: Tue 20 Jan 2026 02:26:10 +0000 ROA not before: Tue 20 Jan 2026 02:21:10 +0000 ROA not after: Tue 19 Jan 2027 02:26:10 +0000 asID: 4837 IP address blocks: 103.24.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 10:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:54:eb:e3:67:67:fe:c9:1b:eb:55:e0:e8:a4:d1:96:eb:24:0f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Validity Not Before: Jan 20 02:21:10 2026 GMT Not After : Jan 19 02:26:10 2027 GMT Subject: CN=14A8528002D6471A4FA9E8E8958581E176CFA48E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e5:98:a4:ba:21:8c:ce:a5:04:03:f8:26:a0: 81:83:4d:49:61:24:17:61:6d:84:10:dd:87:e3:5b: a3:ca:91:e0:c4:d3:0f:c2:35:49:bb:c4:cf:5f:13: 2a:62:94:3f:70:e2:61:0d:c6:a5:e4:60:be:76:d4: 7a:f9:e4:a8:bd:6f:10:64:1c:d8:74:b0:bb:2c:d0: 02:66:0f:45:23:57:59:2d:5b:68:ed:fc:9b:42:f4: 4d:d9:c7:e8:ac:42:00:e0:cb:80:e9:dd:40:47:69: 5d:71:bb:07:60:cd:14:56:67:4a:1b:fc:fb:4e:51: fa:48:14:28:50:c8:ae:ab:98:40:d2:25:3d:54:69: 7f:d5:84:fd:55:f2:4c:54:f6:f8:1e:dd:5f:0b:c7: e0:c1:3a:4a:1d:39:c0:0a:47:f2:85:fc:07:92:1a: ff:2e:79:18:e5:4a:bb:a5:a7:57:c2:c4:05:10:ed: b9:14:7d:ec:a6:ee:59:11:e9:72:28:6b:96:e0:75: 84:c8:77:cd:f5:17:14:f6:6f:86:a9:a9:37:36:24: d5:49:7a:c2:db:04:33:ba:c0:7c:af:cf:12:1f:17: 19:95:36:c0:e4:07:2b:12:37:3b:e7:16:b8:f0:1c: ab:9f:ba:09:69:68:c2:bb:db:7f:e0:fa:99:84:64: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A8:52:80:02:D6:47:1A:4F:A9:E8:E8:95:85:81:E1:76:CF:A4:8E X509v3 Authority Key Identifier: keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232382e302f32322d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.228.0/22 Signature Algorithm: sha256WithRSAEncryption 26:c1:43:a8:c6:44:b8:42:7f:38:7a:96:55:78:4a:b4:8c:18: 31:ee:70:cb:94:ba:3e:6d:0d:b5:c8:1f:f5:17:a3:86:67:f7: ec:a4:8a:ff:a5:3e:8b:86:4b:a0:9a:10:da:39:b5:67:58:97: ed:55:98:d4:78:fd:31:7b:9f:8b:2b:ed:ea:30:ae:cf:ff:09: 69:40:24:42:80:83:6f:27:2d:8f:77:c5:02:5f:20:d9:73:9b: 42:70:58:4e:8a:cd:2d:77:31:ef:3e:d9:07:aa:18:b8:2c:a3: 1f:e5:1f:d9:15:28:67:8c:b5:7d:92:56:43:5f:53:bc:c7:25: 82:be:25:45:f9:76:92:a5:d1:f8:37:27:41:11:5c:c6:a3:b2: 19:c4:b3:6b:9a:02:7b:57:49:37:0c:6b:c6:f7:a6:7e:17:69: 92:12:eb:d9:85:12:93:d4:55:74:21:2c:d0:b6:0a:e9:ad:50: e1:83:8e:fb:72:3d:a1:f9:d2:4d:02:e6:5a:fc:24:98:fd:77: ff:8a:c9:15:6b:e1:d7:6f:69:47:46:74:96:3b:a4:e7:ce:cd: 49:e2:18:41:49:b0:17:6f:87:b5:10:c4:94:76:be:86:03:30: b5:ae:ba:4f:63:1c:cc:65:ce:6f:2b:68:f7:fc:0a:b7:85:6b: b9:04:40:37 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDVTr42dn/skb61Xg6KTRluskDyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVE OUIzNzM1OTAeFw0yNjAxMjAwMjIxMTBaFw0yNzAxMTkwMjI2MTBaMDMxMTAvBgNV BAMTKDE0QTg1MjgwMDJENjQ3MUE0RkE5RThFODk1ODU4MUUxNzZDRkE0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe5ZikuiGMzqUEA/gmoIGDTUlh JBdhbYQQ3YfjW6PKkeDE0w/CNUm7xM9fEypilD9w4mENxqXkYL521Hr55Ki9bxBk HNh0sLss0AJmD0UjV1ktW2jt/JtC9E3Zx+isQgDgy4Dp3UBHaV1xuwdgzRRWZ0ob /PtOUfpIFChQyK6rmEDSJT1UaX/VhP1V8kxU9vge3V8Lx+DBOkodOcAKR/KF/AeS Gv8ueRjlSrulp1fCxAUQ7bkUfeym7lkR6XIoa5bgdYTId831FxT2b4apqTc2JNVJ esLbBDO6wHyvzxIfFxmVNsDkBysSNzvnFrjwHKufuglpaMK723/g+pmEZIZ9AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUFKhSgALWRxpPqejolYWB4XbPpI4wHwYDVR0j BBgwFoAU61sIP5/Gq7cls/0eggJwbtmzc1kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTAzNjAzMy8wL0VCNUIwODNGOUZDNkFCQjcyNUIzRkQxRTgyMDI3 MDZFRDlCMzczNTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVEOUIzNzM1OS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI1MDM2MDMzLzAvMzEzMDMzMmUzMjM0 MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcY5DANBgkqhkiG9w0BAQsFAAOCAQEAJsFDqMZEuEJ/OHqWVXhKtIwYMe5w y5S6Pm0Ntcgf9Rejhmf37KSK/6U+i4ZLoJoQ2jm1Z1iX7VWY1Hj9MXufiyvt6jCu z/8JaUAkQoCDbyctj3fFAl8g2XObQnBYTorNLXcx7z7ZB6oYuCyjH+Uf2RUoZ4y1 fZJWQ19TvMclgr4lRfl2kqXR+DcnQRFcxqOyGcSza5oCe1dJNwxrxvemfhdpkhLr 2YUSk9RVdCEs0LYK6a1Q4YOO+3I9ofnSTQLmWvwkmP13/4rJFWvh129pR0Z0ljuk 587NSeIYQUmwF2+HtRDElHa+hgMwta66T2MczGXObyto9/wKt4VruQRANw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:27 2026 by rpki-client