This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa File: 3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa (raw, json) Hash identifier: 5HY0Ue/vWpU1LvYH7L0XmoUxw5TaIDzLdoP5LOndIDk= Subject key identifier: 35:16:01:CA:43:F8:EA:DA:BF:3A:19:73:9C:28:00:4D:DC:31:27:0A Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 0FB0597202B7DB319C42017B59A9870AE286A0FC Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa Signing time: Tue 20 Jan 2026 02:16:50 +0000 ROA not before: Tue 20 Jan 2026 02:11:50 +0000 ROA not after: Tue 19 Jan 2027 02:16:50 +0000 asID: 152320 IP address blocks: 103.223.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b0:59:72:02:b7:db:31:9c:42:01:7b:59:a9:87:0a:e2:86:a0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Jan 20 02:11:50 2026 GMT Not After : Jan 19 02:16:50 2027 GMT Subject: CN=351601CA43F8EADABF3A19739C28004DDC31270A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:b6:92:f8:0f:2e:6c:73:f9:a8:92:27:59: 83:2f:0c:ac:97:06:6c:ca:44:1e:38:11:37:49:a3: 55:14:25:fc:fe:bf:d4:d0:94:51:64:87:6b:b7:34: f2:53:f6:5c:1e:4a:23:b0:7c:86:db:b2:8e:15:2c: e3:82:b1:17:57:bb:17:5b:ca:e4:51:64:68:f0:06: 76:46:69:c4:d4:cf:bd:0c:c0:6a:d2:14:5c:ce:6f: ea:67:8f:5e:ae:02:de:15:68:e3:d4:a0:13:e3:51: d3:e7:97:d1:17:5a:f4:12:54:08:c4:33:8b:d5:b9: 17:9b:29:68:f0:22:22:7c:53:be:45:29:cf:9c:e5: 5e:04:f2:2d:0b:05:d3:ca:b1:ad:59:9c:da:b0:0e: c8:cf:b2:50:1d:a7:20:01:36:5a:28:d6:c9:f1:3a: a9:07:65:5a:c9:82:01:74:34:28:08:30:fa:f0:b8: 91:2b:58:a3:17:9a:5b:a9:b9:db:a5:49:b9:c8:bb: 71:bf:bd:3d:b9:6e:6b:3e:d1:0f:90:f0:90:54:3a: 95:59:ae:bb:01:4b:31:22:54:8f:75:98:f4:ca:c4: 20:57:93:2b:f5:cb:f9:93:fc:90:fb:5a:73:46:5d: e6:77:ec:49:19:2a:f5:d0:07:66:ca:38:e8:54:5d: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:16:01:CA:43:F8:EA:DA:BF:3A:19:73:9C:28:00:4D:DC:31:27:0A X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.223.120.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:e8:88:da:45:89:ec:8d:0b:5a:e9:f1:43:6e:3b:12:3b:06: fa:b8:37:6a:e4:04:6f:52:3f:30:e9:b2:a4:7c:83:be:d1:33: 15:db:60:65:ce:c9:df:75:14:6a:45:d4:14:48:6f:c2:81:bc: fe:c3:a6:5f:e4:c1:ac:92:36:e9:48:06:4d:2d:b4:a0:4d:00: 64:fb:a1:19:26:9d:66:1b:32:29:35:88:f6:83:2a:c2:d7:84: 88:1f:35:43:92:18:1b:34:27:f6:81:fb:8d:1c:23:5e:3d:41: 0b:3f:de:47:fa:f2:17:f8:33:9c:50:88:13:5b:23:8c:2f:48: 16:0e:d0:3e:2d:e2:67:eb:d9:99:5e:95:98:0a:5d:9a:3e:18: 36:7b:5e:cf:8e:82:97:d4:fe:7b:97:b4:be:6d:29:93:d8:c0: c0:4c:dc:45:42:41:b6:d4:4b:e5:60:2b:da:5d:70:65:bb:9a: e5:40:cc:ff:36:af:ba:4f:e4:9b:12:48:65:ff:8f:2e:f5:0a: e8:48:39:32:af:5f:1c:65:1c:c2:81:90:45:6f:d2:4e:7e:e3: 53:e3:b7:8a:00:87:4a:7d:d3:4a:3f:04:76:1e:53:77:a8:9b: 25:ff:3f:b6:36:a4:be:a4:86:36:5e:8f:e3:75:b5:c6:83:68: 16:03:35:07 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUD7BZcgK32zGcQgF7WamHCuKGoPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjAxMjAwMjExNTBaFw0yNzAxMTkwMjE2NTBaMDMxMTAvBgNV BAMTKDM1MTYwMUNBNDNGOEVBREFCRjNBMTk3MzlDMjgwMDREREMzMTI3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JbaS+A8ubHP5qJInWYMvDKyX BmzKRB44ETdJo1UUJfz+v9TQlFFkh2u3NPJT9lweSiOwfIbbso4VLOOCsRdXuxdb yuRRZGjwBnZGacTUz70MwGrSFFzOb+pnj16uAt4VaOPUoBPjUdPnl9EXWvQSVAjE M4vVuRebKWjwIiJ8U75FKc+c5V4E8i0LBdPKsa1ZnNqwDsjPslAdpyABNloo1snx OqkHZVrJggF0NCgIMPrwuJErWKMXmlupudulSbnIu3G/vT25bms+0Q+Q8JBUOpVZ rrsBSzEiVI91mPTKxCBXkyv1y/mT/JD7WnNGXeZ37EkZKvXQB2bKOOhUXcgPAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUNRYBykP46tq/OhlznCgATdwxJwowHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5ODUyOTMxLzAvMzEzMDMzMmUz MjMyMzMyZTMxMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzIz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGffeDANBgkqhkiG9w0BAQsFAAOCAQEAnOiI2kWJ7I0LWunx Q247EjsG+rg3auQEb1I/MOmypHyDvtEzFdtgZc7J33UUakXUFEhvwoG8/sOmX+TB rJI26UgGTS20oE0AZPuhGSadZhsyKTWI9oMqwteEiB81Q5IYGzQn9oH7jRwjXj1B Cz/eR/ryF/gznFCIE1sjjC9IFg7QPi3iZ+vZmV6VmApdmj4YNntez46Cl9T+e5e0 vm0pk9jAwEzcRUJBttRL5WAr2l1wZbua5UDM/zavuk/kmxJIZf+PLvUK6Eg5Mq9f HGUcwoGQRW/STn7jU+O3igCHSn3TSj8Edh5Td6ibJf8/tjakvqSGNl6P43W1xoNo FgM1Bw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:20 2026 by rpki-client