This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa File: 3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa (raw, json) Hash identifier: ENw2cTESVh99EP8BLMv1kqoTtl4yUiDM0XZMs1ujX6o= Subject key identifier: BF:B3:C2:0C:3C:0D:28:39:6B:3B:05:A0:60:F4:1A:92:2D:7B:CA:FC Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 7014F11F6BB03D3083CC02E72EA13D4C9418036E Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa Signing time: Tue 20 Jan 2026 02:16:49 +0000 ROA not before: Tue 20 Jan 2026 02:11:49 +0000 ROA not after: Tue 19 Jan 2027 02:16:49 +0000 asID: 152320 IP address blocks: 103.223.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:14:f1:1f:6b:b0:3d:30:83:cc:02:e7:2e:a1:3d:4c:94:18:03:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Jan 20 02:11:49 2026 GMT Not After : Jan 19 02:16:49 2027 GMT Subject: CN=BFB3C20C3C0D28396B3B05A060F41A922D7BCAFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:ec:58:a5:cc:53:ce:9a:a5:f2:a4:48:c6: 83:3c:f1:48:2a:b7:61:9d:47:96:9f:a0:14:9b:30: 40:fa:d8:a0:56:48:31:2b:a6:b4:04:41:bb:70:5a: 18:f2:f9:b7:ba:07:3a:46:7a:f2:cc:17:25:45:bd: 47:ca:93:59:4c:a3:e3:f2:44:cc:0f:78:51:57:2a: f7:ed:b9:9e:ce:f8:87:39:c3:ba:83:c6:32:df:c3: ba:55:89:ea:0e:79:b3:0d:0f:49:6d:f7:9b:79:64: 92:0b:94:e0:21:58:4a:22:24:b4:17:c7:f7:24:18: 7f:9b:46:29:51:1d:bb:d2:e5:3f:4c:ed:54:41:2c: 86:f3:a7:10:e2:16:34:91:9a:01:af:7a:9b:3b:5d: 05:ec:23:e2:58:d6:09:ab:0d:6c:dc:0c:6b:db:da: f7:7d:8b:7a:84:52:1d:90:75:85:e3:8e:91:0f:72: 8a:4f:fc:f2:0a:90:12:1a:8b:1c:f8:d7:93:29:cc: ea:27:a7:51:11:b3:3e:8a:e8:53:ee:ca:79:1a:1e: ae:87:f6:15:8e:c6:84:88:3c:bf:56:23:56:49:bd: 2f:00:14:4b:a4:11:d6:5f:36:f9:e9:64:1e:63:0e: d2:93:e0:52:ef:3a:9d:da:88:27:a0:67:c6:cc:2c: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B3:C2:0C:3C:0D:28:39:6B:3B:05:A0:60:F4:1A:92:2D:7B:CA:FC X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.223.122.0/24 Signature Algorithm: sha256WithRSAEncryption 12:75:e4:f3:97:47:ef:89:6a:e1:a6:ab:ea:10:b6:d6:6c:6b: b8:76:a1:b0:85:00:58:0d:1d:6c:ea:3e:80:66:e3:cf:d4:08: a8:a0:19:b9:34:bb:64:89:96:c0:c9:4f:ca:a5:cc:0d:ce:67: f7:2f:3c:40:10:0a:41:97:b3:c2:98:b7:95:4b:ca:28:f4:e6: ce:81:8e:db:84:5b:38:7a:6f:44:b6:8c:b3:60:02:59:45:9f: 62:83:d3:e1:ea:b4:34:0d:79:b5:c7:ca:71:3e:f8:9b:61:82: 07:86:91:f2:d6:41:aa:7a:96:af:fa:d0:5c:71:e5:16:77:55: 2b:8c:50:58:76:0d:db:ee:43:a9:83:51:6b:17:b2:05:0d:f8: 43:70:c1:12:c2:86:76:61:a8:b1:33:d0:8e:7d:f9:ae:4a:16: d6:8f:5a:4a:7d:b7:49:6d:89:cb:de:ea:09:08:ca:5b:b2:52: ed:f7:ac:2b:55:eb:63:49:98:48:f3:25:9c:b0:96:65:22:cf: ab:53:9b:31:73:11:95:21:87:d1:6e:b3:4a:c1:40:81:88:0f: e6:54:64:0d:f6:bd:64:b9:64:30:7b:fa:ee:46:ac:fe:1a:bb: 09:07:5b:82:7c:23:17:9e:22:24:0d:24:f2:64:13:40:0f:d2: a7:2b:c8:3d -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUcBTxH2uwPTCDzALnLqE9TJQYA24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjAxMjAwMjExNDlaFw0yNzAxMTkwMjE2NDlaMDMxMTAvBgNV BAMTKEJGQjNDMjBDM0MwRDI4Mzk2QjNCMDVBMDYwRjQxQTkyMkQ3QkNBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BOxYpcxTzpql8qRIxoM88Ugq t2GdR5afoBSbMED62KBWSDErprQEQbtwWhjy+be6BzpGevLMFyVFvUfKk1lMo+Py RMwPeFFXKvftuZ7O+Ic5w7qDxjLfw7pVieoOebMND0lt95t5ZJILlOAhWEoiJLQX x/ckGH+bRilRHbvS5T9M7VRBLIbzpxDiFjSRmgGveps7XQXsI+JY1gmrDWzcDGvb 2vd9i3qEUh2QdYXjjpEPcopP/PIKkBIaixz415MpzOonp1ERsz6K6FPuynkaHq6H 9hWOxoSIPL9WI1ZJvS8AFEukEdZfNvnpZB5jDtKT4FLvOp3aiCegZ8bMLL3tAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUv7PCDDwNKDlrOwWgYPQaki17yvwwHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5ODUyOTMxLzAvMzEzMDMzMmUz MjMyMzMyZTMxMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzIz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGffejANBgkqhkiG9w0BAQsFAAOCAQEAEnXk85dH74lq4aar 6hC21mxruHahsIUAWA0dbOo+gGbjz9QIqKAZuTS7ZImWwMlPyqXMDc5n9y88QBAK QZezwpi3lUvKKPTmzoGO24RbOHpvRLaMs2ACWUWfYoPT4eq0NA15tcfKcT74m2GC B4aR8tZBqnqWr/rQXHHlFndVK4xQWHYN2+5DqYNRaxeyBQ34Q3DBEsKGdmGosTPQ jn35rkoW1o9aSn23SW2Jy97qCQjKW7JS7fesK1XrY0mYSPMlnLCWZSLPq1ObMXMR lSGH0W6zSsFAgYgP5lRkDfa9ZLlkMHv67kas/hq7CQdbgnwjF54iJA0k8mQTQA/S pyvIPQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:10 2026 by rpki-client