This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa File: 3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa (raw, json) Hash identifier: BpauxASw+QwtCt0D3PSjlF+wZywrzS5unEAJDnk9hrM= Subject key identifier: DE:64:3E:56:08:29:76:64:19:DF:4E:17:1E:75:B0:68:23:BB:EE:D4 Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 7A25004C9E0C0DF32809A86A7FCD731B8B33E11A Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa Signing time: Tue 20 Jan 2026 02:16:49 +0000 ROA not before: Tue 20 Jan 2026 02:11:49 +0000 ROA not after: Tue 19 Jan 2027 02:16:49 +0000 asID: 152320 IP address blocks: 103.223.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:25:00:4c:9e:0c:0d:f3:28:09:a8:6a:7f:cd:73:1b:8b:33:e1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Jan 20 02:11:49 2026 GMT Not After : Jan 19 02:16:49 2027 GMT Subject: CN=DE643E560829766419DF4E171E75B06823BBEED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:17:58:e0:bb:01:aa:67:a7:a4:55:ae:3a: 8c:fd:02:c5:a9:68:3c:15:e8:99:b5:7d:49:6d:3c: 43:97:d7:04:14:c0:6f:ba:4a:da:c6:cb:73:c4:a5: 15:b0:60:7c:e8:3e:9b:7f:c5:9f:9b:bc:fd:27:c1: 03:72:c6:59:61:f5:44:b6:58:2b:1c:0e:d2:ee:85: fc:ae:b7:1b:36:56:25:9b:86:ec:45:68:58:35:03: 38:04:be:a7:90:35:ba:d6:ea:55:f6:df:f3:83:7e: 32:cd:91:33:8d:3d:fc:1d:b0:a8:24:30:88:6c:a5: f4:7a:28:61:84:b9:6d:10:5b:72:f5:da:ac:12:6a: 38:54:ba:13:f1:0f:41:ea:f2:f3:e6:61:99:47:d9: 78:eb:00:a5:1f:d8:da:6e:22:70:cc:c2:19:9f:55: 94:f1:35:44:0e:09:9c:89:9d:55:ea:8e:fd:5d:7a: 62:d5:17:ca:ce:04:cc:07:09:10:de:a2:77:e5:7b: 66:50:30:a0:ba:5f:0c:07:1a:21:50:51:d9:4c:5d: 48:54:74:a7:47:e6:d5:97:6a:e5:f4:65:3c:e2:ac: 42:b6:48:ec:e6:5a:4e:3f:44:a0:1a:93:21:df:6d: 82:27:94:47:e2:e9:8d:90:cc:b4:98:4e:d4:b2:20: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:64:3E:56:08:29:76:64:19:DF:4E:17:1E:75:B0:68:23:BB:EE:D4 X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.223.123.0/24 Signature Algorithm: sha256WithRSAEncryption 09:b8:6b:47:db:84:1a:0a:ed:96:df:80:82:bd:3a:3f:32:98: 0b:8c:d8:77:c4:db:b5:2f:c5:74:29:cd:2e:bb:e1:9b:fb:33: ce:91:12:43:c5:35:11:a1:49:28:6e:4d:43:6e:3a:23:54:d5: c6:36:3e:3e:65:13:ce:9d:f3:49:69:e9:29:e1:05:8d:b9:b2: 65:06:02:39:6e:a6:e5:74:80:f3:ad:03:4c:73:8b:29:e9:e7: a0:a0:ee:66:77:34:aa:2f:2d:9d:dc:b0:78:6f:f6:89:a6:5d: 7f:3d:58:e0:8f:be:e3:45:35:6b:e3:66:31:3c:af:10:50:c5: 9a:6f:de:d9:48:e5:2d:2b:70:7f:ea:72:31:ad:8b:c7:6d:af: cb:95:10:76:71:e8:96:05:38:c8:94:bd:61:08:db:6e:ec:49: 82:7a:51:a1:fb:c1:ba:6a:65:49:46:03:b5:fc:0c:7c:39:95: 38:c8:e3:ee:07:95:13:10:ba:21:f7:04:c8:05:0a:93:b1:e9: ba:1d:18:03:cf:ba:b9:72:18:81:83:72:b2:ca:4d:17:99:86: cd:bf:bf:31:79:0d:0d:6f:56:92:04:05:40:a2:f5:91:ef:7d: 63:e7:50:db:0e:a4:2e:24:13:4c:2d:55:46:38:c4:ae:bc:d1: 3c:b0:42:cd -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUeiUATJ4MDfMoCahqf81zG4sz4RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjAxMjAwMjExNDlaFw0yNzAxMTkwMjE2NDlaMDMxMTAvBgNV BAMTKERFNjQzRTU2MDgyOTc2NjQxOURGNEUxNzFFNzVCMDY4MjNCQkVFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVhdY4LsBqmenpFWuOoz9AsWp aDwV6Jm1fUltPEOX1wQUwG+6StrGy3PEpRWwYHzoPpt/xZ+bvP0nwQNyxllh9US2 WCscDtLuhfyutxs2ViWbhuxFaFg1AzgEvqeQNbrW6lX23/ODfjLNkTONPfwdsKgk MIhspfR6KGGEuW0QW3L12qwSajhUuhPxD0Hq8vPmYZlH2XjrAKUf2NpuInDMwhmf VZTxNUQOCZyJnVXqjv1demLVF8rOBMwHCRDeonfle2ZQMKC6XwwHGiFQUdlMXUhU dKdH5tWXauX0ZTzirEK2SOzmWk4/RKAakyHfbYInlEfi6Y2QzLSYTtSyIJCbAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU3mQ+VggpdmQZ304XHnWwaCO77tQwHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5ODUyOTMxLzAvMzEzMDMzMmUz MjMyMzMyZTMxMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzIz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGffezANBgkqhkiG9w0BAQsFAAOCAQEACbhrR9uEGgrtlt+A gr06PzKYC4zYd8TbtS/FdCnNLrvhm/szzpESQ8U1EaFJKG5NQ246I1TVxjY+PmUT zp3zSWnpKeEFjbmyZQYCOW6m5XSA860DTHOLKennoKDuZnc0qi8tndyweG/2iaZd fz1Y4I++40U1a+NmMTyvEFDFmm/e2UjlLStwf+pyMa2Lx22vy5UQdnHolgU4yJS9 YQjbbuxJgnpRofvBumplSUYDtfwMfDmVOMjj7geVExC6IfcEyAUKk7Hpuh0YA8+6 uXIYgYNysspNF5mGzb+/MXkNDW9WkgQFQKL1ke99Y+dQ2w6kLiQTTC1VRjjErrzR PLBCzQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:14 2026 by rpki-client