This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e35322e38302e302f32322d3234203d3e203337393633.roa File: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (raw, json) Hash identifier: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8= Subject key identifier: 5B:80:5F:3B:28:6D:4E:4F:E4:29:1A:4E:44:D5:B5:52:B4:03:D3:56 Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 23A9D257960E084E881173CB91221066775F237B Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e35322e38302e302f32322d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 02:19:11 +0000 ROA not before: Tue 20 Jan 2026 02:14:11 +0000 ROA not after: Tue 19 Jan 2027 02:19:11 +0000 asID: 37963 IP address blocks: 103.52.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a9:d2:57:96:0e:08:4e:88:11:73:cb:91:22:10:66:77:5f:23:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: Jan 20 02:14:11 2026 GMT Not After : Jan 19 02:19:11 2027 GMT Subject: CN=5B805F3B286D4E4FE4291A4E44D5B552B403D356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:24:a1:c1:a4:50:fd:50:22:47:41:20:f0: a1:6d:40:b8:cc:89:9b:e5:fa:bb:6e:33:30:f0:65: 47:98:47:78:c7:34:f0:87:49:88:7d:11:a5:91:09: b5:b6:99:3a:31:30:77:ca:8e:6d:cd:2f:33:24:28: 5e:bf:c5:dc:0b:34:ce:04:6f:d0:f5:02:4e:2b:e4: 20:9f:ca:87:17:34:88:bf:f6:97:37:b4:54:05:dd: 88:32:1b:9e:fd:6c:08:c5:52:2f:a9:ee:9a:80:45: 41:88:52:6d:8a:ab:89:79:d5:d4:bd:19:9a:c9:d3: 1e:8a:76:83:44:f4:25:7c:c3:7e:15:e7:aa:8e:9f: 08:e3:0e:b5:00:23:28:c0:be:6f:56:b6:72:9c:ad: de:47:75:3c:e0:04:1c:63:10:54:f7:49:d0:62:d3: 7b:64:b4:16:d4:1c:ab:6c:ae:af:c2:55:17:f3:b6: 42:79:88:09:ec:fc:c8:b2:3c:24:33:24:c6:bb:52: 2c:2a:00:5b:b3:70:92:d6:d2:64:4b:e0:e2:1a:0b: fc:dd:17:a0:80:b1:f2:e0:38:ee:74:8a:91:00:4b: e2:f4:4d:47:e4:8c:de:f1:89:19:aa:fb:56:e4:51: 54:07:75:75:68:ef:3f:af:cb:a4:06:7d:6c:f6:7d: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:80:5F:3B:28:6D:4E:4F:E4:29:1A:4E:44:D5:B5:52:B4:03:D3:56 X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e35322e38302e302f32322d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.80.0/22 Signature Algorithm: sha256WithRSAEncryption 97:c6:03:bf:15:1f:56:5c:7d:13:f9:74:87:0f:82:38:89:48: cd:39:49:48:ad:d3:6d:cb:b6:71:73:2f:6b:68:f4:32:0a:53: 84:4d:ef:c5:2e:74:dd:97:aa:65:72:32:b2:4c:f9:e3:fa:34: 7b:34:ec:e4:cf:33:23:d7:5f:d3:62:04:f4:f6:20:b1:51:62: ab:07:47:97:9c:89:8a:b2:5c:9b:a4:34:31:a8:f7:3e:12:88: 6f:7f:cd:bf:ce:58:c9:b4:9c:e3:3f:02:9a:3d:ba:6a:76:e8: 98:9e:9f:6d:f1:44:2d:94:0b:48:71:72:23:ef:f2:4c:29:fb: 20:5c:bd:eb:35:bf:fd:b0:4e:5d:f6:c3:3d:2c:d5:21:e3:32: 5d:d1:70:09:bb:d7:c7:29:6f:40:2e:c2:81:1d:b5:86:20:76: f1:43:db:d5:53:a0:2f:80:11:e7:dd:1a:06:09:86:38:41:44: da:0d:c3:84:c0:02:a5:b6:25:f2:4c:5c:12:17:42:41:02:01: cf:28:d5:54:fe:8d:70:66:84:16:21:78:77:94:4a:d6:a8:17: 88:64:b5:19:19:ed:b9:5c:da:eb:2b:ba:05:b4:31:9c:9a:c3: 63:17:45:1b:20:7d:69:b6:23:4a:5e:f5:f5:8b:71:26:dc:bb: 78:11:44:3c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUI6nSV5YOCE6IEXPLkSIQZndfI3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjAxMjAwMjE0MTFaFw0yNzAxMTkwMjE5MTFaMDMxMTAvBgNV BAMTKDVCODA1RjNCMjg2RDRFNEZFNDI5MUE0RTQ0RDVCNTUyQjQwM0QzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBSShwaRQ/VAiR0Eg8KFtQLjM iZvl+rtuMzDwZUeYR3jHNPCHSYh9EaWRCbW2mToxMHfKjm3NLzMkKF6/xdwLNM4E b9D1Ak4r5CCfyocXNIi/9pc3tFQF3YgyG579bAjFUi+p7pqARUGIUm2Kq4l51dS9 GZrJ0x6KdoNE9CV8w34V56qOnwjjDrUAIyjAvm9WtnKcrd5HdTzgBBxjEFT3SdBi 03tktBbUHKtsrq/CVRfztkJ5iAns/MiyPCQzJMa7UiwqAFuzcJLW0mRL4OIaC/zd F6CAsfLgOO50ipEAS+L0TUfkjN7xiRmq+1bkUVQHdXVo7z+vy6QGfWz2fc9XAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUW4BfOyhtTk/kKRpORNW1UrQD01YwHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MjIyNDY2LzAvMzEzMDMzMmUzNTMy MmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmc0UDANBgkqhkiG9w0BAQsFAAOCAQEAl8YDvxUfVlx9E/l0hw+COIlIzTlJ SK3Tbcu2cXMva2j0MgpThE3vxS503ZeqZXIyskz54/o0ezTs5M8zI9df02IE9PYg sVFiqwdHl5yJirJcm6Q0Maj3PhKIb3/Nv85YybSc4z8Cmj26anbomJ6fbfFELZQL SHFyI+/yTCn7IFy96zW//bBOXfbDPSzVIeMyXdFwCbvXxylvQC7CgR21hiB28UPb 1VOgL4AR590aBgmGOEFE2g3DhMACpbYl8kxcEhdCQQIBzyjVVP6NcGaEFiF4d5RK 1qgXiGS1GRntuVza6yu6BbQxnJrDYxdFGyB9abYjSl719YtxJty7eBFEPA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:39 2026 by rpki-client