This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061710850/0/3130332e3138362e3133362e302f32332d3233203d3e20313531343932.roa File: 3130332e3138362e3133362e302f32332d3233203d3e20313531343932.roa (raw, json) Hash identifier: 5FeuQwhBzGw4onhkAawCUJ2pR3lDpw8rU7GY3g8+/Po= Subject key identifier: B8:C5:85:99:3C:1D:86:50:60:B3:53:C6:47:BE:EA:A7:33:25:DF:F4 Certificate issuer: /CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53 Certificate serial: 0EC3689634F5BC5F42F201A9B876DDD62BC795ED Authority key identifier: DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/3130332e3138362e3133362e302f32332d3233203d3e20313531343932.roa Signing time: Tue 20 Jan 2026 02:08:27 +0000 ROA not before: Tue 20 Jan 2026 02:03:27 +0000 ROA not after: Tue 19 Jan 2027 02:08:27 +0000 asID: 151492 IP address blocks: 103.186.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c3:68:96:34:f5:bc:5f:42:f2:01:a9:b8:76:dd:d6:2b:c7:95:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53 Validity Not Before: Jan 20 02:03:27 2026 GMT Not After : Jan 19 02:08:27 2027 GMT Subject: CN=B8C585993C1D865060B353C647BEEAA73325DFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:1a:6f:f6:73:c8:f7:53:32:5f:f8:15:4f: 1e:cd:cc:60:d3:92:d9:a7:bb:5c:7e:c5:1e:25:a4: 12:aa:8f:a8:40:0c:70:0c:3a:7d:26:c4:3d:bd:d5: 61:dc:48:c7:3e:2b:de:fe:4d:d9:46:fc:96:49:4b: 2f:71:09:e2:83:d3:56:1d:0c:4b:2b:e6:fe:36:dc: 39:9d:77:9e:72:78:18:6e:1c:e4:41:b4:b5:ba:2d: 75:9a:fe:d8:ad:ab:c4:82:f5:5f:68:b9:30:0d:e8: 8c:a9:4b:92:71:f2:95:d0:b6:65:24:d9:1f:e2:04: 4e:27:2d:50:cd:36:61:a6:bf:1b:de:d4:0d:7e:b4: 11:07:37:4c:ff:22:05:c1:22:b9:d2:75:8a:73:86: 01:a7:e2:c9:c5:5a:63:fe:83:03:53:49:aa:66:03: bf:3f:56:61:0b:04:5c:9a:fc:7c:11:28:fd:06:5d: bf:c4:a9:31:0a:e8:bb:a1:5f:a0:42:bc:0c:57:87: 67:f3:b9:9f:40:ad:d3:77:12:00:ce:c0:c7:25:59: d7:1a:53:05:e2:1c:c8:0b:41:29:9f:79:3d:63:45: 90:37:d3:bd:0a:d5:e7:b4:79:69:d8:63:b2:8c:74: 5a:6e:0d:bd:5e:8a:35:4f:f4:2a:66:04:eb:75:d2: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C5:85:99:3C:1D:86:50:60:B3:53:C6:47:BE:EA:A7:33:25:DF:F4 X509v3 Authority Key Identifier: keyid:DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/3130332e3138362e3133362e302f32332d3233203d3e20313531343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.136.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:19:38:f6:aa:13:b5:aa:8d:92:57:9e:bf:df:1b:2a:63:be: 15:31:a8:c9:d7:45:3e:43:9d:1e:41:14:86:3d:f9:eb:bf:fb: 6b:08:3f:7e:4e:17:2e:f2:d1:e4:9a:7a:30:54:db:2f:eb:cd: be:6c:bc:f2:b0:06:d7:f7:41:93:cb:ad:0e:19:53:6f:eb:b1: a3:92:ff:9c:f8:28:81:78:8f:d5:08:89:5b:d9:fc:64:86:8f: e4:04:99:4a:95:cb:36:b7:3f:1d:d5:cb:d5:c2:00:9a:fb:a4: d0:0e:ae:26:b4:ed:63:58:05:34:66:52:be:4d:e1:76:e7:02: 82:98:8e:5d:86:5d:73:2d:60:ed:79:3c:06:a5:ad:9a:4b:ef: c6:6f:28:d6:51:00:a9:dc:9a:31:bd:d2:4b:6f:ad:6f:7b:ef: 63:77:04:ee:86:f9:66:47:98:85:9c:bf:29:ca:ac:7c:d0:26: c5:54:d4:56:6d:d8:74:46:86:60:da:57:fb:f3:a2:ac:c3:19: 3d:ef:d9:a7:07:14:25:b0:c8:6d:d1:be:9d:d9:b7:8e:6a:c0: 38:70:a2:71:e8:bf:8a:55:32:ca:69:20:e5:9b:fb:df:0d:88: 31:7e:f7:44:ba:19:28:92:9c:cc:eb:a0:c1:41:c4:15:ad:76: 1f:8d:91:78 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUDsNoljT1vF9C8gGpuHbd1ivHle0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDNkMzMTk5NEJBMjkyNDREMkRFRTFGODcyMDhGNDE2 RUVGN0U1MzAeFw0yNjAxMjAwMjAzMjdaFw0yNzAxMTkwMjA4MjdaMDMxMTAvBgNV BAMTKEI4QzU4NTk5M0MxRDg2NTA2MEIzNTNDNjQ3QkVFQUE3MzMyNURGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI6Rpv9nPI91MyX/gVTx7NzGDT ktmnu1x+xR4lpBKqj6hADHAMOn0mxD291WHcSMc+K97+TdlG/JZJSy9xCeKD01Yd DEsr5v423Dmdd55yeBhuHORBtLW6LXWa/titq8SC9V9ouTAN6IypS5Jx8pXQtmUk 2R/iBE4nLVDNNmGmvxve1A1+tBEHN0z/IgXBIrnSdYpzhgGn4snFWmP+gwNTSapm A78/VmELBFya/HwRKP0GXb/EqTEK6LuhX6BCvAxXh2fzuZ9ArdN3EgDOwMclWdca UwXiHMgLQSmfeT1jRZA3070K1ee0eWnYY7KMdFpuDb1eijVP9CpmBOt10urlAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUuMWFmTwdhlBgs1PGR77qpzMl3/QwHwYDVR0j BBgwFoAU3cbDGZS6KSRNLe4fhyCPQW7vflMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTcxMDg1MC8wL0REQzZDMzE5OTRCQTI5MjQ0RDJERUUxRjg3MjA4 RjQxNkVFRjdFNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERDNkMzMTk5NEJBMjkyNDREMkRFRTFGODcyMDhGNDE2RUVGN0U1My5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxNjgzMDYxNzEwODUwLzAvMzEzMDMzMmUz MTM4MzYyZTMxMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzUzMTM0Mzkz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWe6iDANBgkqhkiG9w0BAQsFAAOCAQEADBk49qoTtaqNklee v98bKmO+FTGoyddFPkOdHkEUhj3567/7awg/fk4XLvLR5Jp6MFTbL+vNvmy88rAG 1/dBk8utDhlTb+uxo5L/nPgogXiP1QiJW9n8ZIaP5ASZSpXLNrc/HdXL1cIAmvuk 0A6uJrTtY1gFNGZSvk3hducCgpiOXYZdcy1g7Xk8BqWtmkvvxm8o1lEAqdyaMb3S S2+tb3vvY3cE7ob5ZkeYhZy/KcqsfNAmxVTUVm3YdEaGYNpX+/OirMMZPe/ZpwcU JbDIbdG+ndm3jmrAOHCicei/ilUyymkg5Zv73w2IMX73RLoZKJKczOugwUHEFa12 H42ReA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:35 2026 by rpki-client