This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32332d3234203d3e203137363231.roa File: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (raw, json) Hash identifier: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY= Subject key identifier: 3C:6B:A8:4B:32:BA:36:43:1C:79:07:05:B8:52:A1:7C:EC:5F:78:51 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 1D76B1FF9F13CA0A8E8B1C255349B1F79793B707 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32332d3234203d3e203137363231.roa Signing time: Tue 20 Jan 2026 02:13:10 +0000 ROA not before: Tue 20 Jan 2026 02:08:10 +0000 ROA not after: Tue 19 Jan 2027 02:13:10 +0000 asID: 17621 IP address blocks: 103.96.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:76:b1:ff:9f:13:ca:0a:8e:8b:1c:25:53:49:b1:f7:97:93:b7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Jan 20 02:08:10 2026 GMT Not After : Jan 19 02:13:10 2027 GMT Subject: CN=3C6BA84B32BA36431C790705B852A17CEC5F7851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:11:0e:ef:09:78:a5:fe:a4:f1:63:0c:b8: d3:d8:b3:25:b2:a7:af:68:50:2f:0b:ee:89:62:f6: f2:72:dc:7d:ac:5c:2f:26:24:c2:7e:09:18:a2:1e: ce:c7:07:a5:a5:3b:bf:0f:ae:1a:fc:81:b2:95:b9: af:3d:31:29:4e:57:c8:e5:47:78:1d:77:63:72:0b: 59:a6:57:1f:3f:ff:29:ba:47:6b:ca:34:fc:0a:48: 6c:ca:04:6a:92:d2:e0:c8:c6:50:5b:65:43:e9:68: dc:4b:4d:03:d0:77:33:f3:3b:ba:55:5f:58:61:2e: ff:77:d4:2f:94:f6:2b:92:5b:40:e7:8e:74:c4:ae: 1e:97:ae:4b:9e:58:c4:87:41:17:06:7e:84:fc:87: 16:2b:55:55:5b:b2:da:61:c5:b8:e5:b1:31:06:71: 2c:b4:cf:f1:7c:f5:c0:df:94:07:3b:a0:d8:f0:c8: 7b:1e:40:65:d9:b3:d8:b0:8d:50:9f:1d:0b:08:a2: 2b:e8:60:36:33:8a:50:c2:5f:58:f5:3d:2d:f1:6e: d6:d2:2d:b9:b4:e9:b6:de:e7:6f:9d:51:32:c4:65: 64:cd:d5:41:70:f8:61:de:1e:7e:05:5e:e5:ac:af: f1:c9:f6:02:fc:a8:fc:6b:d3:c4:7f:e6:fc:d1:7f: 1c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6B:A8:4B:32:BA:36:43:1C:79:07:05:B8:52:A1:7C:EC:5F:78:51 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32332d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.224.0/23 Signature Algorithm: sha256WithRSAEncryption a8:51:07:9f:42:77:ee:3e:da:23:20:dc:38:32:cd:aa:e4:c5: 2a:5d:2b:73:25:37:a4:4c:e1:4a:be:a5:85:8c:1c:06:c2:49: 6a:ed:39:2a:37:40:bf:b1:92:3d:50:d1:22:1a:91:5c:56:3a: b4:ba:4f:78:55:4a:a9:62:b4:0a:7b:ee:c4:d9:40:66:1f:95: 76:8a:d9:c3:3d:2f:58:e5:bb:fd:e3:53:6d:95:6e:ae:e2:8a: bc:12:18:e0:e6:c3:34:42:e7:98:8a:7c:29:c8:5a:bb:5f:05: e1:3f:14:ca:04:9d:2a:5e:bb:54:a1:c7:8d:13:91:10:05:ac: d3:0a:00:23:2c:ab:71:42:b6:fa:0f:1b:bc:a8:2c:7b:f7:0b: 17:86:7c:71:2e:ab:27:74:fd:58:6c:86:bd:f3:1f:9b:b6:85: 6e:f4:c0:65:fe:df:55:8f:7b:d8:96:59:7f:a4:20:e1:65:2b: 75:d9:82:c6:db:6b:c9:a2:78:e2:07:b8:4a:15:83:b9:32:77: db:60:96:2d:5c:3c:5c:e2:88:78:7e:e6:ed:7a:29:a8:86:66: 72:79:a1:f3:a7:bc:53:b4:d8:96:7d:65:e8:9b:17:02:7f:c9: 4c:f5:48:37:bc:f5:9d:2b:14:ac:cf:f9:26:b2:fc:14:d0:50: e8:92:4e:78 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHXax/58TygqOixwlU0mx95eTtwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjAxMjAwMjA4MTBaFw0yNzAxMTkwMjEzMTBaMDMxMTAvBgNV BAMTKDNDNkJBODRCMzJCQTM2NDMxQzc5MDcwNUI4NTJBMTdDRUM1Rjc4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOnBEO7wl4pf6k8WMMuNPYsyWy p69oUC8L7oli9vJy3H2sXC8mJMJ+CRiiHs7HB6WlO78Prhr8gbKVua89MSlOV8jl R3gdd2NyC1mmVx8//ym6R2vKNPwKSGzKBGqS0uDIxlBbZUPpaNxLTQPQdzPzO7pV X1hhLv931C+U9iuSW0DnjnTErh6XrkueWMSHQRcGfoT8hxYrVVVbstphxbjlsTEG cSy0z/F89cDflAc7oNjwyHseQGXZs9iwjVCfHQsIoivoYDYzilDCX1j1PS3xbtbS Lbm06bbe52+dUTLEZWTN1UFw+GHeHn4FXuWsr/HJ9gL8qPxr08R/5vzRfxz/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUPGuoSzK6NkMceQcFuFKhfOxfeFEwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTY4MzA2MTg0MTkyMi8wLzMxMzAzMzJlMzkz NjJlMzIzMjM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWdg4DANBgkqhkiG9w0BAQsFAAOCAQEAqFEHn0J37j7aIyDcODLNquTF Kl0rcyU3pEzhSr6lhYwcBsJJau05KjdAv7GSPVDRIhqRXFY6tLpPeFVKqWK0Cnvu xNlAZh+VdorZwz0vWOW7/eNTbZVuruKKvBIY4ObDNELnmIp8Kchau18F4T8UygSd Kl67VKHHjROREAWs0woAIyyrcUK2+g8bvKgse/cLF4Z8cS6rJ3T9WGyGvfMfm7aF bvTAZf7fVY972JZZf6Qg4WUrddmCxttryaJ44ge4ShWDuTJ322CWLVw8XOKIeH7m 7XopqIZmcnmh86e8U7TYln1l6JsXAn/JTPVIN7z1nSsUrM/5JrL8FNBQ6JJOeA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:08 2026 by rpki-client