This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32342d3234203d3e2034383132.roa File: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (raw, json) Hash identifier: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08= Subject key identifier: C8:C8:54:3F:BC:44:1A:1B:84:BB:2A:EE:19:A2:5F:29:0A:B9:A3:25 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 2ADD0E573FB2F63E49E28B4A7D19225918199A53 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32342d3234203d3e2034383132.roa Signing time: Tue 20 Jan 2026 02:13:10 +0000 ROA not before: Tue 20 Jan 2026 02:08:10 +0000 ROA not after: Tue 19 Jan 2027 02:13:10 +0000 asID: 4812 IP address blocks: 103.96.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:dd:0e:57:3f:b2:f6:3e:49:e2:8b:4a:7d:19:22:59:18:19:9a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Jan 20 02:08:10 2026 GMT Not After : Jan 19 02:13:10 2027 GMT Subject: CN=C8C8543FBC441A1B84BB2AEE19A25F290AB9A325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:9b:c7:aa:3a:49:d8:31:cf:4b:42:9d:00: af:dc:46:f2:29:cd:08:56:9b:3a:53:94:73:0e:a7: 70:7c:a5:26:4d:61:df:87:20:62:3d:56:8d:3e:0e: 30:d2:5d:82:5f:16:a5:ba:a6:f3:89:a7:60:b9:36: d4:44:f0:36:87:a2:38:28:cb:f1:91:0d:db:3a:c0: 52:82:71:35:0d:ec:b8:89:42:31:3d:f3:10:78:ac: e0:22:84:e0:b7:73:17:47:e1:5b:b2:37:62:f8:eb: b0:87:ac:ac:45:bf:9c:52:b5:04:af:95:70:d4:e6: e0:fb:d0:a2:6b:a5:92:d3:5e:91:1e:3f:30:b8:b3: 97:c3:df:9f:fe:0e:27:64:08:03:dd:0f:29:f0:ea: 54:c0:26:0c:fd:7c:da:5d:3b:85:c7:4d:f3:ba:53: 32:cd:b3:e2:e1:78:5e:3e:50:d3:bc:4b:42:62:fc: 61:b3:99:99:71:a5:eb:54:4d:6e:ff:db:2c:8b:9a: 09:ed:e2:2c:0e:f0:06:de:76:6c:1e:de:da:ca:90: c4:9e:11:1e:78:6d:1a:c8:87:a4:22:2f:8d:0e:3b: ff:7a:c2:4d:7d:23:ec:e6:3b:ac:c5:1e:67:0b:57: 6c:a4:bc:d2:20:e0:40:19:96:e4:a2:22:84:5a:3f: 48:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C8:54:3F:BC:44:1A:1B:84:BB:2A:EE:19:A2:5F:29:0A:B9:A3:25 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32342d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.224.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:06:da:28:65:5e:c2:48:38:92:71:a6:c8:74:d6:8f:e8:64: 85:df:9e:a8:31:7f:61:a3:d9:34:4a:c9:e5:b4:38:82:85:14: 0e:b1:d7:32:fc:9a:1d:9a:de:56:bd:4f:6c:cf:04:83:da:26: e3:18:7e:c7:75:f3:b9:60:f0:19:eb:b1:f6:fd:21:dc:25:aa: f2:0a:7a:1b:2e:eb:36:cd:6a:4e:6f:cf:b6:ad:93:34:d4:a1: ed:f2:f4:ce:cb:a8:28:e3:57:ec:f1:ff:33:1e:f2:3f:9e:e4: d5:79:c4:00:5f:4a:26:04:59:a9:1d:b0:14:fb:eb:87:56:81: f1:2d:ea:d7:8c:c4:85:28:43:e1:12:2b:b6:95:9d:36:7b:b2: 19:b9:64:a7:f1:9c:e2:7b:8d:a3:09:b4:2a:eb:68:5d:9b:ce: 4c:72:04:55:7f:32:32:f1:b9:1e:d0:66:a6:fd:f7:f1:e5:03: c4:eb:7b:b6:88:be:66:81:ef:ef:2b:f7:8d:dd:b1:ad:62:2f: 03:aa:90:dd:14:ae:e5:d6:26:7b:ce:cb:c5:bb:0e:bb:c5:40: 4c:cc:4e:4c:a6:b3:9e:1b:ff:1c:46:66:8e:9f:66:dc:61:c4: c9:63:e4:d9:7c:98:21:d8:43:22:78:4a:da:1e:0a:e2:3c:d0: 9f:33:d5:1a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKt0OVz+y9j5J4otKfRkiWRgZmlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjAxMjAwMjA4MTBaFw0yNzAxMTkwMjEzMTBaMDMxMTAvBgNV BAMTKEM4Qzg1NDNGQkM0NDFBMUI4NEJCMkFFRTE5QTI1RjI5MEFCOUEzMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ25vHqjpJ2DHPS0KdAK/cRvIp zQhWmzpTlHMOp3B8pSZNYd+HIGI9Vo0+DjDSXYJfFqW6pvOJp2C5NtRE8DaHojgo y/GRDds6wFKCcTUN7LiJQjE98xB4rOAihOC3cxdH4VuyN2L467CHrKxFv5xStQSv lXDU5uD70KJrpZLTXpEePzC4s5fD35/+DidkCAPdDynw6lTAJgz9fNpdO4XHTfO6 UzLNs+LheF4+UNO8S0Ji/GGzmZlxpetUTW7/2yyLmgnt4iwO8Abedmwe3trKkMSe ER54bRrIh6QiL40OO/96wk19I+zmO6zFHmcLV2ykvNIg4EAZluSiIoRaP0jlAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUyMhUP7xEGhuEuyruGaJfKQq5oyUwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxNjgzMDYxODQxOTIyLzAvMzEzMDMzMmUzOTM2 MmUzMjMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdg4DANBgkqhkiG9w0BAQsFAAOCAQEAWwbaKGVewkg4knGmyHTWj+hkhd+e qDF/YaPZNErJ5bQ4goUUDrHXMvyaHZreVr1PbM8Eg9om4xh+x3XzuWDwGeux9v0h 3CWq8gp6Gy7rNs1qTm/Ptq2TNNSh7fL0zsuoKONX7PH/Mx7yP57k1XnEAF9KJgRZ qR2wFPvrh1aB8S3q14zEhShD4RIrtpWdNnuyGblkp/Gc4nuNowm0KutoXZvOTHIE VX8yMvG5HtBmpv338eUDxOt7toi+ZoHv7yv3jd2xrWIvA6qQ3RSu5dYme87LxbsO u8VATMxOTKaznhv/HEZmjp9m3GHEyWPk2XyYIdhDInhK2h4K4jzQnzPVGg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:04 2026 by rpki-client