This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232352e302f32342d3234203d3e203137363231.roa File: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (raw, json) Hash identifier: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw= Subject key identifier: 56:15:76:EC:99:9E:85:F6:4B:45:9C:67:E1:35:03:00:BA:AA:0A:19 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 4EAD5532B9D012EA1249A60A8512010C06FDAA2F Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232352e302f32342d3234203d3e203137363231.roa Signing time: Tue 20 Jan 2026 02:13:10 +0000 ROA not before: Tue 20 Jan 2026 02:08:10 +0000 ROA not after: Tue 19 Jan 2027 02:13:10 +0000 asID: 17621 IP address blocks: 103.96.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ad:55:32:b9:d0:12:ea:12:49:a6:0a:85:12:01:0c:06:fd:aa:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Jan 20 02:08:10 2026 GMT Not After : Jan 19 02:13:10 2027 GMT Subject: CN=561576EC999E85F64B459C67E1350300BAAA0A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:9e:61:48:7e:dc:da:9b:f9:a4:60:d6:27: 5a:2f:6b:ee:4a:3a:19:f8:9d:14:ca:ca:67:1c:22: 34:b8:40:7a:fd:bc:3b:d6:cf:29:4e:54:2c:14:ea: c1:08:79:07:00:bb:31:0c:b5:62:a7:b5:63:4d:67: 00:d6:f3:c7:3b:f6:fa:ef:c8:0d:38:17:12:0d:7b: 55:68:84:12:80:e7:9a:a8:73:2c:bf:58:69:29:f8: dc:ff:8c:f6:58:81:c5:c8:83:d2:a2:fe:ac:5a:c1: 2b:75:43:90:e3:23:91:26:30:b5:ef:a4:7a:52:6b: 84:0a:80:8e:aa:da:a8:38:cc:58:93:33:41:3f:dc: 83:df:4d:4c:58:8b:67:fe:ee:b6:64:12:64:51:fe: 0c:ae:01:20:59:5f:5e:82:33:3f:eb:3e:bc:73:0a: a1:68:98:54:db:e3:bb:aa:30:32:45:15:a4:9b:d6: 81:83:2d:6c:db:ca:22:48:ad:29:11:5a:04:2a:c1: 01:7e:3d:06:dc:36:78:b8:96:3c:9f:e0:79:6f:28: 42:85:19:d1:bf:29:48:6a:0d:d6:06:bb:a8:5b:f4: a3:3f:d1:41:73:d6:b7:54:e6:0b:8f:d0:84:05:9a: 9a:19:47:ab:ee:60:37:7f:ec:1f:5d:07:f5:79:aa: f7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:15:76:EC:99:9E:85:F6:4B:45:9C:67:E1:35:03:00:BA:AA:0A:19 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232352e302f32342d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.225.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:be:92:97:e2:60:f8:83:76:03:ed:ec:3b:9b:1c:8c:28:21: 0d:3b:4c:08:3b:2a:b7:7e:96:8a:9a:43:7a:5d:40:3f:5d:ed: c4:b1:64:5c:5e:4f:78:f7:48:a6:9c:cb:f0:44:88:6c:34:81: b6:9e:5b:00:01:3e:69:6c:ef:03:1a:17:68:ab:75:5d:00:7d: 91:b6:5e:68:27:49:5d:b2:14:d0:21:47:96:6d:15:ff:31:1a: a9:f6:0d:90:a8:3d:a2:93:eb:67:3e:6e:9d:31:d9:1a:e6:b1: 32:2d:af:f8:26:ee:16:64:fe:ca:87:b8:e6:ee:4b:fa:3f:f6: de:16:06:c7:3a:2a:9b:e2:0c:5f:3b:6a:00:49:74:7b:06:fa: ff:57:67:d5:e8:79:89:e3:42:fc:25:a1:cc:a0:37:3d:f5:4c: 6e:c0:1e:a2:5d:66:ca:7b:f0:bc:ef:be:f8:c7:d3:ff:27:56: 9f:59:01:e5:c6:38:4b:a0:25:71:81:df:2a:d1:88:38:41:35: e4:3a:49:ed:51:80:18:14:69:7a:e8:09:0a:af:40:7f:f5:f1: 12:2c:96:12:4d:ab:11:a5:b2:6e:b1:50:8c:d6:a4:d0:7e:06: 7c:9f:9b:ae:79:75:ff:9c:b7:3e:64:a3:ba:bc:ee:5c:29:a9: 52:44:96:5a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTq1VMrnQEuoSSaYKhRIBDAb9qi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjAxMjAwMjA4MTBaFw0yNzAxMTkwMjEzMTBaMDMxMTAvBgNV BAMTKDU2MTU3NkVDOTk5RTg1RjY0QjQ1OUM2N0UxMzUwMzAwQkFBQTBBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp455hSH7c2pv5pGDWJ1ova+5K Ohn4nRTKymccIjS4QHr9vDvWzylOVCwU6sEIeQcAuzEMtWKntWNNZwDW88c79vrv yA04FxINe1VohBKA55qocyy/WGkp+Nz/jPZYgcXIg9Ki/qxawSt1Q5DjI5EmMLXv pHpSa4QKgI6q2qg4zFiTM0E/3IPfTUxYi2f+7rZkEmRR/gyuASBZX16CMz/rPrxz CqFomFTb47uqMDJFFaSb1oGDLWzbyiJIrSkRWgQqwQF+PQbcNni4ljyf4HlvKEKF GdG/KUhqDdYGu6hb9KM/0UFz1rdU5guP0IQFmpoZR6vuYDd/7B9dB/V5qvevAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUVhV27JmehfZLRZxn4TUDALqqChkwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTY4MzA2MTg0MTkyMi8wLzMxMzAzMzJlMzkz NjJlMzIzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGdg4TANBgkqhkiG9w0BAQsFAAOCAQEATr6Sl+Jg+IN2A+3sO5scjCgh DTtMCDsqt36WippDel1AP13txLFkXF5PePdIppzL8ESIbDSBtp5bAAE+aWzvAxoX aKt1XQB9kbZeaCdJXbIU0CFHlm0V/zEaqfYNkKg9opPrZz5unTHZGuaxMi2v+Cbu FmT+yoe45u5L+j/23hYGxzoqm+IMXztqAEl0ewb6/1dn1eh5ieNC/CWhzKA3PfVM bsAeol1mynvwvO+++MfT/ydWn1kB5cY4S6AlcYHfKtGIOEE15DpJ7VGAGBRpeugJ Cq9Af/XxEiyWEk2rEaWybrFQjNak0H4GfJ+brnl1/5y3PmSjurzuXCmpUkSWWg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:57 2026 by rpki-client