This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/312e3131382e33362e302f32342d3234203d3e20313337373533.roa File: 312e3131382e33362e302f32342d3234203d3e20313337373533.roa (raw, json) Hash identifier: wX3KXCFY3ZU/rDO+Um660eZhmmPPFKIuR9ybyalQ4a8= Subject key identifier: 2A:4C:EF:49:9B:A1:A0:EA:E7:40:90:E7:47:2B:D8:57:2C:5E:65:DF Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 29CD909B9440829680296115D608CD3718FB53A8 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/312e3131382e33362e302f32342d3234203d3e20313337373533.roa Signing time: Tue 27 Jan 2026 03:01:03 +0000 ROA not before: Tue 27 Jan 2026 02:56:03 +0000 ROA not after: Tue 26 Jan 2027 03:01:03 +0000 asID: 137753 IP address blocks: 1.118.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Feb 2026 16:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cd:90:9b:94:40:82:96:80:29:61:15:d6:08:cd:37:18:fb:53:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Jan 27 02:56:03 2026 GMT Not After : Jan 26 03:01:03 2027 GMT Subject: CN=2A4CEF499BA1A0EAE74090E7472BD8572C5E65DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c7:c6:f6:3f:ce:01:dd:5d:e5:8f:a6:d4:6c: a7:1d:c8:83:bd:d4:ec:d1:cd:d3:ec:43:b6:45:d1: ac:6f:73:68:fb:24:e4:46:ad:15:72:ea:99:84:6b: d9:d0:36:c0:7a:cf:26:5a:6d:58:98:f4:90:68:f5: 4d:0e:2e:fb:da:90:96:f5:1e:bb:37:1e:94:3b:3c: 83:fe:4c:7b:6b:98:41:23:99:49:a8:0f:86:22:e4: c4:6c:18:e5:36:5d:70:2c:28:a6:2f:a1:cb:f9:99: 1e:f1:6c:3e:a6:23:6d:b7:b1:3e:95:83:e5:1c:df: ca:1c:9d:4a:cd:ad:86:2e:84:56:c8:df:2c:75:2c: be:07:0b:23:c9:ec:b7:5d:e7:ad:79:ce:7b:02:35: ff:9c:ca:84:f5:b8:c0:f2:6d:21:b3:fa:2f:7f:9e: 40:d3:9e:f4:fe:c9:16:52:e9:74:1d:5f:18:af:d9: 63:a1:44:ae:42:9d:18:2f:38:85:b8:af:50:c4:17: ee:36:58:c5:96:cc:02:97:1c:20:7c:77:5f:84:46: 4c:f4:33:55:40:75:ad:db:bc:29:43:a1:f1:35:e9: a0:7e:5e:3c:a5:8c:99:31:fc:71:b9:f4:8f:2f:58: 17:80:5e:85:35:08:82:4b:2c:77:82:10:d5:e8:6c: 97:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:EF:49:9B:A1:A0:EA:E7:40:90:E7:47:2B:D8:57:2C:5E:65:DF X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/312e3131382e33362e302f32342d3234203d3e20313337373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.118.36.0/24 Signature Algorithm: sha256WithRSAEncryption 24:c6:67:8c:ab:1b:3d:23:b9:59:1a:a4:89:2d:6b:0f:47:79: 0e:cd:12:95:2d:a9:50:5c:b8:0d:43:89:be:1e:86:b0:58:93: b5:f5:45:e0:dd:e4:d7:e1:95:6e:dc:fd:7e:21:0e:05:a8:3c: 59:9d:24:88:93:21:ec:07:2b:41:92:34:a4:dc:00:48:ab:f0: c4:ba:e1:8d:66:d4:69:76:9b:52:2d:fc:fa:92:9d:99:71:e5: 70:bd:47:01:b5:66:e5:91:46:bf:0c:53:0d:07:ab:85:64:d2: 44:b6:50:41:cd:a3:ef:6c:7c:68:a7:ef:d3:cd:95:28:e3:12: b9:50:73:08:82:f4:2b:a8:65:05:e7:5f:48:d8:c5:ab:8d:38: 17:74:a5:d1:3f:9c:18:89:50:cf:8f:1a:7c:20:a5:0a:05:5f: 0a:cb:25:0d:5e:91:2e:74:31:6f:aa:a3:46:f9:f1:e1:6e:7b: e4:2f:21:e8:48:1b:1a:08:69:32:4f:28:51:e2:a2:a3:7b:24: 7a:d1:a0:38:ba:d3:56:b3:74:13:cc:a5:cb:6c:88:47:4d:d2: 91:44:51:94:af:b6:03:39:94:f3:43:2c:40:06:52:44:48:e4: cf:1d:0a:c6:5d:d6:14:e5:50:b1:e3:4e:21:ba:bc:8f:18:b9: 60:44:00:b9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKc2Qm5RAgpaAKWEV1gjNNxj7U6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjAxMjcwMjU2MDNaFw0yNzAxMjYwMzAxMDNaMDMxMTAvBgNV BAMTKDJBNENFRjQ5OUJBMUEwRUFFNzQwOTBFNzQ3MkJEODU3MkM1RTY1REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZx8b2P84B3V3lj6bUbKcdyIO9 1OzRzdPsQ7ZF0axvc2j7JORGrRVy6pmEa9nQNsB6zyZabViY9JBo9U0OLvvakJb1 Hrs3HpQ7PIP+THtrmEEjmUmoD4Yi5MRsGOU2XXAsKKYvocv5mR7xbD6mI223sT6V g+Uc38ocnUrNrYYuhFbI3yx1LL4HCyPJ7Ldd5615znsCNf+cyoT1uMDybSGz+i9/ nkDTnvT+yRZS6XQdXxiv2WOhRK5CnRgvOIW4r1DEF+42WMWWzAKXHCB8d1+ERkz0 M1VAda3bvClDofE16aB+XjyljJkx/HG59I8vWBeAXoU1CIJLLHeCENXobJe3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUKkzvSZuhoOrnQJDnRyvYVyxeZd8wHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2LzAvMzEyZTMxMzEzODJl MzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzUzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAAF2JDANBgkqhkiG9w0BAQsFAAOCAQEAJMZnjKsbPSO5WRqkiS1rD0d5Ds0S lS2pUFy4DUOJvh6GsFiTtfVF4N3k1+GVbtz9fiEOBag8WZ0kiJMh7AcrQZI0pNwA SKvwxLrhjWbUaXabUi38+pKdmXHlcL1HAbVm5ZFGvwxTDQerhWTSRLZQQc2j72x8 aKfv082VKOMSuVBzCIL0K6hlBedfSNjFq404F3Sl0T+cGIlQz48afCClCgVfCssl DV6RLnQxb6qjRvnx4W575C8h6EgbGghpMk8oUeKio3sketGgOLrTVrN0E8yly2yI R03SkURRlK+2AzmU80MsQAZSREjkzx0Kxl3WFOVQseNOIbq8jxi5YEQAuQ== -----END CERTIFICATE-----Generated at Mon Feb 16 09:15:38 2026 by rpki-client