This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/3230332e3230352e3133362e302f32342d3234203d3e20313332323033.roa File: 3230332e3230352e3133362e302f32342d3234203d3e20313332323033.roa (raw, json) Hash identifier: OfnF9Xhfcn05Z9Vv2YxArhdpQfnFDoeeAVwy6VGNRqY= Subject key identifier: 85:6C:B7:FF:B0:E7:CD:1D:2E:8D:FC:C8:E4:5F:46:04:5F:54:43:4C Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Certificate serial: 07C66E771DD9DDDB26E61AE4D1A272FF425A848F Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/3230332e3230352e3133362e302f32342d3234203d3e20313332323033.roa Signing time: Tue 20 Jan 2026 02:22:40 +0000 ROA not before: Tue 20 Jan 2026 02:17:40 +0000 ROA not after: Tue 19 Jan 2027 02:22:40 +0000 asID: 132203 IP address blocks: 203.205.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c6:6e:77:1d:d9:dd:db:26:e6:1a:e4:d1:a2:72:ff:42:5a:84:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Validity Not Before: Jan 20 02:17:40 2026 GMT Not After : Jan 19 02:22:40 2027 GMT Subject: CN=856CB7FFB0E7CD1D2E8DFCC8E45F46045F54434C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e6:ab:cf:ac:ae:04:81:7f:f4:01:f6:31:fc: 9b:98:fd:ce:ce:96:dc:a9:b0:d2:17:2f:7d:c8:9c: 94:cd:34:c0:d0:a1:46:4a:0b:29:5b:4a:a7:2d:68: e1:33:b5:05:d7:8e:f7:38:9d:cf:a7:75:81:68:a5: af:51:db:35:19:a1:0c:98:8f:3f:d7:c3:60:77:48: 63:7e:05:5a:b2:c5:0e:e1:2c:17:58:0e:29:90:d1: 45:e5:eb:90:7d:d4:0d:1f:19:6b:e8:f2:eb:ae:2a: 1c:0e:e3:33:02:f5:a3:bb:d4:de:b7:b3:bb:93:3a: 3f:04:ba:f4:2b:6f:4e:cb:f9:4f:c1:ea:5d:f3:6f: 79:dd:05:44:e5:13:9f:53:1d:ec:45:d8:ec:f5:01: ae:25:b5:82:31:76:e2:33:d7:6c:d3:8a:29:d6:e6: 8a:01:29:9b:69:6e:8e:e7:68:94:a2:e3:71:f6:74: dc:e6:92:4b:d5:22:f9:b6:3e:b9:08:a3:34:b6:de: 58:33:26:b9:47:77:b6:aa:0f:93:35:8a:2c:75:a1: 0f:55:4f:20:6a:5d:a0:ca:d6:36:18:5a:80:9b:b5: 59:36:93:85:de:31:13:65:78:50:fe:97:25:0e:c8: ac:85:7b:20:51:32:8e:76:77:f5:f9:c9:27:22:e1: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6C:B7:FF:B0:E7:CD:1D:2E:8D:FC:C8:E4:5F:46:04:5F:54:43:4C X509v3 Authority Key Identifier: keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/3230332e3230352e3133362e302f32342d3234203d3e20313332323033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.205.136.0/24 Signature Algorithm: sha256WithRSAEncryption 49:2a:33:f3:6b:90:1f:0c:87:8e:90:84:bb:f3:d5:5e:61:6e: bf:a7:28:5a:d4:7a:dc:65:55:e1:6e:3f:f3:6c:98:32:9e:b6: 23:d0:d2:dc:72:44:2d:88:06:7d:56:41:e9:70:1e:c4:00:7d: 47:60:1c:b6:d5:8c:cc:dd:7d:88:df:77:c9:8d:2c:51:2f:7d: 2c:2e:a7:1f:65:b8:54:1b:de:ee:0b:c3:ae:2a:03:4c:35:57: 26:c3:a7:92:6e:22:9c:1c:24:0c:ed:5f:4d:9d:e0:63:79:bd: 00:65:cd:ae:e6:bc:58:6e:b8:1e:5e:2a:7d:66:78:da:9a:4c: c4:d7:73:04:b2:e2:83:9b:fc:76:a8:2b:72:f6:b9:1c:fd:74: 73:dd:e4:6f:cc:16:44:1c:3a:ac:6c:62:80:9c:ff:e1:80:14: 1a:e7:20:11:77:02:7b:f3:52:a0:49:71:42:7a:0d:94:b5:6e: 84:c7:a5:0d:f0:68:96:fd:9b:1d:6d:35:22:36:4f:2d:4e:cd: 75:c0:e3:7a:82:4c:ff:d5:86:01:09:9d:aa:d1:2d:d8:cb:0e: 1e:3a:64:5b:c8:8f:0d:45:06:6e:a6:5a:9f:6d:8f:a1:23:39: 23:b0:37:0f:e7:bf:9b:95:c0:8c:54:ca:91:25:41:f9:89:51: 0d:07:10:3a -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUB8Zudx3Z3dsm5hrk0aJy/0JahI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRF RTQ2QUY2NDAeFw0yNjAxMjAwMjE3NDBaFw0yNzAxMTkwMjIyNDBaMDMxMTAvBgNV BAMTKDg1NkNCN0ZGQjBFN0NEMUQyRThERkNDOEU0NUY0NjA0NUY1NDQzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD05qvPrK4EgX/0AfYx/JuY/c7O ltypsNIXL33InJTNNMDQoUZKCylbSqctaOEztQXXjvc4nc+ndYFopa9R2zUZoQyY jz/Xw2B3SGN+BVqyxQ7hLBdYDimQ0UXl65B91A0fGWvo8uuuKhwO4zMC9aO71N63 s7uTOj8EuvQrb07L+U/B6l3zb3ndBUTlE59THexF2Oz1Aa4ltYIxduIz12zTiinW 5ooBKZtpbo7naJSi43H2dNzmkkvVIvm2PrkIozS23lgzJrlHd7aqD5M1iix1oQ9V TyBqXaDK1jYYWoCbtVk2k4XeMRNleFD+lyUOyKyFeyBRMo52d/X5ySci4SmBAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUhWy3/7DnzR0ujfzI5F9GBF9UQ0wwHwYDVR0j BBgwFoAUqSuBmizVyxNZtwd2tY4s/e5Gr2QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjMxMDUzMC8wL0E5MkI4MTlBMkNENUNCMTM1OUI3MDc3NkI1OEUy Q0ZERUU0NkFGNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMzEwNTMwLzAvMzIzMDMzMmUz MjMwMzUyZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjMyMzAz My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMvNiDANBgkqhkiG9w0BAQsFAAOCAQEASSoz82uQHwyHjpCE u/PVXmFuv6coWtR63GVV4W4/82yYMp62I9DS3HJELYgGfVZB6XAexAB9R2ActtWM zN19iN93yY0sUS99LC6nH2W4VBve7gvDrioDTDVXJsOnkm4inBwkDO1fTZ3gY3m9 AGXNrua8WG64Hl4qfWZ42ppMxNdzBLLig5v8dqgrcva5HP10c93kb8wWRBw6rGxi gJz/4YAUGucgEXcCe/NSoElxQnoNlLVuhMelDfBolv2bHW01IjZPLU7NdcDjeoJM /9WGAQmdqtEt2MsOHjpkW8iPDUUGbqZan22PoSM5I7A3D+e/m5XAjFTKkSVB+YlR DQcQOg== -----END CERTIFICATE-----Generated at Tue Jan 20 14:51:26 2026 by rpki-client