This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e203632343638.roa File: 3130332e31392e3233322e302f32322d3232203d3e203632343638.roa (raw, json) Hash identifier: FIyKRHnh6ANBsNFHBDZY9OW6prlllmKtfsx4VFw8aRA= Subject key identifier: 88:4B:B7:82:A9:89:D4:C1:24:38:8C:8D:CA:22:16:A6:F1:B6:B7:05 Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Certificate serial: 79FF44DB0CB61BC4FB7DF995BC40D93F3031DE18 Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e203632343638.roa Signing time: Tue 20 Jan 2026 02:20:23 +0000 ROA not before: Tue 20 Jan 2026 02:15:23 +0000 ROA not after: Tue 19 Jan 2027 02:20:23 +0000 asID: 62468 IP address blocks: 103.19.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ff:44:db:0c:b6:1b:c4:fb:7d:f9:95:bc:40:d9:3f:30:31:de:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Validity Not Before: Jan 20 02:15:23 2026 GMT Not After : Jan 19 02:20:23 2027 GMT Subject: CN=884BB782A989D4C124388C8DCA2216A6F1B6B705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:a3:45:ea:8a:8c:4d:f7:77:3d:52:f9:b3: b8:cf:a5:7a:8a:dd:7d:cf:d1:df:6a:a9:d3:80:d5: 21:9d:1f:62:e1:fa:4e:e2:2e:2d:40:ae:b5:dc:41: 36:d0:a3:4b:8b:f9:07:73:3c:db:9f:e0:d6:c2:23: d3:e6:c7:72:bc:4f:40:22:44:30:4e:e0:b4:82:91: 9c:08:05:a4:28:df:6f:87:b0:fd:b2:a0:18:e1:18: 16:b2:49:bf:ca:90:8c:34:fc:b5:98:38:04:d7:33: e4:ff:c3:6a:d1:86:b5:ca:5f:f6:80:b5:b8:0f:1f: d0:ab:45:d7:02:21:73:7b:d1:35:6a:3f:29:32:8a: 8b:b3:63:cd:eb:7f:13:ec:61:b2:43:63:88:b2:01: 09:e1:74:37:d9:0c:8d:bd:e1:ea:c4:7a:5f:c1:16: 37:77:8f:b4:70:b1:62:4f:db:05:59:31:19:35:1f: ca:ca:e0:f3:ac:14:fe:1b:c7:ae:37:60:4c:96:a6: 46:e8:60:c3:29:43:99:f6:58:15:a6:df:f5:bf:bf: 38:e1:74:1d:be:62:32:1e:32:e1:ab:79:d2:19:6a: 46:3b:45:d5:db:46:08:5e:b7:b4:02:8d:d1:6f:25: 4d:c2:9d:99:50:96:94:71:57:de:93:3e:55:69:cf: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4B:B7:82:A9:89:D4:C1:24:38:8C:8D:CA:22:16:A6:F1:B6:B7:05 X509v3 Authority Key Identifier: keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e203632343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.232.0/22 Signature Algorithm: sha256WithRSAEncryption 18:9f:c8:60:fd:91:cd:34:3f:0a:e1:ac:05:ee:bd:bc:a8:4b: 1e:ef:34:88:13:6d:b9:09:c7:a2:85:e6:34:03:af:a0:e0:83: e5:6d:b6:fc:92:9a:d6:fe:a2:57:fb:bb:df:d5:2c:e8:69:3c: ac:7e:d4:a2:06:80:8f:35:4d:26:fd:c3:73:ef:c8:37:5c:f0: 7d:b5:9e:7c:0f:34:74:c3:93:35:fb:49:44:88:e3:ef:a8:53: 75:9f:2e:57:6b:37:46:d1:28:a0:3c:0f:af:6c:a4:87:c6:60: 68:cf:3a:eb:3f:f2:fa:bc:12:b1:7a:a3:4f:6d:b1:34:6f:98: ab:29:2b:83:2b:db:51:32:64:52:bd:5d:2d:b3:a7:7e:23:d4: d4:ef:57:db:14:20:b6:a2:3d:e7:b4:1b:bd:20:23:b5:5a:93: c6:a1:70:e2:6a:c7:63:cc:22:40:fe:7e:d7:df:b6:2b:0e:f9: b9:f3:5c:ef:bd:ca:98:82:a2:5c:a0:53:ee:70:e8:b7:61:1a: b1:6c:ee:f0:dd:5f:b8:b9:ad:a6:62:a1:0c:0f:42:c3:5c:9e: 26:c8:19:66:e9:7a:8e:98:fa:60:a8:3e:1d:7c:65:b6:02:2f: 59:de:96:b8:d4:29:22:f1:88:79:73:50:a7:fb:c1:64:13:19: aa:d4:73:ed -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUef9E2wy2G8T7ffmVvEDZPzAx3hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD RERCNDRGMDAeFw0yNjAxMjAwMjE1MjNaFw0yNzAxMTkwMjIwMjNaMDMxMTAvBgNV BAMTKDg4NEJCNzgyQTk4OUQ0QzEyNDM4OEM4RENBMjIxNkE2RjFCNkI3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vKNF6oqMTfd3PVL5s7jPpXqK 3X3P0d9qqdOA1SGdH2Lh+k7iLi1ArrXcQTbQo0uL+QdzPNuf4NbCI9Pmx3K8T0Ai RDBO4LSCkZwIBaQo32+HsP2yoBjhGBaySb/KkIw0/LWYOATXM+T/w2rRhrXKX/aA tbgPH9CrRdcCIXN70TVqPykyiouzY83rfxPsYbJDY4iyAQnhdDfZDI294erEel/B Fjd3j7RwsWJP2wVZMRk1H8rK4POsFP4bx643YEyWpkboYMMpQ5n2WBWm3/W/vzjh dB2+YjIeMuGredIZakY7RdXbRghet7QCjdFvJU3CnZlQlpRxV96TPlVpzwspAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUiEu3gqmJ1MEkOIyNyiIWpvG2twUwHwYDVR0j BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3 ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDgxNTQ4OS8wLzMxMzAzMzJlMzEz OTJlMzIzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMjM0MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmcT6DANBgkqhkiG9w0BAQsFAAOCAQEAGJ/IYP2RzTQ/CuGsBe69vKhL Hu80iBNtuQnHooXmNAOvoOCD5W22/JKa1v6iV/u739Us6Gk8rH7UogaAjzVNJv3D c+/IN1zwfbWefA80dMOTNftJRIjj76hTdZ8uV2s3RtEooDwPr2ykh8ZgaM866z/y +rwSsXqjT22xNG+YqykrgyvbUTJkUr1dLbOnfiPU1O9X2xQgtqI957QbvSAjtVqT xqFw4mrHY8wiQP5+19+2Kw75ufNc773KmIKiXKBT7nDot2EasWzu8N1fuLmtpmKh DA9Cw1yeJsgZZul6jpj6YKg+HXxltgIvWd6WuNQpIvGIeXNQp/vBZBMZqtRz7Q== -----END CERTIFICATE-----Generated at Tue Jan 20 18:03:53 2026 by rpki-client