This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230382e302f32322d3234203d3e20313334313231.roa File: 3130332e3131382e3230382e302f32322d3234203d3e20313334313231.roa (raw, json) Hash identifier: 8gJ4Xs70sf3F1QuKKCcvqZ7SOy85Cj6PUXAE6qYRRwg= Subject key identifier: CD:DD:2D:4F:62:83:11:9C:F2:28:10:4D:45:55:F4:C1:C9:BB:01:AB Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 4F3A40234A196E891C172DCEA0726015054C073B Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230382e302f32322d3234203d3e20313334313231.roa Signing time: Tue 20 Jan 2026 02:09:35 +0000 ROA not before: Tue 20 Jan 2026 02:04:35 +0000 ROA not after: Tue 19 Jan 2027 02:09:35 +0000 asID: 134121 IP address blocks: 103.118.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3a:40:23:4a:19:6e:89:1c:17:2d:ce:a0:72:60:15:05:4c:07:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: Jan 20 02:04:35 2026 GMT Not After : Jan 19 02:09:35 2027 GMT Subject: CN=CDDD2D4F6283119CF228104D4555F4C1C9BB01AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:05:d6:b5:13:f4:eb:08:5b:d6:5c:71:bc:cb: bf:47:bf:05:1a:75:06:d6:be:ce:18:92:9f:d6:43: 2d:80:e7:8c:eb:01:6d:a9:b8:ac:6f:4a:99:a4:17: 50:9b:fc:9e:e7:4b:d6:a8:60:28:05:66:a5:02:ee: d2:7d:fc:a9:90:9c:60:7b:96:82:20:f2:68:9f:fb: 39:34:63:80:17:d4:57:b0:a5:6b:5a:43:d8:39:50: bd:13:e1:59:81:fc:b4:32:aa:12:e3:b2:fa:aa:9d: 04:b0:b4:fa:0d:4c:ff:2d:1c:da:30:d8:a3:2f:0a: 88:57:1d:1e:4e:10:07:a4:94:e7:88:13:09:53:9b: 6b:35:c7:aa:d0:c5:8b:79:a4:66:09:57:1c:fb:47: d5:d8:53:67:e4:38:86:d4:68:82:60:3f:de:dc:c6: 74:7d:7f:eb:35:1e:84:d3:21:55:5f:20:0c:c6:a6: 06:9f:55:8c:11:7c:eb:fa:7f:73:38:99:3d:c9:24: e5:3c:ce:0c:ba:72:1a:ff:38:30:66:e5:0e:a8:e9: 7d:1a:59:85:d7:5a:90:7f:ca:9d:94:81:b5:e0:38: c8:6f:2a:fb:20:01:62:b7:77:0f:c9:af:30:ae:7e: d7:90:cc:86:c5:db:6c:0c:cf:d9:5c:fa:cc:cc:ae: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DD:2D:4F:62:83:11:9C:F2:28:10:4D:45:55:F4:C1:C9:BB:01:AB X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230382e302f32322d3234203d3e20313334313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.208.0/22 Signature Algorithm: sha256WithRSAEncryption a8:96:e8:12:b4:08:c0:53:54:0c:cc:78:01:25:8a:b2:c5:b6: e2:f2:51:43:94:7b:8e:99:20:a3:ee:0f:c2:a8:9c:6c:eb:b6: b2:97:9c:01:c1:ef:5a:7c:68:ab:7f:b6:e6:a8:3d:a9:09:1f: 62:5c:d9:bd:d0:d5:3c:21:01:73:56:a7:f7:d7:0a:0d:95:18: cf:66:32:cc:8e:fd:0d:e4:62:1e:f1:56:37:dc:a9:25:50:ac: 4f:9a:7f:ff:4e:3a:e7:16:e1:d2:30:88:de:92:ee:8f:da:8f: 8c:7a:20:55:fb:15:34:2a:06:77:90:99:d5:42:83:38:eb:64: a9:82:5e:67:19:44:88:41:45:22:ae:3c:06:45:99:14:2e:2f: b5:5d:f3:27:44:63:05:a0:a8:c2:d9:7d:04:cf:da:0c:e4:0b: c4:5d:0d:c0:8e:70:2a:f9:01:6e:71:c8:f0:a6:47:bf:a9:04: f5:cc:21:52:53:5a:5e:23:65:9e:f5:de:fe:56:55:75:ba:94: 57:bb:94:76:88:a6:8c:04:a6:8b:89:c0:3a:cd:67:48:e3:78: 94:de:55:cc:34:9d:b9:ea:64:e3:24:5d:a3:53:19:80:55:8f: 59:ad:16:11:ba:92:96:c5:34:1a:ba:c7:87:ae:47:a8:fd:b5: 8f:30:92:d9 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUTzpAI0oZbokcFy3OoHJgFQVMBzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzVaFw0yNzAxMTkwMjA5MzVaMDMxMTAvBgNV BAMTKENEREQyRDRGNjI4MzExOUNGMjI4MTA0RDQ1NTVGNEMxQzlCQjAxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsBda1E/TrCFvWXHG8y79HvwUa dQbWvs4Ykp/WQy2A54zrAW2puKxvSpmkF1Cb/J7nS9aoYCgFZqUC7tJ9/KmQnGB7 loIg8mif+zk0Y4AX1FewpWtaQ9g5UL0T4VmB/LQyqhLjsvqqnQSwtPoNTP8tHNow 2KMvCohXHR5OEAeklOeIEwlTm2s1x6rQxYt5pGYJVxz7R9XYU2fkOIbUaIJgP97c xnR9f+s1HoTTIVVfIAzGpgafVYwRfOv6f3M4mT3JJOU8zgy6chr/ODBm5Q6o6X0a WYXXWpB/yp2UgbXgOMhvKvsgAWK3dw/JrzCufteQzIbF22wMz9lc+szMro0BAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUzd0tT2KDEZzyKBBNRVX0wcm7AaswHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1NjgyLzAvMzEzMDMzMmUz MTMxMzgyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzNDMxMzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmd20DANBgkqhkiG9w0BAQsFAAOCAQEAqJboErQIwFNUDMx4 ASWKssW24vJRQ5R7jpkgo+4PwqicbOu2specAcHvWnxoq3+25qg9qQkfYlzZvdDV PCEBc1an99cKDZUYz2YyzI79DeRiHvFWN9ypJVCsT5p//0465xbh0jCI3pLuj9qP jHogVfsVNCoGd5CZ1UKDOOtkqYJeZxlEiEFFIq48BkWZFC4vtV3zJ0RjBaCowtl9 BM/aDOQLxF0NwI5wKvkBbnHI8KZHv6kE9cwhUlNaXiNlnvXe/lZVdbqUV7uUdoim jASmi4nAOs1nSON4lN5VzDSduepk4yRdo1MZgFWPWa0WEbqSlsU0GrrHh65HqP21 jzCS2Q== -----END CERTIFICATE-----Generated at Tue Jan 20 09:08:22 2026 by rpki-client