This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3232302e302f32322d3234203d3e20313334313231.roa File: 3130332e3131382e3232302e302f32322d3234203d3e20313334313231.roa (raw, json) Hash identifier: dgFMkqSC44BYH05Esn4S/nX0qYaVmby6ZIxT38/clTk= Subject key identifier: 83:96:AD:D9:F5:F6:4A:C8:98:D7:2C:7E:44:E4:CD:0D:1B:5B:FE:66 Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 38B58A64B58D3D4357B58BEBBEA8C1FE413133E9 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3232302e302f32322d3234203d3e20313334313231.roa Signing time: Tue 20 Jan 2026 02:09:36 +0000 ROA not before: Tue 20 Jan 2026 02:04:36 +0000 ROA not after: Tue 19 Jan 2027 02:09:36 +0000 asID: 134121 IP address blocks: 103.118.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b5:8a:64:b5:8d:3d:43:57:b5:8b:eb:be:a8:c1:fe:41:31:33:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: Jan 20 02:04:36 2026 GMT Not After : Jan 19 02:09:36 2027 GMT Subject: CN=8396ADD9F5F64AC898D72C7E44E4CD0D1B5BFE66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:81:55:62:87:f6:c5:dc:5c:81:22:0a:b5: 77:c9:c7:24:75:14:ff:7a:69:18:dc:c0:87:30:5a: 25:1a:41:81:12:30:35:6a:7c:06:2a:f3:27:f4:38: df:74:f4:e9:34:08:2f:47:72:c6:80:bb:e2:2c:2b: a3:85:63:9e:6f:47:db:68:7d:3a:1b:b8:57:68:7a: 60:40:8d:a6:01:ad:15:20:1e:ce:3c:0b:f9:08:d0: df:4f:99:ba:67:67:9f:09:da:b1:66:38:9a:86:b7: c4:61:02:05:69:94:9c:5c:d8:f2:c0:d2:df:9d:c8: 33:36:de:8a:be:3b:a1:03:b8:e0:f5:d8:1a:fb:fa: 2f:28:27:b6:54:fb:d6:3d:01:47:8c:40:2d:24:74: 75:2d:38:55:88:a5:fa:b3:76:b9:80:27:09:7f:7f: 88:d2:33:09:ce:76:67:83:a1:5c:ad:53:de:eb:21: f5:6c:a9:80:ee:bf:36:c2:e0:75:d2:27:52:93:5d: 50:40:60:ac:4f:30:1b:b0:cd:93:ee:59:1d:3b:42: 01:c0:f7:20:b7:2c:23:39:bf:cc:c4:08:91:92:0b: e6:db:cf:62:46:4b:5d:6f:df:8d:2a:c2:88:62:c0: 83:0f:72:6a:1e:8a:f8:2f:c7:9a:9c:3f:81:6d:b0: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:96:AD:D9:F5:F6:4A:C8:98:D7:2C:7E:44:E4:CD:0D:1B:5B:FE:66 X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3232302e302f32322d3234203d3e20313334313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.220.0/22 Signature Algorithm: sha256WithRSAEncryption b8:76:60:27:7d:43:f0:96:ee:e2:95:eb:b4:f4:e1:1d:48:08: 68:50:47:b0:18:9b:77:0a:a5:f4:d0:2e:be:84:51:f9:2e:18: 90:c9:14:2b:c1:09:1e:1f:8e:44:8f:1a:5b:d9:53:ab:3d:a6: 8e:4b:9f:d7:28:84:9b:24:a1:69:78:05:15:4b:0d:5c:1f:f6: 3f:06:9e:d6:5d:3f:a8:7d:9e:e5:67:12:71:c0:48:01:cd:41: 2e:ec:5a:7f:2a:4b:8f:f5:c0:11:ef:87:2a:b4:b3:af:a3:80: b0:82:de:68:8d:30:73:80:ef:a9:fa:84:5e:43:a5:79:1e:0b: 30:55:2b:26:2b:ea:8c:f3:e2:cd:a8:01:1c:11:da:db:f7:24: b1:ed:31:e6:6c:21:ad:28:84:5c:c5:5a:ff:f0:76:40:31:e1: 76:2b:eb:9a:bb:d6:6d:f5:a6:32:de:6b:cd:81:86:c6:3e:fb: 9d:b1:f7:a4:bc:2a:92:63:47:36:af:40:66:72:cb:7c:30:07: a5:2f:b8:93:9b:a2:1b:bb:b2:d5:34:21:3b:90:ed:10:5f:1f: 00:84:fe:cc:7d:a5:f3:5a:be:98:f0:9c:9c:0d:da:b2:79:c5: d7:de:74:c9:12:ee:85:a7:57:19:91:e5:e2:bc:57:aa:6b:79: 22:a4:93:69 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUOLWKZLWNPUNXtYvrvqjB/kExM+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzZaFw0yNzAxMTkwMjA5MzZaMDMxMTAvBgNV BAMTKDgzOTZBREQ5RjVGNjRBQzg5OEQ3MkM3RTQ0RTRDRDBEMUI1QkZFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChsoFVYof2xdxcgSIKtXfJxyR1 FP96aRjcwIcwWiUaQYESMDVqfAYq8yf0ON909Ok0CC9HcsaAu+IsK6OFY55vR9to fTobuFdoemBAjaYBrRUgHs48C/kI0N9PmbpnZ58J2rFmOJqGt8RhAgVplJxc2PLA 0t+dyDM23oq+O6EDuOD12Br7+i8oJ7ZU+9Y9AUeMQC0kdHUtOFWIpfqzdrmAJwl/ f4jSMwnOdmeDoVytU97rIfVsqYDuvzbC4HXSJ1KTXVBAYKxPMBuwzZPuWR07QgHA 9yC3LCM5v8zECJGSC+bbz2JGS11v340qwohiwIMPcmoeivgvx5qcP4FtsI8pAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUg5at2fX2SsiY1yx+ROTNDRtb/mYwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1NjgyLzAvMzEzMDMzMmUz MTMxMzgyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzNDMxMzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmd23DANBgkqhkiG9w0BAQsFAAOCAQEAuHZgJ31D8Jbu4pXr tPThHUgIaFBHsBibdwql9NAuvoRR+S4YkMkUK8EJHh+ORI8aW9lTqz2mjkuf1yiE myShaXgFFUsNXB/2Pwae1l0/qH2e5WcSccBIAc1BLuxafypLj/XAEe+HKrSzr6OA sILeaI0wc4DvqfqEXkOleR4LMFUrJivqjPPizagBHBHa2/ckse0x5mwhrSiEXMVa //B2QDHhdivrmrvWbfWmMt5rzYGGxj77nbH3pLwqkmNHNq9AZnLLfDAHpS+4k5ui G7uy1TQhO5DtEF8fAIT+zH2l81q+mPCcnA3asnnF1950yRLuhadXGZHl4rxXqmt5 IqSTaQ== -----END CERTIFICATE-----Generated at Tue Jan 20 09:08:23 2026 by rpki-client