This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3232302e302f32322d3234203d3e203535393333.roa File: 3130332e3131382e3232302e302f32322d3234203d3e203535393333.roa (raw, json) Hash identifier: YBPYI3TE5NO3iB2a55ebqaFnzT8E6Z+gJLv6nfXQnlM= Subject key identifier: CE:3C:90:A1:57:4A:68:B6:F6:65:3D:5F:1C:65:E6:2D:6E:1B:FA:5D Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 65DE42821212CC29739A50D96B2BC2BF48F9AD4C Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3232302e302f32322d3234203d3e203535393333.roa Signing time: Tue 20 Jan 2026 02:09:40 +0000 ROA not before: Tue 20 Jan 2026 02:04:40 +0000 ROA not after: Tue 19 Jan 2027 02:09:40 +0000 asID: 55933 IP address blocks: 103.118.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:de:42:82:12:12:cc:29:73:9a:50:d9:6b:2b:c2:bf:48:f9:ad:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: Jan 20 02:04:40 2026 GMT Not After : Jan 19 02:09:40 2027 GMT Subject: CN=CE3C90A1574A68B6F6653D5F1C65E62D6E1BFA5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:4c:1a:95:87:a4:5c:40:ed:bf:f3:6c:e7: 96:14:c2:3e:ac:b7:2f:a5:de:29:8f:e8:7f:b0:6c: e1:29:31:ee:b2:7d:76:a9:ee:d5:72:ac:e6:82:1f: 6a:a9:3d:1c:1e:f6:db:36:13:e9:1a:66:8c:53:f0: bb:d6:15:54:01:3a:74:6c:27:a8:22:23:2d:76:a7: c6:65:ae:cf:4e:6d:8e:ec:8d:8a:53:8d:5c:19:c5: 92:08:2b:4f:1e:3a:13:4b:ce:c6:58:ae:6a:25:f1: 6f:9b:f7:30:7f:8f:6b:d6:b5:c4:d4:76:fb:b3:d8: b6:63:fa:0e:3a:61:25:35:3c:a8:f3:47:3e:f9:d8: 77:da:4d:b0:c5:49:a9:79:31:b5:de:65:5f:9e:26: a0:16:fe:df:36:d0:50:02:83:82:04:7d:39:32:15: 47:0d:a7:03:0c:6c:87:30:6c:ae:e8:42:fa:f5:ee: ba:b1:9a:66:75:97:41:4f:4c:0e:0a:55:84:1a:3c: 6a:e0:30:8c:7f:9a:df:e2:99:80:3a:68:95:ee:86: 42:1a:e5:fd:90:2a:ca:ed:0a:ad:df:56:bc:da:86: 71:85:d1:4b:1d:03:e3:3a:80:c7:d6:ad:89:ae:58: d4:dc:5f:77:0b:70:c0:70:fc:fc:53:d0:ad:5c:c6: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3C:90:A1:57:4A:68:B6:F6:65:3D:5F:1C:65:E6:2D:6E:1B:FA:5D X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3232302e302f32322d3234203d3e203535393333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.220.0/22 Signature Algorithm: sha256WithRSAEncryption 02:d0:ed:c3:c1:39:c5:da:1f:b8:a5:da:f4:6d:6b:9a:ce:88: 33:5b:1a:a6:6b:48:5f:27:b4:c2:bb:d7:f1:20:ab:53:b1:23: 9a:f4:08:9f:6a:e9:c6:fa:34:6f:5b:ea:ee:b2:f2:f8:09:df: 9d:6b:bd:1d:8f:b8:f4:59:aa:79:f7:66:f4:64:1a:24:8e:90: f5:22:77:64:98:34:ae:ef:c9:2f:78:cf:f2:3a:a3:7f:ca:88: 67:bf:4f:59:ed:ed:fd:a7:6d:f4:08:c5:6e:90:c8:76:b2:94: 69:e6:22:9e:2d:e7:81:73:9a:19:88:da:0d:8a:ab:2b:d9:41: de:28:ae:4f:51:94:61:4c:69:4b:cc:9c:8e:44:c7:b0:ce:d3: 7d:63:35:ac:1c:5f:4a:3d:15:e8:fc:d6:b8:02:56:03:e1:5a: a4:ae:1e:84:8b:44:c8:20:91:3d:36:ae:2e:d5:7d:5b:4e:35: 5f:c4:eb:92:b8:9f:de:15:c9:d4:7f:47:91:86:5a:f1:e7:8f: d0:ad:17:81:cd:e3:83:80:d6:86:02:ef:b8:71:8b:64:53:73: fd:16:c8:50:8e:9a:a4:1f:3a:17:2a:76:91:5c:5a:bf:86:4a: 18:fd:6b:1e:39:78:2a:da:f8:49:02:ae:97:85:7c:52:d0:1d: e7:c7:8c:7a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZd5CghISzClzmlDZayvCv0j5rUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjAxMjAwMjA0NDBaFw0yNzAxMTkwMjA5NDBaMDMxMTAvBgNV BAMTKENFM0M5MEExNTc0QTY4QjZGNjY1M0Q1RjFDNjVFNjJENkUxQkZBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcEwalYekXEDtv/Ns55YUwj6s ty+l3imP6H+wbOEpMe6yfXap7tVyrOaCH2qpPRwe9ts2E+kaZoxT8LvWFVQBOnRs J6giIy12p8Zlrs9ObY7sjYpTjVwZxZIIK08eOhNLzsZYrmol8W+b9zB/j2vWtcTU dvuz2LZj+g46YSU1PKjzRz752HfaTbDFSal5MbXeZV+eJqAW/t820FACg4IEfTky FUcNpwMMbIcwbK7oQvr17rqxmmZ1l0FPTA4KVYQaPGrgMIx/mt/imYA6aJXuhkIa 5f2QKsrtCq3fVrzahnGF0UsdA+M6gMfWrYmuWNTcX3cLcMBw/PxT0K1cxo2dAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUzjyQoVdKaLb2ZT1fHGXmLW4b+l0wHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC8zMTMwMzMyZTMx MzEzODJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzMzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmd23DANBgkqhkiG9w0BAQsFAAOCAQEAAtDtw8E5xdofuKXa9G1r ms6IM1sapmtIXye0wrvX8SCrU7EjmvQIn2rpxvo0b1vq7rLy+AnfnWu9HY+49Fmq efdm9GQaJI6Q9SJ3ZJg0ru/JL3jP8jqjf8qIZ79PWe3t/adt9AjFbpDIdrKUaeYi ni3ngXOaGYjaDYqrK9lB3iiuT1GUYUxpS8ycjkTHsM7TfWM1rBxfSj0V6PzWuAJW A+FapK4ehItEyCCRPTauLtV9W041X8Trkrif3hXJ1H9HkYZa8eeP0K0Xgc3jg4DW hgLvuHGLZFNz/RbIUI6apB86Fyp2kVxav4ZKGP1rHjl4Ktr4SQKul4V8UtAd58eM eg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:08:21 2026 by rpki-client