This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3235322e302f32322d3234203d3e20313338393638.roa File: 3130332e3131382e3235322e302f32322d3234203d3e20313338393638.roa (raw, json) Hash identifier: PRZEDbFEjCNdLrEjOLkGocxXHuSeAmCRNVQYLsNBeGo= Subject key identifier: C8:AA:E2:40:DA:94:A1:02:BE:E8:C1:9B:5A:ED:1C:8C:25:CD:1D:92 Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 4250C030474A19C67CB8F38F7E4FFD0E22C50598 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3235322e302f32322d3234203d3e20313338393638.roa Signing time: Tue 20 Jan 2026 02:09:37 +0000 ROA not before: Tue 20 Jan 2026 02:04:37 +0000 ROA not after: Tue 19 Jan 2027 02:09:37 +0000 asID: 138968 IP address blocks: 103.118.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:50:c0:30:47:4a:19:c6:7c:b8:f3:8f:7e:4f:fd:0e:22:c5:05:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: Jan 20 02:04:37 2026 GMT Not After : Jan 19 02:09:37 2027 GMT Subject: CN=C8AAE240DA94A102BEE8C19B5AED1C8C25CD1D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:a0:1f:6c:40:dc:04:54:7d:78:81:ab:3f: ff:48:a0:af:87:c6:bc:d6:09:83:a7:83:24:e8:71: 8b:5c:4b:01:01:8e:c1:c5:71:65:1b:d6:30:0e:0f: a6:fb:57:8d:b3:75:52:6f:44:4f:09:01:52:03:f9: c1:3c:d1:7e:eb:95:4b:b9:72:aa:8d:27:40:c8:64: 77:b3:9b:41:2d:55:4b:cf:2b:6a:b8:9f:1e:5f:9d: e9:db:5c:92:1f:bc:7b:f5:d2:84:04:95:16:1e:1e: bf:c2:85:f8:52:a7:54:3a:c0:92:5e:b6:96:f3:8c: 54:d6:74:08:c0:10:c9:96:d6:0c:e4:4c:06:c8:70: 8e:de:e8:c0:41:28:09:02:64:64:54:c9:70:30:ab: 8d:66:44:1a:ae:6f:e3:cc:b8:ec:01:16:89:3a:9e: 31:a8:34:c7:a3:49:21:37:a8:e3:3e:7f:6c:fc:e6: ce:f6:c2:9f:c6:2f:a0:d6:a1:3d:7c:dd:ca:8c:14: 63:74:07:1c:49:3e:03:f0:d3:09:8b:f1:cc:4f:bd: 2a:1a:a8:7a:cc:da:91:db:a6:36:0f:93:82:52:d0: 70:3c:6d:4e:37:1f:9a:cd:15:65:32:6d:99:ad:46: 93:05:a8:0e:cb:7c:31:3b:14:aa:d0:ca:8e:94:0c: fe:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:E2:40:DA:94:A1:02:BE:E8:C1:9B:5A:ED:1C:8C:25:CD:1D:92 X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3235322e302f32322d3234203d3e20313338393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.252.0/22 Signature Algorithm: sha256WithRSAEncryption b2:df:e1:6f:0c:8c:04:a6:40:66:a1:69:9f:4e:78:22:5c:17: 34:f8:6c:b4:ce:5d:05:3d:5f:2f:53:f7:18:b2:fa:f8:15:68: ed:ed:9a:6b:d7:34:d0:a7:a1:25:09:c2:97:ee:cd:04:68:8a: 4b:79:87:41:af:53:53:6c:19:fe:46:72:d1:7c:6f:b8:82:0b: 5c:81:76:0f:93:f1:af:f5:22:62:8b:d3:65:c5:d7:ca:f7:e8: b5:21:4a:28:90:b6:2b:b3:f2:4b:52:f0:ea:c4:21:47:55:c2: cd:17:bc:a9:2b:f9:6c:fe:3d:9f:eb:f1:8b:b5:91:74:e4:63: c8:a4:64:e3:ad:60:c3:9f:23:08:84:b7:87:41:ca:5f:d7:20: 37:17:88:2a:b3:64:7f:91:d1:b1:67:22:a3:7d:fd:53:9f:c5: 4b:24:8a:0f:71:8e:fc:4b:0a:84:10:60:22:b5:a2:34:49:17: e3:e0:1e:31:d4:5d:6b:d3:17:f1:ff:a3:25:65:08:83:45:86: 92:fe:f3:1c:44:71:83:91:d5:57:3c:78:ee:7f:f5:c1:b1:a5: 18:2a:ce:1c:49:89:0a:6b:15:d4:ce:0a:d5:d6:bc:dd:a4:ab: e7:61:ca:89:bf:af:82:02:04:c5:f8:75:d1:06:3c:36:fb:88: 81:f5:21:d0 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUQlDAMEdKGcZ8uPOPfk/9DiLFBZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzdaFw0yNzAxMTkwMjA5MzdaMDMxMTAvBgNV BAMTKEM4QUFFMjQwREE5NEExMDJCRUU4QzE5QjVBRUQxQzhDMjVDRDFEOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUOaAfbEDcBFR9eIGrP/9IoK+H xrzWCYOngyTocYtcSwEBjsHFcWUb1jAOD6b7V42zdVJvRE8JAVID+cE80X7rlUu5 cqqNJ0DIZHezm0EtVUvPK2q4nx5fnenbXJIfvHv10oQElRYeHr/ChfhSp1Q6wJJe tpbzjFTWdAjAEMmW1gzkTAbIcI7e6MBBKAkCZGRUyXAwq41mRBqub+PMuOwBFok6 njGoNMejSSE3qOM+f2z85s72wp/GL6DWoT183cqMFGN0BxxJPgPw0wmL8cxPvSoa qHrM2pHbpjYPk4JS0HA8bU43H5rNFWUybZmtRpMFqA7LfDE7FKrQyo6UDP67AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUyKriQNqUoQK+6MGbWu0cjCXNHZIwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1NjgyLzAvMzEzMDMzMmUz MTMxMzgyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzODM5MzYz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmd2/DANBgkqhkiG9w0BAQsFAAOCAQEAst/hbwyMBKZAZqFp n054IlwXNPhstM5dBT1fL1P3GLL6+BVo7e2aa9c00KehJQnCl+7NBGiKS3mHQa9T U2wZ/kZy0XxvuIILXIF2D5Pxr/UiYovTZcXXyvfotSFKKJC2K7PyS1Lw6sQhR1XC zRe8qSv5bP49n+vxi7WRdORjyKRk461gw58jCIS3h0HKX9cgNxeIKrNkf5HRsWci o339U5/FSySKD3GO/EsKhBBgIrWiNEkX4+AeMdRda9MX8f+jJWUIg0WGkv7zHERx g5HVVzx47n/1wbGlGCrOHEmJCmsV1M4K1da83aSr52HKib+vggIExfh10QY8NvuI gfUh0A== -----END CERTIFICATE-----Generated at Tue Jan 20 09:10:14 2026 by rpki-client