This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e31322e302f32322d3234203d3e203535393333.roa File: 3130332e3131392e31322e302f32322d3234203d3e203535393333.roa (raw, json) Hash identifier: AzwRP9RW5ve7WTgfLJwjcZnTlrb+O5j4/aksw8NxQeQ= Subject key identifier: BF:B3:AC:DE:57:AE:E4:58:19:96:4E:1A:1B:48:11:C9:20:62:89:CC Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 22A12D961F868A3683162F30615728EEE076B7A4 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e31322e302f32322d3234203d3e203535393333.roa Signing time: Tue 20 Jan 2026 02:09:39 +0000 ROA not before: Tue 20 Jan 2026 02:04:39 +0000 ROA not after: Tue 19 Jan 2027 02:09:39 +0000 asID: 55933 IP address blocks: 103.119.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a1:2d:96:1f:86:8a:36:83:16:2f:30:61:57:28:ee:e0:76:b7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: Jan 20 02:04:39 2026 GMT Not After : Jan 19 02:09:39 2027 GMT Subject: CN=BFB3ACDE57AEE45819964E1A1B4811C9206289CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:65:29:bc:62:a3:67:56:0b:64:96:9c:25: fb:3e:fd:3b:02:31:d7:53:2a:50:12:38:37:31:b1: e8:f5:21:b8:69:4f:41:d9:96:32:cf:2f:43:45:2b: f8:b0:20:b9:5d:d8:a7:ec:0c:48:7f:1c:27:41:7b: 5a:a2:b0:61:d0:26:a9:87:c8:67:f5:98:74:b5:92: 93:71:46:81:ba:70:a0:c6:0f:9e:fe:8e:1b:35:0a: 1d:29:94:b2:bf:a7:4a:a2:d9:58:eb:36:30:d1:52: 95:82:0d:42:ba:dd:c6:1f:d8:61:b8:d4:bf:cb:4a: 71:d0:d5:49:d7:de:b0:6b:02:82:8d:d3:0d:56:b9: 1f:94:1d:7c:5d:22:6e:e4:44:31:26:45:bb:f7:35: 8e:c2:5c:24:1b:bb:22:38:73:b5:82:51:e2:76:75: 74:2a:0d:47:b4:69:39:da:12:b9:19:30:5d:d5:2e: 71:04:f1:36:c3:30:59:6e:13:fe:1d:53:95:16:4f: 8e:e3:38:e0:fc:a2:71:7f:3f:65:1d:0c:8d:99:86: 5e:1f:dc:69:6a:48:38:87:58:15:db:86:3f:0f:6c: e0:44:3b:d6:2b:31:82:7d:fe:72:c3:46:5c:e8:4d: a0:75:38:b3:0c:c6:c9:bb:ad:a0:45:62:30:d7:bc: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B3:AC:DE:57:AE:E4:58:19:96:4E:1A:1B:48:11:C9:20:62:89:CC X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e31322e302f32322d3234203d3e203535393333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.12.0/22 Signature Algorithm: sha256WithRSAEncryption 23:1c:ce:49:cc:cc:21:c3:e6:33:d2:dc:06:94:42:38:90:90: 17:9f:b1:5a:5f:4b:2b:d9:e9:08:e2:09:1e:13:ce:28:d0:0d: d2:5f:30:e0:79:1b:82:ed:5b:33:77:07:ab:c0:fa:03:b8:75: 4d:6c:b5:0d:ba:3e:db:df:4c:28:2c:b9:64:f6:f6:50:69:a9: d5:23:42:e0:e0:0e:8c:f5:0a:22:42:f2:a4:ed:d3:6d:98:0f: 42:ce:57:20:94:1d:5e:a6:6c:9b:12:77:84:1d:e0:38:25:b0: 95:68:50:81:73:d8:7d:b3:cd:93:f7:33:8f:62:e2:e1:84:24: 0a:3f:af:bd:2e:1f:e4:a0:f3:3f:c7:13:88:bd:15:42:61:74: 17:5c:1f:88:79:94:71:36:aa:07:1c:12:71:95:5a:59:c2:70: 7b:ef:95:90:bf:4c:fe:46:75:8d:3c:e6:06:59:55:81:7c:09: 3c:37:80:91:36:e7:81:9f:d7:2b:2f:1b:6d:a3:4a:8f:f7:4f: 95:23:f0:3c:cf:7a:3b:d3:52:c3:87:7a:3d:20:3f:a6:70:5d: 57:55:44:b8:88:e2:44:fe:53:80:cf:9b:e4:bd:0d:84:f2:3c: 18:4f:db:81:56:68:eb:aa:e7:45:0d:3a:e7:12:55:66:de:ea: 32:b6:57:6d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUIqEtlh+GijaDFi8wYVco7uB2t6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzlaFw0yNzAxMTkwMjA5MzlaMDMxMTAvBgNV BAMTKEJGQjNBQ0RFNTdBRUU0NTgxOTk2NEUxQTFCNDgxMUM5MjA2Mjg5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CmUpvGKjZ1YLZJacJfs+/TsC MddTKlASODcxsej1IbhpT0HZljLPL0NFK/iwILld2KfsDEh/HCdBe1qisGHQJqmH yGf1mHS1kpNxRoG6cKDGD57+jhs1Ch0plLK/p0qi2VjrNjDRUpWCDUK63cYf2GG4 1L/LSnHQ1UnX3rBrAoKN0w1WuR+UHXxdIm7kRDEmRbv3NY7CXCQbuyI4c7WCUeJ2 dXQqDUe0aTnaErkZMF3VLnEE8TbDMFluE/4dU5UWT47jOOD8onF/P2UdDI2Zhl4f 3GlqSDiHWBXbhj8PbOBEO9YrMYJ9/nLDRlzoTaB1OLMMxsm7raBFYjDXvEUDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUv7Os3leu5FgZlk4aG0gRySBiicwwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODYxNTY4Mi8wLzMxMzAzMzJlMzEz MTM5MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzMzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmd3DDANBgkqhkiG9w0BAQsFAAOCAQEAIxzOSczMIcPmM9LcBpRCOJCQ F5+xWl9LK9npCOIJHhPOKNAN0l8w4Hkbgu1bM3cHq8D6A7h1TWy1Dbo+299MKCy5 ZPb2UGmp1SNC4OAOjPUKIkLypO3TbZgPQs5XIJQdXqZsmxJ3hB3gOCWwlWhQgXPY fbPNk/czj2Li4YQkCj+vvS4f5KDzP8cTiL0VQmF0F1wfiHmUcTaqBxwScZVaWcJw e++VkL9M/kZ1jTzmBllVgXwJPDeAkTbngZ/XKy8bbaNKj/dPlSPwPM96O9NSw4d6 PSA/pnBdV1VEuIjiRP5TgM+b5L0NhPI8GE/bgVZo66rnRQ065xJVZt7qMrZXbQ== -----END CERTIFICATE-----Generated at Tue Jan 20 09:08:22 2026 by rpki-client