This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3231362e3232382e302f32342d3234203d3e20323136303437.roa File: 3130332e3231362e3232382e302f32342d3234203d3e20323136303437.roa (raw, json) Hash identifier: VlCcau189tv9bpRatiHV62TRnWXqjmkrh2JltUcOB/s= Subject key identifier: 41:6F:44:94:69:DD:CA:D6:32:A8:EA:00:D2:EE:AE:E6:2A:0C:8F:F0 Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 0D0BB43C3402BBDCDB82BCBE6BC524A34EE60A51 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3231362e3232382e302f32342d3234203d3e20323136303437.roa Signing time: Tue 20 Jan 2026 02:09:34 +0000 ROA not before: Tue 20 Jan 2026 02:04:34 +0000 ROA not after: Tue 19 Jan 2027 02:09:34 +0000 asID: 216047 IP address blocks: 103.216.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0b:b4:3c:34:02:bb:dc:db:82:bc:be:6b:c5:24:a3:4e:e6:0a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: Jan 20 02:04:34 2026 GMT Not After : Jan 19 02:09:34 2027 GMT Subject: CN=416F449469DDCAD632A8EA00D2EEAEE62A0C8FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:cb:4d:69:ba:65:de:ad:82:59:e8:14:3c: f7:c9:a8:54:cc:ae:8f:60:97:65:db:7c:74:33:67: 65:27:72:6f:60:a5:93:30:62:eb:6a:b5:3a:24:16: da:b3:60:37:81:2a:bc:2f:17:e5:ac:91:2f:12:42: 76:bf:02:89:0b:f3:d5:97:49:83:c6:7a:fa:c7:6c: 7d:69:ad:32:aa:0a:0a:3d:6f:38:94:33:cf:a2:99: 9a:ea:75:73:55:0b:19:60:c2:21:2f:e8:66:d0:0a: 50:94:87:f0:a4:53:21:de:ec:82:6a:78:34:9e:27: 40:96:57:19:7a:75:06:5a:df:90:0c:2c:cb:5d:9a: 53:97:d9:91:7e:1a:03:d3:c9:e8:64:c1:2a:bb:17: 60:07:39:12:cf:01:9b:65:27:ee:10:b8:03:a8:02: 01:c3:b7:77:3a:13:40:e9:99:01:0e:6e:8b:24:72: 02:a9:2f:a7:e7:9b:4e:15:7d:38:68:bf:15:1b:9c: 8e:27:70:17:68:a5:e0:4e:e3:33:75:77:a2:94:b2: 1b:0a:4b:e4:fb:3b:24:e9:b0:70:a9:2c:fa:c4:a5: 31:ec:0c:d0:6e:0e:0e:28:a4:e6:63:7c:c6:de:ef: 7c:23:a2:17:66:60:83:36:5a:f0:84:75:6f:f9:c8: ef:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6F:44:94:69:DD:CA:D6:32:A8:EA:00:D2:EE:AE:E6:2A:0C:8F:F0 X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3231362e3232382e302f32342d3234203d3e20323136303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.228.0/24 Signature Algorithm: sha256WithRSAEncryption c2:4a:0b:3e:46:a0:cc:05:b6:71:e1:fc:7b:a0:1c:bd:e5:bd: 8e:32:bb:db:b8:15:f6:5b:2d:c4:d4:6f:0c:1e:05:f8:70:93: 09:3d:ce:51:9d:46:bd:a3:b8:f3:57:64:4f:48:9f:e4:44:f0: 6a:62:71:be:58:db:21:27:35:fc:0a:37:be:8c:09:bd:ce:a1: fd:47:4d:97:32:18:2e:e2:97:2c:2d:ed:fd:2f:d3:40:50:04: 34:5d:69:35:28:3a:2d:db:25:9f:ee:b4:7b:b9:26:3a:60:44: 87:ae:38:9e:7c:1e:05:f7:41:1a:ff:70:66:fc:00:88:cf:5a: 4e:82:67:ed:7f:b1:5e:fb:51:7b:b6:ed:c7:e7:a5:20:f7:f2: b7:84:38:97:f7:5b:01:06:3e:5a:c8:8a:b7:d0:a4:e6:24:7c: 3b:95:54:0d:b4:67:84:d4:0a:0f:e5:04:49:84:ba:69:c2:ea: 64:96:78:64:0e:76:9d:cf:d8:1d:66:36:64:01:60:fd:9c:99: fa:4f:37:5c:ea:e9:d0:b2:a0:ec:38:71:b1:5f:42:34:d6:9f: 07:cc:15:b1:0f:43:0d:56:7a:3b:e3:d7:ce:97:fa:93:aa:fa: ad:44:03:eb:c9:b7:91:5a:35:34:32:37:b4:2c:5b:5b:a5:1f: dd:e7:43:76 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUDQu0PDQCu9zbgry+a8Uko07mClEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzRaFw0yNzAxMTkwMjA5MzRaMDMxMTAvBgNV BAMTKDQxNkY0NDk0NjlERENBRDYzMkE4RUEwMEQyRUVBRUU2MkEwQzhGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYstNabpl3q2CWegUPPfJqFTM ro9gl2XbfHQzZ2Uncm9gpZMwYutqtTokFtqzYDeBKrwvF+WskS8SQna/AokL89WX SYPGevrHbH1prTKqCgo9bziUM8+imZrqdXNVCxlgwiEv6GbQClCUh/CkUyHe7IJq eDSeJ0CWVxl6dQZa35AMLMtdmlOX2ZF+GgPTyehkwSq7F2AHORLPAZtlJ+4QuAOo AgHDt3c6E0DpmQEOboskcgKpL6fnm04VfThovxUbnI4ncBdopeBO4zN1d6KUshsK S+T7OyTpsHCpLPrEpTHsDNBuDg4opOZjfMbe73wjohdmYIM2WvCEdW/5yO8PAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUQW9ElGndytYyqOoA0u6u5ioMj/AwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1NjgyLzAvMzEzMDMzMmUz MjMxMzYyZTMyMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNjMwMzQz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfY5DANBgkqhkiG9w0BAQsFAAOCAQEAwkoLPkagzAW2ceH8 e6AcveW9jjK727gV9lstxNRvDB4F+HCTCT3OUZ1GvaO481dkT0if5ETwamJxvljb ISc1/Ao3vowJvc6h/UdNlzIYLuKXLC3t/S/TQFAENF1pNSg6Ldsln+60e7kmOmBE h644nnweBfdBGv9wZvwAiM9aToJn7X+xXvtRe7btx+elIPfyt4Q4l/dbAQY+WsiK t9Ck5iR8O5VUDbRnhNQKD+UESYS6acLqZJZ4ZA52nc/YHWY2ZAFg/ZyZ+k83XOrp 0LKg7DhxsV9CNNafB8wVsQ9DDVZ6O+PXzpf6k6r6rUQD68m3kVo1NDI3tCxbW6Uf 3edDdg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:10:14 2026 by rpki-client