This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131372e3132362e302e302f31362d3234203d3e20313436383338.roa File: 3131372e3132362e302e302f31362d3234203d3e20313436383338.roa (raw, json) Hash identifier: +vvC1z0V92XWeGMVse8+ob/P/5JPwMwyokL+OWhWz8I= Subject key identifier: 44:DA:73:2B:E4:E3:01:35:5C:D2:B5:FE:BA:BB:BC:5A:8E:9D:EA:A2 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 61DD55863ACBC02832889DFB4286C07A63D40233 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131372e3132362e302e302f31362d3234203d3e20313436383338.roa Signing time: Tue 20 Jan 2026 02:27:24 +0000 ROA not before: Tue 20 Jan 2026 02:22:24 +0000 ROA not after: Tue 19 Jan 2027 02:27:24 +0000 asID: 146838 IP address blocks: 117.126.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:dd:55:86:3a:cb:c0:28:32:88:9d:fb:42:86:c0:7a:63:d4:02:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:24 2026 GMT Not After : Jan 19 02:27:24 2027 GMT Subject: CN=44DA732BE4E301355CD2B5FEBABBBC5A8E9DEAA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:b3:0c:59:d8:49:1d:d9:48:84:b7:e5:42: 94:3c:54:c3:33:33:8a:1c:ec:b5:d8:d0:bb:93:98: 92:44:11:ed:44:df:ba:f3:66:6a:b6:dd:11:ae:d2: df:ce:de:8e:33:ec:d6:55:32:ee:7b:d2:1e:d8:9e: fa:ad:84:e0:65:d0:d8:0a:18:9b:99:59:cd:47:a2: 47:c2:75:0a:a4:a4:5d:3f:09:5a:a4:b4:69:7e:93: c0:42:ec:64:a9:db:05:f6:96:4f:49:bb:90:2f:51: 1f:69:76:01:9f:ac:d6:15:34:2e:8d:b4:2e:58:95: 34:32:71:35:24:5a:2b:f7:de:27:ff:9b:7e:9c:e0: f5:37:e7:90:d3:0b:a0:2f:6b:c2:af:18:39:15:8d: a6:45:69:65:79:60:6a:0a:aa:56:64:38:60:54:ce: e9:19:11:12:c1:5c:0e:be:f4:5b:f7:7a:7c:13:4b: 59:cd:f3:d8:04:19:ba:1c:2e:7d:bc:61:ba:ad:51: d1:9e:58:81:ca:49:4d:90:6e:42:21:8e:74:be:e5: d1:36:d5:44:90:c7:a7:61:95:6d:6e:5f:e3:0b:e2: 72:b8:49:96:74:10:41:d3:25:c1:fa:90:5e:99:69: c9:26:c3:a4:83:e6:19:08:88:86:39:c1:07:a4:dd: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DA:73:2B:E4:E3:01:35:5C:D2:B5:FE:BA:BB:BC:5A:8E:9D:EA:A2 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131372e3132362e302e302f31362d3234203d3e20313436383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption 52:e1:fd:99:0f:ae:6a:37:8e:65:3e:dc:c5:75:4b:58:21:5d: d2:6b:b7:2a:83:01:ce:7f:92:5d:db:da:5c:f5:ab:ea:04:16: 91:f5:ff:e6:f8:d4:e8:e9:e1:15:ee:15:b3:5b:1c:8b:e0:95: 5e:0a:a8:3d:b4:93:f4:ba:f5:22:ba:dc:e9:fd:36:13:41:52: 39:ad:9a:fd:ea:49:1d:17:bf:75:a1:35:11:98:60:9e:b8:5d: 3f:3d:22:42:90:40:83:9e:53:3c:c4:2b:32:8e:67:fe:e3:82: bb:86:0a:67:ca:65:4a:4e:eb:d3:4b:a4:ad:ad:26:34:87:cf: 7b:08:d1:45:57:ae:9b:0c:38:74:69:85:71:bf:96:2e:96:ca: 33:4e:71:56:9c:24:dc:aa:2d:c3:b9:bd:aa:0e:bc:b9:3b:40: bf:00:4b:53:00:5d:0c:3b:bb:05:43:4e:c4:2a:a4:b0:2b:b4: 5e:94:7b:0b:7a:e0:90:07:db:5d:3a:6d:d2:c1:57:80:61:d2: ba:63:7f:0f:50:77:9f:16:00:ec:66:29:69:b7:ce:55:aa:07: 2a:ab:ef:7b:70:e0:37:06:1e:65:37:90:4a:a1:f0:5b:5b:c2: 49:39:47:c6:ae:3f:6d:7d:98:ff:3d:48:9b:ca:79:71:c3:40: 29:27:06:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUYd1VhjrLwCgyiJ37QobAemPUAjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjRaFw0yNzAxMTkwMjI3MjRaMDMxMTAvBgNV BAMTKDQ0REE3MzJCRTRFMzAxMzU1Q0QyQjVGRUJBQkJCQzVBOEU5REVBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZLMMWdhJHdlIhLflQpQ8VMMz M4oc7LXY0LuTmJJEEe1E37rzZmq23RGu0t/O3o4z7NZVMu570h7YnvqthOBl0NgK GJuZWc1HokfCdQqkpF0/CVqktGl+k8BC7GSp2wX2lk9Ju5AvUR9pdgGfrNYVNC6N tC5YlTQycTUkWiv33if/m36c4PU355DTC6Ava8KvGDkVjaZFaWV5YGoKqlZkOGBU zukZERLBXA6+9Fv3enwTS1nN89gEGbocLn28YbqtUdGeWIHKSU2QbkIhjnS+5dE2 1USQx6dhlW1uX+ML4nK4SZZ0EEHTJcH6kF6Zackmw6SD5hkIiIY5wQek3TZtAgMB AAGjggITMIICDzAdBgNVHQ4EFgQURNpzK+TjATVc0rX+uru8Wo6d6qIwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMxMzEzNzJlMzEz MjM2MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzMzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQC AAEwBQMDAHV+MA0GCSqGSIb3DQEBCwUAA4IBAQBS4f2ZD65qN45lPtzFdUtYIV3S a7cqgwHOf5Jd29pc9avqBBaR9f/m+NTo6eEV7hWzWxyL4JVeCqg9tJP0uvUiutzp /TYTQVI5rZr96kkdF791oTURmGCeuF0/PSJCkECDnlM8xCsyjmf+44K7hgpnymVK TuvTS6StrSY0h897CNFFV66bDDh0aYVxv5YulsozTnFWnCTcqi3Dub2qDry5O0C/ AEtTAF0MO7sFQ07EKqSwK7RelHsLeuCQB9tdOm3SwVeAYdK6Y38PUHefFgDsZilp t85Vqgcqq+97cOA3Bh5lN5BKofBbW8JJOUfGrj9tfZj/PUibynlxw0ApJwab -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:54 2026 by rpki-client