This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3131372e35392e302e302f31362d3234203d3e203137393639.roa File: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (raw, json) Hash identifier: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk= Subject key identifier: 4B:A3:F0:24:E4:0C:48:D4:D9:07:43:F4:C0:E5:D9:47:93:42:68:77 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 262D6DC58A4D0863825CDE4B6AE1E1BF970C19E5 Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3131372e35392e302e302f31362d3234203d3e203137393639.roa Signing time: Tue 20 Jan 2026 02:26:11 +0000 ROA not before: Tue 20 Jan 2026 02:21:11 +0000 ROA not after: Tue 19 Jan 2027 02:26:11 +0000 asID: 17969 IP address blocks: 117.59.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2d:6d:c5:8a:4d:08:63:82:5c:de:4b:6a:e1:e1:bf:97:0c:19:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Jan 20 02:21:11 2026 GMT Not After : Jan 19 02:26:11 2027 GMT Subject: CN=4BA3F024E40C48D4D90743F4C0E5D94793426877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:df:f9:1d:a2:c3:cf:da:1f:38:1e:fb:eb: 15:9e:d8:c5:04:a5:0e:8c:aa:9a:81:8a:9a:35:a0: b3:71:eb:64:da:60:5e:d8:37:2b:94:5f:34:74:39: fc:22:43:5c:cf:2c:74:21:92:35:6a:b9:eb:42:85: 1d:04:b6:a6:07:bc:b1:ec:96:7d:42:f5:7e:b4:80: 57:9d:7d:46:d9:b9:cf:b2:33:17:c7:b7:42:4b:a6: af:52:4e:41:c8:e5:d6:75:79:ec:4f:e3:07:57:30: 1f:e5:21:3c:af:86:26:65:df:5d:25:82:e7:c0:94: 1e:d2:01:a8:65:56:14:01:8e:b5:93:7a:ee:f6:46: 53:91:ed:e8:76:dd:fc:a8:6b:99:22:e0:fd:e2:a2: ab:3a:ee:f9:39:13:d6:c5:5f:4e:02:b6:48:8d:c4: 53:f0:97:7d:2f:ae:d0:78:ed:bb:ef:1f:06:1d:fa: 86:16:a0:1e:cf:90:ed:da:58:b0:6a:a1:a2:f8:90: b6:6d:58:30:63:e7:4b:62:e6:2f:b5:8a:73:13:75: 9a:eb:2e:d5:08:31:10:aa:37:ea:82:5e:c9:bd:41: 3f:4f:9f:d6:da:91:16:98:86:10:d2:37:d4:15:9d: fb:7e:bc:5d:c1:db:ac:9b:ff:12:78:cf:30:fa:c3: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A3:F0:24:E4:0C:48:D4:D9:07:43:F4:C0:E5:D9:47:93:42:68:77 X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3131372e35392e302e302f31362d3234203d3e203137393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.59.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:6f:5a:df:22:a4:05:28:b4:21:9f:da:46:13:dc:4e:67:00: c4:9c:15:ef:4e:d4:49:f3:44:e6:c1:87:74:0c:ca:22:27:a7: 6e:86:61:49:e4:49:6a:8d:98:1c:7c:0d:cd:d6:2d:87:08:f9: eb:c9:26:88:3b:ad:07:fc:25:a5:eb:fb:96:93:3c:99:5b:05: 92:19:1e:f2:c6:70:e4:02:02:33:91:21:ce:bd:e9:28:18:14: ff:eb:e7:b1:06:63:75:eb:63:dd:ee:b7:fc:21:3c:d8:73:5a: 88:ad:aa:86:09:90:2b:b0:4f:98:2c:df:b6:5c:94:e8:14:34: 7c:db:4b:e5:d6:c2:d2:5b:ef:c1:cb:30:60:4a:bd:b0:d0:3e: 7f:45:c8:29:18:cb:23:d6:99:6b:ba:13:25:d2:d8:34:35:57: da:5d:8e:4a:7b:f8:7b:8d:26:1c:64:ce:41:81:c2:c5:77:e4: b3:90:f5:52:cf:a7:46:dc:64:3a:bd:5a:3d:2b:67:6c:84:77: 90:3f:04:f6:a6:bd:c2:43:73:62:db:e9:8f:48:b0:3a:ee:b5: 7d:8e:a9:3c:48:65:14:a5:1a:f2:d2:e1:a9:08:01:58:43:2b: 0d:6e:0c:77:56:2c:db:9d:46:ee:4a:da:8d:b0:46:e6:ea:66: 6d:3d:6e:1d -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUJi1txYpNCGOCXN5LauHhv5cMGeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjAxMjAwMjIxMTFaFw0yNzAxMTkwMjI2MTFaMDMxMTAvBgNV BAMTKDRCQTNGMDI0RTQwQzQ4RDREOTA3NDNGNEMwRTVEOTQ3OTM0MjY4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg89/5HaLDz9ofOB776xWe2MUE pQ6MqpqBipo1oLNx62TaYF7YNyuUXzR0OfwiQ1zPLHQhkjVquetChR0EtqYHvLHs ln1C9X60gFedfUbZuc+yMxfHt0JLpq9STkHI5dZ1eexP4wdXMB/lITyvhiZl310l gufAlB7SAahlVhQBjrWTeu72RlOR7eh23fyoa5ki4P3ioqs67vk5E9bFX04CtkiN xFPwl30vrtB47bvvHwYd+oYWoB7PkO3aWLBqoaL4kLZtWDBj50ti5i+1inMTdZrr LtUIMRCqN+qCXsm9QT9Pn9bakRaYhhDSN9QVnft+vF3B26yb/xJ4zzD6wz3rAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUS6PwJOQMSNTZB0P0wOXZR5NCaHcwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODc4NDAzLzAvMzEzMTM3MmUzNTM5 MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzczOTM2Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwB1OzANBgkqhkiG9w0BAQsFAAOCAQEAC29a3yKkBSi0IZ/aRhPcTmcAxJwV707U SfNE5sGHdAzKIienboZhSeRJao2YHHwNzdYthwj568kmiDutB/wlpev7lpM8mVsF khke8sZw5AICM5Ehzr3pKBgU/+vnsQZjdetj3e63/CE82HNaiK2qhgmQK7BPmCzf tlyU6BQ0fNtL5dbC0lvvwcswYEq9sNA+f0XIKRjLI9aZa7oTJdLYNDVX2l2OSnv4 e40mHGTOQYHCxXfks5D1Us+nRtxkOr1aPStnbIR3kD8E9qa9wkNzYtvpj0iwOu61 fY6pPEhlFKUa8tLhqQgBWEMrDW4Md1Ys251G7krajbBG5upmbT1uHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:06 2026 by rpki-client