This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3132352e36322e302e302f31382d3234203d3e203137393639.roa File: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (raw, json) Hash identifier: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc= Subject key identifier: 2C:8A:AC:F1:81:E5:D4:8D:36:7D:C8:39:FC:AB:38:FE:30:38:43:B4 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 21B9535D4B508F7ACDEFD4C9813285C4646F9E20 Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3132352e36322e302e302f31382d3234203d3e203137393639.roa Signing time: Tue 20 Jan 2026 02:26:11 +0000 ROA not before: Tue 20 Jan 2026 02:21:11 +0000 ROA not after: Tue 19 Jan 2027 02:26:11 +0000 asID: 17969 IP address blocks: 125.62.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b9:53:5d:4b:50:8f:7a:cd:ef:d4:c9:81:32:85:c4:64:6f:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Jan 20 02:21:11 2026 GMT Not After : Jan 19 02:26:11 2027 GMT Subject: CN=2C8AACF181E5D48D367DC839FCAB38FE303843B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:02:43:29:3d:be:6a:d3:8d:d3:9d:a6:f1: e1:fb:f6:97:a9:6a:53:66:e6:71:bc:7d:28:d5:97: 02:4a:e3:d0:cb:c9:45:a7:17:11:ce:76:73:35:2b: e1:f1:41:47:e6:60:72:a6:f7:fc:02:5e:16:9b:83: 20:c2:7e:22:a0:69:85:6d:c4:70:68:14:fc:a7:72: bb:ea:58:84:0e:80:bb:6a:e4:c5:0a:fd:c8:c8:d2: f7:c4:22:a6:7e:25:6b:1e:2c:c4:51:2f:1b:90:0d: 33:aa:73:91:c3:2b:85:5b:7c:e4:d6:e5:7c:7b:aa: 45:54:b5:32:2e:01:6b:67:bc:c0:b7:91:b7:68:01: e4:2a:37:05:cf:35:8f:8d:45:0b:d1:17:5c:21:a8: 49:7e:84:fa:6b:e2:4b:41:8b:00:33:a8:5c:f7:36: 5f:21:01:a8:fb:b9:d7:de:a8:56:15:42:02:35:c9: fd:d3:cf:b8:bb:a3:0e:cf:38:d4:3e:2c:3c:ae:29: ad:50:6d:2d:98:0b:90:7a:cc:4d:07:55:ca:1b:8e: c2:8f:89:58:93:9a:3d:52:56:2b:87:a9:c3:68:bc: 12:30:0f:91:c1:62:28:1e:00:95:f3:bb:28:4f:79: fd:7b:ed:17:d7:84:00:b4:1a:e2:3a:7c:ce:80:46: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8A:AC:F1:81:E5:D4:8D:36:7D:C8:39:FC:AB:38:FE:30:38:43:B4 X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3132352e36322e302e302f31382d3234203d3e203137393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.62.0.0/18 Signature Algorithm: sha256WithRSAEncryption b2:5c:87:cd:3a:23:fe:07:d9:f8:bf:7d:de:a8:23:d2:32:45: 68:43:9a:15:c7:95:a0:49:1d:ca:65:e0:7b:6f:c8:ce:0c:03: 06:04:82:19:f5:c3:b8:0e:96:d3:03:4c:32:a9:63:db:9b:0d: 06:13:5e:af:dc:ef:e6:29:22:62:b5:e3:fd:5f:9f:e0:f1:ef: 5d:2e:6f:66:a7:e2:e0:92:e5:9a:2b:b1:ae:22:5a:ee:fe:55: 27:db:d9:6d:d0:90:70:3f:35:c3:ea:7a:53:94:01:72:0a:c5: 50:50:d6:70:17:a7:7b:fe:33:ea:70:f1:c4:36:54:a3:8f:1e: 50:bb:c4:31:07:64:13:2f:76:66:7f:c0:f2:a8:1c:b9:94:56: 3c:93:d6:03:6d:82:96:1c:74:9c:cc:d8:ba:2d:29:e4:17:24: 6a:43:e6:26:33:37:ba:78:a0:23:bd:ed:a7:19:85:85:91:94: d3:3b:0e:e4:9b:b9:0e:36:cd:45:08:24:c3:d1:ed:d7:03:f6: 45:b8:68:7e:a0:52:71:26:af:1b:2b:b0:11:e2:b4:4f:84:7a: d2:2d:25:73:62:5f:8f:8e:d5:43:0b:c6:ef:13:a8:cb:95:20: 95:7b:8b:7f:bd:23:04:d4:6d:6c:bc:5d:7d:78:fe:9d:70:3d: dd:64:fd:47 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUIblTXUtQj3rN79TJgTKFxGRvniAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjAxMjAwMjIxMTFaFw0yNzAxMTkwMjI2MTFaMDMxMTAvBgNV BAMTKDJDOEFBQ0YxODFFNUQ0OEQzNjdEQzgzOUZDQUIzOEZFMzAzODQzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pwJDKT2+atON052m8eH79pep alNm5nG8fSjVlwJK49DLyUWnFxHOdnM1K+HxQUfmYHKm9/wCXhabgyDCfiKgaYVt xHBoFPyncrvqWIQOgLtq5MUK/cjI0vfEIqZ+JWseLMRRLxuQDTOqc5HDK4VbfOTW 5Xx7qkVUtTIuAWtnvMC3kbdoAeQqNwXPNY+NRQvRF1whqEl+hPpr4ktBiwAzqFz3 Nl8hAaj7udfeqFYVQgI1yf3Tz7i7ow7PONQ+LDyuKa1QbS2YC5B6zE0HVcobjsKP iViTmj1SViuHqcNovBIwD5HBYigeAJXzuyhPef177RfXhAC0GuI6fM6ARuJjAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQULIqs8YHl1I02fcg5/Ks4/jA4Q7QwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODc4NDAzLzAvMzEzMjM1MmUzNjMy MmUzMDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzczOTM2Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAZ9PgAwDQYJKoZIhvcNAQELBQADggEBALJch806I/4H2fi/fd6oI9IyRWhDmhXH laBJHcpl4HtvyM4MAwYEghn1w7gOltMDTDKpY9ubDQYTXq/c7+YpImK14/1fn+Dx 710ub2an4uCS5Zorsa4iWu7+VSfb2W3QkHA/NcPqelOUAXIKxVBQ1nAXp3v+M+pw 8cQ2VKOPHlC7xDEHZBMvdmZ/wPKoHLmUVjyT1gNtgpYcdJzM2LotKeQXJGpD5iYz N7p4oCO97acZhYWRlNM7DuSbuQ42zUUIJMPR7dcD9kW4aH6gUnEmrxsrsBHitE+E etItJXNiX4+O1UMLxu8TqMuVIJV7i3+9IwTUbWy8XX14/p1wPd1k/Uc= -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:21 2026 by rpki-client