This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3231382e3234342e302e302f31392d3234203d3e203137393639.roa File: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (raw, json) Hash identifier: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk= Subject key identifier: 8D:A2:E4:D2:09:9A:5C:B7:E2:EE:CB:4E:F4:FE:B6:20:A1:90:66:BF Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 29DBFFDB33B40548AECDF690A7B929E19D5B3E1A Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3231382e3234342e302e302f31392d3234203d3e203137393639.roa Signing time: Tue 20 Jan 2026 02:26:11 +0000 ROA not before: Tue 20 Jan 2026 02:21:11 +0000 ROA not after: Tue 19 Jan 2027 02:26:11 +0000 asID: 17969 IP address blocks: 218.244.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:db:ff:db:33:b4:05:48:ae:cd:f6:90:a7:b9:29:e1:9d:5b:3e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Jan 20 02:21:11 2026 GMT Not After : Jan 19 02:26:11 2027 GMT Subject: CN=8DA2E4D2099A5CB7E2EECB4EF4FEB620A19066BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:42:b0:2c:1f:67:81:8f:a7:07:17:5d:32:89: ac:5b:e0:63:bd:ea:1d:04:8a:89:c2:31:de:c7:2c: 29:a5:66:f3:0f:a4:d7:02:38:9a:57:8c:1d:12:5d: 02:d6:fe:0a:93:10:90:25:dc:36:b7:52:a4:c0:a2: b8:7d:86:73:50:b0:9d:26:9c:94:19:9c:dd:1c:36: d1:f2:9d:59:cb:29:be:d0:66:15:0f:8f:02:ae:1a: ef:7a:3d:dc:aa:d2:f0:a1:21:78:56:5b:95:76:b1: 5d:0e:0a:b2:ff:b1:d6:73:18:be:a3:9d:e3:fd:d4: 97:30:33:bc:d8:84:66:d9:47:ca:ea:74:e4:e6:7b: 21:cf:ce:ab:26:9a:80:97:10:85:18:8c:4a:f2:d4: 1e:98:12:35:7e:61:37:4b:6d:5d:de:03:ba:c0:59: dc:bd:90:4f:2b:0d:cf:74:08:fe:65:c5:15:d3:09: 01:d1:9c:b1:44:96:01:0c:e4:10:1e:5c:f0:79:86: ac:f3:30:6b:11:28:5c:34:49:5f:f4:b0:e9:d0:6b: 4f:58:bc:5a:75:08:5c:8f:7d:ba:a6:1a:ae:0a:09: 7e:81:ee:13:76:fb:88:20:21:d1:14:b5:73:16:a4: 3e:a0:ba:af:0c:84:77:d6:a1:c2:6f:8f:0f:be:d1: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A2:E4:D2:09:9A:5C:B7:E2:EE:CB:4E:F4:FE:B6:20:A1:90:66:BF X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3231382e3234342e302e302f31392d3234203d3e203137393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.244.0.0/19 Signature Algorithm: sha256WithRSAEncryption ce:d3:66:43:16:56:1c:63:5c:63:11:85:d0:9d:88:45:11:12: 2f:0f:aa:47:88:74:27:37:8f:74:04:b2:cc:23:fb:10:d4:8e: 5d:0f:1e:5b:8d:8d:a1:bb:27:58:bb:32:82:76:d6:e5:d3:3d: 52:9d:a9:fa:cd:e5:e7:07:27:49:ff:f2:b9:ff:db:8c:d0:ed: a2:08:81:a7:a4:6c:9b:05:ec:1c:14:28:1f:dd:52:9b:7b:0d: 23:5a:f8:8d:fe:37:bf:21:79:33:fd:5d:b5:6b:5a:58:1c:ac: 87:bb:69:3f:19:37:7b:9e:d3:4f:09:a6:3f:33:f1:eb:c2:65: af:48:86:51:60:44:f4:cc:59:dc:17:23:d2:63:f5:b0:2e:96: af:96:b3:6e:1a:63:2a:17:85:ca:ca:3c:fd:f8:3a:2a:f7:34: cf:f1:dc:bd:2e:c0:20:36:45:ef:cc:83:f1:44:e1:1d:7d:45: 22:c5:b7:78:27:0e:1d:dc:38:94:2a:26:0a:d7:36:ad:7c:bf: 98:c9:8b:02:fb:0f:bc:16:ce:56:28:b1:43:73:29:8a:5c:1c: 00:6b:67:ab:c9:b8:59:f6:dd:c8:7a:28:97:e5:89:3b:b0:be: 75:ce:28:b2:2d:50:4b:58:5f:67:97:71:a3:33:34:54:e0:0d: e6:a6:28:89 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKdv/2zO0BUiuzfaQp7kp4Z1bPhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjAxMjAwMjIxMTFaFw0yNzAxMTkwMjI2MTFaMDMxMTAvBgNV BAMTKDhEQTJFNEQyMDk5QTVDQjdFMkVFQ0I0RUY0RkVCNjIwQTE5MDY2QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQrAsH2eBj6cHF10yiaxb4GO9 6h0EionCMd7HLCmlZvMPpNcCOJpXjB0SXQLW/gqTEJAl3Da3UqTAorh9hnNQsJ0m nJQZnN0cNtHynVnLKb7QZhUPjwKuGu96Pdyq0vChIXhWW5V2sV0OCrL/sdZzGL6j neP91JcwM7zYhGbZR8rqdOTmeyHPzqsmmoCXEIUYjEry1B6YEjV+YTdLbV3eA7rA Wdy9kE8rDc90CP5lxRXTCQHRnLFElgEM5BAeXPB5hqzzMGsRKFw0SV/0sOnQa09Y vFp1CFyPfbqmGq4KCX6B7hN2+4ggIdEUtXMWpD6guq8MhHfWocJvjw++0avRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUjaLk0gmaXLfi7stO9P62IKGQZr8wHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODc4NDAzLzAvMzIzMTM4MmUzMjM0 MzQyZTMwMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzNzM5MzYzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdr0ADANBgkqhkiG9w0BAQsFAAOCAQEAztNmQxZWHGNcYxGF0J2IRRESLw+q R4h0JzePdASyzCP7ENSOXQ8eW42NobsnWLsygnbW5dM9Up2p+s3l5wcnSf/yuf/b jNDtogiBp6RsmwXsHBQoH91Sm3sNI1r4jf43vyF5M/1dtWtaWBysh7tpPxk3e57T TwmmPzPx68Jlr0iGUWBE9MxZ3Bcj0mP1sC6Wr5azbhpjKheFyso8/fg6Kvc0z/Hc vS7AIDZF78yD8UThHX1FIsW3eCcOHdw4lComCtc2rXy/mMmLAvsPvBbOViixQ3Mp ilwcAGtnq8m4WfbdyHool+WJO7C+dc4osi1QS1hfZ5dxozM0VOAN5qYoiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:00 2026 by rpki-client