This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/32372e3134342e302e302f31362d3234203d3e203137393639.roa File: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (raw, json) Hash identifier: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc= Subject key identifier: 9A:A6:DE:F6:02:82:01:3A:AF:6E:CC:7E:8D:8A:96:7F:9A:BE:BD:18 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 6031CABD7EC6866919819F65562D3D51F891905B Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/32372e3134342e302e302f31362d3234203d3e203137393639.roa Signing time: Tue 20 Jan 2026 02:26:11 +0000 ROA not before: Tue 20 Jan 2026 02:21:11 +0000 ROA not after: Tue 19 Jan 2027 02:26:11 +0000 asID: 17969 IP address blocks: 27.144.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:31:ca:bd:7e:c6:86:69:19:81:9f:65:56:2d:3d:51:f8:91:90:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Jan 20 02:21:11 2026 GMT Not After : Jan 19 02:26:11 2027 GMT Subject: CN=9AA6DEF60282013AAF6ECC7E8D8A967F9ABEBD18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:b5:50:2b:d3:74:8d:d7:2c:01:eb:6e:e9: 1d:5b:9f:85:4c:45:d8:57:e7:70:36:3a:e8:57:ad: 32:a0:ae:c3:79:f1:80:c3:f2:76:9c:dc:ef:aa:85: ab:52:b3:48:a6:30:8a:a8:9a:e3:6d:c4:be:29:b4: d9:ca:3a:00:b7:36:b7:fe:20:47:dc:50:d6:3d:0d: 60:50:c3:fd:aa:fc:00:19:c7:00:5f:22:7c:0f:a9: 98:2f:14:0b:55:df:c6:64:39:f6:1d:dc:52:b3:89: 6a:8a:e9:c6:e0:12:08:c6:e8:98:29:91:27:70:d0: ac:cd:2b:f6:f9:a8:26:39:79:f0:a2:4b:dd:fa:d1: 41:6c:9a:54:8b:41:02:87:88:9d:f9:4d:c6:92:7c: 56:77:4c:5a:ce:28:23:f0:ac:09:1d:e5:33:ca:95: 63:fc:e5:4a:47:4e:00:48:5f:f1:b8:1c:64:da:66: 3c:4d:95:75:0d:13:8d:3c:c2:db:61:9e:42:53:84: a7:84:9a:6e:dc:49:3b:65:51:a7:a4:88:28:86:bc: 58:3d:a6:e1:ee:41:36:75:c0:3d:2d:3f:1a:1a:c0: 7b:10:91:c4:2e:0d:3f:3e:ed:b7:f7:e6:0a:8d:e3: 5b:98:75:91:93:ba:05:06:11:d2:5d:c4:dc:44:a6: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A6:DE:F6:02:82:01:3A:AF:6E:CC:7E:8D:8A:96:7F:9A:BE:BD:18 X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/32372e3134342e302e302f31362d3234203d3e203137393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.144.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:e2:d7:f0:99:ca:c1:80:c8:5a:fa:6b:07:5a:d8:49:dc:1a: 5c:12:27:9e:21:85:28:b5:00:ef:e6:0c:c2:84:8a:fe:9f:7f: a0:3b:30:d3:f6:fe:ff:7c:41:ad:fd:06:e2:6a:4d:e5:45:bb: e2:eb:5a:81:ce:77:c7:6e:37:0f:12:0b:04:c4:07:04:b5:82: ae:5f:9c:80:a3:4b:c5:ab:2e:01:56:c7:12:5a:ae:cb:29:7e: b3:14:3a:03:c3:85:ef:71:b3:8a:b1:85:dd:8c:cd:c7:c7:76: 62:45:ab:3a:63:44:a6:08:f5:a7:59:0f:cb:50:45:f1:57:39: 2a:60:54:b5:ed:d1:cf:a7:3e:4d:cf:bb:ed:2a:0b:6c:d1:e9: 72:94:bd:06:f6:b8:a1:d1:4e:66:74:07:15:9c:69:3c:2c:a5: 30:1e:ca:b7:e2:96:13:fe:4b:c4:45:01:41:47:6f:4f:bb:f2: 99:ac:4c:99:0b:e1:dc:be:14:6f:48:11:d2:7d:5b:4a:a0:5a: e7:ad:ab:23:59:b5:bd:1e:0e:f3:97:24:58:fb:a5:8b:a5:89: 60:32:ff:1e:9d:dc:3e:5a:d4:2c:10:42:28:e0:49:45:dd:30: 87:d6:00:12:11:ec:94:a5:86:9a:ab:a1:f1:ae:d0:64:62:bf: f4:4f:40:1c -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUYDHKvX7GhmkZgZ9lVi09UfiRkFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjAxMjAwMjIxMTFaFw0yNzAxMTkwMjI2MTFaMDMxMTAvBgNV BAMTKDlBQTZERUY2MDI4MjAxM0FBRjZFQ0M3RThEOEE5NjdGOUFCRUJEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpLVQK9N0jdcsAetu6R1bn4VM RdhX53A2OuhXrTKgrsN58YDD8nac3O+qhatSs0imMIqomuNtxL4ptNnKOgC3Nrf+ IEfcUNY9DWBQw/2q/AAZxwBfInwPqZgvFAtV38ZkOfYd3FKziWqK6cbgEgjG6Jgp kSdw0KzNK/b5qCY5efCiS9360UFsmlSLQQKHiJ35TcaSfFZ3TFrOKCPwrAkd5TPK lWP85UpHTgBIX/G4HGTaZjxNlXUNE408wtthnkJThKeEmm7cSTtlUaekiCiGvFg9 puHuQTZ1wD0tPxoawHsQkcQuDT8+7bf35gqN41uYdZGTugUGEdJdxNxEpu7PAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUmqbe9gKCATqvbsx+jYqWf5q+vRgwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODc4NDAzLzAvMzIzNzJlMzEzNDM0 MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzczOTM2Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAbkDANBgkqhkiG9w0BAQsFAAOCAQEAaOLX8JnKwYDIWvprB1rYSdwaXBInniGF KLUA7+YMwoSK/p9/oDsw0/b+/3xBrf0G4mpN5UW74utagc53x243DxILBMQHBLWC rl+cgKNLxasuAVbHElquyyl+sxQ6A8OF73GzirGF3YzNx8d2YkWrOmNEpgj1p1kP y1BF8Vc5KmBUte3Rz6c+Tc+77SoLbNHpcpS9Bva4odFOZnQHFZxpPCylMB7Kt+KW E/5LxEUBQUdvT7vymaxMmQvh3L4Ub0gR0n1bSqBa562rI1m1vR4O85ckWPuli6WJ YDL/Hp3cPlrULBBCKOBJRd0wh9YAEhHslKWGmquh8a7QZGK/9E9AHA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:08 2026 by rpki-client