This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa File: 3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa (raw, json) Hash identifier: WgqZHu54HYvCrSjVeZSV7S2ptAQ1a+xoyVFAd7XUP1I= Subject key identifier: 9D:E5:B4:ED:31:0C:20:CC:3A:43:FA:3B:56:5C:BB:47:45:D5:DE:86 Certificate issuer: /CN=46C13E5032045116B0FA54934DD7BFCA0483335A Certificate serial: 1C294FD5FADCBE8011728594A7E7370B337C539E Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa Signing time: Tue 20 Jan 2026 02:19:13 +0000 ROA not before: Tue 20 Jan 2026 02:14:13 +0000 ROA not after: Tue 19 Jan 2027 02:19:13 +0000 asID: 9807 IP address blocks: 219.235.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:29:4f:d5:fa:dc:be:80:11:72:85:94:a7:e7:37:0b:33:7c:53:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A Validity Not Before: Jan 20 02:14:13 2026 GMT Not After : Jan 19 02:19:13 2027 GMT Subject: CN=9DE5B4ED310C20CC3A43FA3B565CBB4745D5DE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:74:70:69:6d:50:a3:30:45:1f:57:ad:26:c5: 43:52:68:1a:96:57:38:b2:c3:73:b2:6e:e0:04:b0: 19:60:69:03:d7:0f:f0:ba:85:2c:ac:bd:a8:31:54: 0e:05:a4:4c:fc:ce:9b:95:07:47:78:36:8a:4e:38: 70:57:b4:64:dc:10:d6:ac:66:00:59:b5:9e:db:d1: a2:6c:da:39:44:25:b6:8b:cb:ca:e5:52:a6:db:b0: 34:8f:0c:83:59:19:83:17:17:9e:57:20:e7:4b:10: 6d:4f:05:cb:40:10:d5:06:a8:ca:8d:86:8a:7c:8c: a0:4a:61:d5:48:a8:c1:35:18:28:04:34:a3:8d:51: be:29:34:66:97:6e:e8:b2:f8:a7:23:fd:9f:6c:e3: 50:de:2f:25:86:63:0b:99:ca:77:c4:7d:92:ac:ff: a8:f6:b4:b6:5d:7e:65:77:ae:c9:1c:71:a4:19:8b: af:48:12:c5:f3:f6:97:69:a6:45:38:af:7d:89:bc: fe:6e:38:70:5d:7b:36:dc:87:1c:ff:4a:40:9a:0c: 9d:4d:dd:13:d0:61:49:45:ce:29:2c:4e:81:fd:42: 7c:63:d9:97:c0:6a:94:d6:c6:51:52:93:a2:bc:aa: 5e:60:de:24:ed:81:92:73:10:47:f7:ff:62:af:4e: 83:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E5:B4:ED:31:0C:20:CC:3A:43:FA:3B:56:5C:BB:47:45:D5:DE:86 X509v3 Authority Key Identifier: keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.235.128.0/21 Signature Algorithm: sha256WithRSAEncryption 13:4f:5f:16:b5:d6:f6:2d:12:ec:e5:3a:3a:c4:ad:eb:79:e8: 12:e6:7e:b9:fd:63:00:44:9d:8f:53:1a:09:75:17:25:13:18: 95:c8:10:3f:dc:50:b2:2f:d3:1f:8c:36:00:99:4c:94:0c:76: 75:92:ac:d2:4f:2d:01:a2:26:8f:2b:08:68:87:a9:9f:96:a2: 5d:bf:99:7f:bd:89:c9:1b:74:bc:3e:92:87:4d:93:28:9f:3a: 83:24:dd:97:1a:c2:d1:07:68:7b:1f:0c:7a:bd:0e:36:4d:10: 36:45:61:d2:a2:10:f4:bf:3a:0b:d8:9d:7a:fd:49:e5:1c:6c: bd:f2:8b:11:1b:42:5a:9b:ae:fd:22:b9:5e:a9:4b:6e:b2:78: 89:ac:d4:8b:e1:60:4d:35:ec:9a:c7:52:1a:8e:56:1d:34:82: 51:2f:c9:9b:5b:64:47:e4:34:21:51:08:7e:f8:16:2f:22:3c: f1:4e:f5:1e:5c:f4:89:6f:8d:c3:8f:35:2d:7d:a9:ec:33:29: a3:76:a7:27:68:86:64:ee:e3:76:4f:dd:1e:4b:57:7f:b2:4a: 49:81:31:33:79:67:80:5d:31:17:b6:8f:85:45:7a:10:1e:ad: 0d:20:36:2c:ae:e6:dc:ed:ae:db:b1:cf:01:95:12:31:0f:19: 3a:34:c2:a9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHClP1frcvoARcoWUp+c3CzN8U54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0Ew NDgzMzM1QTAeFw0yNjAxMjAwMjE0MTNaFw0yNzAxMTkwMjE5MTNaMDMxMTAvBgNV BAMTKDlERTVCNEVEMzEwQzIwQ0MzQTQzRkEzQjU2NUNCQjQ3NDVENURFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdHBpbVCjMEUfV60mxUNSaBqW Vziyw3OybuAEsBlgaQPXD/C6hSysvagxVA4FpEz8zpuVB0d4NopOOHBXtGTcENas ZgBZtZ7b0aJs2jlEJbaLy8rlUqbbsDSPDINZGYMXF55XIOdLEG1PBctAENUGqMqN hop8jKBKYdVIqME1GCgENKONUb4pNGaXbuiy+Kcj/Z9s41DeLyWGYwuZynfEfZKs /6j2tLZdfmV3rskccaQZi69IEsXz9pdppkU4r32JvP5uOHBdezbchxz/SkCaDJ1N 3RPQYUlFziksToH9Qnxj2ZfAapTWxlFSk6K8ql5g3iTtgZJzEEf3/2KvToPBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUneW07TEMIMw6Q/o7Vly7R0XV3oYwHwYDVR0j BBgwFoAURsE+UDIEURaw+lSTTde/ygSDM1owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODAwOTQ3NS8wLzQ2QzEzRTUwMzIwNDUxMTZCMEZBNTQ5MzRERDdC RkNBMDQ4MzMzNUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0EwNDgzMzM1QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODAwOTQ3NS8wLzMyMzEzOTJlMzIz MzM1MmUzMTMyMzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzOTM4MzAzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9vrgDANBgkqhkiG9w0BAQsFAAOCAQEAE09fFrXW9i0S7OU6OsSt63no EuZ+uf1jAESdj1MaCXUXJRMYlcgQP9xQsi/TH4w2AJlMlAx2dZKs0k8tAaImjysI aIepn5aiXb+Zf72JyRt0vD6Sh02TKJ86gyTdlxrC0Qdoex8Mer0ONk0QNkVh0qIQ 9L86C9idev1J5RxsvfKLERtCWpuu/SK5XqlLbrJ4iazUi+FgTTXsmsdSGo5WHTSC US/Jm1tkR+Q0IVEIfvgWLyI88U71Hlz0iW+Nw481LX2p7DMpo3anJ2iGZO7jdk/d HktXf7JKSYExM3lngF0xF7aPhUV6EB6tDSA2LK7m3O2u27HPAZUSMQ8ZOjTCqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:28 2026 by rpki-client