This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa File: 3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa (raw, json) Hash identifier: 9EWw+3yvD8wWr9/mlEXgpw2TuO9rB0T1PMKPebwR0kY= Subject key identifier: 85:A0:62:B9:90:C5:70:45:BB:11:1C:3E:F9:5A:D3:ED:D7:88:18:27 Certificate issuer: /CN=46C13E5032045116B0FA54934DD7BFCA0483335A Certificate serial: 587B38E8161D9D90F7EB5C49C1B2F39C3ECA4C3A Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa Signing time: Tue 20 Jan 2026 02:19:13 +0000 ROA not before: Tue 20 Jan 2026 02:14:13 +0000 ROA not after: Tue 19 Jan 2027 02:19:13 +0000 asID: 9807 IP address blocks: 219.235.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7b:38:e8:16:1d:9d:90:f7:eb:5c:49:c1:b2:f3:9c:3e:ca:4c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A Validity Not Before: Jan 20 02:14:13 2026 GMT Not After : Jan 19 02:19:13 2027 GMT Subject: CN=85A062B990C57045BB111C3EF95AD3EDD7881827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:69:13:6e:e3:47:be:2b:22:2a:1d:bc:8d: fc:44:5f:60:9d:ff:ea:c6:42:0d:ab:3e:ed:83:58: d6:7e:14:e0:90:81:37:9e:c7:9f:12:24:2f:d7:04: cb:a1:86:46:a3:bd:ac:0e:74:cf:f5:bc:fa:35:d2: 7c:c1:7d:29:48:45:21:dc:ce:74:a5:cd:6c:d5:55: c1:96:cb:a9:05:a0:e6:83:f9:85:b3:01:ec:fd:18: 66:be:c1:03:56:54:7d:21:de:d3:ce:6a:8f:eb:a7: 53:4a:1b:bc:12:b3:79:60:89:64:c6:3a:8b:2a:ed: b9:7e:56:4e:49:14:c0:bd:2c:f3:52:5c:e3:f3:b3: 70:c8:ba:51:e5:57:b1:11:73:49:fb:e2:06:72:34: c3:94:33:22:97:42:6a:d2:5a:82:21:f2:d2:6b:49: b7:bc:30:e2:36:47:0c:5b:54:ad:4f:04:03:a9:7a: 09:2a:84:fb:b3:4b:bc:c9:8e:89:be:11:47:f0:98: 50:98:79:c8:b6:b0:99:8a:f4:6e:34:99:fb:08:40: fb:67:24:7d:29:6a:b7:76:9d:c7:72:b4:3f:4e:f2: a6:b8:d7:b8:8d:65:37:99:23:a2:5d:57:fd:34:2a: 2f:81:a9:7d:26:ab:90:74:38:f1:a1:eb:24:63:33: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A0:62:B9:90:C5:70:45:BB:11:1C:3E:F9:5A:D3:ED:D7:88:18:27 X509v3 Authority Key Identifier: keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.235.136.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:5a:79:ec:7a:0c:05:7c:b7:99:eb:3c:40:42:ac:20:c0:a4: bc:a7:b8:7c:69:ad:ce:2c:8c:49:4f:89:56:3a:2c:da:3a:9f: 88:c5:d1:23:a1:f0:50:4b:3b:c3:d7:38:55:af:0d:ac:cd:2a: 89:f8:3f:a4:12:6f:a1:1d:43:b7:e7:3a:d8:63:22:fc:dc:19: 58:77:87:9f:9d:42:83:f5:2a:16:c9:be:69:32:55:42:ab:ed: a2:a5:57:9a:27:4c:70:f6:fc:76:de:48:e8:9c:2d:3d:0e:6b: 33:29:1f:39:76:7e:5a:49:62:0c:f4:31:5a:a1:d3:a0:99:b7: 70:88:d6:5e:32:41:64:68:f6:25:56:a0:fb:c1:77:e8:1b:c6: 4e:86:ca:8b:17:b5:8b:98:47:b8:b3:c8:2a:6a:f6:09:32:41: 30:d1:7f:17:b5:5e:7b:2c:63:fc:a8:a2:e1:e5:c3:7b:cd:5e: 27:6e:22:18:d4:8e:e7:8d:7b:f5:2d:be:b5:a8:25:15:03:0d: 05:3d:e3:23:35:6c:9c:83:dc:24:f1:8a:1f:8f:64:50:fa:a9: 53:d4:ef:45:83:a5:4a:31:ca:f7:1a:d4:f7:0c:96:f8:d4:59: d1:9e:48:06:30:d5:f7:6e:2c:da:c7:c7:4b:f6:05:1c:7c:81: 65:5e:17:fc -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWHs46BYdnZD361xJwbLznD7KTDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0Ew NDgzMzM1QTAeFw0yNjAxMjAwMjE0MTNaFw0yNzAxMTkwMjE5MTNaMDMxMTAvBgNV BAMTKDg1QTA2MkI5OTBDNTcwNDVCQjExMUMzRUY5NUFEM0VERDc4ODE4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMGkTbuNHvisiKh28jfxEX2Cd /+rGQg2rPu2DWNZ+FOCQgTeex58SJC/XBMuhhkajvawOdM/1vPo10nzBfSlIRSHc znSlzWzVVcGWy6kFoOaD+YWzAez9GGa+wQNWVH0h3tPOao/rp1NKG7wSs3lgiWTG Oosq7bl+Vk5JFMC9LPNSXOPzs3DIulHlV7ERc0n74gZyNMOUMyKXQmrSWoIh8tJr Sbe8MOI2RwxbVK1PBAOpegkqhPuzS7zJjom+EUfwmFCYeci2sJmK9G40mfsIQPtn JH0pard2ncdytD9O8qa417iNZTeZI6JdV/00Ki+BqX0mq5B0OPGh6yRjMwTRAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUhaBiuZDFcEW7ERw++VrT7deIGCcwHwYDVR0j BBgwFoAURsE+UDIEURaw+lSTTde/ygSDM1owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODAwOTQ3NS8wLzQ2QzEzRTUwMzIwNDUxMTZCMEZBNTQ5MzRERDdC RkNBMDQ4MzMzNUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0EwNDgzMzM1QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODAwOTQ3NS8wLzMyMzEzOTJlMzIz MzM1MmUzMTMzMzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzOTM4MzAzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9vriDANBgkqhkiG9w0BAQsFAAOCAQEADVp57HoMBXy3mes8QEKsIMCk vKe4fGmtziyMSU+JVjos2jqfiMXRI6HwUEs7w9c4Va8NrM0qifg/pBJvoR1Dt+c6 2GMi/NwZWHeHn51Cg/UqFsm+aTJVQqvtoqVXmidMcPb8dt5I6JwtPQ5rMykfOXZ+ WkliDPQxWqHToJm3cIjWXjJBZGj2JVag+8F36BvGTobKixe1i5hHuLPIKmr2CTJB MNF/F7Veeyxj/Kii4eXDe81eJ24iGNSO54179S2+taglFQMNBT3jIzVsnIPcJPGK H49kUPqpU9TvRYOlSjHK9xrU9wyW+NRZ0Z5IBjDV924s2sfHS/YFHHyBZV4X/A== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:30 2026 by rpki-client