This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa File: 3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa (raw, json) Hash identifier: WSpXWtSav0n/mxgQsU+45a8xYf8rGnUkY+KgxqJpb44= Subject key identifier: B8:8E:0C:B3:09:C8:85:B0:FF:DD:13:13:04:B5:EA:37:CA:98:C1:A4 Certificate issuer: /CN=46C13E5032045116B0FA54934DD7BFCA0483335A Certificate serial: 5B12500B854F971FF3B3186231D9CB2AFFCF581E Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa Signing time: Tue 20 Jan 2026 02:19:13 +0000 ROA not before: Tue 20 Jan 2026 02:14:13 +0000 ROA not after: Tue 19 Jan 2027 02:19:13 +0000 asID: 45074 IP address blocks: 219.235.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:12:50:0b:85:4f:97:1f:f3:b3:18:62:31:d9:cb:2a:ff:cf:58:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A Validity Not Before: Jan 20 02:14:13 2026 GMT Not After : Jan 19 02:19:13 2027 GMT Subject: CN=B88E0CB309C885B0FFDD131304B5EA37CA98C1A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:30:b5:ef:23:a1:a7:fc:57:4d:9a:e4:da: 25:9c:f3:68:c3:12:44:19:8f:6b:33:17:8f:3b:a8: 97:5f:4d:26:09:f3:e0:be:41:d1:81:92:b6:50:f2: 8e:1f:91:d4:4e:35:88:d1:20:bf:bf:49:de:dd:b9: 33:1b:bf:ec:64:3c:3c:c1:96:8c:6a:4a:da:d4:e0: 6b:f0:18:d4:52:9d:e0:7a:bf:fc:8a:36:4f:29:11: 42:02:b9:37:5b:7e:9d:8c:35:51:94:46:45:74:49: 68:67:7a:d2:e1:3e:4d:31:03:89:e7:68:37:fd:e1: 5d:9d:62:07:10:6a:29:ab:b6:a0:39:5a:93:ff:19: e6:c0:e5:77:3a:81:7d:79:0f:9f:e5:ae:dd:95:3e: 62:1a:dc:3b:4f:de:02:60:91:d5:85:5b:cb:b1:80: f6:46:82:3e:bf:30:1e:e1:ff:32:36:8b:75:7a:c5: 60:f7:e9:d8:68:0a:e9:51:39:d0:a9:b5:fe:ad:82: 8f:61:89:51:8e:81:e6:61:e6:d7:1b:96:41:f0:82: 33:ff:ea:e3:7d:39:58:f8:9a:64:44:7f:61:1f:d9: 76:77:db:25:a8:89:6d:54:44:c1:cc:30:4d:5b:06: 0f:75:f5:dd:57:93:ec:ca:49:23:f6:65:3c:55:87: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8E:0C:B3:09:C8:85:B0:FF:DD:13:13:04:B5:EA:37:CA:98:C1:A4 X509v3 Authority Key Identifier: keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.235.152.0/21 Signature Algorithm: sha256WithRSAEncryption 36:61:14:25:9d:54:3d:a0:fe:ab:48:43:0b:de:c0:ee:c8:c4: 38:a2:95:d3:47:fc:d6:44:8d:a2:ea:ed:bc:a9:45:ef:8f:1a: 16:33:30:b8:49:c3:64:15:81:69:3c:63:ae:3f:14:ca:8c:66: 4c:bd:c4:fe:2d:2b:7f:d7:7f:1a:dd:fc:66:db:7c:6e:44:3e: 14:d3:0b:e4:25:0c:3f:f9:3d:78:1f:15:ba:95:f0:fe:4e:b1: fa:38:59:b8:d7:5d:64:44:84:be:c1:1a:ef:66:bf:37:87:d9: 7c:4e:12:ca:37:c8:90:4b:18:9e:83:dd:18:21:a2:56:56:a5: 3f:2e:3e:51:32:bd:1c:85:aa:9e:a6:2b:d8:98:9a:10:66:10: 52:80:20:28:f0:2d:37:28:97:bb:5b:59:cd:96:3f:8b:65:2d: e6:2d:3c:2e:15:c1:69:3d:50:98:db:24:26:14:68:6b:92:d8: 44:47:c4:18:3d:a6:0a:4e:bf:d2:d9:98:87:38:f5:45:00:55: ad:c4:61:96:52:5a:a9:7c:3a:1b:84:6b:73:75:c6:01:18:16: 42:18:ed:20:73:24:24:02:aa:3a:52:a0:f7:de:67:4b:91:71: fb:ca:ab:68:e3:8e:ff:66:f1:0a:0f:eb:b8:7a:f2:66:cb:5a: 13:4d:9a:b9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWxJQC4VPlx/zsxhiMdnLKv/PWB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0Ew NDgzMzM1QTAeFw0yNjAxMjAwMjE0MTNaFw0yNzAxMTkwMjE5MTNaMDMxMTAvBgNV BAMTKEI4OEUwQ0IzMDlDODg1QjBGRkREMTMxMzA0QjVFQTM3Q0E5OEMxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIjC17yOhp/xXTZrk2iWc82jD EkQZj2szF487qJdfTSYJ8+C+QdGBkrZQ8o4fkdRONYjRIL+/Sd7duTMbv+xkPDzB loxqStrU4GvwGNRSneB6v/yKNk8pEUICuTdbfp2MNVGURkV0SWhnetLhPk0xA4nn aDf94V2dYgcQaimrtqA5WpP/GebA5Xc6gX15D5/lrt2VPmIa3DtP3gJgkdWFW8ux gPZGgj6/MB7h/zI2i3V6xWD36dhoCulROdCptf6tgo9hiVGOgeZh5tcblkHwgjP/ 6uN9OVj4mmREf2Ef2XZ32yWoiW1URMHMME1bBg919d1Xk+zKSSP2ZTxVhyzNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUuI4MswnIhbD/3RMTBLXqN8qYwaQwHwYDVR0j BBgwFoAURsE+UDIEURaw+lSTTde/ygSDM1owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODAwOTQ3NS8wLzQ2QzEzRTUwMzIwNDUxMTZCMEZBNTQ5MzRERDdC RkNBMDQ4MzMzNUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0EwNDgzMzM1QS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgwMDk0NzUvMC8zMjMxMzkyZTMy MzMzNTJlMzEzNTMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzNTMwMzczNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9vrmDANBgkqhkiG9w0BAQsFAAOCAQEANmEUJZ1UPaD+q0hDC97A 7sjEOKKV00f81kSNourtvKlF748aFjMwuEnDZBWBaTxjrj8UyoxmTL3E/i0rf9d/ Gt38Ztt8bkQ+FNML5CUMP/k9eB8VupXw/k6x+jhZuNddZESEvsEa72a/N4fZfE4S yjfIkEsYnoPdGCGiVlalPy4+UTK9HIWqnqYr2JiaEGYQUoAgKPAtNyiXu1tZzZY/ i2Ut5i08LhXBaT1QmNskJhRoa5LYREfEGD2mCk6/0tmYhzj1RQBVrcRhllJaqXw6 G4Rrc3XGARgWQhjtIHMkJAKqOlKg995nS5Fx+8qraOOO/2bxCg/ruHryZstaE02a uQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:17 2026 by rpki-client