This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa File: 3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa (raw, json) Hash identifier: Oq/GjpVGMUDKb7ahdv94Jw/QkvSfPPwwMawTEz511Zw= Subject key identifier: 64:0D:E4:28:76:C4:73:FE:32:59:3D:B4:D2:27:C3:3E:D2:6A:C4:46 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 5F29A5E974039F3EEACE439B922FCE43E22A1376 Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa Signing time: Tue 20 Jan 2026 02:25:00 +0000 ROA not before: Tue 20 Jan 2026 02:20:00 +0000 ROA not after: Tue 19 Jan 2027 02:25:00 +0000 asID: 4847 IP address blocks: 211.102.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:29:a5:e9:74:03:9f:3e:ea:ce:43:9b:92:2f:ce:43:e2:2a:13:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:00 2026 GMT Not After : Jan 19 02:25:00 2027 GMT Subject: CN=640DE42876C473FE32593DB4D227C33ED26AC446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fa:c3:1f:ac:b4:b6:de:91:f7:fd:b7:17:f3: b5:15:ad:3d:93:41:54:a0:75:30:14:08:ee:53:c8: d1:32:f6:e2:d8:dd:d9:6e:9e:93:d3:f9:99:cf:52: ad:03:9b:38:53:a7:90:53:f0:4c:53:d2:17:69:d5: fe:9c:d7:a3:57:59:02:e3:b1:6c:1c:b4:63:68:f9: 1b:a5:77:78:7e:6e:40:91:a0:bf:3d:62:69:cb:9f: 42:c1:6e:b6:5e:ff:4c:2b:af:2e:75:32:87:29:b9: ce:26:56:b0:15:9f:47:c0:c4:d4:fb:72:54:7f:2b: 70:4b:60:1e:51:dc:c1:c1:0b:2c:83:da:d1:9a:04: e2:11:7c:f6:c4:9b:02:fe:6c:8e:e5:92:34:2b:6c: 9b:c5:c1:4b:21:da:34:30:1a:9d:b4:10:fc:56:bd: 76:2a:4d:14:3c:98:7a:db:9c:54:ae:ec:ef:c2:51: af:ba:97:33:59:fe:bf:bb:2e:86:b6:cc:32:60:85: 10:5f:69:c8:f1:04:24:75:66:3c:b8:a0:90:e9:e4: e6:79:6c:ad:41:0b:68:00:0f:e5:4a:4a:f9:ee:7d: 23:9f:2f:12:46:c8:6c:d4:d3:bc:7d:e8:d7:b5:13: 7c:38:77:cc:4c:a8:3f:92:f1:b1:01:2a:3e:50:09: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0D:E4:28:76:C4:73:FE:32:59:3D:B4:D2:27:C3:3E:D2:6A:C4:46 X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.102.248.0/21 Signature Algorithm: sha256WithRSAEncryption a5:e5:ee:5a:39:a4:7e:30:ec:df:6f:0a:b4:49:f4:e7:74:88: 83:4a:36:a0:12:2c:6b:cc:72:c7:38:af:a6:0e:1b:10:2a:ec: 7b:bc:e5:1b:26:a8:6f:d3:f4:4d:fa:64:50:1d:1b:ec:91:c1: 23:aa:ca:1c:70:0d:a1:7a:7f:90:10:88:0f:f0:09:30:69:66: fd:50:7a:29:e0:f1:37:8a:2f:33:73:38:9e:2f:70:21:87:78: eb:d4:be:a5:5c:85:64:80:b0:fb:a7:6a:26:3e:aa:fe:1d:0f: 1d:0f:37:a9:4d:18:dd:2e:06:c0:7a:49:ca:ec:79:3a:f4:8d: 2c:5f:89:cd:5d:81:6e:a9:cc:b8:63:45:b7:31:fc:95:ae:3b: a0:86:25:e1:1a:af:cb:a3:64:1b:be:b1:9e:93:1d:fc:db:19: b7:e9:7d:78:31:8e:92:ff:a8:5b:28:be:0d:c0:34:64:12:78: 02:5b:a2:d1:d7:8f:ff:2d:c1:41:4f:92:2b:c7:d9:86:0c:38: 75:65:a1:65:8b:c8:08:83:87:c7:01:d5:dc:7b:0b:74:25:65: a1:d4:36:d7:de:f6:05:80:78:8b:40:2e:dd:42:e7:97:c2:1c: 57:80:85:d2:1a:03:a7:8b:c8:d2:f6:af:3c:06:d3:6e:41:98: 48:31:e8:ef -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXyml6XQDnz7qzkObki/OQ+IqE3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDBaFw0yNzAxMTkwMjI1MDBaMDMxMTAvBgNV BAMTKDY0MERFNDI4NzZDNDczRkUzMjU5M0RCNEQyMjdDMzNFRDI2QUM0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy+sMfrLS23pH3/bcX87UVrT2T QVSgdTAUCO5TyNEy9uLY3dlunpPT+ZnPUq0DmzhTp5BT8ExT0hdp1f6c16NXWQLj sWwctGNo+Ruld3h+bkCRoL89YmnLn0LBbrZe/0wrry51Mocpuc4mVrAVn0fAxNT7 clR/K3BLYB5R3MHBCyyD2tGaBOIRfPbEmwL+bI7lkjQrbJvFwUsh2jQwGp20EPxW vXYqTRQ8mHrbnFSu7O/CUa+6lzNZ/r+7Loa2zDJghRBfacjxBCR1Zjy4oJDp5OZ5 bK1BC2gAD+VKSvnufSOfLxJGyGzU07x96Ne1E3w4d8xMqD+S8bEBKj5QCR9fAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZA3kKHbEc/4yWT200ifDPtJqxEYwHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODA3NTAxMS8wLzMyMzEzMTJlMzEz MDMyMmUzMjM0MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9Nm+DANBgkqhkiG9w0BAQsFAAOCAQEApeXuWjmkfjDs328KtEn053SI g0o2oBIsa8xyxzivpg4bECrse7zlGyaob9P0TfpkUB0b7JHBI6rKHHANoXp/kBCI D/AJMGlm/VB6KeDxN4ovM3M4ni9wIYd469S+pVyFZICw+6dqJj6q/h0PHQ83qU0Y 3S4GwHpJyux5OvSNLF+JzV2BbqnMuGNFtzH8la47oIYl4Rqvy6NkG76xnpMd/NsZ t+l9eDGOkv+oWyi+DcA0ZBJ4Alui0deP/y3BQU+SK8fZhgw4dWWhZYvICIOHxwHV 3HsLdCVlodQ21972BYB4i0Au3ULnl8IcV4CF0hoDp4vI0vavPAbTbkGYSDHo7w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:05 2026 by rpki-client