This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa File: 3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa (raw, json) Hash identifier: Nu0jpaTn4Fdv3bxm5NPIkyN0IrZp5kWxSz8smX/CQR8= Subject key identifier: AB:E3:9E:AC:F8:55:06:A6:21:CB:93:28:DD:FE:C1:27:48:00:36:73 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 6FF5CBE8A73E1A06F2F75562507159EBB2B8A56D Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa Signing time: Tue 20 Jan 2026 02:25:01 +0000 ROA not before: Tue 20 Jan 2026 02:20:01 +0000 ROA not after: Tue 19 Jan 2027 02:25:01 +0000 asID: 24147 IP address blocks: 219.235.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f5:cb:e8:a7:3e:1a:06:f2:f7:55:62:50:71:59:eb:b2:b8:a5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Jan 20 02:20:01 2026 GMT Not After : Jan 19 02:25:01 2027 GMT Subject: CN=ABE39EACF85506A621CB9328DDFEC12748003673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:24:a0:bc:1e:30:08:9b:84:56:3e:74:03: 7d:83:93:38:be:77:c6:5d:34:5d:50:9f:d9:4a:fb: a2:59:ec:47:21:cf:32:dc:29:d2:b7:a2:da:07:d5: 80:c7:86:57:69:95:a2:ed:8c:3b:7b:c8:3b:7e:aa: bb:a6:35:e1:6e:06:fe:97:6b:19:5d:2d:b0:74:6a: 2a:a6:bf:07:c6:bb:42:0f:49:17:5a:c4:77:20:c5: 24:1e:54:60:4d:9d:15:78:95:47:3e:f0:b2:d5:38: 61:b1:ad:0d:7e:ff:4a:c0:6d:cc:cc:e8:ac:03:d5: 1c:3f:70:d0:fc:4c:a5:c2:47:64:c8:a8:ad:fc:37: e8:cd:d7:80:94:3c:aa:91:51:9b:2e:3a:e8:1a:82: 6d:c4:a2:95:7b:1e:5d:95:aa:cf:b3:41:3c:c3:fb: 74:9d:2b:db:9c:f2:06:95:f2:96:56:87:e9:1c:fc: 99:6c:cd:a4:5a:01:88:3a:18:ab:fd:b4:e6:d2:b2: b1:15:67:46:b9:b9:6b:0b:db:c1:95:a3:5b:4a:a1: 68:3a:07:68:15:7e:99:37:32:81:ad:d3:b1:65:38: 7d:04:e0:24:af:36:c8:0e:95:44:4e:b5:ed:60:c2: 94:3f:00:57:ce:58:21:bb:f1:f8:0b:e2:9e:5e:f7: b0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E3:9E:AC:F8:55:06:A6:21:CB:93:28:DD:FE:C1:27:48:00:36:73 X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.235.193.0/24 Signature Algorithm: sha256WithRSAEncryption 55:f5:71:b1:e9:35:9d:37:1a:fe:15:3e:38:aa:28:d8:e5:85: c6:d8:c1:aa:3c:05:b5:be:7e:22:39:6c:4e:e6:3d:0d:14:31: 51:a5:3f:62:2a:52:cc:75:77:4a:2b:35:b1:2a:2a:c1:79:76: 94:21:9c:ad:cc:fe:79:01:fe:9e:aa:1a:e4:47:8f:df:0d:f9: b6:2b:a0:0d:ba:bf:54:53:d3:1d:5a:77:81:0a:02:a1:b7:55: 41:f1:8a:28:3e:55:56:1d:88:da:c0:b0:13:8f:e0:61:f4:b2: 0d:a9:7f:a8:16:8e:7a:7b:ae:a4:76:90:fe:38:20:61:06:dc: b5:97:73:d6:27:7b:87:09:3c:2f:5f:7b:14:3e:18:ae:1e:02: 19:3d:98:17:87:09:c3:0a:93:6b:b4:1d:ee:91:52:6c:3b:8e: 9e:cf:0e:05:24:22:54:29:f6:6b:bc:46:12:c2:9b:03:5c:20: 7b:fc:67:af:db:af:23:db:e5:b0:73:63:58:42:1b:72:37:a8: 77:27:89:3d:ab:a9:e5:99:58:95:6e:dc:e3:64:aa:74:ae:e8: dc:fc:cd:de:4b:47:8e:09:b9:8b:d5:aa:e9:64:3f:c3:2f:fd: 40:c0:4c:e0:4a:3b:0e:71:38:da:83:29:77:ca:99:60:c2:b4: e5:9c:2a:5b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUb/XL6Kc+Ggby91ViUHFZ67K4pW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDFaFw0yNzAxMTkwMjI1MDFaMDMxMTAvBgNV BAMTKEFCRTM5RUFDRjg1NTA2QTYyMUNCOTMyOERERkVDMTI3NDgwMDM2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWySgvB4wCJuEVj50A32Dkzi+ d8ZdNF1Qn9lK+6JZ7EchzzLcKdK3otoH1YDHhldplaLtjDt7yDt+qrumNeFuBv6X axldLbB0aiqmvwfGu0IPSRdaxHcgxSQeVGBNnRV4lUc+8LLVOGGxrQ1+/0rAbczM 6KwD1Rw/cND8TKXCR2TIqK38N+jN14CUPKqRUZsuOugagm3EopV7Hl2Vqs+zQTzD +3SdK9uc8gaV8pZWh+kc/JlszaRaAYg6GKv9tObSsrEVZ0a5uWsL28GVo1tKoWg6 B2gVfpk3MoGt07FlOH0E4CSvNsgOlUROte1gwpQ/AFfOWCG78fgL4p5e97CNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUq+OerPhVBqYhy5Mo3f7BJ0gANnMwHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgwNzUwMTEvMC8zMjMxMzkyZTMy MzMzNTJlMzEzOTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANvrwTANBgkqhkiG9w0BAQsFAAOCAQEAVfVxsek1nTca/hU+OKoo 2OWFxtjBqjwFtb5+IjlsTuY9DRQxUaU/YipSzHV3Sis1sSoqwXl2lCGcrcz+eQH+ nqoa5EeP3w35tiugDbq/VFPTHVp3gQoCobdVQfGKKD5VVh2I2sCwE4/gYfSyDal/ qBaOenuupHaQ/jggYQbctZdz1id7hwk8L197FD4Yrh4CGT2YF4cJwwqTa7Qd7pFS bDuOns8OBSQiVCn2a7xGEsKbA1wge/xnr9uvI9vlsHNjWEIbcjeodyeJPaup5ZlY lW7c42SqdK7o3PzN3ktHjgm5i9Wq6WQ/wy/9QMBM4Eo7DnE42oMpd8qZYMK05Zwq Ww== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:12 2026 by rpki-client