This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/3232322e3132362e3133382e302f32342d3234203d3e2037343638.roa File: 3232322e3132362e3133382e302f32342d3234203d3e2037343638.roa (raw, json) Hash identifier: 5j4qtob+syiOeOjHQA6tru1Q5Emv8og7jhAu9x8oqcM= Subject key identifier: 33:07:CA:69:DD:04:15:E8:E5:E9:69:3B:67:F6:95:CD:52:6B:9C:1E Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Certificate serial: 2A7C021ED7C3CC4C2A4F3C40A3DAC336281CE0FC Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/3232322e3132362e3133382e302f32342d3234203d3e2037343638.roa Signing time: Tue 20 Jan 2026 02:19:13 +0000 ROA not before: Tue 20 Jan 2026 02:14:13 +0000 ROA not after: Tue 19 Jan 2027 02:19:13 +0000 asID: 7468 IP address blocks: 222.126.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7c:02:1e:d7:c3:cc:4c:2a:4f:3c:40:a3:da:c3:36:28:1c:e0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Validity Not Before: Jan 20 02:14:13 2026 GMT Not After : Jan 19 02:19:13 2027 GMT Subject: CN=3307CA69DD0415E8E5E9693B67F695CD526B9C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:ed:cc:46:e8:a3:d9:7b:07:a5:c1:55:ab: 95:7d:97:aa:fa:62:b6:b7:94:33:87:e8:74:2e:4a: 8b:6e:fc:73:94:5f:fa:8a:7c:43:52:d2:84:4c:cd: 51:5a:5d:99:97:fe:d2:30:c3:dd:0e:05:fc:69:3d: 78:bb:9e:1a:54:56:0b:28:8a:a0:03:32:db:b8:d3: 0d:70:2b:1c:bf:11:1f:dd:2e:0e:0c:c2:84:40:fa: f9:50:9a:d2:6f:5a:ab:16:0e:34:68:b2:60:c7:34: 03:8c:89:e6:16:f1:46:39:bd:81:50:50:05:ef:ac: 17:2a:a0:4c:4d:a8:e2:9f:9e:19:fc:13:67:9d:a7: 4a:82:d7:87:80:7a:62:ee:76:f2:e5:87:a8:7f:ab: 1a:54:40:fb:e5:a7:93:91:dc:dc:10:3e:e2:63:73: b2:b6:e4:d3:22:c6:ee:ba:72:12:06:fb:4a:4d:ad: 0f:37:bb:1b:5b:08:aa:2c:ae:88:c1:35:58:89:c0: c5:0b:87:0a:7d:34:ea:10:da:20:64:00:d2:95:2e: 59:91:36:c5:36:c2:7a:e2:29:b3:29:f3:c2:ae:b3: 77:0d:36:2c:91:83:34:e8:d2:96:b0:4d:ef:19:07: 1a:3c:4c:29:c0:47:be:79:68:88:7e:2f:28:76:4c: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:CA:69:DD:04:15:E8:E5:E9:69:3B:67:F6:95:CD:52:6B:9C:1E X509v3 Authority Key Identifier: keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/3232322e3132362e3133382e302f32342d3234203d3e2037343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.126.138.0/24 Signature Algorithm: sha256WithRSAEncryption b2:82:ea:7a:0e:d9:40:42:c6:ff:7e:95:24:92:44:0f:b2:3d: 5e:95:6c:f0:f6:a3:8d:35:27:9f:52:85:fc:c5:44:e6:19:26: f6:c6:93:25:51:90:af:c6:23:fe:fa:40:2d:4d:fd:b7:1a:fd: 6f:c9:10:e1:fa:70:74:38:66:b1:d5:59:ca:35:e1:87:17:58: d2:be:58:56:f7:00:e3:98:22:5e:c5:bb:e2:13:71:cc:30:b9: 1a:b5:7a:84:e9:4f:de:08:82:8b:bc:3c:12:cf:a4:a4:1a:9b: af:d2:30:94:d5:a5:b8:92:e8:b0:4c:b3:9d:ec:d8:65:86:db: ed:f8:61:84:f0:11:c8:54:46:0b:35:00:07:d8:a9:5d:c2:0c: 5f:40:6f:f2:9f:23:0f:9f:52:2b:76:e9:fe:ff:ba:9d:dd:84: 55:42:45:f9:10:8b:84:35:b2:03:dd:ec:01:db:1c:74:90:1e: 06:82:5f:11:78:b4:b1:77:6a:4a:1b:f5:91:63:06:94:91:b9: 54:00:a2:cf:5d:c4:4c:d2:96:69:7e:80:40:36:66:31:ba:57: d2:a2:a1:5a:66:f1:2e:2d:f1:42:c1:e2:12:e6:5f:ba:21:8b: 19:93:8b:26:98:af:94:44:d2:1f:50:14:4e:23:f2:f5:66:92: 5b:e9:49:a2 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKnwCHtfDzEwqTzxAo9rDNigc4PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0 RTBFNEM1RTAeFw0yNjAxMjAwMjE0MTNaFw0yNzAxMTkwMjE5MTNaMDMxMTAvBgNV BAMTKDMzMDdDQTY5REQwNDE1RThFNUU5NjkzQjY3RjY5NUNENTI2QjlDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3p+3MRuij2XsHpcFVq5V9l6r6 Yra3lDOH6HQuSotu/HOUX/qKfENS0oRMzVFaXZmX/tIww90OBfxpPXi7nhpUVgso iqADMtu40w1wKxy/ER/dLg4MwoRA+vlQmtJvWqsWDjRosmDHNAOMieYW8UY5vYFQ UAXvrBcqoExNqOKfnhn8E2edp0qC14eAemLudvLlh6h/qxpUQPvlp5OR3NwQPuJj c7K25NMixu66chIG+0pNrQ83uxtbCKosrojBNViJwMULhwp9NOoQ2iBkANKVLlmR NsU2wnriKbMp88Kus3cNNiyRgzTo0pawTe8ZBxo8TCnAR755aIh+Lyh2TLiRAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUMwfKad0EFejl6Wk7Z/aVzVJrnB4wHwYDVR0j BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODI3MTYxOS8wLzMyMzIzMjJlMzEz MjM2MmUzMTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzM0MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN5+ijANBgkqhkiG9w0BAQsFAAOCAQEAsoLqeg7ZQELG/36VJJJED7I9 XpVs8PajjTUnn1KF/MVE5hkm9saTJVGQr8Yj/vpALU39txr9b8kQ4fpwdDhmsdVZ yjXhhxdY0r5YVvcA45giXsW74hNxzDC5GrV6hOlP3giCi7w8Es+kpBqbr9IwlNWl uJLosEyznezYZYbb7fhhhPARyFRGCzUAB9ipXcIMX0Bv8p8jD59SK3bp/v+6nd2E VUJF+RCLhDWyA93sAdscdJAeBoJfEXi0sXdqShv1kWMGlJG5VACiz13ETNKWaX6A QDZmMbpX0qKhWmbxLi3xQsHiEuZfuiGLGZOLJpivlETSH1AUTiPy9WaSW+lJog== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:20 2026 by rpki-client