This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3135372e3131392e3234302e302f32322d3234203d3e203337393633.roa File: 3135372e3131392e3234302e302f32322d3234203d3e203337393633.roa (raw, json) Hash identifier: cR1QC3KffhOvNISYzseljtU/thjp7UdYL89Ej+QpRLg= Subject key identifier: 1A:05:76:6B:A9:99:4D:3B:FA:9D:14:EE:DE:73:5D:5F:FA:A7:27:F1 Certificate issuer: /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Certificate serial: 3DD0DF9CCB6E1174147E496ACA354E4336DE8A6C Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3135372e3131392e3234302e302f32322d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 02:20:16 +0000 ROA not before: Tue 20 Jan 2026 02:15:16 +0000 ROA not after: Tue 19 Jan 2027 02:20:16 +0000 asID: 37963 IP address blocks: 157.119.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d0:df:9c:cb:6e:11:74:14:7e:49:6a:ca:35:4e:43:36:de:8a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Validity Not Before: Jan 20 02:15:16 2026 GMT Not After : Jan 19 02:20:16 2027 GMT Subject: CN=1A05766BA9994D3BFA9D14EEDE735D5FFAA727F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:f1:39:ac:fc:cd:d6:b7:52:d7:ea:68:1e: 0a:01:77:ae:39:d2:b1:77:c0:0b:52:05:5b:3f:e5: 88:5d:e0:80:1d:24:ce:f2:c2:75:f3:57:36:00:08: 2b:de:0b:d0:66:44:04:59:bf:1c:26:fe:3e:89:9c: 0d:31:6f:ad:bf:93:b0:ca:80:e2:d7:03:bc:40:b9: aa:73:6c:e4:ce:e9:32:9f:8f:df:dc:4c:c5:fb:bb: b6:7f:07:9d:87:42:45:47:fb:49:54:6f:22:45:0c: bb:b0:f1:d9:cf:0d:37:85:9a:03:47:a2:07:09:32: ae:4b:98:ad:18:40:b0:33:96:43:9e:8b:18:45:5a: 25:d5:1d:99:77:18:aa:ef:a9:83:05:b3:d4:7a:64: c0:c2:f4:6d:46:19:5c:a5:fc:9d:fa:d0:58:c9:1b: 03:8d:12:8f:c1:3d:28:3f:bd:94:4d:e7:42:de:63: 38:c6:91:18:b2:d8:25:f9:de:7a:63:73:02:4c:b8: 1d:6a:b2:77:4e:67:d1:d3:e4:56:f7:0f:ca:1d:af: 80:c0:7f:a5:fc:83:88:18:d3:47:ef:af:e7:e3:31: 68:21:37:28:43:4c:50:30:00:e4:8d:8c:d5:27:6b: bb:71:76:ed:91:22:51:9b:db:36:1a:8b:8f:d7:b6: e5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:05:76:6B:A9:99:4D:3B:FA:9D:14:EE:DE:73:5D:5F:FA:A7:27:F1 X509v3 Authority Key Identifier: keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3135372e3131392e3234302e302f32322d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.240.0/22 Signature Algorithm: sha256WithRSAEncryption de:c6:f8:2e:18:ec:e3:de:ce:4b:89:86:ee:80:f7:98:fb:24: 80:b2:a2:63:7f:02:de:fc:e3:b3:13:8c:03:04:3b:f9:54:d4: b0:99:51:b6:17:1e:d3:c4:79:72:e5:ee:d3:1d:eb:67:fe:d0: e1:70:3b:49:7d:00:1b:0c:cd:4f:b8:e3:33:3c:15:a2:18:67: f0:e8:2b:2a:5d:66:5b:c9:43:e4:39:e2:73:56:22:b7:b6:94: a3:a6:46:92:e2:4b:69:90:20:b4:ed:e8:89:2c:41:32:ef:bc: ff:ec:15:7e:4e:75:77:08:71:58:f8:aa:f7:fd:9c:a6:46:a6: f2:52:9a:fa:76:fd:ae:c2:5f:4b:69:d0:50:fe:a7:59:c2:7d: e7:88:3c:7b:75:19:d3:f5:4a:72:0f:39:dd:2f:b4:ad:77:14: b3:41:32:e5:b8:4b:27:c0:b6:71:bd:6e:cb:04:c3:8f:1f:5b: 07:e6:c9:59:1b:3c:62:a0:2f:e6:62:cb:b1:b3:db:91:85:e8: 33:73:9d:dd:ef:65:a9:91:22:77:dc:66:cd:08:f6:43:4e:a8: 1e:00:2c:04:30:e2:7a:34:42:dd:8c:6f:5f:d9:53:a1:9b:0b: c7:7d:7b:cf:37:65:b1:20:62:67:b2:29:7f:99:ef:fa:31:2f: 53:2b:34:62 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPdDfnMtuEXQUfklqyjVOQzbeimwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFD MENGMTU3RjAeFw0yNjAxMjAwMjE1MTZaFw0yNzAxMTkwMjIwMTZaMDMxMTAvBgNV BAMTKDFBMDU3NjZCQTk5OTREM0JGQTlEMTRFRURFNzM1RDVGRkFBNzI3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hPE5rPzN1rdS1+poHgoBd645 0rF3wAtSBVs/5Yhd4IAdJM7ywnXzVzYACCveC9BmRARZvxwm/j6JnA0xb62/k7DK gOLXA7xAuapzbOTO6TKfj9/cTMX7u7Z/B52HQkVH+0lUbyJFDLuw8dnPDTeFmgNH ogcJMq5LmK0YQLAzlkOeixhFWiXVHZl3GKrvqYMFs9R6ZMDC9G1GGVyl/J360FjJ GwONEo/BPSg/vZRN50LeYzjGkRiy2CX53npjcwJMuB1qsndOZ9HT5Fb3D8odr4DA f6X8g4gY00fvr+fjMWghNyhDTFAwAOSNjNUna7txdu2RIlGb2zYai4/XtuVlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUGgV2a6mZTTv6nRTu3nNdX/qnJ/EwHwYDVR0j BBgwFoAUBW9/ngNYfd/sagSeoPIPocDPFX8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODMzNzE1NS8wLzA1NkY3RjlFMDM1ODdEREZFQzZBMDQ5RUEwRjIw RkExQzBDRjE1N0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFDMENGMTU3Ri5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgzMzcxNTUvMC8zMTM1MzcyZTMx MzEzOTJlMzIzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAp138DANBgkqhkiG9w0BAQsFAAOCAQEA3sb4Lhjs497OS4mG7oD3 mPskgLKiY38C3vzjsxOMAwQ7+VTUsJlRthce08R5cuXu0x3rZ/7Q4XA7SX0AGwzN T7jjMzwVohhn8OgrKl1mW8lD5Dnic1Yit7aUo6ZGkuJLaZAgtO3oiSxBMu+8/+wV fk51dwhxWPiq9/2cpkam8lKa+nb9rsJfS2nQUP6nWcJ954g8e3UZ0/VKcg853S+0 rXcUs0Ey5bhLJ8C2cb1uywTDjx9bB+bJWRs8YqAv5mLLsbPbkYXoM3Od3e9lqZEi d9xmzQj2Q06oHgAsBDDiejRC3YxvX9lToZsLx317zzdlsSBiZ7Ipf5nv+jEvUys0 Yg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:39 2026 by rpki-client