This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/35392e38322e3133362e302f32312d3234203d3e203337393633.roa File: 35392e38322e3133362e302f32312d3234203d3e203337393633.roa (raw, json) Hash identifier: nvrBbCBZxiKHH4/w06YQmWfwNEM5VV1VM8cMrZ9eZm4= Subject key identifier: 83:44:E8:56:AE:15:49:BB:A6:1A:E1:37:66:80:E9:32:9B:20:04:2E Certificate issuer: /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Certificate serial: 5816CDED63EB619729904A1123DE022030D682A1 Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/35392e38322e3133362e302f32312d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 02:20:17 +0000 ROA not before: Tue 20 Jan 2026 02:15:17 +0000 ROA not after: Tue 19 Jan 2027 02:20:17 +0000 asID: 37963 IP address blocks: 59.82.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:16:cd:ed:63:eb:61:97:29:90:4a:11:23:de:02:20:30:d6:82:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Validity Not Before: Jan 20 02:15:17 2026 GMT Not After : Jan 19 02:20:17 2027 GMT Subject: CN=8344E856AE1549BBA61AE1376680E9329B20042E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:9f:87:2f:17:65:41:9a:ea:be:06:22:15: 72:21:ec:b8:ed:60:43:d8:ae:23:49:39:d1:35:37: 74:dd:9c:5b:2f:09:88:02:28:ab:04:d8:e6:9d:60: 18:a3:e6:b9:2d:ff:55:d9:de:e5:88:73:8c:e5:b5: cd:83:ed:00:18:a4:4a:93:5a:8a:41:f6:70:d1:d5: 09:d2:b2:6d:e1:50:b7:52:8f:c1:e5:72:3c:8c:01: 28:0c:10:e8:e0:e7:a6:4d:be:f6:00:1c:23:5e:a5: bc:2f:eb:a6:95:44:9f:c6:ca:60:7f:d8:2a:cc:05: 82:67:f4:82:ce:97:78:41:b0:f0:9e:45:e4:08:ba: 38:1e:55:c4:47:ff:b3:5d:b3:81:57:fe:29:04:8a: 94:39:3e:fd:7e:65:bc:5e:61:59:35:7e:46:cb:be: b0:49:fd:c0:ff:7a:f8:b6:75:69:e7:8b:de:56:a8: 7d:a0:f6:6b:6e:54:5e:c9:54:48:f2:63:34:06:0b: e3:2d:d1:83:c4:f7:a2:92:5e:8c:c9:78:41:94:18: 3d:6e:eb:8c:72:5c:5b:c2:14:f6:74:0b:a8:48:c2: 8d:52:32:97:94:99:db:52:d1:9b:2c:16:52:80:46: b6:73:55:a4:76:b1:fa:63:1a:e2:3e:6c:db:0f:d5: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:44:E8:56:AE:15:49:BB:A6:1A:E1:37:66:80:E9:32:9B:20:04:2E X509v3 Authority Key Identifier: keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/35392e38322e3133362e302f32312d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.82.136.0/21 Signature Algorithm: sha256WithRSAEncryption b5:06:c1:97:41:73:44:6e:6a:ef:49:31:0d:d7:60:f7:0d:19: 09:ab:aa:bd:b2:1e:8e:e5:9b:78:ac:e8:10:55:b1:15:58:a1: 48:cb:08:2f:f0:b7:5c:23:ea:1c:97:08:eb:94:5c:5c:ce:18: b9:1b:6b:42:9a:3e:c8:b9:12:6b:26:80:a2:34:48:70:43:eb: cb:4e:a6:6d:9e:00:32:56:e8:78:9a:4c:fa:ed:af:da:e8:3f: 7e:99:b3:f5:c5:28:78:21:68:b5:ba:2b:26:d2:4c:5b:28:42: 6e:f3:cf:8f:e0:89:1d:7f:d0:57:18:7d:97:39:01:aa:5f:34: f3:e7:f1:99:09:5b:1a:69:50:cd:00:6b:f5:11:4c:96:8f:d5: c5:04:27:f7:e6:0f:bc:3f:e3:6e:27:a5:20:f7:26:d2:bd:e0: b8:94:c5:7a:3c:41:c8:1c:e6:2a:2e:d4:4a:32:d2:00:41:8d: 5f:94:12:8d:74:ea:7f:96:57:c7:f4:a9:7e:73:db:3d:fd:c3: e2:fc:4a:02:df:8a:40:0f:6e:be:26:38:d7:ac:fd:cd:d4:2d: d6:d8:73:b8:7d:b3:6f:98:40:c0:ec:2c:f1:95:e5:16:6a:9e: cb:21:83:69:7e:2c:df:78:17:60:11:3f:04:ca:0d:8c:81:f6: be:97:3a:2a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUWBbN7WPrYZcpkEoRI94CIDDWgqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFD MENGMTU3RjAeFw0yNjAxMjAwMjE1MTdaFw0yNzAxMTkwMjIwMTdaMDMxMTAvBgNV BAMTKDgzNDRFODU2QUUxNTQ5QkJBNjFBRTEzNzY2ODBFOTMyOUIyMDA0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFp+HLxdlQZrqvgYiFXIh7Ljt YEPYriNJOdE1N3TdnFsvCYgCKKsE2OadYBij5rkt/1XZ3uWIc4zltc2D7QAYpEqT WopB9nDR1QnSsm3hULdSj8HlcjyMASgMEOjg56ZNvvYAHCNepbwv66aVRJ/GymB/ 2CrMBYJn9ILOl3hBsPCeReQIujgeVcRH/7Nds4FX/ikEipQ5Pv1+ZbxeYVk1fkbL vrBJ/cD/evi2dWnni95WqH2g9mtuVF7JVEjyYzQGC+Mt0YPE96KSXozJeEGUGD1u 64xyXFvCFPZ0C6hIwo1SMpeUmdtS0ZssFlKARrZzVaR2sfpjGuI+bNsP1QwdAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUg0ToVq4VSbumGuE3ZoDpMpsgBC4wHwYDVR0j BBgwFoAUBW9/ngNYfd/sagSeoPIPocDPFX8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODMzNzE1NS8wLzA1NkY3RjlFMDM1ODdEREZFQzZBMDQ5RUEwRjIw RkExQzBDRjE1N0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFDMENGMTU3Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MzM3MTU1LzAvMzUzOTJlMzgzMjJl MzEzMzM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAztSiDANBgkqhkiG9w0BAQsFAAOCAQEAtQbBl0FzRG5q70kxDddg9w0ZCauq vbIejuWbeKzoEFWxFVihSMsIL/C3XCPqHJcI65RcXM4YuRtrQpo+yLkSayaAojRI cEPry06mbZ4AMlboeJpM+u2v2ug/fpmz9cUoeCFotborJtJMWyhCbvPPj+CJHX/Q Vxh9lzkBql808+fxmQlbGmlQzQBr9RFMlo/VxQQn9+YPvD/jbielIPcm0r3guJTF ejxByBzmKi7USjLSAEGNX5QSjXTqf5ZXx/SpfnPbPf3D4vxKAt+KQA9uviY416z9 zdQt1thzuH2zb5hAwOws8ZXlFmqeyyGDaX4s33gXYBE/BMoNjIH2vpc6Kg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:50 2026 by rpki-client