This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa File: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (raw, json) Hash identifier: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A= Subject key identifier: F3:AE:02:EE:B7:A0:82:60:2F:C4:CB:55:F7:D8:D5:7B:81:AD:F5:D9 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 20FBAAAE55775EF1BA6A6CA0F732776C22D0D6BF Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:18 +0000 ROA not before: Tue 20 Jan 2026 02:22:18 +0000 ROA not after: Tue 19 Jan 2027 02:27:18 +0000 asID: 23853 IP address blocks: 120.136.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fb:aa:ae:55:77:5e:f1:ba:6a:6c:a0:f7:32:77:6c:22:d0:d6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:18 2026 GMT Not After : Jan 19 02:27:18 2027 GMT Subject: CN=F3AE02EEB7A082602FC4CB55F7D8D57B81ADF5D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:a1:82:0a:ad:7c:02:42:a4:88:9f:95:74: 22:75:0d:62:fa:8b:25:22:75:58:88:90:21:16:7c: 96:78:85:89:36:e2:16:ff:61:4b:b7:26:67:27:bc: 5b:59:82:32:99:9e:a5:ee:ec:97:ff:6b:b4:e4:a5: 98:e5:1b:c7:30:c9:ff:2e:52:6b:8d:88:a6:94:88: 2e:bf:8a:b3:80:3e:e6:0a:36:ac:ac:b3:95:07:b5: 6c:d0:47:7a:46:f4:19:28:df:9e:bb:a6:a1:bf:ec: a2:ef:29:8b:25:d0:0c:fd:47:1e:01:20:05:eb:05: e0:f4:30:e5:07:9f:8d:dd:b9:f0:b3:71:4d:e2:cb: d7:79:69:f9:09:6b:27:e9:fc:2a:e9:7b:70:ab:2d: 92:e4:3c:79:b6:a3:90:bc:b5:ab:ab:22:4f:44:a5: d0:8f:37:f2:e1:36:0d:ea:f9:06:f2:7a:01:47:12: b1:48:3b:b2:bb:c4:70:32:58:68:02:53:73:2b:6c: be:a0:90:35:95:b7:e3:fe:8d:7e:01:6b:c6:d5:7f: 51:18:3f:b6:93:9c:e0:a4:ec:df:42:3c:ff:47:68: 6a:91:47:2e:dd:7d:f0:72:d2:20:bb:cc:fa:90:9b: 96:1c:d4:0a:f7:9d:23:6a:11:b4:99:e5:98:65:67: 55:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AE:02:EE:B7:A0:82:60:2F:C4:CB:55:F7:D8:D5:7B:81:AD:F5:D9 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.136.128.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:84:79:61:30:83:36:f4:fb:af:61:23:7b:be:e9:70:54:f5: 9d:46:e3:fd:c2:e7:27:01:b0:4f:a4:4c:e3:7c:4e:a2:c9:07: d1:b1:f6:03:97:b3:e8:c2:2a:78:6d:1d:a4:54:53:4d:85:ba: 64:1e:28:ca:e0:27:0d:a1:ca:5c:4d:4b:69:0e:72:a2:80:30: 70:97:68:c9:a7:90:e4:6b:78:e1:5a:c1:db:e8:63:50:79:7e: 98:d0:f8:de:84:e4:a0:16:af:ff:b2:bc:8d:fd:84:8b:4e:49: 2f:d8:e9:e6:a0:e6:d1:db:ef:c1:37:79:73:38:43:96:c3:13: db:ea:fa:1e:a4:3f:d7:92:a3:bf:52:98:a3:f7:a3:b2:0a:e1: 17:62:23:89:5c:06:ae:38:8c:11:67:f5:80:59:a4:bc:8f:43: a9:bb:31:06:59:71:7d:94:8f:db:07:9e:4b:91:ba:f1:3f:2d: f6:41:b1:57:c1:ba:02:86:ec:26:43:21:56:d9:4e:b8:0b:f4: c3:d2:94:55:c9:ef:e5:36:31:ab:b4:36:50:67:85:59:92:a4: 31:43:71:e8:49:f9:0b:f3:d8:8f:94:27:79:7c:df:bb:41:cc: 82:e9:d0:44:a8:78:a2:be:80:e3:b0:1a:0d:fa:94:e9:0f:28: c3:34:95:a0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIPuqrlV3XvG6amyg9zJ3bCLQ1r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMThaFw0yNzAxMTkwMjI3MThaMDMxMTAvBgNV BAMTKEYzQUUwMkVFQjdBMDgyNjAyRkM0Q0I1NUY3RDhENTdCODFBREY1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu76GCCq18AkKkiJ+VdCJ1DWL6 iyUidViIkCEWfJZ4hYk24hb/YUu3JmcnvFtZgjKZnqXu7Jf/a7TkpZjlG8cwyf8u UmuNiKaUiC6/irOAPuYKNqyss5UHtWzQR3pG9Bko3567pqG/7KLvKYsl0Az9Rx4B IAXrBeD0MOUHn43dufCzcU3iy9d5afkJayfp/Crpe3CrLZLkPHm2o5C8taurIk9E pdCPN/LhNg3q+QbyegFHErFIO7K7xHAyWGgCU3MrbL6gkDWVt+P+jX4Ba8bVf1EY P7aTnOCk7N9CPP9HaGqRRy7dffBy0iC7zPqQm5Yc1Ar3nSNqEbSZ5ZhlZ1UhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU864C7reggmAvxMtV99jVe4Gt9dkwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zMTMyMzAyZTMx MzMzNjJlMzEzMjM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA3iIgDANBgkqhkiG9w0BAQsFAAOCAQEAa4R5YTCDNvT7r2Eje77p cFT1nUbj/cLnJwGwT6RM43xOoskH0bH2A5ez6MIqeG0dpFRTTYW6ZB4oyuAnDaHK XE1LaQ5yooAwcJdoyaeQ5Gt44VrB2+hjUHl+mND43oTkoBav/7K8jf2Ei05JL9jp 5qDm0dvvwTd5czhDlsMT2+r6HqQ/15Kjv1KYo/ejsgrhF2IjiVwGrjiMEWf1gFmk vI9DqbsxBllxfZSP2weeS5G68T8t9kGxV8G6AobsJkMhVtlOuAv0w9KUVcnv5TYx q7Q2UGeFWZKkMUNx6En5C/PYj5QneXzfu0HMgunQRKh4or6A47AaDfqU6Q8owzSV oA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:55 2026 by rpki-client