This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa File: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (raw, json) Hash identifier: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM= Subject key identifier: 31:ED:5A:98:8C:AA:40:B1:1E:EA:04:B4:E7:08:40:BD:BA:D7:CD:40 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 2D18E9615FB5C7CE14E309E78B6C0C7106B59B78 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa Signing time: Tue 20 Jan 2026 02:27:18 +0000 ROA not before: Tue 20 Jan 2026 02:22:18 +0000 ROA not after: Tue 19 Jan 2027 02:27:18 +0000 asID: 4812 IP address blocks: 120.136.156.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:18:e9:61:5f:b5:c7:ce:14:e3:09:e7:8b:6c:0c:71:06:b5:9b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:18 2026 GMT Not After : Jan 19 02:27:18 2027 GMT Subject: CN=31ED5A988CAA40B11EEA04B4E70840BDBAD7CD40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d2:64:d3:9c:3a:39:69:e1:35:6f:9b:f8:aa: ed:49:b6:95:06:99:99:91:cb:a5:03:8f:c2:1f:24: b3:f9:b0:92:31:41:6f:d4:8c:97:28:10:da:d4:5c: 47:99:b5:10:d3:8c:36:70:51:00:dd:4c:11:7b:d4: 54:bb:20:74:5e:92:60:e4:7b:d8:70:f8:3a:5c:ba: be:3c:5d:2c:bd:e1:0d:9e:c1:3b:85:53:44:fe:31: 29:fa:ed:d6:5b:62:8c:3c:be:b9:4f:80:bc:dc:a9: 3b:8a:a7:32:35:a2:67:11:10:cb:b7:e9:07:42:2b: c7:17:13:3b:8c:27:9e:12:0d:07:5e:6b:50:88:f9: 5a:7e:37:f5:fa:69:5f:60:b2:68:96:2b:5f:cb:61: 47:87:ea:ed:fa:e0:a2:46:d1:bd:5c:da:cc:f4:e8: f1:56:81:31:b3:d7:f9:3f:5a:7e:29:c3:ae:5d:a2: a9:e0:b2:6c:db:38:c6:d1:73:f7:25:ae:ff:2f:aa: fd:cc:ce:ec:ec:a3:d9:06:31:46:20:b0:42:8b:3f: f9:80:1b:98:b3:1b:05:20:b2:cb:c9:97:2d:60:92: 27:f8:1c:14:f5:d8:23:b5:9f:a4:7b:83:95:fd:b0: a0:6a:0c:88:b6:f4:7a:73:a5:ff:04:8f:ea:69:39: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:ED:5A:98:8C:AA:40:B1:1E:EA:04:B4:E7:08:40:BD:BA:D7:CD:40 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.136.156.0/22 Signature Algorithm: sha256WithRSAEncryption a5:83:c6:e9:6b:98:7e:45:d4:67:9d:10:29:37:08:72:9d:f8: 6b:a0:74:33:a2:56:ab:22:c3:b0:18:5b:76:ae:92:ac:3e:ca: f6:14:54:19:33:26:42:d7:9f:42:b3:13:6c:c6:e8:11:9d:97: 10:05:c3:2d:4b:4d:03:d0:e2:25:82:2e:2a:a7:26:97:33:2b: b0:4b:50:2a:5b:45:dc:53:8f:21:db:69:21:10:4e:a1:15:1c: 67:95:a9:a0:9d:91:85:6f:c9:e4:40:4b:bf:fd:08:3e:d1:5e: 5b:59:8f:7a:d5:a6:01:1d:cc:3a:a2:cf:4b:ea:61:05:df:59: 44:04:2a:ab:ba:e9:79:ab:5d:df:3d:14:2b:73:47:3b:53:2e: 41:3d:81:b9:70:7b:13:95:16:1b:f3:28:a6:dd:af:9d:5f:46: e0:b7:31:37:16:c2:bc:43:9f:47:3e:db:21:3a:8f:a4:5c:8a: 9f:bb:a4:86:2e:8e:43:b3:32:10:6f:63:20:5b:58:9d:30:cb: b3:17:f3:39:03:3e:49:a7:0f:58:b2:22:fb:0d:5e:52:1c:b2: e9:e7:35:36:1c:e2:bb:f7:98:c1:c4:3f:a4:af:57:99:d5:fe: 5b:64:73:6f:14:25:f5:f1:3b:eb:23:c9:ec:21:8b:ba:2b:51: 89:c1:68:d4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULRjpYV+1x84U4wnni2wMcQa1m3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMThaFw0yNzAxMTkwMjI3MThaMDMxMTAvBgNV BAMTKDMxRUQ1QTk4OENBQTQwQjExRUVBMDRCNEU3MDg0MEJEQkFEN0NENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ0mTTnDo5aeE1b5v4qu1JtpUG mZmRy6UDj8IfJLP5sJIxQW/UjJcoENrUXEeZtRDTjDZwUQDdTBF71FS7IHRekmDk e9hw+Dpcur48XSy94Q2ewTuFU0T+MSn67dZbYow8vrlPgLzcqTuKpzI1omcREMu3 6QdCK8cXEzuMJ54SDQdea1CI+Vp+N/X6aV9gsmiWK1/LYUeH6u364KJG0b1c2sz0 6PFWgTGz1/k/Wn4pw65doqngsmzbOMbRc/clrv8vqv3Mzuzso9kGMUYgsEKLP/mA G5izGwUgssvJly1gkif4HBT12CO1n6R7g5X9sKBqDIi29Hpzpf8Ej+ppOVP7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUMe1amIyqQLEe6gS05whAvbrXzUAwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MTc4NjI0Mi8wLzMxMzIzMDJlMzEz MzM2MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM1MjAzZDNlMjAzNDM4MzEzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAniInDANBgkqhkiG9w0BAQsFAAOCAQEApYPG6WuYfkXUZ50QKTcIcp34 a6B0M6JWqyLDsBhbdq6SrD7K9hRUGTMmQtefQrMTbMboEZ2XEAXDLUtNA9DiJYIu KqcmlzMrsEtQKltF3FOPIdtpIRBOoRUcZ5WpoJ2RhW/J5EBLv/0IPtFeW1mPetWm AR3MOqLPS+phBd9ZRAQqq7rpeatd3z0UK3NHO1MuQT2BuXB7E5UWG/Mopt2vnV9G 4LcxNxbCvEOfRz7bITqPpFyKn7ukhi6OQ7MyEG9jIFtYnTDLsxfzOQM+SacPWLIi +w1eUhyy6ec1Nhziu/eYwcQ/pK9XmdX+W2RzbxQl9fE76yPJ7CGLuitRicFo1A== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:54 2026 by rpki-client