This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa File: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (raw, json) Hash identifier: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco= Subject key identifier: C8:29:A7:41:E9:5C:1B:CF:01:0F:51:1B:30:82:4B:C8:21:EB:BA:E1 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 2FF452850193A2C35A4A40BC5922687C516F55BA Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa Signing time: Tue 20 Jan 2026 02:27:17 +0000 ROA not before: Tue 20 Jan 2026 02:22:17 +0000 ROA not after: Tue 19 Jan 2027 02:27:17 +0000 asID: 4812 IP address blocks: 120.136.160.0/21 maxlen: 25 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f4:52:85:01:93:a2:c3:5a:4a:40:bc:59:22:68:7c:51:6f:55:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:17 2026 GMT Not After : Jan 19 02:27:17 2027 GMT Subject: CN=C829A741E95C1BCF010F511B30824BC821EBBAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:ae:4f:b1:d7:eb:4e:3a:e4:3b:b9:ad:6b: 74:9f:8a:3f:cd:cb:eb:08:2d:4e:66:c1:2e:20:73: 14:d4:d7:bb:5f:69:4a:aa:90:5d:b9:28:6d:6e:43: 58:43:e4:09:45:f5:fe:cb:64:aa:06:f0:e1:a7:14: d7:a4:49:35:fb:04:99:68:88:f8:eb:ad:15:d0:66: 47:51:16:cc:7c:ee:f8:f9:e2:bf:19:c5:2a:78:1d: 08:79:ab:c8:56:12:61:96:0f:a9:45:97:c4:42:18: d7:09:a4:ca:8c:bc:f2:d4:38:fd:31:24:3a:e3:87: 8f:f2:84:00:8f:09:89:61:3f:26:42:74:91:82:e9: 87:bb:c1:c6:b1:af:3c:8b:50:b6:74:54:75:d4:b5: 45:44:f9:75:ed:f1:77:e2:89:5b:c3:d0:85:89:b4: 9b:e8:19:ae:a1:ca:93:44:5c:9b:8c:66:2b:32:fe: 1b:01:50:ab:19:7f:c4:a7:79:4f:6a:10:20:b5:8a: 06:49:8e:ee:db:b4:77:08:1e:4e:13:62:88:bb:09: f1:52:14:26:7f:99:0c:db:94:99:64:f1:fd:f9:70: 5f:8f:58:c2:43:ea:b1:16:9f:98:5e:7f:c7:e5:11: 7b:58:5a:2c:74:5f:65:47:cc:85:3d:b5:61:fe:58: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:29:A7:41:E9:5C:1B:CF:01:0F:51:1B:30:82:4B:C8:21:EB:BA:E1 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.136.160.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:21:4c:3c:04:29:c6:63:73:f1:ee:78:0c:3b:37:b3:ec:5f: 2d:34:a6:1a:e0:69:71:8c:62:4c:dd:47:df:87:e4:50:d9:1b: 3f:53:ef:f8:8f:fb:57:64:71:b5:ab:ff:89:9f:0e:8b:18:17: 41:0a:e1:83:74:b5:ed:c3:5c:da:4f:8b:22:e9:3b:de:09:5a: 9f:82:14:79:cb:87:6f:30:b9:94:54:ea:a9:6e:52:f9:f8:1b: 02:8c:2c:09:4b:35:2c:c7:c0:03:ec:1b:71:9f:01:27:d1:f4: 82:8f:a5:b0:6b:95:69:c0:25:fd:ef:26:ec:c2:c2:86:8f:ae: 8b:cd:ad:60:d4:9e:c2:9e:ad:e3:2a:e7:9d:ef:5a:43:72:fa: e4:94:f8:8b:12:50:65:ab:34:5d:c0:96:7e:c9:7c:56:69:cb: 03:0c:30:cb:b4:bf:e3:6b:d5:a5:86:35:0d:d5:42:9b:40:c7: 45:7e:e5:a2:28:02:02:77:ca:2b:b8:a6:0d:b2:49:54:42:85: eb:63:94:ec:53:3a:02:d5:01:1d:5f:98:a4:8d:f6:c3:c8:79: 5f:88:e6:a3:79:3f:12:ea:5c:d6:c8:fa:37:89:3e:c0:45:84: f6:a7:f6:dc:93:34:56:68:cf:a7:cd:94:0f:d0:a3:b3:38:66: 5e:ae:da:12 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUL/RShQGTosNaSkC8WSJofFFvVbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTdaFw0yNzAxMTkwMjI3MTdaMDMxMTAvBgNV BAMTKEM4MjlBNzQxRTk1QzFCQ0YwMTBGNTExQjMwODI0QkM4MjFFQkJBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqya5PsdfrTjrkO7mta3Sfij/N y+sILU5mwS4gcxTU17tfaUqqkF25KG1uQ1hD5AlF9f7LZKoG8OGnFNekSTX7BJlo iPjrrRXQZkdRFsx87vj54r8ZxSp4HQh5q8hWEmGWD6lFl8RCGNcJpMqMvPLUOP0x JDrjh4/yhACPCYlhPyZCdJGC6Ye7wcaxrzyLULZ0VHXUtUVE+XXt8XfiiVvD0IWJ tJvoGa6hypNEXJuMZisy/hsBUKsZf8SneU9qECC1igZJju7btHcIHk4TYoi7CfFS FCZ/mQzblJlk8f35cF+PWMJD6rEWn5hef8flEXtYWix0X2VHzIU9tWH+WL5vAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUyCmnQelcG88BD1EbMIJLyCHruuEwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MTc4NjI0Mi8wLzMxMzIzMDJlMzEz MzM2MmUzMTM2MzAyZTMwMmYzMjMxMmQzMjM1MjAzZDNlMjAzNDM4MzEzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA3iIoDANBgkqhkiG9w0BAQsFAAOCAQEAOyFMPAQpxmNz8e54DDs3s+xf LTSmGuBpcYxiTN1H34fkUNkbP1Pv+I/7V2Rxtav/iZ8OixgXQQrhg3S17cNc2k+L Iuk73glan4IUecuHbzC5lFTqqW5S+fgbAowsCUs1LMfAA+wbcZ8BJ9H0go+lsGuV acAl/e8m7MLCho+ui82tYNSewp6t4yrnne9aQ3L65JT4ixJQZas0XcCWfsl8VmnL Awwwy7S/42vVpYY1DdVCm0DHRX7loigCAnfKK7imDbJJVEKF62OU7FM6AtUBHV+Y pI32w8h5X4jmo3k/Eupc1sj6N4k+wEWE9qf23JM0VmjPp82UD9CjszhmXq7aEg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:48 2026 by rpki-client