This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa File: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (raw, json) Hash identifier: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A= Subject key identifier: 9A:B9:1E:26:85:C3:0F:8D:41:F7:7C:99:A9:9B:A7:77:DB:C7:34:3C Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 69897245DF229693576AD18AD6D1C1D800F847C3 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa Signing time: Tue 20 Jan 2026 02:27:17 +0000 ROA not before: Tue 20 Jan 2026 02:22:17 +0000 ROA not after: Tue 19 Jan 2027 02:27:17 +0000 asID: 17621 IP address blocks: 120.136.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:89:72:45:df:22:96:93:57:6a:d1:8a:d6:d1:c1:d8:00:f8:47:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:17 2026 GMT Not After : Jan 19 02:27:17 2027 GMT Subject: CN=9AB91E2685C30F8D41F77C99A99BA777DBC7343C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:0b:60:d0:77:d7:3b:b6:e6:5d:62:3c:45: ea:32:aa:12:78:50:09:54:ba:d8:6a:ee:c5:a0:78: 55:60:6b:bb:ad:8f:af:0f:7c:14:8e:a6:83:82:3d: 75:c5:7d:ff:e7:29:be:48:8c:77:aa:90:1f:b1:7d: a5:4a:63:7f:fa:03:a0:ba:82:5b:89:51:05:08:2c: 22:a7:8f:69:a3:07:ba:ff:9f:df:23:c9:3e:b2:16: a4:36:3b:70:9a:c0:f0:a9:78:6b:ca:e5:c7:8a:18: a6:3f:9e:ca:7d:82:26:f8:15:6b:62:5e:8b:c6:d8: 94:36:5b:17:e8:c0:3d:58:e7:fb:30:ca:ac:c0:20: 16:ce:3b:7c:73:53:da:ce:c8:8d:d3:b4:7d:c4:f7: a9:29:91:6b:ad:d5:4a:9e:89:2f:64:f2:01:b8:06: 7e:3b:97:02:d4:a8:ab:8d:6e:cf:8e:b7:34:e4:30: 23:64:7f:03:5b:ea:85:e5:38:e0:e8:9b:62:14:03: 89:65:7c:42:3c:ee:f2:51:8c:a0:9c:b9:d5:28:8e: 21:c4:74:be:77:6d:81:90:6d:bb:17:04:18:4d:cc: c2:6b:7c:8b:5d:91:28:f0:21:e5:72:f7:d7:a2:a2: 23:9c:14:34:ba:58:05:bb:17:70:dc:ff:28:9b:9e: e4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B9:1E:26:85:C3:0F:8D:41:F7:7C:99:A9:9B:A7:77:DB:C7:34:3C X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.136.176.0/22 Signature Algorithm: sha256WithRSAEncryption a4:d7:3c:0b:b4:1a:05:45:7b:93:c4:84:e0:4e:2c:4d:30:5b: 57:13:79:c7:94:63:d7:5c:22:1d:5e:04:46:d8:26:73:89:51: 27:a4:9a:c0:db:ec:47:71:2c:33:68:d1:90:ef:08:c9:53:fa: bd:66:dd:a9:66:07:d7:ea:03:6e:d7:88:c5:8c:3f:df:1b:32: 81:b9:5f:a4:ff:77:86:de:6b:84:09:45:db:cc:62:f9:4f:2c: fe:76:22:ff:a8:98:7c:33:e3:e9:e1:7c:4b:24:0e:60:2c:14: 25:6e:dc:f9:ca:87:81:32:e5:1c:9f:9b:c7:ae:0a:2f:02:5e: 4d:e9:13:06:10:d2:23:5c:a7:38:f4:db:61:44:1f:12:a4:02: e8:24:62:ad:51:a0:15:f7:91:fd:89:32:e9:0b:de:49:d7:97: b5:ee:d4:2f:58:45:fe:e8:ac:90:0b:d5:76:a4:43:b2:6a:6e: 40:54:82:50:65:1f:72:10:25:cd:19:9c:c6:53:1d:cd:16:a5: d5:42:ac:2c:39:8b:1f:59:af:ca:c1:1a:dd:b3:89:8e:0c:0b: fa:47:97:d9:1f:3c:45:b7:c7:07:90:7c:42:c9:74:9d:14:f7: f7:64:38:07:7f:2d:a9:db:18:1d:07:88:03:db:03:9b:0c:9e: 13:61:3a:31 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUaYlyRd8ilpNXatGK1tHB2AD4R8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTdaFw0yNzAxMTkwMjI3MTdaMDMxMTAvBgNV BAMTKDlBQjkxRTI2ODVDMzBGOEQ0MUY3N0M5OUE5OUJBNzc3REJDNzM0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTAtg0HfXO7bmXWI8ReoyqhJ4 UAlUuthq7sWgeFVga7utj68PfBSOpoOCPXXFff/nKb5IjHeqkB+xfaVKY3/6A6C6 gluJUQUILCKnj2mjB7r/n98jyT6yFqQ2O3CawPCpeGvK5ceKGKY/nsp9gib4FWti XovG2JQ2WxfowD1Y5/swyqzAIBbOO3xzU9rOyI3TtH3E96kpkWut1UqeiS9k8gG4 Bn47lwLUqKuNbs+OtzTkMCNkfwNb6oXlOODom2IUA4llfEI87vJRjKCcudUojiHE dL53bYGQbbsXBBhNzMJrfItdkSjwIeVy99eioiOcFDS6WAW7F3Dc/yibnuT9AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmrkeJoXDD41B93yZqZund9vHNDwwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zMTMyMzAyZTMx MzMzNjJlMzEzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAniIsDANBgkqhkiG9w0BAQsFAAOCAQEApNc8C7QaBUV7k8SE4E4s TTBbVxN5x5Rj11wiHV4ERtgmc4lRJ6SawNvsR3EsM2jRkO8IyVP6vWbdqWYH1+oD bteIxYw/3xsygblfpP93ht5rhAlF28xi+U8s/nYi/6iYfDPj6eF8SyQOYCwUJW7c +cqHgTLlHJ+bx64KLwJeTekTBhDSI1ynOPTbYUQfEqQC6CRirVGgFfeR/Yky6Qve SdeXte7UL1hF/uiskAvVdqRDsmpuQFSCUGUfchAlzRmcxlMdzRal1UKsLDmLH1mv ysEa3bOJjgwL+keX2R88RbfHB5B8Qsl0nRT392Q4B38tqdsYHQeIA9sDmwyeE2E6 MQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:44 2026 by rpki-client