This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa File: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (raw, json) Hash identifier: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA= Subject key identifier: 72:5D:55:34:C6:E3:52:5E:1C:43:3E:2F:57:22:FE:AE:2F:CF:10:47 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 30C56E1A35332DDB85B5C37381ED98C21231AD33 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:16 +0000 ROA not before: Tue 20 Jan 2026 02:22:16 +0000 ROA not after: Tue 19 Jan 2027 02:27:16 +0000 asID: 23853 IP address blocks: 211.144.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c5:6e:1a:35:33:2d:db:85:b5:c3:73:81:ed:98:c2:12:31:ad:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:16 2026 GMT Not After : Jan 19 02:27:16 2027 GMT Subject: CN=725D5534C6E3525E1C433E2F5722FEAE2FCF1047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:6f:a1:17:a1:3d:33:0b:5b:50:48:12:27: 1b:8c:55:e3:ea:93:c2:5a:4b:84:1d:d2:65:b5:51: a7:a4:64:08:72:eb:60:43:52:c8:9c:79:65:07:ca: d2:0f:7c:04:ad:ab:5b:8b:22:0f:bb:d5:8b:27:c1: 02:9c:3e:0b:07:76:aa:72:82:c5:d9:96:81:8c:0d: 62:b7:eb:b2:03:59:16:be:33:a9:c1:26:7a:cf:8e: 6c:ff:49:54:a3:cf:fa:09:6d:ec:26:19:d6:50:15: b0:30:82:a4:eb:7a:1b:ff:c7:7d:c1:a0:d6:b8:8f: e5:fc:45:06:0c:92:d1:22:fd:64:9e:3c:93:6c:09: 72:aa:bf:e1:fe:d0:2b:ad:10:88:d2:2c:07:e2:5a: 16:e2:d0:5f:dd:ac:22:e5:97:75:39:86:4d:fc:6b: 65:62:de:c4:31:3d:05:45:fd:05:2a:bd:55:6a:b3: 6d:f1:57:a3:8e:39:9e:5e:5b:a8:97:a4:57:2e:42: 92:90:cb:94:b7:24:04:8b:5b:aa:26:2f:49:9e:43: 56:da:1d:77:42:b2:6a:1d:2f:6c:f8:1a:6b:7e:41: 9c:25:c4:15:3e:75:84:2e:a3:3c:78:0c:0a:9b:49: 66:ef:93:37:af:eb:71:ea:b2:e0:54:5f:c6:9e:f8: 9d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5D:55:34:C6:E3:52:5E:1C:43:3E:2F:57:22:FE:AE:2F:CF:10:47 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.144.208.0/20 Signature Algorithm: sha256WithRSAEncryption 65:01:a7:a9:d7:0c:f4:95:ce:c9:92:37:a8:53:ae:c3:9c:73: c7:6f:54:eb:ac:05:04:db:2b:0f:da:a7:4f:15:d4:54:c9:5f: a6:dd:8a:65:aa:6c:a5:66:7e:1d:cc:51:10:ec:00:96:fb:44: 00:13:4f:4b:9f:64:15:c3:25:12:58:69:f4:bd:34:02:a7:6a: 14:d5:c8:c6:bd:bb:2d:7c:d2:89:cf:4a:c4:e4:c8:4e:c2:5e: 8f:09:c5:0a:67:55:b4:26:5d:5a:24:56:34:64:82:cd:f5:a2: 67:a4:a4:fc:48:6d:bb:c9:94:c4:f9:aa:aa:8b:16:49:63:b4: 9d:a0:b6:ee:19:e9:c0:65:8b:d6:8c:0b:c6:d2:6a:43:bb:c3: 25:46:52:0a:7f:f6:63:c3:3d:62:24:0d:46:78:c2:94:a9:c3: 26:88:c4:97:73:39:e4:22:53:e0:69:9f:f2:91:3c:24:ec:bd: 09:6f:44:64:33:5f:65:fd:91:e3:e0:27:e0:48:d4:f4:41:85: a6:9b:25:01:3d:66:d4:39:fb:4a:0f:10:ae:78:ee:48:1a:8b: 48:f6:9c:6f:3c:8d:bf:12:5e:4a:32:95:db:b4:91:30:9e:f9: 32:21:43:49:f0:44:83:1f:f8:ab:49:5e:9e:9d:c6:6d:96:e2: 7c:87:13:e6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMMVuGjUzLduFtcNzge2YwhIxrTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTZaFw0yNzAxMTkwMjI3MTZaMDMxMTAvBgNV BAMTKDcyNUQ1NTM0QzZFMzUyNUUxQzQzM0UyRjU3MjJGRUFFMkZDRjEwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKW+hF6E9MwtbUEgSJxuMVePq k8JaS4Qd0mW1UaekZAhy62BDUsiceWUHytIPfAStq1uLIg+71YsnwQKcPgsHdqpy gsXZloGMDWK367IDWRa+M6nBJnrPjmz/SVSjz/oJbewmGdZQFbAwgqTrehv/x33B oNa4j+X8RQYMktEi/WSePJNsCXKqv+H+0CutEIjSLAfiWhbi0F/drCLll3U5hk38 a2Vi3sQxPQVF/QUqvVVqs23xV6OOOZ5eW6iXpFcuQpKQy5S3JASLW6omL0meQ1ba HXdCsmodL2z4Gmt+QZwlxBU+dYQuozx4DAqbSWbvkzev63HqsuBUX8ae+J1RAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUcl1VNMbjUl4cQz4vVyL+ri/PEEcwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zMjMxMzEyZTMx MzQzNDJlMzIzMDM4MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBNOQ0DANBgkqhkiG9w0BAQsFAAOCAQEAZQGnqdcM9JXOyZI3qFOu w5xzx29U66wFBNsrD9qnTxXUVMlfpt2KZapspWZ+HcxREOwAlvtEABNPS59kFcMl Elhp9L00AqdqFNXIxr27LXzSic9KxOTITsJejwnFCmdVtCZdWiRWNGSCzfWiZ6Sk /Ehtu8mUxPmqqosWSWO0naC27hnpwGWL1owLxtJqQ7vDJUZSCn/2Y8M9YiQNRnjC lKnDJojEl3M55CJT4Gmf8pE8JOy9CW9EZDNfZf2R4+An4EjU9EGFppslAT1m1Dn7 Sg8QrnjuSBqLSPacbzyNvxJeSjKV27SRMJ75MiFDSfBEgx/4q0lenp3GbZbifIcT 5g== -----END CERTIFICATE-----Generated at Sun Jan 25 11:14:06 2026 by rpki-client