This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3231312e3134372e36342e302f32302d3234203d3e203233383533.roa File: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (raw, json) Hash identifier: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8= Subject key identifier: 49:95:47:2D:5A:B9:01:8C:49:11:57:D3:A5:1A:7E:2E:15:D4:14:E9 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 2A34DB6DFF17C9C051EDDD8A24FAB05957875D01 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3231312e3134372e36342e302f32302d3234203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:17 +0000 ROA not before: Tue 20 Jan 2026 02:22:17 +0000 ROA not after: Tue 19 Jan 2027 02:27:17 +0000 asID: 23853 IP address blocks: 211.147.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:34:db:6d:ff:17:c9:c0:51:ed:dd:8a:24:fa:b0:59:57:87:5d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:17 2026 GMT Not After : Jan 19 02:27:17 2027 GMT Subject: CN=4995472D5AB9018C491157D3A51A7E2E15D414E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:56:27:45:67:ef:c9:c9:a2:c7:24:01:c3:5b: c9:82:af:70:05:7c:d6:15:eb:3a:49:74:24:6e:4a: 53:02:3d:d8:1e:ac:77:a5:b7:dd:78:45:49:3f:c7: 0a:fc:f0:35:56:58:b7:54:fb:fd:70:fc:6a:ab:47: fc:27:42:05:7b:b3:e0:b5:d5:c3:5d:66:75:f0:32: f3:79:5c:03:95:ae:b0:63:d7:2e:07:f1:07:1e:55: cb:cf:e0:5c:b7:9c:fc:0c:1b:f2:9e:ea:bf:48:46: 43:c4:8c:40:2b:f2:d0:81:c6:33:8b:2e:e3:ea:ae: af:17:f9:23:78:24:e9:b0:2a:1f:0a:72:b4:b4:bd: ae:05:f9:85:ac:39:28:fd:4f:93:b5:0b:5b:4e:ef: 45:ca:7b:46:8f:7c:de:d2:e4:56:21:4d:cd:1d:18: 32:6a:e9:f3:42:84:96:44:23:6c:63:e4:68:c7:4e: f8:57:4a:09:35:98:30:33:d3:3d:cd:51:ab:74:94: be:13:60:77:71:71:4a:fe:d9:0f:4a:23:cf:b3:86: 11:9a:dc:d8:20:70:81:74:b3:4c:99:e8:c9:0a:a8: dc:c4:a3:42:17:a7:9b:e9:b5:bf:73:63:11:25:42: 1f:2f:3c:0d:4d:77:46:fd:1f:55:e2:9c:60:af:f0: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:95:47:2D:5A:B9:01:8C:49:11:57:D3:A5:1A:7E:2E:15:D4:14:E9 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3231312e3134372e36342e302f32302d3234203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.147.64.0/20 Signature Algorithm: sha256WithRSAEncryption 70:12:5f:60:ae:8e:3f:49:12:10:05:48:0b:d9:b4:02:e6:eb: e1:65:63:de:e1:85:88:4c:57:b1:31:28:33:6e:58:49:e6:7c: 7d:ed:7e:12:e5:e6:46:a8:75:d9:fb:ab:f7:68:17:cf:ed:6e: 8f:67:98:8c:03:04:22:89:50:76:98:ca:17:c9:1b:2b:69:84: 6e:d9:2a:da:60:95:bb:49:39:8c:c4:82:26:0d:70:d7:c8:f1: ec:d4:b5:a9:fe:0d:02:40:21:bc:e1:76:ee:9b:52:c0:4a:10: aa:ef:e6:2e:e8:9a:c5:04:ae:b6:5f:a1:dd:29:e1:50:9a:1f: 0a:d6:49:a1:66:8e:11:5c:e4:0c:10:48:ec:89:f6:59:02:0a: 5c:0b:dc:16:13:eb:5f:d9:fe:b9:85:ec:39:d0:5e:78:55:75: 83:2b:63:7b:c7:01:24:7a:43:5e:fc:b4:e0:ea:8d:99:c8:4e: 93:32:78:c0:68:cc:76:c4:a8:50:4b:b5:22:9d:d6:ac:4d:db: 10:f5:de:fb:e8:26:4a:c8:93:52:24:b5:e8:f9:a7:02:fd:f4: 91:fb:70:37:1b:01:1c:7b:ee:72:36:c8:59:97:64:05:64:b9: 68:2f:f7:bd:1c:ef:9a:02:c7:62:6a:8a:6e:d9:b7:ca:bf:7b: 5b:be:0a:8d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKjTbbf8XycBR7d2KJPqwWVeHXQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTdaFw0yNzAxMTkwMjI3MTdaMDMxMTAvBgNV BAMTKDQ5OTU0NzJENUFCOTAxOEM0OTExNTdEM0E1MUE3RTJFMTVENDE0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHVidFZ+/JyaLHJAHDW8mCr3AF fNYV6zpJdCRuSlMCPdgerHelt914RUk/xwr88DVWWLdU+/1w/GqrR/wnQgV7s+C1 1cNdZnXwMvN5XAOVrrBj1y4H8QceVcvP4Fy3nPwMG/Ke6r9IRkPEjEAr8tCBxjOL LuPqrq8X+SN4JOmwKh8KcrS0va4F+YWsOSj9T5O1C1tO70XKe0aPfN7S5FYhTc0d GDJq6fNChJZEI2xj5GjHTvhXSgk1mDAz0z3NUat0lL4TYHdxcUr+2Q9KI8+zhhGa 3NggcIF0s0yZ6MkKqNzEo0IXp5vptb9zYxElQh8vPA1Nd0b9H1XinGCv8HTNAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUSZVHLVq5AYxJEVfTpRp+LhXUFOkwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MTc4NjI0Mi8wLzMyMzEzMTJlMzEz NDM3MmUzNjM0MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBNOTQDANBgkqhkiG9w0BAQsFAAOCAQEAcBJfYK6OP0kSEAVIC9m0Aubr 4WVj3uGFiExXsTEoM25YSeZ8fe1+EuXmRqh12fur92gXz+1uj2eYjAMEIolQdpjK F8kbK2mEbtkq2mCVu0k5jMSCJg1w18jx7NS1qf4NAkAhvOF27ptSwEoQqu/mLuia xQSutl+h3SnhUJofCtZJoWaOEVzkDBBI7In2WQIKXAvcFhPrX9n+uYXsOdBeeFV1 gytje8cBJHpDXvy04OqNmchOkzJ4wGjMdsSoUEu1Ip3WrE3bEPXe++gmSsiTUiS1 6PmnAv30kftwNxsBHHvucjbIWZdkBWS5aC/3vRzvmgLHYmqKbtm3yr97W74KjQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:44 2026 by rpki-client