This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3231312e3134372e38302e302f32302d3234203d3e203233383533.roa File: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (raw, json) Hash identifier: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw= Subject key identifier: C6:CB:43:9F:33:25:E2:D7:C9:07:E5:7D:A4:AE:4E:03:9C:5F:2C:11 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 0B2A54FC6A621BE00F52491DE46ADB80DC4D531B Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3231312e3134372e38302e302f32302d3234203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:18 +0000 ROA not before: Tue 20 Jan 2026 02:22:18 +0000 ROA not after: Tue 19 Jan 2027 02:27:18 +0000 asID: 23853 IP address blocks: 211.147.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2a:54:fc:6a:62:1b:e0:0f:52:49:1d:e4:6a:db:80:dc:4d:53:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:18 2026 GMT Not After : Jan 19 02:27:18 2027 GMT Subject: CN=C6CB439F3325E2D7C907E57DA4AE4E039C5F2C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:9f:b3:42:61:ed:49:43:b3:f1:01:60:66: 80:9c:00:69:8a:dc:84:65:c9:ad:3f:1b:ff:71:37: 0b:93:e1:05:03:7f:b2:06:77:5d:2e:63:da:67:7f: 3e:9c:41:1e:4e:6a:9e:77:37:45:c6:bc:45:d5:bd: 5f:06:4b:6b:6d:7f:b6:ae:65:41:70:4c:a0:14:9c: cb:c0:6c:2c:1d:d7:d2:b4:47:22:64:44:ea:60:46: 19:3d:f2:2e:1d:32:0e:73:49:06:96:80:f5:39:0c: fa:53:da:2f:6b:7c:e9:40:da:b6:2d:40:a5:21:22: a2:3a:f3:14:9f:1a:51:39:cd:1a:a5:35:ab:c2:ff: 76:b7:62:e7:12:f4:43:7f:0a:ed:2a:48:90:e8:09: af:63:9f:51:61:76:58:f3:49:aa:2b:9d:f4:19:5b: 52:bb:66:7f:ee:44:b0:f8:63:bd:8c:d2:55:c1:2a: 46:e0:b2:1c:43:e1:9f:b9:54:c4:5f:79:39:4b:d1: 32:be:3c:a9:4c:d3:42:ab:ab:b5:03:6e:09:80:02: a6:99:15:f2:37:1d:48:dc:c5:16:56:3f:05:8a:a3: 10:ef:29:63:15:31:7e:08:49:91:37:7f:b1:a1:35: 84:26:7a:36:6b:49:d3:1e:e1:c9:7d:8f:e8:c7:b7: c5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CB:43:9F:33:25:E2:D7:C9:07:E5:7D:A4:AE:4E:03:9C:5F:2C:11 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3231312e3134372e38302e302f32302d3234203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.147.80.0/20 Signature Algorithm: sha256WithRSAEncryption 5d:6c:09:50:14:91:63:f2:12:18:af:4c:b3:f7:e7:e2:23:1e: 70:ab:26:db:27:56:67:4f:a3:17:5b:6a:82:37:74:72:34:6b: 24:1d:c4:44:65:94:65:5e:15:bb:a4:ba:04:05:34:fb:58:b6: d6:d9:3b:22:68:b9:a1:65:ef:82:07:e7:bd:b9:cb:0d:b4:b2: d2:55:1c:78:e0:d7:01:89:25:74:c4:cb:7e:7f:63:4b:38:73: ba:28:3b:6b:68:82:36:ac:94:0a:2a:0e:9e:e9:2e:52:c9:1e: ea:48:80:67:a6:3a:8c:ea:61:2e:08:1d:71:5d:4b:97:66:3c: 45:c1:98:c2:6c:1f:66:30:aa:d0:fd:cd:4e:f6:ab:c1:f9:dd: ef:62:ed:84:f0:ed:9f:f0:7c:bb:7f:a3:d2:31:ac:50:70:55: b8:0e:84:ce:7f:ed:ca:a6:4a:d7:0b:80:02:62:37:ac:e2:39: 53:5a:3e:fa:e7:b6:de:d7:b8:d2:3c:57:df:77:cb:ac:2a:46: 95:b2:82:e9:e9:53:96:c6:f7:bd:5f:5d:dd:1a:7b:32:06:6b: b4:81:ec:c3:69:66:84:d3:d5:bd:31:7f:50:11:80:e3:99:5c: 62:8c:d4:4c:8a:c5:d1:42:58:7c:54:3e:86:9c:1e:b6:c9:47: dc:20:9b:9c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCypU/GpiG+APUkkd5GrbgNxNUxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMThaFw0yNzAxMTkwMjI3MThaMDMxMTAvBgNV BAMTKEM2Q0I0MzlGMzMyNUUyRDdDOTA3RTU3REE0QUU0RTAzOUM1RjJDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMkJ+zQmHtSUOz8QFgZoCcAGmK 3IRlya0/G/9xNwuT4QUDf7IGd10uY9pnfz6cQR5Oap53N0XGvEXVvV8GS2ttf7au ZUFwTKAUnMvAbCwd19K0RyJkROpgRhk98i4dMg5zSQaWgPU5DPpT2i9rfOlA2rYt QKUhIqI68xSfGlE5zRqlNavC/3a3YucS9EN/Cu0qSJDoCa9jn1FhdljzSaornfQZ W1K7Zn/uRLD4Y72M0lXBKkbgshxD4Z+5VMRfeTlL0TK+PKlM00Krq7UDbgmAAqaZ FfI3HUjcxRZWPwWKoxDvKWMVMX4ISZE3f7GhNYQmejZrSdMe4cl9j+jHt8WnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUxstDnzMl4tfJB+V9pK5OA5xfLBEwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MTc4NjI0Mi8wLzMyMzEzMTJlMzEz NDM3MmUzODMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBNOTUDANBgkqhkiG9w0BAQsFAAOCAQEAXWwJUBSRY/ISGK9Ms/fn4iMe cKsm2ydWZ0+jF1tqgjd0cjRrJB3ERGWUZV4Vu6S6BAU0+1i21tk7Imi5oWXvggfn vbnLDbSy0lUceODXAYkldMTLfn9jSzhzuig7a2iCNqyUCioOnukuUske6kiAZ6Y6 jOphLggdcV1Ll2Y8RcGYwmwfZjCq0P3NTvarwfnd72LthPDtn/B8u3+j0jGsUHBV uA6Ezn/tyqZK1wuAAmI3rOI5U1o++ue23te40jxX33fLrCpGlbKC6elTlsb3vV9d 3Rp7MgZrtIHsw2lmhNPVvTF/UBGA45lcYozUTIrF0UJYfFQ+hpwetslH3CCbnA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:43 2026 by rpki-client