This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371851778/0/3231302e37372e39362e302f31392d3139203d3e2039333931.roa File: 3231302e37372e39362e302f31392d3139203d3e2039333931.roa (raw, json) Hash identifier: wRxoeMzOEughYBGY4DD9cRQKKuKMdzQ5cat72iTv48E= Subject key identifier: 67:E1:BB:50:3D:E6:42:03:31:39:98:D0:76:0C:6E:83:22:01:48:A1 Certificate issuer: /CN=745EC59458DF98DC3674219750AB7E7BC251E62C Certificate serial: 147FDA5F15F56C928D0CDA2968124E28AFA55094 Authority key identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/3231302e37372e39362e302f31392d3139203d3e2039333931.roa Signing time: Tue 20 Jan 2026 02:26:05 +0000 ROA not before: Tue 20 Jan 2026 02:21:05 +0000 ROA not after: Tue 19 Jan 2027 02:26:05 +0000 asID: 9391 IP address blocks: 210.77.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7f:da:5f:15:f5:6c:92:8d:0c:da:29:68:12:4e:28:af:a5:50:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745EC59458DF98DC3674219750AB7E7BC251E62C Validity Not Before: Jan 20 02:21:05 2026 GMT Not After : Jan 19 02:26:05 2027 GMT Subject: CN=67E1BB503DE64203313998D0760C6E83220148A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:8f:93:7d:f5:ba:3b:54:31:51:b4:d4:5b: b9:e2:cc:08:38:ae:96:33:80:65:4b:7f:09:a9:36: 89:94:8d:dd:51:e5:8c:b3:aa:9c:82:7f:b6:1f:76: 41:90:1f:41:e9:1a:65:e1:93:d0:e9:3e:04:a3:7b: 44:5d:59:8a:92:a2:bd:6f:4d:bd:e1:69:30:b2:a3: 24:d6:c4:5f:11:4d:ca:08:37:9c:ec:43:0f:1b:cd: e1:78:15:6c:91:33:82:ec:d9:55:b1:b7:7a:be:a3: dc:7a:23:df:4c:27:e1:22:76:95:3f:0f:55:15:a3: eb:b2:65:de:0d:9a:96:af:2b:79:09:e9:cd:3f:fe: df:a7:99:ad:86:05:8f:4b:20:08:0f:d5:7a:fd:4f: 49:8c:46:8a:59:5e:38:a9:26:f4:fb:ba:5b:8a:ed: 83:ad:6a:3d:6b:75:5c:c3:8c:2a:70:5b:c7:6d:3e: eb:c9:4e:71:5c:42:cc:3c:0a:69:84:1e:01:34:cf: 4a:0d:8d:83:14:31:25:fa:11:b9:ad:4f:81:71:83: 40:55:c2:7b:36:8c:61:3b:88:38:1d:e8:27:14:d3: 28:92:21:0a:e6:29:61:13:78:a9:c9:94:43:b4:d5: d3:6a:c4:fa:f5:84:91:f0:5d:36:06:65:a1:be:19: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E1:BB:50:3D:E6:42:03:31:39:98:D0:76:0C:6E:83:22:01:48:A1 X509v3 Authority Key Identifier: keyid:74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/3231302e37372e39362e302f31392d3139203d3e2039333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.77.96.0/19 Signature Algorithm: sha256WithRSAEncryption ab:c5:73:a8:4a:25:e8:2c:1e:c6:04:58:1c:96:80:47:8c:60: 79:15:66:92:94:af:f4:80:d5:75:77:f2:a0:54:32:5b:f5:3e: 37:63:7f:c5:9e:2b:9e:93:26:8f:cd:08:d4:23:9e:93:2c:bd: 85:74:5f:af:42:bb:5a:7f:22:d8:ea:69:18:7a:42:5b:c1:3c: 30:f8:89:49:53:ad:61:89:e2:bf:3b:6c:8c:df:35:c3:f3:66: c7:95:42:1e:d4:23:57:ef:5d:54:59:74:50:40:e5:30:dc:85: ce:b4:58:83:e3:b0:6d:4f:74:63:a5:e6:0b:37:df:b2:18:fb: b7:3d:a4:5c:1a:0e:a4:ba:ca:5b:64:77:74:bf:b5:be:d4:95: 0a:40:fd:28:cd:52:42:61:b6:1e:fe:68:ae:a5:1b:dd:76:a9: 7c:54:18:2b:16:b4:f5:f4:2a:f6:2e:9b:00:7f:f8:2f:a4:e8: ca:ca:5d:94:5b:dd:38:af:59:09:14:d0:c8:1d:ac:f4:66:21: 80:59:59:c7:0e:c3:1c:a3:00:88:1e:c4:17:f0:10:4e:b6:0b: 78:54:bf:09:8a:92:aa:93:ea:b9:72:11:6e:38:5b:0d:25:01: 72:4d:6a:84:1e:87:91:43:ac:ab:ea:db:1f:a7:ad:1a:4c:c1: 26:75:d9:55 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUFH/aXxX1bJKNDNopaBJOKK+lUJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JD MjUxRTYyQzAeFw0yNjAxMjAwMjIxMDVaFw0yNzAxMTkwMjI2MDVaMDMxMTAvBgNV BAMTKDY3RTFCQjUwM0RFNjQyMDMzMTM5OThEMDc2MEM2RTgzMjIwMTQ4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ho+TffW6O1QxUbTUW7nizAg4 rpYzgGVLfwmpNomUjd1R5YyzqpyCf7YfdkGQH0HpGmXhk9DpPgSje0RdWYqSor1v Tb3haTCyoyTWxF8RTcoIN5zsQw8bzeF4FWyRM4Ls2VWxt3q+o9x6I99MJ+EidpU/ D1UVo+uyZd4NmpavK3kJ6c0//t+nma2GBY9LIAgP1Xr9T0mMRopZXjipJvT7uluK 7YOtaj1rdVzDjCpwW8dtPuvJTnFcQsw8CmmEHgE0z0oNjYMUMSX6EbmtT4Fxg0BV wns2jGE7iDgd6CcU0yiSIQrmKWETeKnJlEO01dNqxPr1hJHwXTYGZaG+Gc2xAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUZ+G7UD3mQgMxOZjQdgxugyIBSKEwHwYDVR0j BBgwFoAUdF7FlFjfmNw2dCGXUKt+e8JR5iwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTg1MTc3OC8wLzc0NUVDNTk0NThERjk4REMzNjc0MjE5NzUwQUI3 RTdCQzI1MUU2MkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JDMjUxRTYyQy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxODUxNzc4LzAvMzIzMTMwMmUzNzM3 MmUzOTM2MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzkzMzM5MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAXSTWAwDQYJKoZIhvcNAQELBQADggEBAKvFc6hKJegsHsYEWByWgEeMYHkVZpKU r/SA1XV38qBUMlv1Pjdjf8WeK56TJo/NCNQjnpMsvYV0X69Cu1p/ItjqaRh6QlvB PDD4iUlTrWGJ4r87bIzfNcPzZseVQh7UI1fvXVRZdFBA5TDchc60WIPjsG1PdGOl 5gs337IY+7c9pFwaDqS6yltkd3S/tb7UlQpA/SjNUkJhth7+aK6lG912qXxUGCsW tPX0KvYumwB/+C+k6MrKXZRb3TivWQkU0MgdrPRmIYBZWccOwxyjAIgexBfwEE62 C3hUvwmKkqqT6rlyEW44Ww0lAXJNaoQeh5FDrKvq2x+nrRpMwSZ12VU= -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:26 2026 by rpki-client