This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/3231312e38382e302e302f31362d3332203d3e2039333036.roa File: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (raw, json) Hash identifier: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU= Subject key identifier: 66:0C:89:C5:34:AE:1B:05:07:61:87:45:79:12:F5:BA:B8:D2:0C:1F Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 09C69B5E982ED2AFC878FE767F93CD67DB0ABAB0 Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/3231312e38382e302e302f31362d3332203d3e2039333036.roa Signing time: Tue 20 Jan 2026 02:18:02 +0000 ROA not before: Tue 20 Jan 2026 02:13:02 +0000 ROA not after: Tue 19 Jan 2027 02:18:02 +0000 asID: 9306 IP address blocks: 211.88.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 21:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c6:9b:5e:98:2e:d2:af:c8:78:fe:76:7f:93:cd:67:db:0a:ba:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Jan 20 02:13:02 2026 GMT Not After : Jan 19 02:18:02 2027 GMT Subject: CN=660C89C534AE1B05076187457912F5BAB8D20C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:54:9a:8c:1a:34:bd:14:c1:0d:75:b8:9b: 99:71:e4:db:8f:6a:fd:7d:c7:7a:33:bb:16:ec:4e: 32:ca:45:57:af:f2:a5:8d:63:e7:a8:fb:8b:ef:c5: 79:56:57:b7:56:18:07:c1:bd:0d:42:fc:f0:10:5f: be:07:e7:1c:df:ac:c4:8e:00:0a:01:e3:4f:72:d3: 0a:6b:ed:28:94:d9:71:6e:f9:44:e6:9e:b7:20:48: 34:32:2f:36:ba:f0:20:34:d1:81:86:d0:d0:19:64: c4:1d:b6:61:93:3a:cd:88:b5:6c:8e:7d:a3:d5:61: b7:1a:46:ff:4c:5b:9b:5c:ea:bf:61:a8:f0:c9:d4: e6:f5:ce:f8:cf:ba:98:de:8e:1d:68:d9:11:13:00: db:68:54:96:56:9b:0e:96:6c:f3:69:ee:15:35:ba: 35:da:c4:f6:72:17:7a:e0:5d:2f:27:ca:82:47:1a: dd:31:7c:59:39:0b:b4:3b:fd:0c:47:8f:1d:7b:64: de:b2:b3:91:dd:51:85:c1:de:ef:4e:72:29:04:94: 1a:72:da:89:57:3d:c8:4a:4a:bf:47:01:11:10:c5: a5:4a:21:75:1f:94:b2:e9:39:92:e0:1b:ed:c9:e8: 05:7d:0d:68:74:38:02:a2:85:56:3c:42:d5:2f:cd: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0C:89:C5:34:AE:1B:05:07:61:87:45:79:12:F5:BA:B8:D2:0C:1F X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/3231312e38382e302e302f31362d3332203d3e2039333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption a1:e6:bd:63:f3:1c:b0:e4:71:39:60:cb:6e:84:39:50:eb:4c: f2:65:32:28:b5:d0:67:38:7c:d3:f0:3c:3a:ba:31:bc:61:2c: f7:03:15:c4:57:d2:9b:e3:a0:27:f6:16:9f:ff:f9:6b:0e:55: 79:6b:81:19:2f:47:29:72:5b:d0:e6:5f:95:b9:19:f8:3f:b2: 4f:1d:d7:34:13:83:61:cb:0b:4d:d5:a5:c1:85:f7:bc:88:f6: 21:1a:01:de:5a:7e:8c:ff:1e:47:c9:d1:fc:a5:b5:cd:14:e7: 8c:09:d2:4c:52:2a:0d:7f:0d:61:a5:68:16:bc:d4:59:88:d1: b4:6c:d4:e3:c8:19:fd:4d:54:65:ce:e7:e7:92:4b:34:5a:be: ec:7c:f5:65:76:7c:c6:c7:4d:4e:b6:52:33:d2:a4:25:84:09: 82:b2:ae:6f:67:83:a3:46:f1:5a:ae:93:29:4b:89:9b:96:7e: 6b:05:7a:7d:1a:7e:30:5e:bb:6d:36:59:e8:52:60:00:17:e1: b8:74:51:86:a1:4a:af:1f:84:bb:3b:56:1c:41:08:b8:2c:7a: a2:b3:38:17:42:ee:5d:f1:e0:8f:07:67:38:fc:7a:aa:0e:1f: de:23:c9:7e:7a:aa:d2:59:3a:24:93:c7:ac:41:f7:0a:25:de: d3:12:f8:c7 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUCcabXpgu0q/IeP52f5PNZ9sKurAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjAxMjAwMjEzMDJaFw0yNzAxMTkwMjE4MDJaMDMxMTAvBgNV BAMTKDY2MEM4OUM1MzRBRTFCMDUwNzYxODc0NTc5MTJGNUJBQjhEMjBDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWE1SajBo0vRTBDXW4m5lx5NuP av19x3ozuxbsTjLKRVev8qWNY+eo+4vvxXlWV7dWGAfBvQ1C/PAQX74H5xzfrMSO AAoB409y0wpr7SiU2XFu+UTmnrcgSDQyLza68CA00YGG0NAZZMQdtmGTOs2ItWyO faPVYbcaRv9MW5tc6r9hqPDJ1Ob1zvjPupjejh1o2RETANtoVJZWmw6WbPNp7hU1 ujXaxPZyF3rgXS8nyoJHGt0xfFk5C7Q7/QxHjx17ZN6ys5HdUYXB3u9OcikElBpy 2olXPchKSr9HAREQxaVKIXUflLLpOZLgG+3J6AV9DWh0OAKihVY8QtUvzTbfAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUZgyJxTSuGwUHYYdFeRL1urjSDB8wHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxOTE3MzE0LzAvMzIzMTMxMmUzODM4 MmUzMDJlMzAyZjMxMzYyZDMzMzIyMDNkM2UyMDM5MzMzMDM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA 01gwDQYJKoZIhvcNAQELBQADggEBAKHmvWPzHLDkcTlgy26EOVDrTPJlMii10Gc4 fNPwPDq6MbxhLPcDFcRX0pvjoCf2Fp//+WsOVXlrgRkvRylyW9DmX5W5Gfg/sk8d 1zQTg2HLC03VpcGF97yI9iEaAd5afoz/HkfJ0fyltc0U54wJ0kxSKg1/DWGlaBa8 1FmI0bRs1OPIGf1NVGXO5+eSSzRavux89WV2fMbHTU62UjPSpCWECYKyrm9ng6NG 8VqukylLiZuWfmsFen0afjBeu202WehSYAAX4bh0UYahSq8fhLs7VhxBCLgseqKz OBdC7l3x4I8HZzj8eqoOH94jyX56qtJZOiSTx6xB9wol3tMS+Mc= -----END CERTIFICATE-----Generated at Sun Jan 25 15:38:04 2026 by rpki-client