This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/35392e3135332e342e302f32342d3234203d3e203233373731.roa File: 35392e3135332e342e302f32342d3234203d3e203233373731.roa (raw, json) Hash identifier: kUBqxH2ZZ4TmBOKzWUD0brYEgK2iHz2LdszFr0mSBx0= Subject key identifier: F7:44:90:35:BF:29:6F:4E:2C:95:96:32:0F:20:1A:F9:E3:A6:BB:CC Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 4600D92C403E8141A0306DFE11CE3F57D1BE41C8 Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/35392e3135332e342e302f32342d3234203d3e203233373731.roa Signing time: Tue 20 Jan 2026 02:14:12 +0000 ROA not before: Tue 20 Jan 2026 02:09:12 +0000 ROA not after: Tue 19 Jan 2027 02:14:12 +0000 asID: 23771 IP address blocks: 59.153.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:00:d9:2c:40:3e:81:41:a0:30:6d:fe:11:ce:3f:57:d1:be:41:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: Jan 20 02:09:12 2026 GMT Not After : Jan 19 02:14:12 2027 GMT Subject: CN=F7449035BF296F4E2C9596320F201AF9E3A6BBCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:4e:3e:3e:aa:8c:c3:6d:7d:4f:09:b2:5b: 0a:53:f1:8a:0e:d4:4e:e5:d6:11:82:35:cd:c6:d3: 70:f2:e8:87:46:b0:7a:b4:79:ff:75:5f:20:31:a3: f3:32:ca:a2:f7:5e:6c:20:16:8e:bc:0f:1d:6c:82: e9:97:02:6f:2d:7a:4c:c7:be:82:80:c3:19:29:26: fb:20:76:f1:c7:10:3b:52:4f:63:4e:f2:41:44:0c: 40:28:ce:e7:5b:72:52:ae:fb:15:55:78:30:c7:80: fe:bb:90:b0:75:92:b1:c3:0d:65:8a:eb:b6:6b:26: 06:d0:b1:20:95:fa:08:22:3a:66:f2:c7:7f:1f:04: 64:01:7f:9f:eb:e5:d5:f3:58:66:5f:b8:07:fc:62: 12:5f:39:6a:50:9f:bd:13:6c:e7:d0:03:80:8f:b4: a5:5b:62:ea:29:97:39:a5:eb:52:53:0b:96:c1:7b: 6d:ce:e2:d8:10:f3:99:11:61:74:3c:4b:c2:fc:d3: ff:f1:bc:50:25:a0:71:95:73:e0:ad:aa:f4:c8:e6: a1:34:bc:94:c5:16:10:ff:cf:0f:33:bf:fe:75:43: 54:0d:55:83:dd:01:61:19:90:20:1a:e9:54:1a:1c: e1:05:91:3e:71:64:88:f0:dc:c8:86:d1:f2:88:84: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:44:90:35:BF:29:6F:4E:2C:95:96:32:0F:20:1A:F9:E3:A6:BB:CC X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/35392e3135332e342e302f32342d3234203d3e203233373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.4.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:83:76:ef:a8:f5:44:59:19:13:43:2b:54:12:08:28:eb:b4: cb:c0:fa:8a:0c:03:e6:c4:b2:26:6c:02:6a:20:47:66:ac:6f: 14:e5:0b:be:74:77:16:34:16:93:ca:d5:5b:46:4f:63:d6:0e: f9:ab:f0:13:ee:19:79:60:7e:29:18:a3:ea:c2:f4:f5:ce:d9: 82:99:1a:71:2a:70:e6:54:72:54:54:75:91:8c:36:bc:dc:39: 2e:d5:31:4f:36:16:e6:13:4c:e3:10:8b:64:ea:ec:db:99:c0: 4a:68:94:cd:b4:4e:e4:fe:db:e0:46:32:5e:b7:95:ea:56:ba: 2b:08:61:27:39:b1:2e:40:83:5a:11:32:54:e7:ff:f8:f6:22: 21:8b:88:b7:2b:34:ed:47:37:cc:86:43:75:ed:3a:92:98:5d: c5:bf:e2:f8:10:2f:3f:69:a7:1b:74:08:79:e1:d3:6c:99:18: d0:f0:50:36:7c:38:2c:13:2b:c1:22:20:3e:4d:66:ab:65:f1: 89:34:aa:9a:64:4b:08:31:94:49:9b:5c:ac:31:0d:db:43:8e: 0a:d6:5e:04:c4:2e:fa:e2:db:06:47:05:c8:70:97:4d:57:32: db:cd:48:4c:da:ea:2a:f3:22:1a:86:c0:b6:57:7c:e8:25:df: 11:88:89:b9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIURgDZLEA+gUGgMG3+Ec4/V9G+QcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjAxMjAwMjA5MTJaFw0yNzAxMTkwMjE0MTJaMDMxMTAvBgNV BAMTKEY3NDQ5MDM1QkYyOTZGNEUyQzk1OTYzMjBGMjAxQUY5RTNBNkJCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1k4+PqqMw219TwmyWwpT8YoO 1E7l1hGCNc3G03Dy6IdGsHq0ef91XyAxo/MyyqL3XmwgFo68Dx1sgumXAm8tekzH voKAwxkpJvsgdvHHEDtST2NO8kFEDEAozudbclKu+xVVeDDHgP67kLB1krHDDWWK 67ZrJgbQsSCV+ggiOmbyx38fBGQBf5/r5dXzWGZfuAf8YhJfOWpQn70TbOfQA4CP tKVbYuoplzml61JTC5bBe23O4tgQ85kRYXQ8S8L80//xvFAloHGVc+CtqvTI5qE0 vJTFFhD/zw8zv/51Q1QNVYPdAWEZkCAa6VQaHOEFkT5xZIjw3MiG0fKIhOA7AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU90SQNb8pb04slZYyDyAa+eOmu8wwHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMDQ4Mzg2LzAvMzUzOTJlMzEzNTMz MmUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzNzM3MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA7mQQwDQYJKoZIhvcNAQELBQADggEBAJ2Ddu+o9URZGRNDK1QSCCjrtMvA+ooM A+bEsiZsAmogR2asbxTlC750dxY0FpPK1VtGT2PWDvmr8BPuGXlgfikYo+rC9PXO 2YKZGnEqcOZUclRUdZGMNrzcOS7VMU82FuYTTOMQi2Tq7NuZwEpolM20TuT+2+BG Ml63lepWuisIYSc5sS5Ag1oRMlTn//j2IiGLiLcrNO1HN8yGQ3XtOpKYXcW/4vgQ Lz9ppxt0CHnh02yZGNDwUDZ8OCwTK8EiID5NZqtl8Yk0qppkSwgxlEmbXKwxDdtD jgrWXgTELvri2wZHBchwl01XMtvNSEza6irzIhqGwLZXfOgl3xGIibk= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:43 2026 by rpki-client