This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3131312e3232312e3132382e302f31372d3234203d3e203137393632.roa File: 3131312e3232312e3132382e302f31372d3234203d3e203137393632.roa (raw, json) Hash identifier: JEd2c6sWALyCaMi18jHXPGHveyyaKT8SFKkrn5C6g+I= Subject key identifier: 49:39:92:5C:0B:FC:5A:EC:BA:54:71:BB:22:DB:25:5C:F6:FF:F5:84 Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Certificate serial: 21BF978CE19112C8E264789AB46C86E49C07105B Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3131312e3232312e3132382e302f31372d3234203d3e203137393632.roa Signing time: Tue 20 Jan 2026 02:14:14 +0000 ROA not before: Tue 20 Jan 2026 02:09:14 +0000 ROA not after: Tue 19 Jan 2027 02:14:14 +0000 asID: 17962 IP address blocks: 111.221.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bf:97:8c:e1:91:12:c8:e2:64:78:9a:b4:6c:86:e4:9c:07:10:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Validity Not Before: Jan 20 02:09:14 2026 GMT Not After : Jan 19 02:14:14 2027 GMT Subject: CN=4939925C0BFC5AECBA5471BB22DB255CF6FFF584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:f9:b5:31:d2:14:cb:f0:03:0f:64:e2:eb: d7:9b:42:e4:7d:68:47:9c:de:b9:a1:f5:84:18:e7: ea:6f:a3:22:22:39:da:89:67:2a:64:37:3e:3b:38: bd:da:f0:c2:a7:4a:b4:c0:db:63:a6:95:97:b7:0a: fe:96:d4:23:92:e2:09:0a:d8:5b:84:71:f8:72:9c: 42:df:88:1d:53:e3:20:48:65:67:c4:7c:65:ae:6a: 03:b5:54:49:16:20:8a:9c:bf:dc:b1:b6:b5:66:4e: 00:3f:66:fa:a2:fa:08:20:2c:ff:ab:f1:29:2b:3b: 56:5e:22:2c:7e:b7:9d:e3:f8:2c:d6:28:3d:ce:fe: 76:cc:c1:55:b9:dc:71:b1:34:f1:bc:da:f9:76:e2: 9a:dd:85:ce:25:f2:a8:e3:ec:1a:90:0c:23:2f:a6: 1e:6e:a6:16:a6:65:45:b1:af:f2:c0:4a:39:9a:83: 5d:02:c0:76:36:b4:a9:dd:2c:01:b4:a7:66:b5:58: c1:70:1e:4d:14:56:9b:4c:32:7e:05:27:61:4d:c8: a4:26:e3:f9:50:91:17:ff:8b:7a:54:35:af:4f:c8: 7a:60:44:d3:ef:87:bf:f5:9e:38:89:b8:4c:b4:90: 2b:94:2e:35:ad:98:57:f6:7e:00:43:d3:78:f3:76: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:39:92:5C:0B:FC:5A:EC:BA:54:71:BB:22:DB:25:5C:F6:FF:F5:84 X509v3 Authority Key Identifier: keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3131312e3232312e3132382e302f31372d3234203d3e203137393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.221.128.0/17 Signature Algorithm: sha256WithRSAEncryption 31:d2:bb:19:09:11:0c:fd:7f:72:7f:fd:15:15:75:b4:05:3f: 6b:ee:63:a0:bd:06:c4:3e:c9:ff:ed:f2:7a:58:70:17:ea:76: 4a:7d:88:1d:05:08:a7:7e:41:b9:64:0b:f7:eb:0a:61:0d:2e: 94:6f:47:76:c8:71:ae:07:94:fa:67:fa:5c:2d:15:5d:6f:80: 0b:76:8c:ad:56:49:6a:03:bd:ec:ce:ad:f8:c0:e3:44:72:2a: 55:27:39:0a:17:b8:33:8a:1f:f1:54:5e:24:f0:fa:47:64:d4: db:4b:12:26:92:05:d8:8c:ab:7d:93:81:9b:c5:1f:25:d0:50: 9e:2f:f2:d0:c9:56:c3:1b:d7:16:54:d3:8e:72:55:ad:74:21: 08:ef:c5:17:d5:ba:17:a2:85:98:dc:1f:66:84:4a:d2:28:b0: 39:46:7b:6e:63:85:e0:0b:89:ac:0e:60:77:92:3b:13:3f:a1: 32:aa:2e:57:a3:d2:30:42:50:11:27:a5:f2:91:f5:ca:09:a0: 16:d3:34:8e:f9:a5:0f:33:6e:a0:d2:46:cd:7e:27:68:14:ac: 8c:d7:17:69:e7:94:3e:aa:75:02:d6:fd:d7:6a:1d:f9:41:73: 66:7c:11:52:83:43:94:cd:46:dd:e3:09:5b:66:63:1c:b3:cd: 0e:b2:86:32 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIb+XjOGREsjiZHiatGyG5JwHEFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0 QjRCRDQyNjAeFw0yNjAxMjAwMjA5MTRaFw0yNzAxMTkwMjE0MTRaMDMxMTAvBgNV BAMTKDQ5Mzk5MjVDMEJGQzVBRUNCQTU0NzFCQjIyREIyNTVDRjZGRkY1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdPm1MdIUy/ADD2Ti69ebQuR9 aEec3rmh9YQY5+pvoyIiOdqJZypkNz47OL3a8MKnSrTA22OmlZe3Cv6W1COS4gkK 2FuEcfhynELfiB1T4yBIZWfEfGWuagO1VEkWIIqcv9yxtrVmTgA/Zvqi+gggLP+r 8SkrO1ZeIix+t53j+CzWKD3O/nbMwVW53HGxNPG82vl24prdhc4l8qjj7BqQDCMv ph5uphamZUWxr/LASjmag10CwHY2tKndLAG0p2a1WMFwHk0UVptMMn4FJ2FNyKQm 4/lQkRf/i3pUNa9PyHpgRNPvh7/1njiJuEy0kCuULjWtmFf2fgBD03jzdr25AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUSTmSXAv8Wuy6VHG7ItslXPb/9YQwHwYDVR0j BBgwFoAUrdeakGE8n6LtEpTHf9uwh0tL1CYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzE0NDE5My8wL0FERDc5QTkwNjEzQzlGQTJFRDEyOTRDNzdGREJC MDg3NEI0QkQ0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0QjRCRDQyNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcxNDQxOTMvMC8zMTMxMzEyZTMy MzIzMTJlMzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzEzNzM5MzYzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEB2/dgDANBgkqhkiG9w0BAQsFAAOCAQEAMdK7GQkRDP1/cn/9FRV1 tAU/a+5joL0GxD7J/+3yelhwF+p2Sn2IHQUIp35BuWQL9+sKYQ0ulG9HdshxrgeU +mf6XC0VXW+AC3aMrVZJagO97M6t+MDjRHIqVSc5Che4M4of8VReJPD6R2TU20sS JpIF2IyrfZOBm8UfJdBQni/y0MlWwxvXFlTTjnJVrXQhCO/FF9W6F6KFmNwfZoRK 0iiwOUZ7bmOF4AuJrA5gd5I7Ez+hMqouV6PSMEJQESel8pH1ygmgFtM0jvmlDzNu oNJGzX4naBSsjNcXaeeUPqp1Atb912od+UFzZnwRUoNDlM1G3eMJW2ZjHLPNDrKG Mg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:36 2026 by rpki-client