This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3131362e37362e302e302f31352d3234203d3e203137393632.roa File: 3131362e37362e302e302f31352d3234203d3e203137393632.roa (raw, json) Hash identifier: LBuZZHM4nWcNaUK3WxdhU4EzjPch1mKzxQJqDhH5V1g= Subject key identifier: A3:2C:FC:10:BB:52:64:65:BA:79:BE:E2:C4:9D:90:3C:A6:3D:CA:23 Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Certificate serial: 7D1ADABDC539482C3BB32A9D18A4C98AC16EA952 Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3131362e37362e302e302f31352d3234203d3e203137393632.roa Signing time: Tue 20 Jan 2026 02:14:14 +0000 ROA not before: Tue 20 Jan 2026 02:09:14 +0000 ROA not after: Tue 19 Jan 2027 02:14:14 +0000 asID: 17962 IP address blocks: 116.76.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1a:da:bd:c5:39:48:2c:3b:b3:2a:9d:18:a4:c9:8a:c1:6e:a9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Validity Not Before: Jan 20 02:09:14 2026 GMT Not After : Jan 19 02:14:14 2027 GMT Subject: CN=A32CFC10BB526465BA79BEE2C49D903CA63DCA23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:30:cd:81:0a:ed:23:be:bb:a0:89:e3:0d: 1e:95:b4:ff:64:0b:d5:18:49:b7:94:82:72:2d:49: a6:e2:fb:41:ee:16:ac:cc:0c:22:f0:e2:84:67:bc: e7:a9:aa:99:3b:ea:73:fc:bc:9b:cf:9f:7c:61:b4: 77:c7:49:4b:5d:c0:05:3d:ae:15:db:5c:cc:8d:d5: d3:2f:4e:25:b4:7e:9d:49:50:72:9f:02:8d:06:a2: 4c:35:16:1c:aa:83:a5:bb:e8:91:33:c7:9d:a6:85: 8d:11:a8:87:b6:cf:ca:4f:df:f5:01:5f:46:c5:89: 7a:9a:1a:f9:f6:40:d7:cf:92:8b:07:39:fd:84:c0: 4b:c3:95:a2:d2:07:c6:fd:f9:b3:2c:42:32:e6:8b: 54:1a:0f:a2:5f:fd:86:00:08:fb:b7:14:a3:31:5a: 08:db:3b:53:61:e5:e9:aa:76:ac:56:4c:28:a5:cd: bd:97:75:69:b6:63:29:51:c6:d1:6e:8e:d6:88:8e: 0e:08:30:c9:ae:35:d2:fb:5d:ba:8f:bb:79:45:86: bd:31:42:4a:11:f1:5d:68:ea:b5:57:df:69:27:98: c7:f3:eb:27:77:86:64:d1:ef:6c:28:bb:81:b7:ab: 39:87:d9:be:49:c0:5c:02:0a:43:05:0a:01:61:98: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2C:FC:10:BB:52:64:65:BA:79:BE:E2:C4:9D:90:3C:A6:3D:CA:23 X509v3 Authority Key Identifier: keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3131362e37362e302e302f31352d3234203d3e203137393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.76.0.0/15 Signature Algorithm: sha256WithRSAEncryption 07:f2:3d:1c:1a:cb:79:76:27:de:2e:16:b3:ed:23:7a:02:e0: a7:77:2c:83:48:3c:94:5f:61:23:21:cc:f5:7c:8c:bc:1f:3c: 5d:45:0e:70:f6:01:43:38:35:42:14:fd:3f:03:a6:ae:e0:df: 8d:65:cd:70:86:4d:8c:10:8d:63:f1:11:07:13:43:04:35:9b: b6:68:3d:ad:9f:8e:0e:20:27:8c:9a:8e:f4:6c:3c:10:db:ec: 27:cf:9f:26:81:79:72:3e:e1:b7:6a:2a:c0:50:ad:a3:11:d6: 44:94:73:89:79:6e:70:03:e3:b2:5b:2e:2a:0c:dd:4c:b2:06: 25:2d:6e:d7:ac:2d:4c:0d:bf:47:6d:2c:4f:45:0c:f1:73:ed: 15:44:b6:5a:fb:94:31:79:00:31:e6:1c:74:c7:9f:29:61:e2: 6d:a9:dd:ec:74:71:7c:10:9d:46:7e:9d:1b:15:93:ee:dd:7c: d0:3f:19:18:b7:dd:03:b8:9a:da:5d:51:0a:b6:a8:f9:ed:b7: d2:b5:fc:ea:2a:4d:c5:12:30:aa:8b:d8:e1:ca:a3:c2:49:4d: 0e:fb:9b:c1:c6:af:7a:67:07:cf:0f:5f:45:25:ee:e8:6f:d4: e5:85:da:7b:9c:49:e5:82:7f:34:c5:bd:a2:c9:57:61:b1:4f: 30:d7:d3:32 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUfRravcU5SCw7syqdGKTJisFuqVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0 QjRCRDQyNjAeFw0yNjAxMjAwMjA5MTRaFw0yNzAxMTkwMjE0MTRaMDMxMTAvBgNV BAMTKEEzMkNGQzEwQkI1MjY0NjVCQTc5QkVFMkM0OUQ5MDNDQTYzRENBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUDDNgQrtI767oInjDR6VtP9k C9UYSbeUgnItSabi+0HuFqzMDCLw4oRnvOepqpk76nP8vJvPn3xhtHfHSUtdwAU9 rhXbXMyN1dMvTiW0fp1JUHKfAo0Gokw1Fhyqg6W76JEzx52mhY0RqIe2z8pP3/UB X0bFiXqaGvn2QNfPkosHOf2EwEvDlaLSB8b9+bMsQjLmi1QaD6Jf/YYACPu3FKMx WgjbO1Nh5emqdqxWTCilzb2XdWm2YylRxtFujtaIjg4IMMmuNdL7XbqPu3lFhr0x QkoR8V1o6rVX32knmMfz6yd3hmTR72wou4G3qzmH2b5JwFwCCkMFCgFhmKohAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUoyz8ELtSZGW6eb7ixJ2QPKY9yiMwHwYDVR0j BBgwFoAUrdeakGE8n6LtEpTHf9uwh0tL1CYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzE0NDE5My8wL0FERDc5QTkwNjEzQzlGQTJFRDEyOTRDNzdGREJC MDg3NEI0QkQ0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0QjRCRDQyNi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MTQ0MTkzLzAvMzEzMTM2MmUzNzM2 MmUzMDJlMzAyZjMxMzUyZDMyMzQyMDNkM2UyMDMxMzczOTM2MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwF0TDANBgkqhkiG9w0BAQsFAAOCAQEAB/I9HBrLeXYn3i4Ws+0jegLgp3csg0g8 lF9hIyHM9XyMvB88XUUOcPYBQzg1QhT9PwOmruDfjWXNcIZNjBCNY/ERBxNDBDWb tmg9rZ+ODiAnjJqO9Gw8ENvsJ8+fJoF5cj7ht2oqwFCtoxHWRJRziXlucAPjslsu KgzdTLIGJS1u16wtTA2/R20sT0UM8XPtFUS2WvuUMXkAMeYcdMefKWHiband7HRx fBCdRn6dGxWT7t180D8ZGLfdA7ia2l1RCrao+e230rX86ipNxRIwqovY4cqjwklN DvubwcavemcHzw9fRSXu6G/U5YXae5xJ5YJ/NMW9oslXYbFPMNfTMg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:21 2026 by rpki-client