This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3138302e3230302e3235322e302f32322d3234203d3e203137393632.roa File: 3138302e3230302e3235322e302f32322d3234203d3e203137393632.roa (raw, json) Hash identifier: WvF4StheOK2NbNjz7INAKsnHnI6IWdq5cD/JbnGJa7w= Subject key identifier: 25:E1:AC:6B:B1:05:A1:6C:1A:93:CC:36:B3:B2:69:96:3E:D5:7D:4F Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Certificate serial: 094CF69BFA64F8DB59B0A29C748A9F835F510D68 Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3138302e3230302e3235322e302f32322d3234203d3e203137393632.roa Signing time: Tue 20 Jan 2026 02:14:14 +0000 ROA not before: Tue 20 Jan 2026 02:09:14 +0000 ROA not after: Tue 19 Jan 2027 02:14:14 +0000 asID: 17962 IP address blocks: 180.200.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4c:f6:9b:fa:64:f8:db:59:b0:a2:9c:74:8a:9f:83:5f:51:0d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Validity Not Before: Jan 20 02:09:14 2026 GMT Not After : Jan 19 02:14:14 2027 GMT Subject: CN=25E1AC6BB105A16C1A93CC36B3B269963ED57D4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:0b:d1:cb:b6:60:30:46:8d:71:46:f6:5b: f9:0e:7c:9f:02:f7:f9:9d:d9:40:97:35:b3:44:fd: 40:c2:98:90:36:66:40:64:bd:b5:59:03:19:aa:bf: 7f:80:1b:ac:7f:3e:be:0b:d0:f4:43:99:7d:d7:ae: e3:86:21:51:67:53:42:de:4c:4f:48:8b:75:e6:97: 11:c5:a9:fc:1e:77:cf:41:ed:ec:1e:17:f3:1f:21: 10:34:70:e4:d1:f1:fc:3e:de:96:0a:d1:5a:d5:d0: 21:24:c2:e6:a7:9d:bc:fc:9c:ad:1e:63:06:7c:c9: d1:4b:f8:47:35:2e:c1:c3:2e:ac:63:2f:dd:db:c6: 9b:c8:22:c4:26:ea:81:b4:4a:1c:32:59:9d:b3:66: 75:22:f4:61:77:ba:2b:5e:26:1e:4c:cc:a9:80:a1: d4:f2:6c:ca:7d:07:0c:49:dd:f0:8c:50:38:c0:64: 4d:93:ca:4a:7f:2c:93:83:c9:37:f9:43:47:7f:57: e8:e3:43:b2:db:63:45:22:c9:2d:54:a1:b9:be:a3: 57:b6:0c:94:53:a1:4b:b5:72:aa:da:40:fc:67:b6: 83:d7:44:fd:4a:41:05:b9:e3:ff:ae:63:af:5a:65: 84:07:4e:cf:83:32:a1:b5:f8:c1:82:02:78:d4:05: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E1:AC:6B:B1:05:A1:6C:1A:93:CC:36:B3:B2:69:96:3E:D5:7D:4F X509v3 Authority Key Identifier: keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3138302e3230302e3235322e302f32322d3234203d3e203137393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.200.252.0/22 Signature Algorithm: sha256WithRSAEncryption 54:a2:d0:b5:e5:01:d8:1b:24:c2:00:7a:b6:08:8d:c3:11:5d: 06:e0:33:f3:c2:89:88:18:b0:8d:df:dd:3a:0c:48:f7:be:21: e9:17:f6:79:09:0d:e3:ca:87:1c:6b:d0:67:4f:14:7b:ac:1a: 8c:55:87:2c:7a:cc:73:94:6f:e3:28:1c:f2:1f:fb:80:8e:3b: 3b:39:c8:7c:43:26:60:1a:89:c2:61:6e:5e:42:2e:ba:e6:a0: b5:c4:28:d1:1b:82:30:4b:c6:d1:6b:6b:f1:ff:68:88:06:f0: b1:8a:6d:ca:4f:2d:ed:6f:df:ad:ea:b9:31:31:8d:26:e2:86: eb:c1:5f:39:da:40:10:92:41:29:6f:47:07:bc:61:2b:b4:0e: 24:a4:17:d3:c9:28:2c:a2:15:f8:71:23:a1:23:c0:93:0c:63: 67:ef:1e:a3:0f:c3:7b:3b:1e:45:64:e9:17:92:44:a4:e8:ed: e3:ca:4b:4f:a7:e0:34:38:0f:02:2d:98:a7:e2:ac:51:ac:d5: 7c:2f:68:32:48:72:75:01:4b:f1:70:82:75:e9:b1:c7:5b:24: 87:3c:f2:19:1c:35:a5:bb:9a:bf:52:08:3a:e0:49:0a:f9:82: 70:be:76:13:99:87:09:58:ad:4b:f8:7b:f8:36:ff:f8:fa:d4: 2b:91:17:00 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCUz2m/pk+NtZsKKcdIqfg19RDWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0 QjRCRDQyNjAeFw0yNjAxMjAwMjA5MTRaFw0yNzAxMTkwMjE0MTRaMDMxMTAvBgNV BAMTKDI1RTFBQzZCQjEwNUExNkMxQTkzQ0MzNkIzQjI2OTk2M0VENTdENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xAvRy7ZgMEaNcUb2W/kOfJ8C 9/md2UCXNbNE/UDCmJA2ZkBkvbVZAxmqv3+AG6x/Pr4L0PRDmX3XruOGIVFnU0Le TE9Ii3XmlxHFqfwed89B7eweF/MfIRA0cOTR8fw+3pYK0VrV0CEkwuannbz8nK0e YwZ8ydFL+Ec1LsHDLqxjL93bxpvIIsQm6oG0ShwyWZ2zZnUi9GF3uiteJh5MzKmA odTybMp9BwxJ3fCMUDjAZE2Tykp/LJODyTf5Q0d/V+jjQ7LbY0UiyS1Uobm+o1e2 DJRToUu1cqraQPxntoPXRP1KQQW54/+uY69aZYQHTs+DMqG1+MGCAnjUBUx3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJeGsa7EFoWwak8w2s7Jplj7VfU8wHwYDVR0j BBgwFoAUrdeakGE8n6LtEpTHf9uwh0tL1CYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzE0NDE5My8wL0FERDc5QTkwNjEzQzlGQTJFRDEyOTRDNzdGREJC MDg3NEI0QkQ0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0QjRCRDQyNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcxNDQxOTMvMC8zMTM4MzAyZTMy MzAzMDJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNzM5MzYzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEArTI/DANBgkqhkiG9w0BAQsFAAOCAQEAVKLQteUB2BskwgB6tgiN wxFdBuAz88KJiBiwjd/dOgxI974h6Rf2eQkN48qHHGvQZ08Ue6wajFWHLHrMc5Rv 4ygc8h/7gI47OznIfEMmYBqJwmFuXkIuuuagtcQo0RuCMEvG0Wtr8f9oiAbwsYpt yk8t7W/freq5MTGNJuKG68FfOdpAEJJBKW9HB7xhK7QOJKQX08koLKIV+HEjoSPA kwxjZ+8eow/DezseRWTpF5JEpOjt48pLT6fgNDgPAi2Yp+KsUazVfC9oMkhydQFL 8XCCdemxx1skhzzyGRw1pbuav1IIOuBJCvmCcL52E5mHCVitS/h7+Db/+PrUK5EX AA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:40 2026 by rpki-client