This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3231312e3134382e3139322e302f31392d3234203d3e203137393632.roa File: 3231312e3134382e3139322e302f31392d3234203d3e203137393632.roa (raw, json) Hash identifier: Fxdt6NBtmyi9y2SDARcXHHpuGBqRns0PO5iPMY8wBg4= Subject key identifier: A5:71:2F:AC:FB:DA:DF:4A:5B:91:94:59:D9:86:0D:05:2A:FB:D1:3C Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Certificate serial: 48E25100CA3B1116883F71AA6C9B36AC255B1EFC Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3231312e3134382e3139322e302f31392d3234203d3e203137393632.roa Signing time: Tue 20 Jan 2026 02:14:14 +0000 ROA not before: Tue 20 Jan 2026 02:09:14 +0000 ROA not after: Tue 19 Jan 2027 02:14:14 +0000 asID: 17962 IP address blocks: 211.148.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e2:51:00:ca:3b:11:16:88:3f:71:aa:6c:9b:36:ac:25:5b:1e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Validity Not Before: Jan 20 02:09:14 2026 GMT Not After : Jan 19 02:14:14 2027 GMT Subject: CN=A5712FACFBDADF4A5B919459D9860D052AFBD13C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:d3:e3:6c:22:2e:a7:dd:7b:6d:aa:81:f8: ca:a3:64:c9:f1:d3:bc:a2:10:21:e3:0c:c3:2f:31: 40:ed:f0:a6:d7:2d:2b:df:fe:e3:02:c5:95:7d:34: 86:d9:33:68:64:7f:35:b8:3c:6e:50:9a:ce:d7:17: 46:2a:31:ca:4a:99:bd:88:d3:3b:01:ab:1c:5f:8e: 2d:df:11:d7:45:c1:0d:36:44:81:d2:80:df:b3:08: d6:ff:3a:10:ea:79:d4:36:f7:06:eb:71:30:00:0b: 8d:32:33:fc:c9:d0:9f:4e:e0:6c:30:ad:1a:bc:84: e6:5e:29:40:c0:b7:b4:15:d7:ce:4d:32:b2:b7:2a: 8e:e0:ec:f7:bd:9e:71:e1:fe:a1:10:76:03:60:56: 6e:14:a1:e6:4a:68:ac:1d:a9:cb:d9:8e:a7:f9:28: 81:e7:60:c7:3c:ad:5d:ef:f8:b6:2b:36:43:fe:7e: 13:95:0e:0a:07:7d:83:14:9e:35:35:46:4f:d1:e1: 6d:2c:a7:4e:fa:5f:88:58:b1:a4:6f:38:69:d6:a1: af:b9:5c:bb:4c:36:5e:d0:c0:8c:8a:43:32:5b:db: 16:da:d2:b6:f0:e9:63:ee:bf:11:40:83:8f:6b:36: c9:dc:ac:45:ed:f6:2b:63:79:a9:f2:04:c9:17:35: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:71:2F:AC:FB:DA:DF:4A:5B:91:94:59:D9:86:0D:05:2A:FB:D1:3C X509v3 Authority Key Identifier: keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3231312e3134382e3139322e302f31392d3234203d3e203137393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.148.192.0/19 Signature Algorithm: sha256WithRSAEncryption 25:d7:2a:3e:b3:e4:5c:fe:0c:df:6a:22:5d:ab:fe:f2:87:04: a5:5b:d7:ae:f5:6b:40:d3:98:46:98:17:dc:80:6d:eb:5c:4d: e4:56:92:81:19:9b:5f:a3:29:0c:4f:89:04:f6:5b:c0:31:cb: 56:70:fb:d0:dc:09:01:b5:27:3e:da:2c:2e:aa:1e:17:a7:45: 46:00:c6:fc:f1:dc:5c:0c:4c:77:60:6d:21:69:8c:c8:dd:c6: 4a:52:12:cf:c1:9a:c2:ba:fd:a6:4c:cb:be:0f:7b:af:12:b8: 62:69:87:d0:1e:6a:a4:d7:43:45:83:5d:0c:ce:60:39:c9:26: 57:64:c3:c2:2f:01:4d:b9:22:c0:32:1b:77:4d:97:b9:60:60: d0:b6:af:03:5a:44:ed:49:56:76:32:36:87:d5:98:44:9c:d1: ef:bd:61:56:a7:1b:82:30:4f:0b:cc:06:c2:a1:67:72:b2:98: f1:d2:e9:ab:fe:fa:ec:05:6a:9e:ce:34:b4:39:1d:d5:cf:ae: 92:1f:f4:54:a6:42:a3:e8:f3:31:de:25:cc:ae:58:9d:62:c9: 54:9f:db:61:ed:b6:36:10:fd:8c:72:2f:74:37:74:8a:e5:5d: 2d:58:8a:78:5b:58:78:bc:17:61:c5:07:0a:a7:65:c5:44:2e: c6:3a:25:80 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSOJRAMo7ERaIP3GqbJs2rCVbHvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0 QjRCRDQyNjAeFw0yNjAxMjAwMjA5MTRaFw0yNzAxMTkwMjE0MTRaMDMxMTAvBgNV BAMTKEE1NzEyRkFDRkJEQURGNEE1QjkxOTQ1OUQ5ODYwRDA1MkFGQkQxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu19PjbCIup917baqB+MqjZMnx 07yiECHjDMMvMUDt8KbXLSvf/uMCxZV9NIbZM2hkfzW4PG5Qms7XF0YqMcpKmb2I 0zsBqxxfji3fEddFwQ02RIHSgN+zCNb/OhDqedQ29wbrcTAAC40yM/zJ0J9O4Gww rRq8hOZeKUDAt7QV185NMrK3Ko7g7Pe9nnHh/qEQdgNgVm4UoeZKaKwdqcvZjqf5 KIHnYMc8rV3v+LYrNkP+fhOVDgoHfYMUnjU1Rk/R4W0sp076X4hYsaRvOGnWoa+5 XLtMNl7QwIyKQzJb2xba0rbw6WPuvxFAg49rNsncrEXt9itjeanyBMkXNd/RAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUpXEvrPva30pbkZRZ2YYNBSr70TwwHwYDVR0j BBgwFoAUrdeakGE8n6LtEpTHf9uwh0tL1CYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzE0NDE5My8wL0FERDc5QTkwNjEzQzlGQTJFRDEyOTRDNzdGREJC MDg3NEI0QkQ0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0QjRCRDQyNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcxNDQxOTMvMC8zMjMxMzEyZTMx MzQzODJlMzEzOTMyMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzNzM5MzYzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBdOUwDANBgkqhkiG9w0BAQsFAAOCAQEAJdcqPrPkXP4M32oiXav+ 8ocEpVvXrvVrQNOYRpgX3IBt61xN5FaSgRmbX6MpDE+JBPZbwDHLVnD70NwJAbUn PtosLqoeF6dFRgDG/PHcXAxMd2BtIWmMyN3GSlISz8Gawrr9pkzLvg97rxK4YmmH 0B5qpNdDRYNdDM5gOckmV2TDwi8BTbkiwDIbd02XuWBg0LavA1pE7UlWdjI2h9WY RJzR771hVqcbgjBPC8wGwqFncrKY8dLpq/767AVqns40tDkd1c+ukh/0VKZCo+jz Md4lzK5YnWLJVJ/bYe22NhD9jHIvdDd0iuVdLViKeFtYeLwXYcUHCqdlxUQuxjol gA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:23 2026 by rpki-client