This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3231392e3233322e3136302e302f31392d3234203d3e203137393632.roa File: 3231392e3233322e3136302e302f31392d3234203d3e203137393632.roa (raw, json) Hash identifier: kdhfiBnDIG18b57XVsAuy3VcDOQ+J/7L/GCKIxBYUJA= Subject key identifier: AA:BF:12:2B:86:5B:F9:2E:4C:06:13:08:44:CD:D7:1B:2F:31:89:E3 Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Certificate serial: 44C2DF3699FD5965370A44793AC66969FFCD7151 Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3231392e3233322e3136302e302f31392d3234203d3e203137393632.roa Signing time: Tue 20 Jan 2026 02:14:14 +0000 ROA not before: Tue 20 Jan 2026 02:09:14 +0000 ROA not after: Tue 19 Jan 2027 02:14:14 +0000 asID: 17962 IP address blocks: 219.232.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c2:df:36:99:fd:59:65:37:0a:44:79:3a:c6:69:69:ff:cd:71:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Validity Not Before: Jan 20 02:09:14 2026 GMT Not After : Jan 19 02:14:14 2027 GMT Subject: CN=AABF122B865BF92E4C06130844CDD71B2F3189E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:91:fa:da:43:86:8d:e2:90:67:91:08:dd: ff:a2:a9:c2:91:77:18:0c:1a:9d:e4:bf:05:bb:6d: 6b:06:3c:ae:a4:ee:a6:42:ea:15:ee:27:98:21:46: 53:42:64:00:73:13:c9:c3:6e:a9:bd:4c:79:75:e8: cb:7e:92:31:39:b7:de:72:38:db:67:68:0d:3a:21: 82:e1:d7:36:11:eb:bb:3d:d5:25:31:2a:02:34:4d: 28:74:23:dc:43:08:b5:d6:8f:11:a3:ea:4a:fb:55: 2d:80:ee:98:d6:57:33:e5:66:6e:f6:83:1a:69:a8: 43:6f:7e:37:a6:a2:0b:c1:ba:fe:af:b5:ac:0a:33: 81:5f:06:5d:e8:82:2d:e8:6f:20:06:43:d2:cf:e9: 10:51:d5:c9:2b:12:87:05:13:c2:2c:96:6b:66:83: a5:20:57:8e:62:76:00:28:76:03:45:d5:ba:9c:97: 8d:81:81:01:dc:98:5d:5e:17:e6:87:83:26:1d:92: 0d:7f:b6:f8:2f:3e:c4:9c:92:d0:bb:72:1b:ea:21: 6b:9c:ea:ce:95:18:2e:4b:6d:b9:af:62:c0:87:04: 1f:6d:06:42:8f:60:e6:bb:a4:3a:cc:90:c1:84:85: 8a:63:a3:e4:34:31:9d:22:da:e1:fd:38:1d:9c:8a: bd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BF:12:2B:86:5B:F9:2E:4C:06:13:08:44:CD:D7:1B:2F:31:89:E3 X509v3 Authority Key Identifier: keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3231392e3233322e3136302e302f31392d3234203d3e203137393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.232.160.0/19 Signature Algorithm: sha256WithRSAEncryption 1e:4b:6c:e9:9a:8b:2a:c6:6b:de:31:2f:2c:b2:69:b8:30:dd: 27:b5:93:49:ff:b5:e5:37:c3:16:21:2a:c4:34:56:cf:29:ab: 4a:cd:79:12:8c:7f:55:74:75:ae:4c:e0:66:75:b6:71:18:36: 2f:d6:3e:1d:1e:ae:88:10:32:ca:aa:4b:df:83:5e:a7:7d:20: 63:d5:1e:d7:30:8b:48:5c:e8:d5:32:0c:cf:8b:59:5a:f4:8d: 6a:d1:6a:8d:29:44:88:27:e0:44:88:3c:de:84:a2:ce:a4:d6: 3d:fc:71:33:17:e2:c0:0a:90:24:9b:6d:cb:9a:63:ee:ba:c4: b8:74:4e:67:c4:d0:15:b5:1b:b6:57:ed:f5:a2:f6:57:a1:29: 5f:8c:8a:1c:f3:d4:62:08:de:e5:c1:6a:25:12:4c:71:24:71: 1f:98:31:5f:6f:02:a9:b1:65:f9:83:87:bb:6e:fd:8f:5c:1c: d5:d5:86:48:2b:24:ad:34:c5:b5:f3:84:fe:e6:6e:af:72:1e: 7c:58:fd:20:a6:fe:04:e8:4e:29:1f:23:08:23:5e:cd:ef:c3: e4:5a:d9:e5:4b:c8:21:0e:c6:90:08:74:f3:a6:e1:b9:6f:8d: 70:14:ae:19:13:4e:bf:d3:9b:99:84:3e:10:45:a7:b9:ea:7e: b3:d5:a2:8b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIURMLfNpn9WWU3CkR5OsZpaf/NcVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0 QjRCRDQyNjAeFw0yNjAxMjAwMjA5MTRaFw0yNzAxMTkwMjE0MTRaMDMxMTAvBgNV BAMTKEFBQkYxMjJCODY1QkY5MkU0QzA2MTMwODQ0Q0RENzFCMkYzMTg5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXJH62kOGjeKQZ5EI3f+iqcKR dxgMGp3kvwW7bWsGPK6k7qZC6hXuJ5ghRlNCZABzE8nDbqm9THl16Mt+kjE5t95y ONtnaA06IYLh1zYR67s91SUxKgI0TSh0I9xDCLXWjxGj6kr7VS2A7pjWVzPlZm72 gxppqENvfjemogvBuv6vtawKM4FfBl3ogi3obyAGQ9LP6RBR1ckrEocFE8Islmtm g6UgV45idgAodgNF1bqcl42BgQHcmF1eF+aHgyYdkg1/tvgvPsScktC7chvqIWuc 6s6VGC5LbbmvYsCHBB9tBkKPYOa7pDrMkMGEhYpjo+Q0MZ0i2uH9OB2cir1RAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUqr8SK4Zb+S5MBhMIRM3XGy8xieMwHwYDVR0j BBgwFoAUrdeakGE8n6LtEpTHf9uwh0tL1CYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzE0NDE5My8wL0FERDc5QTkwNjEzQzlGQTJFRDEyOTRDNzdGREJC MDg3NEI0QkQ0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0QjRCRDQyNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcxNDQxOTMvMC8zMjMxMzkyZTMy MzMzMjJlMzEzNjMwMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzNzM5MzYzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBdvooDANBgkqhkiG9w0BAQsFAAOCAQEAHkts6ZqLKsZr3jEvLLJp uDDdJ7WTSf+15TfDFiEqxDRWzymrSs15Eox/VXR1rkzgZnW2cRg2L9Y+HR6uiBAy yqpL34Nep30gY9Ue1zCLSFzo1TIMz4tZWvSNatFqjSlEiCfgRIg83oSizqTWPfxx MxfiwAqQJJtty5pj7rrEuHROZ8TQFbUbtlft9aL2V6EpX4yKHPPUYgje5cFqJRJM cSRxH5gxX28CqbFl+YOHu279j1wc1dWGSCskrTTFtfOE/uZur3IefFj9IKb+BOhO KR8jCCNeze/D5FrZ5UvIIQ7GkAh086bhuW+NcBSuGRNOv9ObmYQ+EEWnuep+s9Wi iw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:51 2026 by rpki-client