This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e2034383437.roa File: 3132302e34372e302e302f31362d3136203d3e2034383437.roa (raw, json) Hash identifier: lv7hLgB4DhaCLKjg4xf3dfIw4sVemT9lRXa3jqlxqXA= Subject key identifier: ED:56:C8:3E:9D:5B:1E:C6:1F:C3:8A:46:73:23:9C:A2:FD:A7:AD:FD Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 284168999441ED57CF12BA9E4F9B7A7812F95923 Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e2034383437.roa Signing time: Tue 20 Jan 2026 02:25:04 +0000 ROA not before: Tue 20 Jan 2026 02:20:04 +0000 ROA not after: Tue 19 Jan 2027 02:25:04 +0000 asID: 4847 IP address blocks: 120.47.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:41:68:99:94:41:ed:57:cf:12:ba:9e:4f:9b:7a:78:12:f9:59:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jan 20 02:20:04 2026 GMT Not After : Jan 19 02:25:04 2027 GMT Subject: CN=ED56C83E9D5B1EC61FC38A4673239CA2FDA7ADFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f1:ca:c8:a1:e0:a0:fe:40:5c:16:4f:08:20: 19:fb:45:53:7a:f5:ff:5f:1d:c3:db:4f:db:cc:11: 25:10:bb:bd:ee:a2:45:95:29:37:3d:69:69:ee:cc: 54:f3:0e:a2:8f:f0:85:b8:64:3d:1c:79:8c:f4:ca: b3:f7:70:b3:eb:7b:78:4e:f7:63:ce:54:37:44:3a: 84:14:03:94:bd:02:95:92:8c:2e:5b:96:41:df:de: 0d:6f:f5:86:bd:8b:ef:0e:64:5c:49:49:3e:ce:06: 30:59:3e:d9:e5:74:9a:8b:03:a2:dd:52:21:59:a5: bf:ff:e0:ae:3d:6c:1e:f6:19:63:aa:05:02:6c:46: ce:e9:a7:2f:f7:50:21:30:db:9e:0a:a3:2f:4b:d7: 02:e6:78:ea:64:24:c5:22:8d:22:92:7b:5f:fa:bc: 9a:c6:32:04:94:73:ae:0e:0a:f0:0b:f0:af:72:d8: 69:c7:13:26:e9:66:64:9d:9b:98:a4:98:b1:03:f2: 84:d4:ea:5e:af:c2:fe:06:98:ad:dc:55:43:93:7d: 60:a6:6a:27:36:07:77:2a:60:79:f9:fb:11:53:7b: fb:1a:ff:80:f0:8b:fa:23:38:2a:cf:bf:81:be:00: 50:a2:a7:ee:cb:05:83:93:2d:0d:e8:cc:1f:a0:c0: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:56:C8:3E:9D:5B:1E:C6:1F:C3:8A:46:73:23:9C:A2:FD:A7:AD:FD X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.47.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:7a:f9:b4:16:14:97:39:b9:e9:f2:c5:10:69:55:38:3e:24: a3:c7:d4:2f:35:fd:11:c7:33:7b:66:1f:35:85:55:d4:79:db: f2:c5:f0:7c:87:72:57:58:53:2e:bb:42:2b:29:c7:b1:04:54: 67:58:4e:e2:9f:55:0f:8e:cb:be:05:d2:ea:11:79:11:e9:d7: 85:2e:10:98:7b:fd:2f:e7:4a:b8:94:fe:35:ba:31:ef:47:da: 90:85:21:cc:27:18:45:7f:70:1e:27:b8:22:c6:42:7e:6a:d0: 61:55:f0:bd:22:86:3d:8a:81:d7:49:c4:0d:ae:85:df:82:fd: c4:86:c7:e0:9d:a9:4e:d7:7f:0d:db:83:46:99:3d:35:5c:a0: ae:17:56:29:95:cd:ab:76:8c:79:85:17:ea:6e:3c:45:fb:91: 21:3f:8e:41:62:0d:5d:14:d7:80:43:a9:2a:50:d4:29:fc:b1: 53:fa:50:02:24:a4:83:16:3a:38:54:a2:ea:69:7d:2e:f2:db: 35:27:07:a5:a2:e7:f7:8d:8c:f6:4c:5b:d5:41:62:47:ee:c3: 2f:29:92:69:43:b5:2d:a7:17:02:12:19:7b:8e:ff:ea:6b:c7: 5b:20:d2:c0:95:a5:4c:df:bb:97:8b:56:ea:f8:70:8a:51:2f: 3f:f3:7c:8c -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUKEFomZRB7VfPErqeT5t6eBL5WSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjAxMjAwMjIwMDRaFw0yNzAxMTkwMjI1MDRaMDMxMTAvBgNV BAMTKEVENTZDODNFOUQ1QjFFQzYxRkMzOEE0NjczMjM5Q0EyRkRBN0FERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN8crIoeCg/kBcFk8IIBn7RVN6 9f9fHcPbT9vMESUQu73uokWVKTc9aWnuzFTzDqKP8IW4ZD0ceYz0yrP3cLPre3hO 92POVDdEOoQUA5S9ApWSjC5blkHf3g1v9Ya9i+8OZFxJST7OBjBZPtnldJqLA6Ld UiFZpb//4K49bB72GWOqBQJsRs7ppy/3UCEw254Koy9L1wLmeOpkJMUijSKSe1/6 vJrGMgSUc64OCvAL8K9y2GnHEybpZmSdm5ikmLED8oTU6l6vwv4GmK3cVUOTfWCm aic2B3cqYHn5+xFTe/sa/4Dwi/ojOCrPv4G+AFCip+7LBYOTLQ3ozB+gwPbVAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQU7VbIPp1bHsYfw4pGcyOcov2nrf0wHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzEzMjMwMmUzNDM3 MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzgzNDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA eC8wDQYJKoZIhvcNAQELBQADggEBABF6+bQWFJc5uenyxRBpVTg+JKPH1C81/RHH M3tmHzWFVdR52/LF8HyHcldYUy67Qispx7EEVGdYTuKfVQ+Oy74F0uoReRHp14Uu EJh7/S/nSriU/jW6Me9H2pCFIcwnGEV/cB4nuCLGQn5q0GFV8L0ihj2KgddJxA2u hd+C/cSGx+CdqU7Xfw3bg0aZPTVcoK4XVimVzat2jHmFF+puPEX7kSE/jkFiDV0U 14BDqSpQ1Cn8sVP6UAIkpIMWOjhUouppfS7y2zUnB6Wi5/eNjPZMW9VBYkfuwy8p kmlDtS2nFwISGXuO/+prx1sg0sCVpUzfu5eLVur4cIpRLz/zfIw= -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:57 2026 by rpki-client