This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/3131392e34302e36342e302f32302d3234203d3e203338333738.roa File: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (raw, json) Hash identifier: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE= Subject key identifier: FE:EA:EA:B7:18:15:77:59:BC:08:9E:EA:C8:63:BA:24:A7:A2:1C:05 Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 61FD720B5E920A5A922AF908FC3B4722B3026D40 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/3131392e34302e36342e302f32302d3234203d3e203338333738.roa Signing time: Tue 20 Jan 2026 02:22:44 +0000 ROA not before: Tue 20 Jan 2026 02:17:44 +0000 ROA not after: Tue 19 Jan 2027 02:22:44 +0000 asID: 38378 IP address blocks: 119.40.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fd:72:0b:5e:92:0a:5a:92:2a:f9:08:fc:3b:47:22:b3:02:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Jan 20 02:17:44 2026 GMT Not After : Jan 19 02:22:44 2027 GMT Subject: CN=FEEAEAB718157759BC089EEAC863BA24A7A21C05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9b:76:68:8c:8b:99:73:04:a6:a5:c1:ff:09: a5:1f:9f:81:99:11:64:85:f0:be:e6:e1:1c:07:69: 69:66:7f:95:83:4b:81:27:06:81:bb:3c:18:7d:40: ee:89:32:d6:b9:8a:fc:07:20:17:0d:39:5d:be:26: dd:ad:e4:b0:d8:5b:8e:94:53:a0:93:3a:b2:12:0c: 8b:5b:0f:39:d3:9c:26:04:ec:a3:28:58:73:ed:96: 32:2c:41:3b:22:bb:0c:df:39:ee:0b:bb:d1:ac:d5: 33:f1:61:68:94:3e:a5:f8:fc:71:1f:8a:fe:23:5c: 02:72:5a:44:d6:23:5e:b8:20:b2:1c:e0:1e:b1:47: 15:4c:1d:40:86:1d:3b:6f:b4:1d:fa:c3:eb:fb:7a: d0:c5:32:8f:c1:f4:e9:ca:3f:48:96:b6:ff:f2:15: 5b:89:dc:fe:c7:81:d0:d4:7d:be:65:a5:f7:24:11: 09:b8:82:5d:ea:75:ae:1d:37:1b:04:d8:6a:7c:81: 07:31:ec:e6:21:87:81:57:7b:0a:4c:ea:d3:6e:49: 57:20:ad:2d:f9:f1:c1:0f:ee:66:5d:7f:9c:aa:32: da:9d:36:fb:73:19:c0:48:b1:99:3d:c8:cb:e2:af: 5e:6f:8c:a7:52:67:a1:f4:ab:99:9d:a6:e1:d1:58: ab:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EA:EA:B7:18:15:77:59:BC:08:9E:EA:C8:63:BA:24:A7:A2:1C:05 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/3131392e34302e36342e302f32302d3234203d3e203338333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.40.64.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:a4:a5:fb:fa:18:7c:da:be:76:63:24:75:fd:56:c8:dc:23: f9:1a:f5:6b:17:66:7c:c3:8b:de:2c:f5:56:4e:b3:6c:91:d0: e3:52:aa:ee:d4:22:16:0f:78:d9:ce:9c:bf:c8:0f:c6:c6:14: 3e:2c:48:49:52:72:82:64:51:5c:47:4d:61:94:4b:55:b8:ca: ed:52:84:df:50:1c:44:a3:1c:cc:50:9d:e3:d0:d3:18:3e:82: ad:9b:9e:a3:4c:96:02:20:23:a0:30:d5:31:2b:c2:fe:b9:32: 95:05:b5:25:77:78:51:ba:85:2d:a6:ce:c1:b8:8f:0c:e6:c1: 3f:65:79:8a:5f:8b:58:1a:e1:ac:c9:66:38:52:ac:2f:0f:9e: bc:17:86:5b:77:aa:3c:3d:df:a2:2f:b3:65:e5:e5:ca:2f:c0: 67:bd:0b:3c:a9:d1:1f:00:86:18:73:2e:cd:9c:c8:fe:65:56: c2:65:05:5c:43:c6:cd:b9:0d:44:d9:fe:d8:c6:d2:76:5e:89: fa:c8:e3:38:30:ce:14:14:92:77:87:e5:c3:cc:a9:40:c7:f0: 2a:38:a1:24:e2:83:6c:fb:95:1b:42:2a:80:19:00:cb:f4:d8: 8c:36:28:5d:c2:e5:fb:f7:42:09:4a:ff:8b:aa:93:c9:6c:e1: d7:5e:77:c7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUYf1yC16SClqSKvkI/DtHIrMCbUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjAxMjAwMjE3NDRaFw0yNzAxMTkwMjIyNDRaMDMxMTAvBgNV BAMTKEZFRUFFQUI3MTgxNTc3NTlCQzA4OUVFQUM4NjNCQTI0QTdBMjFDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtm3ZojIuZcwSmpcH/CaUfn4GZ EWSF8L7m4RwHaWlmf5WDS4EnBoG7PBh9QO6JMta5ivwHIBcNOV2+Jt2t5LDYW46U U6CTOrISDItbDznTnCYE7KMoWHPtljIsQTsiuwzfOe4Lu9Gs1TPxYWiUPqX4/HEf iv4jXAJyWkTWI164ILIc4B6xRxVMHUCGHTtvtB36w+v7etDFMo/B9OnKP0iWtv/y FVuJ3P7HgdDUfb5lpfckEQm4gl3qda4dNxsE2Gp8gQcx7OYhh4FXewpM6tNuSVcg rS358cEP7mZdf5yqMtqdNvtzGcBIsZk9yMvir15vjKdSZ6H0q5mdpuHRWKtnAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU/urqtxgVd1m8CJ7qyGO6JKeiHAUwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MzQwODAxLzAvMzEzMTM5MmUzNDMw MmUzNjM0MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzMzODMzMzczOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHcoQDANBgkqhkiG9w0BAQsFAAOCAQEALaSl+/oYfNq+dmMkdf1WyNwj+Rr1 axdmfMOL3iz1Vk6zbJHQ41Kq7tQiFg942c6cv8gPxsYUPixISVJygmRRXEdNYZRL VbjK7VKE31AcRKMczFCd49DTGD6CrZueo0yWAiAjoDDVMSvC/rkylQW1JXd4UbqF LabOwbiPDObBP2V5il+LWBrhrMlmOFKsLw+evBeGW3eqPD3foi+zZeXlyi/AZ70L PKnRHwCGGHMuzZzI/mVWwmUFXEPGzbkNRNn+2MbSdl6J+sjjODDOFBSSd4flw8yp QMfwKjihJOKDbPuVG0IqgBkAy/TYjDYoXcLl+/dCCUr/i6qTyWzh1153xw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:13 2026 by rpki-client