This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38382e302f32312d3231203d3e203233373234.roa File: 3231312e3135352e38382e302f32312d3231203d3e203233373234.roa (raw, json) Hash identifier: oiQVtHJ3uNb8QOBB9izDh02SvyMImPV2UxDp/+mGsRc= Subject key identifier: C0:14:6D:F6:C6:B9:E8:19:B6:E2:22:9B:88:4D:AE:09:AB:F8:E9:4E Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 52A84BD7B5581BB5372976232559831E3C661EFB Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38382e302f32312d3231203d3e203233373234.roa Signing time: Tue 20 Jan 2026 02:15:36 +0000 ROA not before: Tue 20 Jan 2026 02:10:36 +0000 ROA not after: Tue 19 Jan 2027 02:15:36 +0000 asID: 23724 IP address blocks: 211.155.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a8:4b:d7:b5:58:1b:b5:37:29:76:23:25:59:83:1e:3c:66:1e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:36 2026 GMT Not After : Jan 19 02:15:36 2027 GMT Subject: CN=C0146DF6C6B9E819B6E2229B884DAE09ABF8E94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:3e:bd:5e:46:6d:71:ed:fe:1e:91:3d:12: 3c:5d:ac:14:ca:ab:f6:e4:e1:79:f6:88:4c:91:7d: ef:31:b5:5a:6d:24:65:4a:5d:bc:f8:4d:5e:d0:28: 77:86:f7:96:62:8b:3a:6f:5d:52:88:80:c3:41:91: da:2f:ef:23:6d:a3:21:01:88:17:71:a7:6b:61:47: 07:ef:b6:e5:07:37:63:58:3e:85:67:29:18:70:e0: 06:6b:98:30:b4:8e:72:0e:b7:44:08:a7:d0:ab:ee: 2f:44:9f:38:7c:72:c6:90:de:f5:14:fa:67:ae:87: 46:4d:60:81:eb:a6:13:26:0c:22:ec:37:c1:7d:3a: e1:07:9a:48:b3:73:92:f7:49:60:02:a6:44:09:2e: bf:bb:3b:c4:bd:08:4c:12:18:63:cb:9b:5b:c2:dc: f1:c1:1c:bc:b6:e0:fa:4d:5f:d1:0e:71:f7:64:07: db:50:f2:ef:1c:ef:b6:70:9f:c1:04:36:7c:f5:ce: 69:11:cc:48:97:cb:26:bd:90:16:f3:bb:e8:2e:a8: 18:d7:f9:7d:1c:db:e1:d7:3c:18:0c:37:13:61:21: bc:aa:07:a5:45:24:74:2c:a9:56:29:79:30:8d:a7: dc:86:08:71:20:1e:bd:f5:0b:fa:0e:58:2e:de:af: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:6D:F6:C6:B9:E8:19:B6:E2:22:9B:88:4D:AE:09:AB:F8:E9:4E X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38382e302f32312d3231203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.88.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:77:85:1c:d3:55:85:92:27:1c:8f:2c:68:84:fc:7c:ab:53: 46:18:8b:d6:c7:46:31:76:33:d3:19:14:36:6a:f2:e0:8e:e4: 62:59:94:67:3b:09:0b:b8:5e:ad:08:2f:a4:11:e4:ee:7f:9b: 10:f3:e1:ab:cf:13:b5:41:17:64:48:19:41:e4:53:0e:f9:07: b3:21:bf:61:a9:ed:1a:ea:71:7f:2e:8e:13:e2:ba:ca:13:ef: b8:e6:79:9a:5e:ec:25:ff:cd:32:e8:fb:6f:35:4b:4d:c6:f9: 26:51:9d:e5:fd:dc:be:ec:42:b4:b3:3a:2e:25:d6:9d:b8:4a: f5:47:d7:4a:23:a9:df:57:9e:26:18:f1:ca:60:29:3b:84:b2: 64:ad:0e:05:44:fc:3c:55:48:37:fb:e4:f6:b1:f3:f7:c8:20: da:29:f2:af:78:86:1c:d0:19:8d:a4:2d:b4:bb:2b:31:d9:c3: 97:51:95:3b:f1:3a:82:a1:2b:c7:42:fe:c7:7b:a5:ce:1a:9a: d9:f7:c8:72:62:72:b5:39:74:0e:be:1d:b9:f7:65:65:7a:9c: 36:25:bb:91:de:a6:06:b9:f4:fb:27:4b:c3:00:b3:bb:c2:98: ac:ed:4f:54:32:12:3a:a9:50:7b:f8:45:6c:62:09:71:e1:d2: 38:88:95:b4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUUqhL17VYG7U3KXYjJVmDHjxmHvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzZaFw0yNzAxMTkwMjE1MzZaMDMxMTAvBgNV BAMTKEMwMTQ2REY2QzZCOUU4MTlCNkUyMjI5Qjg4NERBRTA5QUJGOEU5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yT69XkZtce3+HpE9EjxdrBTK q/bk4Xn2iEyRfe8xtVptJGVKXbz4TV7QKHeG95ZiizpvXVKIgMNBkdov7yNtoyEB iBdxp2thRwfvtuUHN2NYPoVnKRhw4AZrmDC0jnIOt0QIp9Cr7i9Enzh8csaQ3vUU +meuh0ZNYIHrphMmDCLsN8F9OuEHmkizc5L3SWACpkQJLr+7O8S9CEwSGGPLm1vC 3PHBHLy24PpNX9EOcfdkB9tQ8u8c77Zwn8EENnz1zmkRzEiXyya9kBbzu+guqBjX +X0c2+HXPBgMNxNhIbyqB6VFJHQsqVYpeTCNp9yGCHEgHr31C/oOWC7er0hbAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUwBRt9sa56Bm24iKbiE2uCav46U4wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMyMzEzMTJlMzEz NTM1MmUzODM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9ObWDANBgkqhkiG9w0BAQsFAAOCAQEAm3eFHNNVhZInHI8saIT8fKtT RhiL1sdGMXYz0xkUNmry4I7kYlmUZzsJC7herQgvpBHk7n+bEPPhq88TtUEXZEgZ QeRTDvkHsyG/YantGupxfy6OE+K6yhPvuOZ5ml7sJf/NMuj7bzVLTcb5JlGd5f3c vuxCtLM6LiXWnbhK9UfXSiOp31eeJhjxymApO4SyZK0OBUT8PFVIN/vk9rHz98gg 2inyr3iGHNAZjaQttLsrMdnDl1GVO/E6gqErx0L+x3ulzhqa2ffIcmJytTl0Dr4d ufdlZXqcNiW7kd6mBrn0+ydLwwCzu8KYrO1PVDISOqlQe/hFbGIJceHSOIiVtA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:52 2026 by rpki-client