This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/32372e302e3133332e302f32342d3234203d3e20313338393135.roa File: 32372e302e3133332e302f32342d3234203d3e20313338393135.roa (raw, json) Hash identifier: yjVaS9fU/BmpI0d1y40icFKgvmXLnvrVPGA9lnAYovg= Subject key identifier: F5:1B:4D:50:4D:D9:0C:FB:75:1F:76:11:80:AA:BF:42:E5:28:F0:B8 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 642530F30D718429ABD3174D8AFF180F2AB6624F Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/32372e302e3133332e302f32342d3234203d3e20313338393135.roa Signing time: Tue 20 Jan 2026 02:20:22 +0000 ROA not before: Tue 20 Jan 2026 02:15:22 +0000 ROA not after: Tue 19 Jan 2027 02:20:22 +0000 asID: 138915 IP address blocks: 27.0.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:25:30:f3:0d:71:84:29:ab:d3:17:4d:8a:ff:18:0f:2a:b6:62:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: Jan 20 02:15:22 2026 GMT Not After : Jan 19 02:20:22 2027 GMT Subject: CN=F51B4D504DD90CFB751F761180AABF42E528F0B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:9c:b6:6f:5c:fc:91:e8:31:b6:9f:a4:f1: 56:f7:af:a1:00:f8:d9:ea:36:93:3a:d2:3b:2b:f9: b7:a6:94:63:2f:e9:81:28:9a:c3:55:a8:04:db:81: f5:f5:1a:fc:09:72:fb:49:e6:b0:51:90:b8:bb:da: 07:8d:81:1e:f8:84:16:0d:0c:42:99:46:ba:f9:eb: e4:e2:40:f3:46:2f:75:8e:af:ea:ad:fe:e6:98:f7: ab:07:b2:1e:eb:e9:11:a1:2f:c1:1f:61:ae:d6:03: 3f:ff:2e:ec:ed:f3:50:28:5f:44:e2:14:a9:0c:95: 5b:a9:4a:b3:2d:3a:94:a2:eb:42:02:67:38:61:14: f5:3f:ed:27:5b:a5:a5:bb:a9:e6:f7:83:21:4f:78: 47:27:d6:83:4f:c9:f4:6e:b7:4c:9c:d3:31:f7:c6: 67:d7:7f:01:c1:19:90:bd:a4:27:bb:26:c6:26:68: 66:04:d5:52:ef:b7:70:e5:b9:92:88:d3:a2:da:f2: e4:9f:af:a3:80:a0:a2:d9:e6:fb:98:cc:9c:8c:12: c1:2a:37:fd:6f:81:26:82:03:86:fd:90:81:d6:2e: 01:b4:65:f4:23:c3:9c:09:ab:39:36:0f:38:34:f5: 68:70:da:bb:d3:1c:9a:6b:93:e0:71:fb:10:20:94: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1B:4D:50:4D:D9:0C:FB:75:1F:76:11:80:AA:BF:42:E5:28:F0:B8 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/32372e302e3133332e302f32342d3234203d3e20313338393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.133.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:aa:c6:f2:74:ec:f4:50:1a:15:15:f6:d6:a9:01:67:35:33: ab:58:86:ab:7f:66:af:88:05:25:e5:f4:c2:fd:ff:cb:ad:5e: ae:52:e0:2e:02:04:51:06:0c:09:da:fc:c4:87:77:0a:03:4a: 20:d6:7a:3d:e4:d7:13:31:64:1d:a3:34:5e:de:b4:a1:9e:67: d0:33:9c:0b:9f:2b:c3:39:04:60:48:9d:98:65:74:03:1e:ea: da:a4:cc:a4:18:86:da:a0:33:9c:48:cb:6f:cc:43:e4:d0:12: 15:83:0b:10:a1:dc:49:81:5c:c6:0c:fb:2c:6a:11:2e:40:57: 55:2d:ec:40:22:19:a9:6c:0a:88:6b:4a:ff:b2:ca:c2:99:2a: 20:df:30:86:1a:c0:db:1a:ed:5e:bf:45:ab:54:3d:14:02:9b: f8:44:9c:61:de:06:dc:20:2a:59:1e:54:16:da:20:12:24:00: f1:f3:5d:0f:14:dd:bb:d2:ae:42:d5:a3:fe:ed:d1:ca:3e:fe: 4d:eb:ae:00:4c:e1:25:4d:3a:1a:3d:4b:4d:f5:45:f1:62:85: 32:ca:dc:37:52:d7:81:20:64:65:fc:73:86:d2:94:3b:3d:6a: 4c:2d:a9:30:46:76:89:8a:23:4d:db:38:a5:08:97:ba:1c:71: f8:e9:c5:f5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZCUw8w1xhCmr0xdNiv8YDyq2Yk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjAxMjAwMjE1MjJaFw0yNzAxMTkwMjIwMjJaMDMxMTAvBgNV BAMTKEY1MUI0RDUwNEREOTBDRkI3NTFGNzYxMTgwQUFCRjQyRTUyOEYwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtypy2b1z8kegxtp+k8Vb3r6EA +NnqNpM60jsr+bemlGMv6YEomsNVqATbgfX1GvwJcvtJ5rBRkLi72geNgR74hBYN DEKZRrr56+TiQPNGL3WOr+qt/uaY96sHsh7r6RGhL8EfYa7WAz//Luzt81AoX0Ti FKkMlVupSrMtOpSi60ICZzhhFPU/7SdbpaW7qeb3gyFPeEcn1oNPyfRut0yc0zH3 xmfXfwHBGZC9pCe7JsYmaGYE1VLvt3DluZKI06La8uSfr6OAoKLZ5vuYzJyMEsEq N/1vgSaCA4b9kIHWLgG0ZfQjw5wJqzk2Dzg09Whw2rvTHJprk+Bx+xAglI8HAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU9RtNUE3ZDPt1H3YRgKq/QuUo8LgwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NDg3ODA5LzAvMzIzNzJlMzAyZTMx MzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM5MzEzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEABsAhTANBgkqhkiG9w0BAQsFAAOCAQEAjqrG8nTs9FAaFRX21qkBZzUzq1iG q39mr4gFJeX0wv3/y61erlLgLgIEUQYMCdr8xId3CgNKINZ6PeTXEzFkHaM0Xt60 oZ5n0DOcC58rwzkEYEidmGV0Ax7q2qTMpBiG2qAznEjLb8xD5NASFYMLEKHcSYFc xgz7LGoRLkBXVS3sQCIZqWwKiGtK/7LKwpkqIN8whhrA2xrtXr9Fq1Q9FAKb+ESc Yd4G3CAqWR5UFtogEiQA8fNdDxTdu9KuQtWj/u3Ryj7+TeuuAEzhJU06Gj1LTfVF 8WKFMsrcN1LXgSBkZfxzhtKUOz1qTC2pMEZ2iYojTds4pQiXuhxx+OnF9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 04:30:48 2026 by rpki-client