This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa File: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (raw, json) Hash identifier: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU= Subject key identifier: F3:FE:28:59:28:8B:45:8C:A3:0F:A3:18:3B:12:A8:7B:94:85:00:57 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 62291506D17630B9E9CD0EAE77F42FAFFC8437B8 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa Signing time: Tue 20 Jan 2026 02:10:53 +0000 ROA not before: Tue 20 Jan 2026 02:05:53 +0000 ROA not after: Tue 19 Jan 2027 02:10:53 +0000 asID: 63199 IP address blocks: 139.159.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:29:15:06:d1:76:30:b9:e9:cd:0e:ae:77:f4:2f:af:fc:84:37:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jan 20 02:05:53 2026 GMT Not After : Jan 19 02:10:53 2027 GMT Subject: CN=F3FE2859288B458CA30FA3183B12A87B94850057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:3f:ba:4f:ea:f6:53:1a:86:65:d2:69:5f: b2:95:c6:94:ef:49:8f:02:61:d5:eb:f9:ed:cd:71: 1e:68:18:6c:30:e7:bb:73:43:c8:1d:82:ab:42:bd: 2b:86:32:4d:26:54:1d:62:a6:47:7b:e4:88:dd:6a: cc:10:ba:a4:e4:bd:56:cc:5a:8b:e9:1c:dc:57:bb: c7:02:80:82:6f:5a:80:fb:25:ff:81:d5:2d:9f:b6: fa:ee:75:7c:2a:af:a8:4e:23:ed:7f:53:de:bd:50: 0d:fb:9d:33:72:8e:28:42:83:fd:bf:d4:93:b0:67: 11:2c:7f:33:b2:f0:2f:a1:31:95:70:7d:08:11:90: 2d:3a:43:f2:c7:7d:c6:54:56:95:5e:6d:e7:8a:0e: e1:8b:24:7b:5e:8e:ce:a5:d9:e0:27:b7:be:e8:4e: 59:30:9f:64:9c:50:36:b2:c9:dc:b6:aa:74:f8:a5: 35:6f:c9:3c:32:03:2d:61:7f:bb:dd:32:02:b6:d5: c7:f3:55:27:93:d6:31:3e:80:f1:83:93:42:74:b9: 2b:06:1a:a3:97:54:4a:16:90:39:77:29:45:06:89: fd:fe:91:25:f0:c9:57:e2:54:aa:14:07:20:93:5a: 3e:5e:f0:d0:48:e0:0a:69:c9:81:76:06:0b:55:03: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FE:28:59:28:8B:45:8C:A3:0F:A3:18:3B:12:A8:7B:94:85:00:57 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.104.0/22 Signature Algorithm: sha256WithRSAEncryption 39:f8:e5:2e:17:32:a0:98:04:e0:aa:78:4e:47:00:58:aa:92: 9f:49:23:6f:9d:3d:7a:e4:72:fc:86:48:82:57:36:1a:7b:7b: 32:d2:b9:f3:bb:93:c1:6d:f3:89:3c:30:3c:a4:f4:fb:6e:c5: 76:44:a7:97:ed:34:23:d1:e7:aa:2b:1d:76:23:7c:78:47:45: 47:19:2b:1a:0e:f9:36:b9:d9:86:3b:20:25:c1:24:b1:d8:27: ae:c2:7f:ff:c4:b4:ef:5e:fa:99:24:87:9c:62:fc:cb:2b:d8: 7d:82:26:94:c4:35:80:16:7d:4d:db:3c:a6:16:4f:b2:32:f4: d0:c0:06:65:41:25:82:f3:7c:54:2f:d8:a0:3f:3a:75:ff:41: c4:19:8b:93:d1:9f:0b:97:83:cc:55:e6:f4:0e:80:53:2d:83: 1f:74:3e:e4:35:3a:59:6b:92:0b:67:9b:24:62:88:36:b5:f7: 55:27:3b:cc:90:87:b7:95:df:b3:73:62:e0:92:ea:82:08:a3: 49:53:65:8b:00:0d:c4:44:60:65:dc:ab:40:0d:6a:7d:9b:0c: 32:6b:aa:c7:d1:e2:c3:ca:37:9f:da:7f:11:91:80:59:8e:25: 78:b3:80:b3:8f:e9:e9:2b:a6:4c:7d:a7:9d:aa:c8:11:18:bf: f1:60:67:57 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYikVBtF2MLnpzQ6ud/Qvr/yEN7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjAxMjAwMjA1NTNaFw0yNzAxMTkwMjEwNTNaMDMxMTAvBgNV BAMTKEYzRkUyODU5Mjg4QjQ1OENBMzBGQTMxODNCMTJBODdCOTQ4NTAwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgdD+6T+r2UxqGZdJpX7KVxpTv SY8CYdXr+e3NcR5oGGww57tzQ8gdgqtCvSuGMk0mVB1ipkd75IjdaswQuqTkvVbM WovpHNxXu8cCgIJvWoD7Jf+B1S2ftvrudXwqr6hOI+1/U969UA37nTNyjihCg/2/ 1JOwZxEsfzOy8C+hMZVwfQgRkC06Q/LHfcZUVpVebeeKDuGLJHtejs6l2eAnt77o Tlkwn2ScUDayydy2qnT4pTVvyTwyAy1hf7vdMgK21cfzVSeT1jE+gPGDk0J0uSsG GqOXVEoWkDl3KUUGif3+kSXwyVfiVKoUByCTWj5e8NBI4AppyYF2BgtVA5pPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU8/4oWSiLRYyjD6MYOxKoe5SFAFcwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS8zMTMzMzkyZTMx MzUzOTJlMzEzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAoufaDANBgkqhkiG9w0BAQsFAAOCAQEAOfjlLhcyoJgE4Kp4TkcA WKqSn0kjb509euRy/IZIglc2Gnt7MtK587uTwW3ziTwwPKT0+27FdkSnl+00I9Hn qisddiN8eEdFRxkrGg75NrnZhjsgJcEksdgnrsJ//8S07176mSSHnGL8yyvYfYIm lMQ1gBZ9Tds8phZPsjL00MAGZUElgvN8VC/YoD86df9BxBmLk9GfC5eDzFXm9A6A Uy2DH3Q+5DU6WWuSC2ebJGKINrX3VSc7zJCHt5Xfs3Ni4JLqggijSVNliwANxERg ZdyrQA1qfZsMMmuqx9Hiw8o3n9p/EZGAWY4leLOAs4/p6SumTH2nnarIERi/8WBn Vw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:11:15 2026 by rpki-client