This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3133362e302f32312d3234203d3e203633363331.roa File: 3131392e3136312e3133362e302f32312d3234203d3e203633363331.roa (raw, json) Hash identifier: q975HSO7Atv6pgfxEXanM5WMHvz/cN828nBH1I+FNos= Subject key identifier: 9F:73:57:D5:E5:F8:F8:C3:34:80:4B:C0:16:1B:39:33:5F:B5:FC:33 Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 306C7CF9B96DB92B20E8CE68DFCDB3A9075F3230 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3133362e302f32312d3234203d3e203633363331.roa Signing time: Tue 20 Jan 2026 02:24:52 +0000 ROA not before: Tue 20 Jan 2026 02:19:52 +0000 ROA not after: Tue 19 Jan 2027 02:24:52 +0000 asID: 63631 IP address blocks: 119.161.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6c:7c:f9:b9:6d:b9:2b:20:e8:ce:68:df:cd:b3:a9:07:5f:32:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Jan 20 02:19:52 2026 GMT Not After : Jan 19 02:24:52 2027 GMT Subject: CN=9F7357D5E5F8F8C334804BC0161B39335FB5FC33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:8d:12:d9:95:0a:2c:62:39:aa:ae:f9:cd: 8f:41:b3:4a:3d:ee:fd:83:a2:cf:f4:40:50:39:83: a4:db:53:e3:bf:f3:21:9c:10:70:d1:17:33:bf:2e: da:83:e9:3e:20:7e:49:cf:e9:a2:8d:ef:d7:58:bb: d2:1a:66:fd:c8:20:c9:89:24:9a:e8:87:a2:ba:d7: 0b:29:50:6e:a0:7c:36:55:8b:96:f7:7a:9e:d6:b9: 30:49:67:86:80:c5:d9:2b:da:eb:d4:66:e7:8d:bf: 41:27:87:34:ab:fb:73:df:30:ff:f8:b0:0f:9f:84: 69:24:1c:22:d6:a5:54:c7:45:df:a7:9f:cd:39:a6: 43:15:21:46:4b:50:05:c1:89:33:2a:fe:37:0f:6f: d3:23:83:75:1b:9c:6a:e4:2d:25:cf:c6:2e:4a:70: d1:9b:a6:9b:7d:08:07:08:e8:a4:d7:77:8f:bd:bd: f3:8f:5a:7f:8f:34:c4:df:83:1e:f4:eb:8c:f9:9f: 95:9a:69:de:fb:d0:3d:a2:80:21:64:44:04:af:2a: 84:c9:50:d9:79:33:1e:79:a5:ca:a5:77:c2:40:ed: 96:76:df:6e:88:b4:73:fc:3a:b1:10:f8:7c:b6:32: c8:d3:89:3a:e0:17:b4:72:2b:2b:68:26:45:8b:b2: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:73:57:D5:E5:F8:F8:C3:34:80:4B:C0:16:1B:39:33:5F:B5:FC:33 X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3133362e302f32312d3234203d3e203633363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.161.136.0/21 Signature Algorithm: sha256WithRSAEncryption b3:68:e3:a6:07:da:43:d6:49:0c:3f:d2:33:6d:c4:43:33:a0: a6:00:c0:d3:b5:98:d6:c1:d7:fe:d4:3a:8a:bf:e3:50:a4:58: f0:48:12:b0:04:b5:95:3a:45:07:6b:f6:80:21:97:da:ab:0d: 2c:f9:78:e7:72:52:9d:85:99:79:3a:49:c5:97:9e:72:b3:a2: f3:ab:50:4c:c3:db:fc:c3:8c:0d:d5:0c:9a:39:d0:78:55:b8: 69:52:36:0c:08:08:4f:81:c0:84:e4:f0:81:ad:5f:99:bd:e5: 18:d4:f2:af:41:36:83:c2:af:f6:6c:55:db:80:5e:f1:9b:72: 22:d0:86:1e:65:e0:87:b7:86:73:a2:6b:bd:83:7b:98:ad:29: 86:ea:2d:f1:42:92:2e:fa:e1:42:36:40:e8:3c:bf:a3:6b:58: a0:25:b0:ef:d1:dc:83:bc:ac:88:dc:aa:88:5c:1d:ea:aa:17: b3:7c:61:65:eb:1a:50:cb:5a:a3:ac:30:6f:5e:d2:17:8a:83: e4:ba:d1:54:8b:04:2b:35:fa:c9:a7:d0:e9:5c:69:b5:53:9d: 1d:a0:b8:46:cf:19:3a:2e:5e:e3:ca:fd:5e:4a:7e:58:67:0a: 19:76:21:f9:7e:be:60:cc:ee:6b:71:e1:41:d2:89:17:76:e0: 31:51:a1:f4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMGx8+bltuSsg6M5o382zqQdfMjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjAxMjAwMjE5NTJaFw0yNzAxMTkwMjI0NTJaMDMxMTAvBgNV BAMTKDlGNzM1N0Q1RTVGOEY4QzMzNDgwNEJDMDE2MUIzOTMzNUZCNUZDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0P40S2ZUKLGI5qq75zY9Bs0o9 7v2Dos/0QFA5g6TbU+O/8yGcEHDRFzO/LtqD6T4gfknP6aKN79dYu9IaZv3IIMmJ JJroh6K61wspUG6gfDZVi5b3ep7WuTBJZ4aAxdkr2uvUZueNv0EnhzSr+3PfMP/4 sA+fhGkkHCLWpVTHRd+nn805pkMVIUZLUAXBiTMq/jcPb9Mjg3UbnGrkLSXPxi5K cNGbppt9CAcI6KTXd4+9vfOPWn+PNMTfgx7064z5n5Waad770D2igCFkRASvKoTJ UNl5Mx55pcqld8JA7ZZ2326ItHP8OrEQ+Hy2MsjTiTrgF7RyKytoJkWLsgBFAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUn3NX1eX4+MM0gEvAFhs5M1+1/DMwHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC8zMTMxMzkyZTMx MzYzMTJlMzEzMzM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA3ehiDANBgkqhkiG9w0BAQsFAAOCAQEAs2jjpgfaQ9ZJDD/SM23E QzOgpgDA07WY1sHX/tQ6ir/jUKRY8EgSsAS1lTpFB2v2gCGX2qsNLPl453JSnYWZ eTpJxZeecrOi86tQTMPb/MOMDdUMmjnQeFW4aVI2DAgIT4HAhOTwga1fmb3lGNTy r0E2g8Kv9mxV24Be8ZtyItCGHmXgh7eGc6JrvYN7mK0phuot8UKSLvrhQjZA6Dy/ o2tYoCWw79Hcg7ysiNyqiFwd6qoXs3xhZesaUMtao6wwb17SF4qD5LrRVIsEKzX6 yafQ6VxptVOdHaC4Rs8ZOi5e48r9Xkp+WGcKGXYh+X6+YMzua3HhQdKJF3bgMVGh 9A== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:18 2026 by rpki-client