This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134342e302f32312d3234203d3e203633363331.roa File: 3131392e3136312e3134342e302f32312d3234203d3e203633363331.roa (raw, json) Hash identifier: WUSgHCOBVUebvdwfVgY5RDlp2/uC/v+NAYmc5JoVMPE= Subject key identifier: AA:13:B1:1D:20:38:3D:09:AD:C2:DE:0D:A8:94:1B:67:0A:E5:B1:B0 Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 0B8ED7CCC60514AF6DAFCAEE81D7949B94B35D46 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134342e302f32312d3234203d3e203633363331.roa Signing time: Tue 20 Jan 2026 02:24:52 +0000 ROA not before: Tue 20 Jan 2026 02:19:52 +0000 ROA not after: Tue 19 Jan 2027 02:24:52 +0000 asID: 63631 IP address blocks: 119.161.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8e:d7:cc:c6:05:14:af:6d:af:ca:ee:81:d7:94:9b:94:b3:5d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Jan 20 02:19:52 2026 GMT Not After : Jan 19 02:24:52 2027 GMT Subject: CN=AA13B11D20383D09ADC2DE0DA8941B670AE5B1B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:89:0c:5a:24:57:be:c0:e0:d6:8c:32:d2: f3:82:38:6a:17:35:0d:d2:82:18:e3:c1:15:60:c5: e5:dd:a4:91:ff:5a:36:67:01:38:82:81:fb:e0:cd: 4f:37:32:74:ae:63:09:c2:3d:85:29:fd:b5:52:f2: b1:11:f2:93:69:fe:85:02:d3:04:14:8e:96:22:aa: 16:7e:60:f3:4d:26:3e:35:fd:d3:15:a3:12:f2:66: 07:2f:6b:fb:fb:97:c9:b4:a5:59:c9:ab:98:16:79: 81:52:5b:24:5a:29:e6:dc:3f:2d:5f:39:3a:cc:dc: 45:84:34:1d:a6:02:af:37:f7:e1:95:60:83:1f:e7: ee:10:cc:43:07:a3:ba:88:e1:27:b8:de:bb:f6:29: 42:f4:f1:ec:94:ca:33:5e:75:dc:c9:d1:d1:40:1b: 66:70:8c:3f:3a:a1:95:52:7e:6e:c2:54:6f:a2:f1: 47:33:77:10:c0:07:21:72:83:58:ee:5b:93:b0:75: fe:51:7a:a4:7a:6a:bd:b4:a7:3e:fb:c5:a7:b9:94: 6e:c0:73:2d:86:a2:1e:43:b9:e1:65:a2:5d:eb:b8: 14:dc:90:18:57:db:2c:9c:65:0f:bb:2a:93:8a:0f: bf:60:9f:3b:04:1e:10:37:48:ad:b1:40:35:11:9b: 07:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:13:B1:1D:20:38:3D:09:AD:C2:DE:0D:A8:94:1B:67:0A:E5:B1:B0 X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134342e302f32312d3234203d3e203633363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.161.144.0/21 Signature Algorithm: sha256WithRSAEncryption b0:18:01:79:55:0f:ce:a4:8b:b3:3c:fb:2a:da:18:b7:ad:78: 38:09:63:c2:d3:96:15:73:2e:fe:37:6b:f0:e2:ba:53:16:44: a3:8c:fb:d5:74:2d:83:d7:9b:16:f8:3d:d1:56:32:fe:63:59: 77:d1:ae:7d:9d:2a:c7:af:ca:0c:b9:ab:f4:1f:25:c3:87:f8: 7f:78:54:a8:8e:80:01:2c:5b:3e:74:ca:55:cb:4b:a0:e9:45: 44:0d:54:5f:b7:51:c5:a5:fd:af:6e:5d:c2:5b:8e:d7:9d:53: 89:6c:bc:8d:28:22:0e:12:ec:0b:fe:3d:c0:30:98:32:7c:e7: 2a:e8:d2:d6:f7:53:5c:2d:0d:49:0b:d9:9e:da:23:0e:50:8c: d4:37:e1:3c:d3:e1:44:b1:f1:a0:da:b3:f7:88:39:fb:50:5f: 4e:c1:e8:f8:ee:83:84:e3:c9:1e:54:40:a9:61:6f:46:57:72: ca:bb:ec:58:04:6b:6f:b9:89:cf:9f:1a:79:6c:2c:93:29:fd: f1:e6:c0:33:e9:3b:84:ee:7d:b2:88:61:d4:cb:b7:b6:e1:e9: c7:10:cc:27:10:97:9c:58:54:e3:bd:5a:fb:5d:87:79:9b:ba: 3d:89:04:ac:ec:bf:78:62:74:89:70:89:26:9a:a2:e1:71:69: ac:0a:4d:a4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUC47XzMYFFK9tr8rugdeUm5SzXUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjAxMjAwMjE5NTJaFw0yNzAxMTkwMjI0NTJaMDMxMTAvBgNV BAMTKEFBMTNCMTFEMjAzODNEMDlBREMyREUwREE4OTQxQjY3MEFFNUIxQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVokMWiRXvsDg1owy0vOCOGoX NQ3SghjjwRVgxeXdpJH/WjZnATiCgfvgzU83MnSuYwnCPYUp/bVS8rER8pNp/oUC 0wQUjpYiqhZ+YPNNJj41/dMVoxLyZgcva/v7l8m0pVnJq5gWeYFSWyRaKebcPy1f OTrM3EWENB2mAq839+GVYIMf5+4QzEMHo7qI4Se43rv2KUL08eyUyjNeddzJ0dFA G2ZwjD86oZVSfm7CVG+i8UczdxDAByFyg1juW5Owdf5ReqR6ar20pz77xae5lG7A cy2Goh5DueFlol3ruBTckBhX2yycZQ+7KpOKD79gnzsEHhA3SK2xQDURmwcRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUqhOxHSA4PQmtwt4NqJQbZwrlsbAwHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC8zMTMxMzkyZTMx MzYzMTJlMzEzNDM0MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA3ehkDANBgkqhkiG9w0BAQsFAAOCAQEAsBgBeVUPzqSLszz7KtoY t614OAljwtOWFXMu/jdr8OK6UxZEo4z71XQtg9ebFvg90VYy/mNZd9GufZ0qx6/K DLmr9B8lw4f4f3hUqI6AASxbPnTKVctLoOlFRA1UX7dRxaX9r25dwluO151TiWy8 jSgiDhLsC/49wDCYMnznKujS1vdTXC0NSQvZntojDlCM1DfhPNPhRLHxoNqz94g5 +1BfTsHo+O6DhOPJHlRAqWFvRldyyrvsWARrb7mJz58aeWwskyn98ebAM+k7hO59 sohh1Mu3tuHpxxDMJxCXnFhU471a+12HeZu6PYkErOy/eGJ0iXCJJpqi4XFprApN pA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:58 2026 by rpki-client