This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3231312e3130312e3230382e302f32302d3230203d3e20313331353734.roa File: 3231312e3130312e3230382e302f32302d3230203d3e20313331353734.roa (raw, json) Hash identifier: hlal3GZT1G+JrT2kXUwPr6ApFLnZOq4MMJGax15oWzI= Subject key identifier: 60:DE:8B:0F:3E:1C:89:29:C7:6C:E2:79:D7:BF:2C:1D:E9:3B:40:F9 Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F Certificate serial: 222E8EDF2A1128CAF04D804B61E1A325DE0044A6 Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3231312e3130312e3230382e302f32302d3230203d3e20313331353734.roa Signing time: Tue 20 Jan 2026 02:18:04 +0000 ROA not before: Tue 20 Jan 2026 02:13:04 +0000 ROA not after: Tue 19 Jan 2027 02:18:04 +0000 asID: 131574 IP address blocks: 211.101.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2e:8e:df:2a:11:28:ca:f0:4d:80:4b:61:e1:a3:25:de:00:44:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F Validity Not Before: Jan 20 02:13:04 2026 GMT Not After : Jan 19 02:18:04 2027 GMT Subject: CN=60DE8B0F3E1C8929C76CE279D7BF2C1DE93B40F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:b5:51:88:e9:4e:a6:08:00:da:8f:4c:d7: 4c:29:6c:d3:ee:5b:83:96:70:4b:7f:5b:6b:b3:15: 7a:b7:bd:19:80:92:a8:6a:5f:64:e4:ac:8c:94:d8: 83:a6:8f:8c:3b:76:3d:cf:ef:42:a5:42:89:8c:a2: 39:09:77:52:e2:2d:f3:47:8d:ab:30:ed:5d:1c:52: 9e:c8:87:71:9d:ae:7f:64:16:61:58:09:ec:9e:fb: 62:9c:66:86:2f:4c:7a:42:78:94:13:a1:71:b4:fa: 1b:b1:8f:71:91:8b:47:b4:8a:89:a5:55:9d:ae:25: 66:da:d2:8e:3f:47:e0:8d:8e:9b:a6:02:69:ff:aa: 6c:03:df:da:63:0d:8c:62:d1:b8:a8:8b:34:85:76: d3:49:66:8c:8e:95:e8:72:b8:da:f9:eb:fa:27:f2: 5c:75:e2:bb:ec:13:5c:35:fb:ca:7c:ad:9e:85:e3: 29:4c:74:83:05:62:a5:2e:6c:ab:86:94:42:b8:f0: 54:fd:b6:8c:3f:59:6f:34:76:d2:f2:b4:b8:ff:91: f7:10:26:40:a6:ca:71:7b:3b:f4:4e:c1:bc:49:9e: 21:83:8a:41:38:78:36:0c:f9:21:35:01:47:34:83: 4d:9d:9f:8e:b8:53:82:37:15:e7:da:1d:91:51:97: 23:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DE:8B:0F:3E:1C:89:29:C7:6C:E2:79:D7:BF:2C:1D:E9:3B:40:F9 X509v3 Authority Key Identifier: keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3231312e3130312e3230382e302f32302d3230203d3e20313331353734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.101.208.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:04:60:40:fe:22:f0:41:c6:ea:2e:96:e6:b7:5f:49:46:80: 2a:06:6d:b2:fd:20:b7:f9:68:c6:84:31:df:67:1b:9f:a8:52: 34:d6:94:8e:4a:2b:9b:a5:42:6b:7a:9a:89:7c:86:e3:bb:60: 54:f4:de:50:b9:25:2d:80:5b:78:e5:88:2f:77:32:8f:f0:64: 5b:8a:40:11:7f:e4:4f:ba:a3:b9:b5:6e:ef:c7:32:65:c5:7f: ba:bc:4b:12:c5:d1:ee:66:7f:b3:99:8a:3c:20:85:08:f5:8e: 6a:b6:b8:78:58:2b:a3:e0:55:5d:b8:53:d7:52:8a:fb:13:62: b5:59:8b:ac:e9:09:ae:63:cd:fc:c4:f8:9b:35:ed:cf:f1:5d: 6e:ec:99:1e:29:c9:95:04:9c:ad:ce:af:58:78:ea:c1:46:84: a2:9b:37:12:d2:3f:48:89:4b:87:68:a4:79:b2:54:2d:e6:37: 22:50:76:3f:1e:bc:d1:3a:5e:83:c9:44:c3:88:bf:ac:93:a4: bb:31:d9:a5:0b:03:10:4a:c2:b2:fd:29:0e:f1:10:40:9e:43: 90:93:0e:1c:36:7e:f3:b3:a6:7c:00:0a:95:3f:6a:a7:96:0c: 9c:a6:f0:fb:3e:59:d5:2f:a9:e4:87:74:e8:5b:05:94:96:6b: 77:3f:4c:db -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUIi6O3yoRKMrwTYBLYeGjJd4ARKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz MjI3NDM5RjAeFw0yNjAxMjAwMjEzMDRaFw0yNzAxMTkwMjE4MDRaMDMxMTAvBgNV BAMTKDYwREU4QjBGM0UxQzg5MjlDNzZDRTI3OUQ3QkYyQzFERTkzQjQwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpu7VRiOlOpggA2o9M10wpbNPu W4OWcEt/W2uzFXq3vRmAkqhqX2TkrIyU2IOmj4w7dj3P70KlQomMojkJd1LiLfNH jasw7V0cUp7Ih3Gdrn9kFmFYCeye+2KcZoYvTHpCeJQToXG0+huxj3GRi0e0ioml VZ2uJWba0o4/R+CNjpumAmn/qmwD39pjDYxi0bioizSFdtNJZoyOlehyuNr56/on 8lx14rvsE1w1+8p8rZ6F4ylMdIMFYqUubKuGlEK48FT9tow/WW80dtLytLj/kfcQ JkCmynF7O/ROwbxJniGDikE4eDYM+SE1AUc0g02dn464U4I3FefaHZFRlyMjAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUYN6LDz4ciSnHbOJ5178sHek7QPkwHwYDVR0j BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5 RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3OTkwMTQ2LzAvMzIzMTMxMmUz MTMwMzEyZTMyMzAzODJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzMTM1Mzcz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBNNl0DANBgkqhkiG9w0BAQsFAAOCAQEAGwRgQP4i8EHG6i6W 5rdfSUaAKgZtsv0gt/loxoQx32cbn6hSNNaUjkorm6VCa3qaiXyG47tgVPTeULkl LYBbeOWIL3cyj/BkW4pAEX/kT7qjubVu78cyZcV/urxLEsXR7mZ/s5mKPCCFCPWO ara4eFgro+BVXbhT11KK+xNitVmLrOkJrmPN/MT4mzXtz/FdbuyZHinJlQScrc6v WHjqwUaEops3EtI/SIlLh2ikebJULeY3IlB2Px680Tpeg8lEw4i/rJOkuzHZpQsD EErCsv0pDvEQQJ5DkJMOHDZ+87OmfAAKlT9qp5YMnKbw+z5Z1S+p5Id06FsFlJZr dz9M2w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:35 2026 by rpki-client