This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231372e302e302f31372d3332203d3e203538353933.roa File: 3133392e3231372e302e302f31372d3332203d3e203538353933.roa (raw, json) Hash identifier: mDztGBZGQDwnkeO355GRuWH/wTqbzk6W9oIP/6iNQwU= Subject key identifier: 01:36:D6:27:B5:21:9C:35:68:BC:79:A8:C8:1C:B0:DB:4C:52:7F:2D Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 08F502638D971DF72EB7A672EB648FFCC4852DEC Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231372e302e302f31372d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:24 +0000 ROA not before: Tue 20 Jan 2026 02:03:24 +0000 ROA not after: Tue 19 Jan 2027 02:08:24 +0000 asID: 58593 IP address blocks: 139.217.0.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f5:02:63:8d:97:1d:f7:2e:b7:a6:72:eb:64:8f:fc:c4:85:2d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:24 2026 GMT Not After : Jan 19 02:08:24 2027 GMT Subject: CN=0136D627B5219C3568BC79A8C81CB0DB4C527F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:3c:a9:4f:03:2f:8c:17:81:1b:e5:88:d3: b3:04:69:c5:98:b7:9d:ed:a3:04:58:65:50:46:c5: 78:d4:62:43:9c:aa:f8:83:c4:bb:14:ef:18:da:98: bd:ee:31:bc:a6:f7:2b:0e:4c:7f:12:37:06:04:ab: 07:c2:c8:fe:10:ec:aa:ba:63:58:5e:1a:13:17:c5: da:d4:15:ca:fc:96:7a:11:41:35:79:e0:89:2d:b4: 42:db:e1:7d:ec:8c:c5:4d:46:d7:51:f8:03:4b:2b: a1:3c:c6:7a:2e:f1:90:0c:1a:78:7e:32:22:a3:c9: b4:3c:9a:29:89:d1:34:ce:af:36:35:72:eb:31:b7: a4:bb:3e:6e:68:81:3c:7f:c7:f7:68:4c:2c:75:6f: 20:82:71:81:5c:72:39:aa:62:c3:9f:42:a7:72:ab: 6c:8e:84:8c:25:98:85:90:46:61:84:90:b0:5f:53: a9:78:0e:b6:ac:e6:44:58:00:d7:a7:9a:33:36:86: e1:45:ea:91:18:21:98:d2:d5:e8:fc:75:fd:df:66: bc:51:23:17:ec:19:6b:2a:c0:94:6a:8b:13:b9:be: 9c:de:25:fe:96:3c:b0:67:c8:a1:cc:c9:c2:bd:0c: 95:1b:e8:bb:36:59:7e:96:3e:5f:2b:f1:5e:c7:c4: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:36:D6:27:B5:21:9C:35:68:BC:79:A8:C8:1C:B0:DB:4C:52:7F:2D X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231372e302e302f31372d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.217.0.0/17 Signature Algorithm: sha256WithRSAEncryption a2:b2:cf:b5:c7:33:ff:c2:af:b5:a8:2c:e7:e9:cc:c2:36:5b: 5d:8a:15:bb:03:6f:63:34:3a:aa:5d:36:37:bb:22:90:5c:a7: 8d:0f:a2:78:52:78:7a:c6:bc:4d:2e:0a:04:40:f0:b1:1a:fd: f9:37:20:5c:99:de:8d:1e:62:da:26:45:97:09:51:1a:f3:d5: a4:bb:4f:7a:d6:e2:74:4b:88:a9:ca:8b:3d:8b:7a:7b:e9:79: f1:f1:38:eb:b3:17:36:3e:b6:6b:f2:ea:0b:e3:c3:6e:2d:7f: be:3b:77:a1:bc:c3:98:c6:e4:80:30:5c:7f:03:09:f7:6e:a6: 6f:a8:8a:3f:ff:b4:79:bf:33:99:93:2d:e9:28:81:03:63:27: c6:c8:13:1a:57:00:7c:e1:bb:b6:f2:5b:ef:af:3c:51:bf:4d: 0f:5e:2b:4e:0d:20:8f:7d:47:1c:91:78:3e:4b:84:85:71:76: ac:6c:49:fc:a6:07:5f:2f:f6:43:ff:b4:99:51:81:d5:77:24: 7e:10:43:1a:7b:31:11:e6:86:7e:81:6e:01:22:d4:e9:13:3b: 6c:c4:13:76:23:3d:29:f0:de:06:4c:61:6c:a6:b5:b2:e7:4a: 5b:f7:4d:45:60:af:8d:44:e4:5e:5c:21:b2:be:b4:1e:ec:2b: 91:da:00:73 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUCPUCY42XHfcut6Zy62SP/MSFLewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjRaFw0yNzAxMTkwMjA4MjRaMDMxMTAvBgNV BAMTKDAxMzZENjI3QjUyMTlDMzU2OEJDNzlBOEM4MUNCMERCNEM1MjdGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4qTypTwMvjBeBG+WI07MEacWY t53towRYZVBGxXjUYkOcqviDxLsU7xjamL3uMbym9ysOTH8SNwYEqwfCyP4Q7Kq6 Y1heGhMXxdrUFcr8lnoRQTV54IkttELb4X3sjMVNRtdR+ANLK6E8xnou8ZAMGnh+ MiKjybQ8mimJ0TTOrzY1cusxt6S7Pm5ogTx/x/doTCx1byCCcYFccjmqYsOfQqdy q2yOhIwlmIWQRmGEkLBfU6l4Dras5kRYANenmjM2huFF6pEYIZjS1ej8df3fZrxR IxfsGWsqwJRqixO5vpzeJf6WPLBnyKHMycK9DJUb6Ls2WX6WPl8r8V7HxKPhAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUATbWJ7UhnDVovHmoyByw20xSfy0wHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzEzMzM5MmUzMjMx MzcyZTMwMmUzMDJmMzEzNzJkMzMzMjIwM2QzZTIwMzUzODM1MzkzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB4vZADANBgkqhkiG9w0BAQsFAAOCAQEAorLPtccz/8Kvtags5+nMwjZbXYoV uwNvYzQ6ql02N7sikFynjQ+ieFJ4esa8TS4KBEDwsRr9+TcgXJnejR5i2iZFlwlR GvPVpLtPetbidEuIqcqLPYt6e+l58fE467MXNj62a/LqC+PDbi1/vjt3obzDmMbk gDBcfwMJ926mb6iKP/+0eb8zmZMt6SiBA2MnxsgTGlcAfOG7tvJb7688Ub9ND14r Tg0gj31HHJF4PkuEhXF2rGxJ/KYHXy/2Q/+0mVGB1XckfhBDGnsxEeaGfoFuASLU 6RM7bMQTdiM9KfDeBkxhbKa1sudKW/dNRWCvjUTkXlwhsr60HuwrkdoAcw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:59 2026 by rpki-client