This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231392e302e302f31362d3332203d3e203538353933.roa File: 3133392e3231392e302e302f31362d3332203d3e203538353933.roa (raw, json) Hash identifier: 5/v1XCI+Wp9jyoAJYxMrFQ0MkUCnWejLKnHtIrf5Bp8= Subject key identifier: 24:8F:26:50:CB:61:74:75:E7:D2:BB:77:DF:45:7B:D7:9F:4F:D1:23 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 20A39C9AC99DA3AB01156BF232BF38748AB21A09 Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231392e302e302f31362d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:24 +0000 ROA not before: Tue 20 Jan 2026 02:03:24 +0000 ROA not after: Tue 19 Jan 2027 02:08:24 +0000 asID: 58593 IP address blocks: 139.219.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a3:9c:9a:c9:9d:a3:ab:01:15:6b:f2:32:bf:38:74:8a:b2:1a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:24 2026 GMT Not After : Jan 19 02:08:24 2027 GMT Subject: CN=248F2650CB617475E7D2BB77DF457BD79F4FD123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9e:61:b5:c1:c6:40:a4:77:d6:5a:e1:7d:23: 18:d5:27:00:93:a9:89:6d:61:78:02:17:b8:dc:89: f5:5a:63:49:e3:ef:c6:0f:0a:71:7f:8b:b8:de:19: 6a:b2:2f:55:53:9a:08:cc:37:f0:2d:1b:29:65:9b: 53:52:e9:bf:bd:05:b9:cb:bb:4d:6a:c3:97:00:88: 10:c9:e3:ba:68:d4:6d:6a:f3:45:20:9d:cc:04:7a: 3c:e2:a4:2b:f9:c2:04:33:12:e2:26:71:8f:7f:60: af:9b:52:f8:bf:6c:b3:3f:a7:78:64:47:1a:49:8e: b9:53:03:02:95:f8:7f:c2:6b:96:34:43:78:3a:d9: 99:10:67:7b:bd:c7:68:79:f8:31:41:b8:ff:56:9c: 92:88:b9:bd:fb:00:af:39:02:cf:fc:a4:8c:ba:96: b2:97:71:e7:2d:be:e7:b9:08:77:0d:da:c9:20:59: 36:14:32:96:5e:a3:1f:ce:7e:ce:24:71:24:27:78: 94:9a:50:25:26:29:da:ea:41:64:4e:49:e6:68:7c: 03:88:50:08:d5:53:fe:49:10:b5:e5:60:7f:b3:df: e8:d6:f1:ea:41:07:f8:ed:da:f7:56:0d:9a:2a:ae: f2:57:ba:ad:67:57:ca:de:73:0e:90:3b:f6:1e:05: 89:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8F:26:50:CB:61:74:75:E7:D2:BB:77:DF:45:7B:D7:9F:4F:D1:23 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231392e302e302f31362d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.219.0.0/16 Signature Algorithm: sha256WithRSAEncryption 25:6c:26:46:03:be:25:63:69:49:6d:8f:fd:6c:a6:17:f0:b6: 98:f7:36:65:60:4b:47:ee:44:6e:21:49:4b:9a:1c:6e:bd:3e: e8:4e:6c:32:f3:25:76:17:05:5e:be:57:52:ef:5e:dd:c8:0a: 45:73:95:c4:ab:45:a3:f2:13:89:0f:ba:62:dc:0d:0e:f2:d9: 83:08:3a:a5:64:ab:1c:43:bb:94:55:3e:90:ea:78:3b:e4:cf: 08:5f:31:12:e6:a5:cf:b9:05:1d:89:05:1d:7e:ca:b9:f4:c7: f9:e1:74:74:80:e4:6e:55:09:7c:4e:1e:f1:fb:e5:32:f7:cb: 90:bd:31:d1:35:12:94:a1:7a:2a:5d:ac:fb:26:68:f7:4c:84: 12:5e:f5:95:54:0a:e4:15:7f:49:6b:e7:7a:61:bc:09:70:cd: fb:2d:54:cd:de:71:69:f6:47:c7:ec:ca:5e:e1:4c:b6:a5:65: af:6f:21:dc:26:28:0f:78:10:fd:9f:c7:a1:24:93:74:f1:11: 67:c6:a5:5e:35:fe:b9:18:b8:04:42:8c:b3:aa:02:25:1f:9d: 11:af:29:44:11:a1:ca:ac:b9:01:e6:c2:01:89:43:66:c7:60: 97:d9:e9:b2:aa:7c:d2:57:39:d4:9d:b8:5e:ff:29:ee:91:58: b9:9b:7c:b0 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUIKOcmsmdo6sBFWvyMr84dIqyGgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjRaFw0yNzAxMTkwMjA4MjRaMDMxMTAvBgNV BAMTKDI0OEYyNjUwQ0I2MTc0NzVFN0QyQkI3N0RGNDU3QkQ3OUY0RkQxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnmG1wcZApHfWWuF9IxjVJwCT qYltYXgCF7jcifVaY0nj78YPCnF/i7jeGWqyL1VTmgjMN/AtGyllm1NS6b+9BbnL u01qw5cAiBDJ47po1G1q80UgncwEejzipCv5wgQzEuImcY9/YK+bUvi/bLM/p3hk RxpJjrlTAwKV+H/Ca5Y0Q3g62ZkQZ3u9x2h5+DFBuP9WnJKIub37AK85As/8pIy6 lrKXcectvue5CHcN2skgWTYUMpZeox/Ofs4kcSQneJSaUCUmKdrqQWROSeZofAOI UAjVU/5JELXlYH+z3+jW8epBB/jt2vdWDZoqrvJXuq1nV8recw6QO/YeBYnRAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUJI8mUMthdHXn0rt330V7159P0SMwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzEzMzM5MmUzMjMx MzkyZTMwMmUzMDJmMzEzNjJkMzMzMjIwM2QzZTIwMzUzODM1MzkzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAIvbMA0GCSqGSIb3DQEBCwUAA4IBAQAlbCZGA74lY2lJbY/9bKYX8LaY9zZl YEtH7kRuIUlLmhxuvT7oTmwy8yV2FwVevldS717dyApFc5XEq0Wj8hOJD7pi3A0O 8tmDCDqlZKscQ7uUVT6Q6ng75M8IXzES5qXPuQUdiQUdfsq59Mf54XR0gORuVQl8 Th7x++Uy98uQvTHRNRKUoXoqXaz7Jmj3TIQSXvWVVArkFX9Ja+d6YbwJcM37LVTN 3nFp9kfH7Mpe4Uy2pWWvbyHcJigPeBD9n8ehJJN08RFnxqVeNf65GLgEQoyzqgIl H50RrylEEaHKrLkB5sIBiUNmx2CX2emyqnzSVznUnbhe/ynukVi5m3yw -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:58 2026 by rpki-client