This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231392e302e302f31372d3332203d3e203538353933.roa File: 3133392e3231392e302e302f31372d3332203d3e203538353933.roa (raw, json) Hash identifier: IVrHknvKkh8yROa4tiv3v+u48kSCR3yp5mlGRj7MBmg= Subject key identifier: 25:29:77:25:CD:61:13:56:43:C8:28:A3:3D:68:76:70:C1:75:52:D9 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 0DDB9EC19E75F5DB2982F818778FB99AA083DC06 Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231392e302e302f31372d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:23 +0000 ROA not before: Tue 20 Jan 2026 02:03:23 +0000 ROA not after: Tue 19 Jan 2027 02:08:23 +0000 asID: 58593 IP address blocks: 139.219.0.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:db:9e:c1:9e:75:f5:db:29:82:f8:18:77:8f:b9:9a:a0:83:dc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:23 2026 GMT Not After : Jan 19 02:08:23 2027 GMT Subject: CN=25297725CD61135643C828A33D687670C17552D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:14:7a:21:35:ea:cc:45:6c:23:92:a3:b6: 47:f8:6e:54:bd:55:ee:14:ea:dc:d5:57:c0:08:9e: d9:9e:69:bb:5a:2f:c3:ed:08:d4:a7:ed:75:39:18: 24:1d:fd:70:51:fd:24:6a:40:c2:2c:f7:74:6c:b7: ff:71:a1:b4:52:3d:65:46:f2:4f:af:cb:46:78:ca: 24:98:8f:c1:92:5c:ef:ce:69:d5:17:15:b7:37:ca: 3e:fe:4e:33:4a:cb:09:c3:5a:ef:9c:7e:12:42:f8: 49:03:c6:a3:b7:81:8c:ff:9b:96:a4:53:50:8e:8c: 2a:bd:a0:b4:d4:37:63:cb:51:62:dd:00:e9:e5:c9: 43:48:5c:4b:57:0c:44:95:15:07:b2:b9:aa:33:47: c7:c3:20:35:15:ab:03:69:68:98:6a:46:ee:3e:51: 0a:e5:89:d9:7e:04:ed:c0:ea:52:aa:9a:b7:1b:4b: c7:ca:ed:74:3f:4e:10:dd:ad:37:6a:ea:f8:e1:14: 67:95:02:38:a4:c7:18:a1:b4:f8:64:27:8e:49:b1: a6:4c:83:f5:28:a5:e5:76:f8:81:d4:eb:fd:f1:52: 0a:f0:a6:36:bd:81:63:53:02:98:4e:4b:d4:ef:1e: 3b:7d:50:ce:52:f6:e6:10:d5:da:67:83:66:37:a8: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:29:77:25:CD:61:13:56:43:C8:28:A3:3D:68:76:70:C1:75:52:D9 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231392e302e302f31372d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.219.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1b:b0:25:5a:50:48:e1:53:4a:df:19:f7:2b:4f:d6:9b:3d:f7: ce:8a:b7:85:67:da:89:42:5a:de:75:ce:1b:95:2b:24:58:18: 15:7b:71:6e:8c:5d:c3:21:a7:47:4f:b7:d4:4f:8e:26:61:bc: d1:34:ac:49:e9:1d:9c:39:a6:ed:7c:1f:9b:08:da:fd:b1:5c: 87:52:07:89:1a:f7:77:62:9f:24:b0:59:6d:27:0d:ed:50:9e: 3c:c5:63:68:66:f0:55:20:33:d0:a2:79:60:2e:ba:db:ca:e1: c4:fc:c4:ea:b4:88:02:c0:4b:f5:cf:66:f7:4a:09:5a:6f:77: 8d:b6:24:3f:7a:81:81:d2:5c:ee:5d:ba:75:6c:24:c8:41:e5: 33:7b:89:23:bc:b0:64:60:83:69:7c:ec:9e:95:15:95:b7:72: 23:f2:9f:b5:a8:d2:3b:54:a1:d4:bd:50:a8:e8:30:98:75:fe: dc:ee:11:2a:09:84:19:f2:a9:7d:ec:22:f3:c1:a7:65:82:d1: c4:88:4a:30:b0:7e:80:6f:1b:f6:d8:b8:ff:db:a2:4e:a4:9a: 98:a6:ed:ac:17:cb:10:a9:d0:35:6c:1e:50:16:bb:0f:44:21: 1f:4b:b9:98:53:e7:10:54:55:50:45:fd:05:57:de:b6:b4:f0: 3d:dc:79:e0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDduewZ519dspgvgYd4+5mqCD3AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjNaFw0yNzAxMTkwMjA4MjNaMDMxMTAvBgNV BAMTKDI1Mjk3NzI1Q0Q2MTEzNTY0M0M4MjhBMzNENjg3NjcwQzE3NTUyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgNxR6ITXqzEVsI5Kjtkf4blS9 Ve4U6tzVV8AIntmeabtaL8PtCNSn7XU5GCQd/XBR/SRqQMIs93Rst/9xobRSPWVG 8k+vy0Z4yiSYj8GSXO/OadUXFbc3yj7+TjNKywnDWu+cfhJC+EkDxqO3gYz/m5ak U1COjCq9oLTUN2PLUWLdAOnlyUNIXEtXDESVFQeyuaozR8fDIDUVqwNpaJhqRu4+ UQrlidl+BO3A6lKqmrcbS8fK7XQ/ThDdrTdq6vjhFGeVAjikxxihtPhkJ45JsaZM g/UopeV2+IHU6/3xUgrwpja9gWNTAphOS9TvHjt9UM5S9uYQ1dpng2Y3qJjtAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUJSl3Jc1hE1ZDyCijPWh2cMF1UtkwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzEzMzM5MmUzMjMx MzkyZTMwMmUzMDJmMzEzNzJkMzMzMjIwM2QzZTIwMzUzODM1MzkzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB4vbADANBgkqhkiG9w0BAQsFAAOCAQEAG7AlWlBI4VNK3xn3K0/Wmz33zoq3 hWfaiUJa3nXOG5UrJFgYFXtxboxdwyGnR0+31E+OJmG80TSsSekdnDmm7Xwfmwja /bFch1IHiRr3d2KfJLBZbScN7VCePMVjaGbwVSAz0KJ5YC6628rhxPzE6rSIAsBL 9c9m90oJWm93jbYkP3qBgdJc7l26dWwkyEHlM3uJI7ywZGCDaXzsnpUVlbdyI/Kf tajSO1Sh1L1QqOgwmHX+3O4RKgmEGfKpfewi88GnZYLRxIhKMLB+gG8b9ti4/9ui TqSamKbtrBfLEKnQNWweUBa7D0QhH0u5mFPnEFRVUEX9BVfetrTwPdx54A== -----END CERTIFICATE-----Generated at Sun Jan 25 12:23:02 2026 by rpki-client