This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3134332e36342e302e302f31362d3332203d3e203538353933.roa File: 3134332e36342e302e302f31362d3332203d3e203538353933.roa (raw, json) Hash identifier: T4vLezJn7xNu2bByphuJEu2Ig4ZD46V9jH6bAdcEpuo= Subject key identifier: F9:E0:C0:7F:79:C1:40:B1:33:1D:82:79:16:94:53:6F:05:E3:4B:03 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 21B7BA10F78CD5644AF33648BB030F65191A14C5 Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3134332e36342e302e302f31362d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:23 +0000 ROA not before: Tue 20 Jan 2026 02:03:23 +0000 ROA not after: Tue 19 Jan 2027 02:08:23 +0000 asID: 58593 IP address blocks: 143.64.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b7:ba:10:f7:8c:d5:64:4a:f3:36:48:bb:03:0f:65:19:1a:14:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:23 2026 GMT Not After : Jan 19 02:08:23 2027 GMT Subject: CN=F9E0C07F79C140B1331D82791694536F05E34B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:83:1e:5d:83:b6:34:8a:c7:6f:3f:22:0c: e9:8f:20:17:0b:f4:25:2c:8c:3a:b5:70:eb:2f:71: da:85:ce:96:12:1b:78:12:4c:e0:2d:a4:11:36:b2: cd:43:cf:6f:d0:c9:f7:80:55:46:89:4e:50:f4:b6: 2d:aa:b2:39:90:42:ac:64:fa:89:1e:37:2d:db:85: b2:9b:be:e9:a5:82:83:d6:17:1e:a5:29:67:6d:f0: b3:51:e4:d5:4a:6e:31:a1:be:fe:2a:d2:4d:f3:80: b1:26:0a:09:f4:0c:05:4e:16:bd:7a:8b:d7:6d:66: 76:24:a3:b2:be:cd:2b:1d:60:6e:88:40:41:0a:11: cd:b8:9b:09:6e:44:e2:fe:b8:c4:cd:3d:df:bb:df: b0:16:6a:7f:22:af:53:83:f9:29:83:5c:0a:83:9d: 1a:a4:21:e9:eb:a8:b6:cf:ed:b1:24:f3:59:92:bb: 46:42:cd:a5:b2:0f:9c:a7:3e:d2:3b:ed:fc:54:1c: 63:08:2e:69:3c:9d:28:13:dc:4f:03:ee:4b:18:1c: c3:86:d8:89:cc:af:77:ec:73:dd:a0:79:6d:92:5e: 32:9f:3a:0f:c8:39:08:27:5f:82:9d:19:f4:86:f1: 39:88:c6:39:d7:04:9a:af:80:24:e9:49:0c:aa:59: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E0:C0:7F:79:C1:40:B1:33:1D:82:79:16:94:53:6F:05:E3:4B:03 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3134332e36342e302e302f31362d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.64.0.0/16 Signature Algorithm: sha256WithRSAEncryption 37:2b:60:18:43:fb:00:30:6a:57:c8:97:0f:13:59:86:bb:6f: ad:c6:dd:bc:eb:25:47:50:6c:71:37:13:97:74:a5:06:70:9e: f8:33:88:6a:c8:34:5c:4d:c2:d1:29:fe:e4:14:27:7f:d0:50: bf:04:de:95:e0:60:03:c4:27:bd:b0:aa:03:16:b3:42:84:ff: 33:7d:77:80:a4:1f:b5:eb:c0:3f:c0:cd:7a:64:92:77:64:2f: e8:63:f2:50:47:ac:93:46:cf:1d:40:cc:95:74:66:1f:96:9d: 42:40:9e:b1:4e:75:04:03:6f:3c:c7:63:65:5c:75:58:c7:92: f1:9d:4c:5a:2b:74:33:3b:8a:20:3d:4e:57:ba:b2:7a:5d:ba: 4d:16:85:16:9b:62:95:9e:bd:85:40:17:ef:96:fe:c5:85:b2: 85:2d:8f:e0:8c:d4:3d:4e:80:79:fa:98:51:f5:1a:85:02:62: 7a:99:40:19:c3:95:b9:39:d2:50:d6:20:52:ef:e0:c2:58:6f: fb:fc:38:a5:b1:ea:aa:65:0a:3e:09:f7:ea:ba:36:51:b9:10: 4f:ae:72:2d:70:45:1d:c8:fe:fa:5e:7e:8c:83:75:44:6b:38: 23:4a:1b:6a:45:98:2e:8e:0c:6b:45:90:84:9a:63:29:22:74: 24:ae:b8:7b -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUIbe6EPeM1WRK8zZIuwMPZRkaFMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjNaFw0yNzAxMTkwMjA4MjNaMDMxMTAvBgNV BAMTKEY5RTBDMDdGNzlDMTQwQjEzMzFEODI3OTE2OTQ1MzZGMDVFMzRCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS1oMeXYO2NIrHbz8iDOmPIBcL 9CUsjDq1cOsvcdqFzpYSG3gSTOAtpBE2ss1Dz2/QyfeAVUaJTlD0ti2qsjmQQqxk +okeNy3bhbKbvumlgoPWFx6lKWdt8LNR5NVKbjGhvv4q0k3zgLEmCgn0DAVOFr16 i9dtZnYko7K+zSsdYG6IQEEKEc24mwluROL+uMTNPd+737AWan8ir1OD+SmDXAqD nRqkIenrqLbP7bEk81mSu0ZCzaWyD5ynPtI77fxUHGMILmk8nSgT3E8D7ksYHMOG 2InMr3fsc92geW2SXjKfOg/IOQgnX4KdGfSG8TmIxjnXBJqvgCTpSQyqWRWdAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQU+eDAf3nBQLEzHYJ5FpRTbwXjSwMwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzEzNDMzMmUzNjM0 MmUzMDJlMzAyZjMxMzYyZDMzMzIyMDNkM2UyMDM1MzgzNTM5MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwCPQDANBgkqhkiG9w0BAQsFAAOCAQEANytgGEP7ADBqV8iXDxNZhrtvrcbdvOsl R1BscTcTl3SlBnCe+DOIasg0XE3C0Sn+5BQnf9BQvwTeleBgA8QnvbCqAxazQoT/ M313gKQftevAP8DNemSSd2Qv6GPyUEesk0bPHUDMlXRmH5adQkCesU51BANvPMdj ZVx1WMeS8Z1MWit0MzuKID1OV7qyel26TRaFFptilZ69hUAX75b+xYWyhS2P4IzU PU6AefqYUfUahQJieplAGcOVuTnSUNYgUu/gwlhv+/w4pbHqqmUKPgn36ro2UbkQ T65yLXBFHcj++l5+jIN1RGs4I0obakWYLo4Ma0WQhJpjKSJ0JK64ew== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:39 2026 by rpki-client