This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3135392e32372e302e302f31362d3332203d3e203538353933.roa File: 3135392e32372e302e302f31362d3332203d3e203538353933.roa (raw, json) Hash identifier: mNIQFZ7xCBM9upD56r+wfpao/kJgLgozsC1Q5YvTI1c= Subject key identifier: 40:2D:13:45:F8:AE:0E:25:40:8D:13:CD:00:77:13:39:9E:23:5B:3E Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: BC12CEB1F199A124D03BEC9B68F5AA5C8C8EDF Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3135392e32372e302e302f31362d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:23 +0000 ROA not before: Tue 20 Jan 2026 02:03:23 +0000 ROA not after: Tue 19 Jan 2027 02:08:23 +0000 asID: 58593 IP address blocks: 159.27.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bc:12:ce:b1:f1:99:a1:24:d0:3b:ec:9b:68:f5:aa:5c:8c:8e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:23 2026 GMT Not After : Jan 19 02:08:23 2027 GMT Subject: CN=402D1345F8AE0E25408D13CD007713399E235B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:7a:00:ec:03:ad:21:56:16:96:a4:e7:cd: 67:6e:98:7f:1e:6d:bc:33:55:34:35:0f:f6:33:56: ae:93:39:9d:bf:95:60:3d:db:e3:14:11:4b:17:27: 12:9f:bb:a2:d1:b2:5a:ce:36:76:6f:c6:bd:5e:4a: 56:f4:27:b7:99:6f:64:e9:81:1b:2d:0c:e4:c5:9b: 0f:c7:f4:5d:3b:07:d3:bb:b7:d4:33:27:96:74:42: 2e:62:25:34:83:54:70:1e:d3:fb:31:8c:ec:5e:2e: 75:94:5b:f5:3e:3a:cf:7a:24:df:12:f1:cc:97:af: d5:0b:72:92:4a:65:86:24:a4:3d:4e:15:c9:0d:25: aa:51:80:33:58:34:23:bc:d8:09:03:fd:ab:79:39: c1:ed:c6:06:a4:8e:99:25:c0:0c:32:43:e4:cb:7a: 96:a5:77:02:d7:3b:80:a9:15:5d:e4:88:ee:c1:84: 4a:4b:b2:14:f2:2a:fe:09:db:74:09:48:68:47:d7: 37:8b:70:8c:f7:08:33:22:25:64:ae:cc:9a:3d:44: ed:a3:f6:6c:2b:45:65:ff:30:72:07:8e:86:51:33: e8:65:a1:75:d3:3e:15:88:a7:0f:e1:0f:93:12:e5: db:1a:10:64:7f:b5:13:42:c8:79:cf:68:92:40:91: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2D:13:45:F8:AE:0E:25:40:8D:13:CD:00:77:13:39:9E:23:5B:3E X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3135392e32372e302e302f31362d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1e:a2:da:48:5c:5f:e5:eb:8c:af:16:d5:8b:1a:a0:36:30:71: 36:ed:03:5d:a6:fa:43:4f:fc:ea:a7:67:31:00:3c:5b:d0:13: d7:66:28:cc:10:61:01:de:29:7d:ae:65:a3:70:da:f8:fb:fd: 7d:5d:e0:80:29:00:dd:8a:66:b4:f1:2c:1b:7e:48:be:31:8a: b5:4f:6b:d1:72:6f:75:82:18:7c:a2:b2:9f:8c:fb:b6:92:f8: 92:6f:76:d7:e3:8d:d4:a1:30:c2:3e:e6:85:31:04:3a:48:74: a0:6b:48:ec:ac:c7:d6:db:7e:f9:06:15:3e:32:63:7f:69:97: f3:74:41:5a:51:b5:b6:a3:c2:2f:13:a5:7f:33:56:8c:31:20: f7:3d:47:1a:15:b9:3d:bf:4d:6c:88:47:5a:97:2f:43:7a:f8: 3d:9b:87:37:46:f9:91:08:3e:82:dc:88:ee:e4:ec:a8:8c:2d: bd:18:b4:2e:47:c8:f9:7f:26:d8:37:97:f0:38:c3:b8:cf:06: 07:4d:5f:47:3c:b4:6d:e0:6b:09:8e:07:e5:84:e6:9c:46:68: fd:a2:60:92:81:76:1d:09:5d:1f:60:25:b4:22:61:3d:be:7c: de:53:97:18:3e:a1:37:34:82:28:1e:0d:57:03:1e:e8:82:87: a2:a5:fa:6f -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUALwSzrHxmaEk0Dvsm2j1qlyMjt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjNaFw0yNzAxMTkwMjA4MjNaMDMxMTAvBgNV BAMTKDQwMkQxMzQ1RjhBRTBFMjU0MDhEMTNDRDAwNzcxMzM5OUUyMzVCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBXoA7AOtIVYWlqTnzWdumH8e bbwzVTQ1D/YzVq6TOZ2/lWA92+MUEUsXJxKfu6LRslrONnZvxr1eSlb0J7eZb2Tp gRstDOTFmw/H9F07B9O7t9QzJ5Z0Qi5iJTSDVHAe0/sxjOxeLnWUW/U+Os96JN8S 8cyXr9ULcpJKZYYkpD1OFckNJapRgDNYNCO82AkD/at5OcHtxgakjpklwAwyQ+TL epaldwLXO4CpFV3kiO7BhEpLshTyKv4J23QJSGhH1zeLcIz3CDMiJWSuzJo9RO2j 9mwrRWX/MHIHjoZRM+hloXXTPhWIpw/hD5MS5dsaEGR/tRNCyHnPaJJAkXs3AgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUQC0TRfiuDiVAjRPNAHcTOZ4jWz4wHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzEzNTM5MmUzMjM3 MmUzMDJlMzAyZjMxMzYyZDMzMzIyMDNkM2UyMDM1MzgzNTM5MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwCfGzANBgkqhkiG9w0BAQsFAAOCAQEAHqLaSFxf5euMrxbVixqgNjBxNu0DXab6 Q0/86qdnMQA8W9AT12YozBBhAd4pfa5lo3Da+Pv9fV3ggCkA3YpmtPEsG35IvjGK tU9r0XJvdYIYfKKyn4z7tpL4km921+ON1KEwwj7mhTEEOkh0oGtI7KzH1tt++QYV PjJjf2mX83RBWlG1tqPCLxOlfzNWjDEg9z1HGhW5Pb9NbIhHWpcvQ3r4PZuHN0b5 kQg+gtyI7uTsqIwtvRi0LkfI+X8m2DeX8DjDuM8GB01fRzy0beBrCY4H5YTmnEZo /aJgkoF2HQldH2AltCJhPb583lOXGD6hNzSCKB4NVwMe6IKHoqX6bw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:23:03 2026 by rpki-client