This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS136907.roa File: AS136907.roa (raw, json) Hash identifier: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68= Subject key identifier: 4F:F9:5A:E3:64:06:88:08:B8:3D:42:4D:9F:86:41:CC:C8:35:20:0E Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 2FB08961A39EB9F79991A12B868E0ADB4E30824D Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS136907.roa Signing time: Tue 20 Jan 2026 02:21:32 +0000 ROA not before: Tue 20 Jan 2026 02:16:32 +0000 ROA not after: Tue 19 Jan 2027 02:21:32 +0000 asID: 136907 IP address blocks: 110.41.90.0/24 maxlen: 24 110.41.208.0/24 maxlen: 24 110.41.209.0/24 maxlen: 24 110.41.210.0/24 maxlen: 24 124.71.248.0/24 maxlen: 24 124.71.249.0/24 maxlen: 24 124.71.250.0/24 maxlen: 24 124.71.251.0/24 maxlen: 24 124.71.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b0:89:61:a3:9e:b9:f7:99:91:a1:2b:86:8e:0a:db:4e:30:82:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Jan 20 02:16:32 2026 GMT Not After : Jan 19 02:21:32 2027 GMT Subject: CN=4FF95AE364068808B83D424D9F8641CCC835200E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:82:7b:51:38:ba:81:08:12:62:55:06:fe: ed:f3:f0:f1:9c:7d:cb:a8:20:f4:fe:c1:6a:fa:e1: 3c:f0:3f:8a:27:a5:fc:35:8b:4b:6a:2f:64:9b:b1: ff:cd:ae:09:73:e7:b1:dd:c4:3c:9e:c5:40:0c:95: 4d:88:05:d3:70:e4:b4:97:8e:48:f3:4d:32:e1:ca: 3a:c2:e1:a0:56:e6:d0:34:c0:39:6a:32:4a:94:da: 2a:4e:11:1f:53:ea:89:bd:35:ef:19:dd:9a:ba:2b: c9:a2:12:67:37:52:22:81:52:49:a0:22:84:76:18: 48:48:59:be:0e:d1:eb:d3:65:ef:1c:09:95:19:e2: f1:a8:4b:30:89:c3:4d:c3:70:9d:90:19:9d:72:ba: 5a:2b:1e:6f:e6:d5:12:32:c8:ab:f2:62:d2:43:36: 99:17:ed:d1:5e:2a:11:e9:dc:dc:27:26:ab:13:b1: 87:83:3a:75:8f:9a:d6:07:b4:bc:16:48:40:e5:1c: 66:df:26:67:8d:6e:3e:25:76:69:a6:e8:91:9f:71: 77:e0:0d:04:4a:7f:67:3c:e6:00:6c:55:ee:cb:0e: e1:6b:35:6a:d4:94:96:42:4e:15:a0:07:0c:ed:e4: 77:ea:10:de:0a:fe:b9:5c:eb:c6:56:b5:f5:7f:c9: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F9:5A:E3:64:06:88:08:B8:3D:42:4D:9F:86:41:CC:C8:35:20:0E X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS136907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.41.90.0/24 110.41.208.0-110.41.210.255 124.71.248.0/22 124.71.253.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:5a:1d:b4:b3:9b:75:44:2e:03:84:03:1a:f6:29:79:11:e5: 55:b1:14:da:e4:64:65:be:04:92:ce:4f:cb:86:e4:65:73:6c: 28:38:5c:61:83:d1:0d:4b:1c:de:a7:e9:fa:14:4f:3e:72:bf: d0:2a:cb:01:fa:86:20:42:10:62:2a:cc:34:01:0b:ce:76:16: ec:0f:17:b8:d6:19:7f:25:57:46:e8:34:e3:f9:3b:4b:1d:7c: 9e:0e:ee:fd:f1:40:b1:49:f1:7c:0c:77:55:2c:3c:07:b0:92: 5b:19:5e:4d:01:17:18:e6:44:ee:f3:8c:73:98:7c:e2:76:92: ed:2e:05:d8:d8:c5:3b:6c:39:48:43:24:18:93:da:7b:eb:c3: 53:87:9a:e2:ef:80:e9:56:75:e7:ef:ac:9b:e3:25:9f:bc:94: 4a:75:ae:59:59:ce:d3:73:0e:d0:aa:b2:d6:97:6b:ac:c8:c9: 02:f8:9d:ee:8f:da:bf:b0:1d:0f:2e:1d:67:00:7f:75:66:98: 7c:cd:48:fc:2e:39:b1:f9:52:f5:6e:7f:b0:1d:66:b2:57:d2: f0:e2:29:17:25:1f:7d:3d:3a:2b:8d:c6:1e:4e:74:31:26:57: 9b:5b:29:85:bf:e5:59:f2:bd:f6:25:d5:69:e4:31:92:48:fd: 59:ee:10:07 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUL7CJYaOeufeZkaErho4K204wgk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjAxMjAwMjE2MzJaFw0yNzAxMTkwMjIxMzJaMDMxMTAvBgNV BAMTKDRGRjk1QUUzNjQwNjg4MDhCODNENDI0RDlGODY0MUNDQzgzNTIwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVEYJ7UTi6gQgSYlUG/u3z8PGc fcuoIPT+wWr64TzwP4onpfw1i0tqL2Sbsf/Nrglz57HdxDyexUAMlU2IBdNw5LSX jkjzTTLhyjrC4aBW5tA0wDlqMkqU2ipOER9T6om9Ne8Z3Zq6K8miEmc3UiKBUkmg IoR2GEhIWb4O0evTZe8cCZUZ4vGoSzCJw03DcJ2QGZ1yulorHm/m1RIyyKvyYtJD NpkX7dFeKhHp3NwnJqsTsYeDOnWPmtYHtLwWSEDlHGbfJmeNbj4ldmmm6JGfcXfg DQRKf2c85gBsVe7LDuFrNWrUlJZCThWgBwzt5HfqEN4K/rlc68ZWtfV/yS9NAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUT/la42QGiAi4PUJNn4ZBzMg1IA4wHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC9BUzEzNjkwNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQC AAEwIAMEAG4pWjAMAwQEbinQAwQAbinSAwQCfEf4AwQAfEf9MA0GCSqGSIb3DQEB CwUAA4IBAQAbWh20s5t1RC4DhAMa9il5EeVVsRTa5GRlvgSSzk/LhuRlc2woOFxh g9ENSxzep+n6FE8+cr/QKssB+oYgQhBiKsw0AQvOdhbsDxe41hl/JVdG6DTj+TtL HXyeDu798UCxSfF8DHdVLDwHsJJbGV5NARcY5kTu84xzmHzidpLtLgXY2MU7bDlI QyQYk9p768NTh5ri74DpVnXn76yb4yWfvJRKda5ZWc7Tcw7QqrLWl2usyMkC+J3u j9q/sB0PLh1nAH91Zph8zUj8Ljmx+VL1bn+wHWayV9Lw4ikXJR99PTorjcYeTnQx JlebWymFv+VZ8r32JdVp5DGSSP1Z7hAH -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:55 2026 by rpki-client