This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e20313337373138.roa File: 3131382e3134352e33322e302f31392d3234203d3e20313337373138.roa (raw, json) Hash identifier: MGM3W0/mW/xvo0QmBiOgVpOvMFrrmKx1kLJxu8ORURc= Subject key identifier: 0B:D4:7D:1A:62:89:AA:4C:B8:59:64:DB:6A:F4:B7:FA:A4:63:21:BD Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 1EA71B3DF2872AFEB605D119C399EF02607C5663 Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e20313337373138.roa Signing time: Tue 20 Jan 2026 02:09:42 +0000 ROA not before: Tue 20 Jan 2026 02:04:42 +0000 ROA not after: Tue 19 Jan 2027 02:09:42 +0000 asID: 137718 IP address blocks: 118.145.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a7:1b:3d:f2:87:2a:fe:b6:05:d1:19:c3:99:ef:02:60:7c:56:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:42 2026 GMT Not After : Jan 19 02:09:42 2027 GMT Subject: CN=0BD47D1A6289AA4CB85964DB6AF4B7FAA46321BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:ad:ee:c5:27:47:a5:6c:ac:8c:f1:1f:c8: ff:91:b9:74:47:69:25:96:b9:97:be:2e:ee:d1:e5: 21:03:51:5f:05:d9:26:6c:23:31:57:d9:84:ca:1d: 85:93:c0:f0:2d:17:ac:de:48:ce:5e:ea:f5:9d:eb: a1:a6:b0:99:54:ee:bc:5b:28:3c:e3:08:d6:98:14: 71:16:3c:b7:95:01:4b:e7:90:52:fb:e1:f1:db:3b: 59:5e:8d:c6:7c:ca:91:ea:c6:72:43:84:dd:2e:9b: a7:ed:ff:bc:94:d8:77:5a:2d:ab:48:24:eb:39:12: a7:33:5a:85:aa:be:88:16:6c:0f:f9:6c:32:47:c9: a4:64:bd:8e:e1:49:94:f9:1d:ba:bb:d6:6e:a3:3e: 05:41:9a:28:76:ae:c9:c1:68:64:fa:a0:bf:fa:44: 4d:0f:26:d3:25:6c:e2:cf:58:04:6d:2b:b0:fd:3d: 57:84:55:bc:43:b5:98:a3:8d:1b:80:88:20:6e:36: c8:58:5a:00:25:30:ff:64:05:99:97:e4:c5:b2:a3: c6:8b:00:8a:fb:44:4f:96:5f:95:73:27:4a:02:2f: fe:35:cb:78:66:72:8b:73:22:2b:b1:20:fe:a6:0d: 7b:66:5b:d0:88:8d:ac:0d:d3:c8:bf:2b:3a:02:67: 28:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D4:7D:1A:62:89:AA:4C:B8:59:64:DB:6A:F4:B7:FA:A4:63:21:BD X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e20313337373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.145.32.0/19 Signature Algorithm: sha256WithRSAEncryption 87:b3:49:72:e1:3e:76:60:de:eb:c8:ad:a1:60:0c:5b:0e:69: 00:09:56:ed:da:51:4c:de:54:81:35:61:a2:92:05:26:c7:55: 54:d6:be:c2:25:c2:da:6f:a1:50:a8:b6:c2:b6:bc:9a:76:fc: 79:41:31:d2:77:f0:7f:72:61:75:10:da:36:11:c8:d3:dd:38: 14:1d:10:4a:2f:46:ad:11:35:60:ea:3a:88:cd:2c:06:b1:4d: e4:db:8e:98:1a:38:47:41:d5:35:bd:f8:6b:54:e3:7a:8b:1a: 17:7b:5e:7b:a6:c3:b5:50:3f:30:e8:19:fe:69:0b:79:d7:5f: 9e:49:38:63:23:f9:db:24:06:bf:cf:f9:a6:4b:de:de:90:cc: 98:ad:41:25:bf:86:18:48:1b:83:04:3c:15:21:5a:5e:f3:74: 51:a9:2c:d4:3c:54:ca:5d:e3:c6:ed:c0:ae:10:50:73:08:1b: 3b:f0:b7:9d:d4:c5:1f:59:57:21:51:da:85:e0:a3:2a:18:b4: b5:bd:68:a2:e8:dd:64:b8:8f:09:d0:e2:ae:db:6b:06:58:22: f8:6d:e5:dd:79:ed:3f:a2:fb:e3:30:6c:db:64:d1:a2:a9:eb: f7:b8:1b:e0:97:19:46:dd:7b:7c:f7:d7:2e:46:55:fd:32:b0: 63:03:7a:36 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUHqcbPfKHKv62BdEZw5nvAmB8VmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDJaFw0yNzAxMTkwMjA5NDJaMDMxMTAvBgNV BAMTKDBCRDQ3RDFBNjI4OUFBNENCODU5NjREQjZBRjRCN0ZBQTQ2MzIxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZq3uxSdHpWysjPEfyP+RuXRH aSWWuZe+Lu7R5SEDUV8F2SZsIzFX2YTKHYWTwPAtF6zeSM5e6vWd66GmsJlU7rxb KDzjCNaYFHEWPLeVAUvnkFL74fHbO1lejcZ8ypHqxnJDhN0um6ft/7yU2HdaLatI JOs5EqczWoWqvogWbA/5bDJHyaRkvY7hSZT5Hbq71m6jPgVBmih2rsnBaGT6oL/6 RE0PJtMlbOLPWARtK7D9PVeEVbxDtZijjRuAiCBuNshYWgAlMP9kBZmX5MWyo8aL AIr7RE+WX5VzJ0oCL/41y3hmcotzIiuxIP6mDXtmW9CIjawN08i/KzoCZyjvAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUC9R9GmKJqky4WWTbavS3+qRjIb0wHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC8zMTMxMzgyZTMx MzQzNTJlMzMzMjJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzEzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAh7NJcuE+dmDe68itoWAM Ww5pAAlW7dpRTN5UgTVhopIFJsdVVNa+wiXC2m+hUKi2wra8mnb8eUEx0nfwf3Jh dRDaNhHI0904FB0QSi9GrRE1YOo6iM0sBrFN5NuOmBo4R0HVNb34a1TjeosaF3te e6bDtVA/MOgZ/mkLeddfnkk4YyP52yQGv8/5pkve3pDMmK1BJb+GGEgbgwQ8FSFa XvN0Uaks1DxUyl3jxu3ArhBQcwgbO/C3ndTFH1lXIVHaheCjKhi0tb1ooujdZLiP CdDirttrBlgi+G3l3XntP6L74zBs22TRoqnr97gb4JcZRt17fPfXLkZV/TKwYwN6 Ng== -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:10 2026 by rpki-client