This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e3137342e302e302f31362d3234203d3e2034383131.roa File: 3132342e3137342e302e302f31362d3234203d3e2034383131.roa (raw, json) Hash identifier: ti2Ay6+/KmJjItq1eiYSpjgfdTqj36exoPbAF6tF/bw= Subject key identifier: 6B:D8:34:8D:BE:00:EA:40:20:FB:46:2D:08:5B:C2:39:13:CC:B3:58 Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 095D27F30B99BCEA90652C2BE578B550C6EEB7D5 Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e3137342e302e302f31362d3234203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:09:43 +0000 ROA not before: Tue 20 Jan 2026 02:04:43 +0000 ROA not after: Tue 19 Jan 2027 02:09:43 +0000 asID: 4811 IP address blocks: 124.174.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5d:27:f3:0b:99:bc:ea:90:65:2c:2b:e5:78:b5:50:c6:ee:b7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:43 2026 GMT Not After : Jan 19 02:09:43 2027 GMT Subject: CN=6BD8348DBE00EA4020FB462D085BC23913CCB358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:3c:16:7c:2b:fa:c5:4f:d7:80:01:03:64: 5f:10:d5:96:92:b6:9b:af:a3:33:19:18:8d:56:58: a3:6d:ec:0b:d4:f4:eb:28:18:aa:e0:31:b4:db:55: 5d:06:c1:8d:64:ff:79:80:b1:52:47:64:07:79:dd: 98:4a:77:df:5b:ff:42:0c:08:59:b9:17:d0:64:c5: 00:45:c4:f8:1b:8b:ab:05:3f:2a:d6:2d:26:a4:ba: ae:43:08:0e:4b:ea:05:79:54:86:62:7a:48:b3:b6: 05:fe:65:88:a3:4f:a0:23:c6:3b:e5:3c:3e:33:ca: b6:21:d4:45:d3:1a:07:69:fe:13:41:c3:58:fb:a5: 3b:ae:35:68:64:a1:71:01:8e:2a:3a:39:8d:15:c8: f5:d9:85:16:ec:64:d1:c2:f0:64:90:8b:67:30:2f: e4:09:a4:66:36:d1:9d:4b:49:c2:b2:3b:37:48:16: 08:bf:dd:2d:b4:ea:a7:1f:3c:22:4c:cb:88:69:bf: c5:0f:c1:87:10:5f:d2:84:87:45:4c:0b:53:fc:75: d1:6f:32:c1:db:aa:f1:4f:89:c3:7c:f4:51:4b:1f: 13:fe:62:c9:a1:0f:d5:35:4f:b7:b1:29:a1:2d:d6: a7:0c:98:6f:15:0b:e9:1f:5e:48:08:aa:6e:67:86: b8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D8:34:8D:BE:00:EA:40:20:FB:46:2D:08:5B:C2:39:13:CC:B3:58 X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e3137342e302e302f31362d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.174.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9c:64:e1:2e:fe:9e:1d:ba:17:ab:86:0d:b2:e9:8e:88:b8:7a: ea:a5:4b:5a:82:9f:e5:46:5d:7d:0e:fc:03:69:e4:ba:4f:49: e8:fa:da:0a:a0:73:08:00:46:60:9d:14:ec:57:ed:76:a1:e2: 1e:df:ee:71:8c:79:aa:c7:e8:d1:97:74:3c:cf:36:0f:e6:eb: 31:1b:28:b4:4d:d7:22:13:1d:bf:7a:81:c6:f7:a7:18:3c:94: b5:a1:03:25:a6:14:75:e5:7f:c8:21:ef:bc:40:0b:59:98:0a: 57:4d:18:b5:4c:4b:01:13:76:37:ff:8d:09:b4:a3:ed:8a:a9: b3:49:fd:d4:00:c8:30:e1:58:cd:76:1c:e2:51:51:57:eb:0a: 3e:fa:73:2a:e1:10:ab:9a:26:17:0f:24:c7:68:71:bf:20:95: 45:21:b7:7a:30:22:d7:9e:39:17:16:a1:5a:00:84:82:fc:d1: 6e:45:cc:75:4c:1c:3a:31:ed:cd:83:b4:b5:10:a2:74:28:3c: 24:0d:96:f3:a5:4e:97:84:20:2a:99:48:d7:2e:2d:b6:d7:f1: be:7e:43:17:5f:73:c8:93:a5:a7:85:12:d5:06:29:89:7c:0c: 0d:f2:17:d4:5f:52:c9:db:8c:4e:d4:9e:08:9e:da:4d:41:fe: 33:fa:c4:0f -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUCV0n8wuZvOqQZSwr5Xi1UMbut9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDNaFw0yNzAxMTkwMjA5NDNaMDMxMTAvBgNV BAMTKDZCRDgzNDhEQkUwMEVBNDAyMEZCNDYyRDA4NUJDMjM5MTNDQ0IzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANDwWfCv6xU/XgAEDZF8Q1ZaS tpuvozMZGI1WWKNt7AvU9OsoGKrgMbTbVV0GwY1k/3mAsVJHZAd53ZhKd99b/0IM CFm5F9BkxQBFxPgbi6sFPyrWLSakuq5DCA5L6gV5VIZiekiztgX+ZYijT6Ajxjvl PD4zyrYh1EXTGgdp/hNBw1j7pTuuNWhkoXEBjio6OY0VyPXZhRbsZNHC8GSQi2cw L+QJpGY20Z1LScKyOzdIFgi/3S206qcfPCJMy4hpv8UPwYcQX9KEh0VMC1P8ddFv MsHbqvFPicN89FFLHxP+YsmhD9U1T7exKaEt1qcMmG8VC+kfXkgIqm5nhrgHAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUa9g0jb4A6kAg+0YtCFvCORPMs1gwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzEzMjM0MmUzMTM3 MzQyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwB8rjANBgkqhkiG9w0BAQsFAAOCAQEAnGThLv6eHboXq4YNsumOiLh66qVLWoKf 5UZdfQ78A2nkuk9J6PraCqBzCABGYJ0U7FftdqHiHt/ucYx5qsfo0Zd0PM82D+br MRsotE3XIhMdv3qBxvenGDyUtaEDJaYUdeV/yCHvvEALWZgKV00YtUxLARN2N/+N CbSj7Yqps0n91ADIMOFYzXYc4lFRV+sKPvpzKuEQq5omFw8kx2hxvyCVRSG3ejAi 1545FxahWgCEgvzRbkXMdUwcOjHtzYO0tRCidCg8JA2W86VOl4QgKplI1y4tttfx vn5DF19zyJOlp4US1QYpiXwMDfIX1F9SyduMTtSeCJ7aTUH+M/rEDw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:42 2026 by rpki-client