This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/3131312e3232332e382e302f32322d3234203d3e203234343039.roa File: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (raw, json) Hash identifier: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04= Subject key identifier: 49:BD:F5:7F:9F:1C:58:AA:2B:92:57:58:7A:3E:89:A2:80:DA:51:52 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: 3BE83E80E23624D16EB3F60D8F0A9609DDD61B01 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/3131312e3232332e382e302f32322d3234203d3e203234343039.roa Signing time: Tue 20 Jan 2026 02:08:26 +0000 ROA not before: Tue 20 Jan 2026 02:03:26 +0000 ROA not after: Tue 19 Jan 2027 02:08:26 +0000 asID: 24409 IP address blocks: 111.223.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e8:3e:80:e2:36:24:d1:6e:b3:f6:0d:8f:0a:96:09:dd:d6:1b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: Jan 20 02:03:26 2026 GMT Not After : Jan 19 02:08:26 2027 GMT Subject: CN=49BDF57F9F1C58AA2B9257587A3E89A280DA5152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:d4:dc:51:b8:31:d9:95:7b:ca:ad:81:1b: c7:f0:f9:2f:ff:a9:b4:5e:1c:86:d8:61:22:e3:78: 7f:b8:35:fa:65:85:69:86:e6:29:09:a7:aa:d8:84: 26:e7:b6:9d:57:54:d5:bc:bd:e6:d3:b9:e8:25:0d: a8:74:dd:0a:64:bc:8c:df:a8:b2:d7:08:00:6b:d4: 90:fd:9b:0d:37:db:b7:d0:ed:2b:a0:c8:03:c2:fd: b5:a7:61:7e:4a:60:9d:41:3e:56:b5:04:b8:b5:8c: a1:51:94:81:8f:e2:e5:33:14:29:4b:c3:eb:ab:51: 6d:0d:91:0b:ec:db:31:07:22:4f:f0:51:18:24:fa: 48:c5:14:f3:e1:59:64:00:31:f9:af:d0:60:5d:c7: 2c:b7:4f:72:d3:ca:5b:c4:14:3f:05:98:8f:08:49: 6b:46:68:c3:1f:c5:f9:78:eb:de:ba:c4:5e:74:54: 27:2b:3d:20:3e:03:2e:1e:30:27:1c:8c:b6:44:fd: 6a:68:c9:3e:3c:5e:8f:df:f2:b7:3b:e8:42:88:42: 5a:cd:ab:b9:50:22:d5:e5:87:be:bf:4d:97:66:6b: c5:cd:e5:b0:45:55:27:f2:e2:0d:93:59:2e:06:4b: 7a:63:8d:5f:ed:35:f5:e2:09:7e:23:56:57:bf:81: 7c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BD:F5:7F:9F:1C:58:AA:2B:92:57:58:7A:3E:89:A2:80:DA:51:52 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/3131312e3232332e382e302f32322d3234203d3e203234343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.223.8.0/22 Signature Algorithm: sha256WithRSAEncryption a3:98:47:95:10:42:3c:14:74:89:ba:93:7a:b4:03:f8:dd:4a: cc:b9:28:ac:0a:16:23:2e:f1:4c:1d:3d:70:49:79:0f:a3:fc: 89:0c:6c:6b:4b:9f:3d:d8:bd:19:e2:2f:82:3c:79:a5:a7:aa: ca:47:04:a9:cd:8c:e1:f0:4f:c6:b0:8e:47:5e:6b:53:4a:a7: 53:cb:7a:1d:c1:6d:09:aa:44:84:82:99:94:39:2e:01:83:51: f9:08:6d:ab:b3:12:39:7f:75:19:65:bc:55:2b:cd:9b:ce:d3: 17:89:75:60:98:66:43:51:c8:59:aa:65:36:18:6a:e6:b0:14: 2d:45:b8:2c:1a:9e:db:d0:22:3a:55:66:bb:03:91:30:47:66: d0:bb:63:a8:27:97:36:0d:d2:de:70:aa:f1:ea:f3:db:17:45: 01:24:74:58:eb:19:5f:fb:ae:46:41:e4:66:f2:0e:59:3c:40: 9d:76:4a:35:68:01:3c:c8:03:71:2f:ce:2f:b4:bf:4c:03:15: 2a:48:9e:0f:e0:c2:a3:09:c5:9f:6c:ef:0b:e5:a7:53:d8:93: 08:9a:b4:2c:bd:7c:21:30:62:e8:14:eb:21:fa:5e:78:15:b2: 83:d8:d9:21:3a:e0:a8:b9:5b:30:e8:1a:c4:63:ce:6e:8f:7a: 0c:c3:5f:5a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUO+g+gOI2JNFus/YNjwqWCd3WGwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjAxMjAwMjAzMjZaFw0yNzAxMTkwMjA4MjZaMDMxMTAvBgNV BAMTKDQ5QkRGNTdGOUYxQzU4QUEyQjkyNTc1ODdBM0U4OUEyODBEQTUxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQtTcUbgx2ZV7yq2BG8fw+S// qbReHIbYYSLjeH+4NfplhWmG5ikJp6rYhCbntp1XVNW8vebTueglDah03QpkvIzf qLLXCABr1JD9mw0327fQ7SugyAPC/bWnYX5KYJ1BPla1BLi1jKFRlIGP4uUzFClL w+urUW0NkQvs2zEHIk/wURgk+kjFFPPhWWQAMfmv0GBdxyy3T3LTylvEFD8FmI8I SWtGaMMfxfl46966xF50VCcrPSA+Ay4eMCccjLZE/WpoyT48Xo/f8rc76EKIQlrN q7lQItXlh76/TZdma8XN5bBFVSfy4g2TWS4GS3pjjV/tNfXiCX4jVle/gXx1AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUSb31f58cWKorkldYej6JooDaUVIwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NzU3MTg2LzAvMzEzMTMxMmUzMjMy MzMyZTM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNDM0MzAzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAm/fCDANBgkqhkiG9w0BAQsFAAOCAQEAo5hHlRBCPBR0ibqTerQD+N1KzLko rAoWIy7xTB09cEl5D6P8iQxsa0ufPdi9GeIvgjx5paeqykcEqc2M4fBPxrCOR15r U0qnU8t6HcFtCapEhIKZlDkuAYNR+Qhtq7MSOX91GWW8VSvNm87TF4l1YJhmQ1HI WaplNhhq5rAULUW4LBqe29AiOlVmuwORMEdm0LtjqCeXNg3S3nCq8erz2xdFASR0 WOsZX/uuRkHkZvIOWTxAnXZKNWgBPMgDcS/OL7S/TAMVKkieD+DCownFn2zvC+Wn U9iTCJq0LL18ITBi6BTrIfpeeBWyg9jZITrgqLlbMOgaxGPObo96DMNfWg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:02 2026 by rpki-client