This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/3135372e31352e39342e302f32342d3234203d3e203337393639.roa File: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (raw, json) Hash identifier: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0= Subject key identifier: BE:2E:59:A7:E5:EE:46:E4:4F:D9:25:5B:89:07:34:1B:A2:C4:63:D0 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 1034B41053589FA54F0E233B73DEBA79BE9F2C17 Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/3135372e31352e39342e302f32342d3234203d3e203337393639.roa Signing time: Tue 20 Jan 2026 02:23:48 +0000 ROA not before: Tue 20 Jan 2026 02:18:48 +0000 ROA not after: Tue 19 Jan 2027 02:23:48 +0000 asID: 37969 IP address blocks: 157.15.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:34:b4:10:53:58:9f:a5:4f:0e:23:3b:73:de:ba:79:be:9f:2c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Jan 20 02:18:48 2026 GMT Not After : Jan 19 02:23:48 2027 GMT Subject: CN=BE2E59A7E5EE46E44FD9255B8907341BA2C463D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:d2:5f:17:f9:75:95:5c:07:16:1d:18:68: 64:cb:32:65:eb:0f:76:08:af:7d:4a:a1:c0:23:3d: 1e:23:4e:aa:e9:5d:62:ac:83:a6:14:61:35:6e:b2: 17:65:40:b2:36:7b:d6:4e:26:03:0a:ed:a5:74:dd: a4:66:8c:e2:1e:6c:32:31:3f:b8:1d:39:8f:55:34: f5:d1:ee:a8:b1:c9:53:d9:cb:22:06:de:dc:95:26: 59:9a:5b:de:0a:f9:9d:70:f0:ef:d7:0c:14:90:d3: be:51:37:30:cb:a7:88:12:7e:12:c3:82:7c:c4:71: de:d1:f7:bb:5b:3c:12:65:e7:cd:24:1d:a5:23:9c: 14:cf:17:c4:2b:ad:7d:d5:e0:db:bf:c4:54:de:8b: 5a:9d:52:a9:f5:c7:58:36:a5:b1:8d:10:c2:28:58: b4:26:17:89:3b:bb:31:76:e5:6f:78:9c:6c:55:0a: d0:8f:48:dc:c3:2e:ed:ab:ed:b7:87:18:71:b9:a9: e1:05:d8:d5:9d:4c:71:7e:df:2b:da:4e:fa:30:6f: 6b:c1:a3:ae:2c:55:bf:74:fb:1f:09:e0:ad:f9:c3: bc:f5:50:cf:e0:1f:4c:47:29:aa:c2:70:5e:7e:1d: c2:57:38:c7:b7:e2:ab:fb:77:21:13:f1:14:9f:e0: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2E:59:A7:E5:EE:46:E4:4F:D9:25:5B:89:07:34:1B:A2:C4:63:D0 X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/3135372e31352e39342e302f32342d3234203d3e203337393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.94.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:91:e2:c4:a5:33:2c:6e:35:e0:f8:52:3c:b2:41:22:40:5e: 04:68:6f:07:06:44:88:f9:ce:b3:65:f7:2a:f6:3c:97:ec:5b: f0:e7:01:04:35:91:1c:08:c0:c3:45:f3:f6:6e:24:5d:12:f8: 27:1e:16:5a:c1:77:2e:92:aa:eb:4a:a3:a7:eb:93:75:b2:cf: db:69:d7:f2:08:c7:93:9f:8d:c9:f3:6e:af:02:10:88:6e:f6: ae:e1:87:1d:a7:7f:4e:7d:ee:94:8d:c1:96:c4:4f:c2:7d:2e: 26:11:af:05:c9:f0:a4:ec:f5:18:96:36:8c:95:06:cc:4e:c2: c2:af:6e:22:9f:5e:51:3c:98:b8:60:4a:70:38:30:09:7f:84: 97:ca:a4:3f:d7:4d:48:19:da:fb:a4:b4:ce:6b:e3:a0:a3:7d: 33:c7:06:b1:ba:9c:a6:e1:31:63:c0:d4:78:46:dc:75:1d:3a: e1:03:af:2e:37:7e:3e:61:5d:6b:d8:e6:c8:e3:e6:8b:14:97: 0d:4d:38:60:98:97:a1:2b:6c:d9:04:8e:aa:2c:8b:9b:e7:7a: 15:10:87:22:8b:53:bf:f4:c7:83:c3:c4:53:8a:2d:18:98:44: 11:19:a2:18:98:8a:44:77:3a:04:36:71:8a:c1:e1:23:36:1a: 51:15:ea:5d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUEDS0EFNYn6VPDiM7c966eb6fLBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjAxMjAwMjE4NDhaFw0yNzAxMTkwMjIzNDhaMDMxMTAvBgNV BAMTKEJFMkU1OUE3RTVFRTQ2RTQ0RkQ5MjU1Qjg5MDczNDFCQTJDNDYzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qdJfF/l1lVwHFh0YaGTLMmXr D3YIr31KocAjPR4jTqrpXWKsg6YUYTVushdlQLI2e9ZOJgMK7aV03aRmjOIebDIx P7gdOY9VNPXR7qixyVPZyyIG3tyVJlmaW94K+Z1w8O/XDBSQ075RNzDLp4gSfhLD gnzEcd7R97tbPBJl580kHaUjnBTPF8QrrX3V4Nu/xFTei1qdUqn1x1g2pbGNEMIo WLQmF4k7uzF25W94nGxVCtCPSNzDLu2r7beHGHG5qeEF2NWdTHF+3yvaTvowb2vB o64sVb90+x8J4K35w7z1UM/gH0xHKarCcF5+HcJXOMe34qv7dyET8RSf4DWZAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUvi5Zp+XuRuRP2SVbiQc0G6LEY9AwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDg0ODY2LzEvMzEzNTM3MmUzMTM1 MmUzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJ0PXjANBgkqhkiG9w0BAQsFAAOCAQEAipHixKUzLG414PhSPLJBIkBeBGhv BwZEiPnOs2X3KvY8l+xb8OcBBDWRHAjAw0Xz9m4kXRL4Jx4WWsF3LpKq60qjp+uT dbLP22nX8gjHk5+NyfNurwIQiG72ruGHHad/Tn3ulI3BlsRPwn0uJhGvBcnwpOz1 GJY2jJUGzE7Cwq9uIp9eUTyYuGBKcDgwCX+El8qkP9dNSBna+6S0zmvjoKN9M8cG sbqcpuExY8DUeEbcdR064QOvLjd+PmFda9jmyOPmixSXDU04YJiXoSts2QSOqiyL m+d6FRCHIotTv/THg8PEU4otGJhEERmiGJiKRHc6BDZxisHhIzYaURXqXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:24 2026 by rpki-client