This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/3135372e31352e39352e302f32342d3234203d3e203337393639.roa File: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (raw, json) Hash identifier: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw= Subject key identifier: 25:B9:7D:84:3D:7E:2E:22:60:E0:CE:03:C0:5F:8D:02:F1:7F:C3:DC Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 53A8990A69E604343179A3E3298CEA78DE1748BC Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/3135372e31352e39352e302f32342d3234203d3e203337393639.roa Signing time: Tue 20 Jan 2026 02:23:48 +0000 ROA not before: Tue 20 Jan 2026 02:18:48 +0000 ROA not after: Tue 19 Jan 2027 02:23:48 +0000 asID: 37969 IP address blocks: 157.15.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a8:99:0a:69:e6:04:34:31:79:a3:e3:29:8c:ea:78:de:17:48:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Jan 20 02:18:48 2026 GMT Not After : Jan 19 02:23:48 2027 GMT Subject: CN=25B97D843D7E2E2260E0CE03C05F8D02F17FC3DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:f9:51:43:6e:ff:50:40:a7:e2:5c:46:6c: 21:b6:a2:79:33:b0:cf:a6:ee:9e:94:6c:88:3e:89: ee:5b:27:24:d5:23:4b:30:48:7a:c0:34:1c:3e:bc: 07:a5:08:64:d6:c6:85:ff:7e:4c:92:19:6e:54:be: d3:dc:e8:e0:91:04:11:bd:93:27:c7:9e:b6:57:ed: 1a:ff:81:e0:1a:41:46:a0:98:cf:25:88:b7:d8:f0: 82:a6:2b:8a:cc:10:4d:2a:72:38:1d:f9:06:e3:43: 06:22:31:a1:0f:64:80:1e:f3:ca:ae:98:a5:43:da: 2b:40:fb:e2:c9:e8:04:11:cb:f7:7f:fc:86:08:3f: cb:e4:94:87:16:f8:9c:10:78:56:19:34:8d:55:97: 50:eb:23:0f:8d:62:04:94:2e:03:ba:fb:f1:44:8d: 78:f9:9b:23:70:ba:0f:97:8e:ea:b9:dc:c1:63:7b: 36:f8:1d:5e:08:11:99:d1:e8:45:2f:42:1e:0e:0d: 60:0b:36:a9:d8:20:30:ca:8f:f4:c2:b9:d9:01:79: df:a4:f9:f4:16:e6:c9:5c:05:17:ae:29:fc:46:88: 81:59:5d:44:e3:1f:86:6e:55:0e:20:cc:73:13:61: 5d:c3:95:29:7e:14:59:93:8b:e7:59:e0:46:7d:06: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B9:7D:84:3D:7E:2E:22:60:E0:CE:03:C0:5F:8D:02:F1:7F:C3:DC X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/3135372e31352e39352e302f32342d3234203d3e203337393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.95.0/24 Signature Algorithm: sha256WithRSAEncryption 26:ba:c1:ef:f7:80:c0:70:71:5f:eb:2a:9f:b2:81:e3:b7:fb: 86:6e:55:a8:52:1e:4f:af:8a:6f:df:3e:e4:73:6e:e7:61:11: 63:bf:de:bb:10:26:f0:1d:ec:6a:a6:0e:39:72:f4:15:61:5c: c1:17:2c:d1:73:d5:5a:18:08:bf:11:3b:84:9e:b6:b0:c5:60: a2:cc:e2:10:b1:51:f3:e5:2b:81:49:95:dd:5d:8d:2f:4a:02: 50:49:fa:9d:43:e9:9c:48:a9:7a:c5:d2:9a:85:3c:5b:3a:d0: ca:f8:80:1c:1d:2c:b7:5e:e1:a4:15:0c:91:e1:c0:10:d8:0b: 76:6a:58:99:d3:a8:9c:23:f1:24:8d:49:a7:2b:72:73:59:a1: 40:60:95:82:0a:98:04:38:a4:28:81:a3:60:28:94:d3:73:2a: 7a:12:27:46:63:85:ca:5d:c6:d3:69:aa:82:88:5e:83:db:0e: ba:d7:79:6f:3a:6d:e1:d4:f5:1b:6c:f1:98:13:f9:d7:47:c1: f6:f6:b7:32:e2:71:fa:dd:95:30:8c:b6:2f:e2:bd:1f:7e:89: 48:d2:97:d9:e3:f8:8b:3d:89:c8:57:c2:84:44:29:9f:69:4d: 5d:31:cd:2a:0a:03:29:71:6b:2d:7f:f3:ea:7b:31:db:5a:c7: 28:de:c0:9f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUU6iZCmnmBDQxeaPjKYzqeN4XSLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjAxMjAwMjE4NDhaFw0yNzAxMTkwMjIzNDhaMDMxMTAvBgNV BAMTKDI1Qjk3RDg0M0Q3RTJFMjI2MEUwQ0UwM0MwNUY4RDAyRjE3RkMzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN7/lRQ27/UECn4lxGbCG2onkz sM+m7p6UbIg+ie5bJyTVI0swSHrANBw+vAelCGTWxoX/fkySGW5UvtPc6OCRBBG9 kyfHnrZX7Rr/geAaQUagmM8liLfY8IKmK4rMEE0qcjgd+QbjQwYiMaEPZIAe88qu mKVD2itA++LJ6AQRy/d//IYIP8vklIcW+JwQeFYZNI1Vl1DrIw+NYgSULgO6+/FE jXj5myNwug+Xjuq53MFjezb4HV4IEZnR6EUvQh4ODWALNqnYIDDKj/TCudkBed+k +fQW5slcBReuKfxGiIFZXUTjH4ZuVQ4gzHMTYV3DlSl+FFmTi+dZ4EZ9BurdAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUJbl9hD1+LiJg4M4DwF+NAvF/w9wwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDg0ODY2LzEvMzEzNTM3MmUzMTM1 MmUzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJ0PXzANBgkqhkiG9w0BAQsFAAOCAQEAJrrB7/eAwHBxX+sqn7KB47f7hm5V qFIeT6+Kb98+5HNu52ERY7/euxAm8B3saqYOOXL0FWFcwRcs0XPVWhgIvxE7hJ62 sMVgosziELFR8+UrgUmV3V2NL0oCUEn6nUPpnEipesXSmoU8WzrQyviAHB0st17h pBUMkeHAENgLdmpYmdOonCPxJI1Jpytyc1mhQGCVggqYBDikKIGjYCiU03MqehIn RmOFyl3G02mqgoheg9sOutd5bzpt4dT1G2zxmBP510fB9va3MuJx+t2VMIy2L+K9 H36JSNKX2eP4iz2JyFfChEQpn2lNXTHNKgoDKXFrLX/z6nsx21rHKN7Anw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:24 2026 by rpki-client