This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e32302e302f32342d3234203d3e20313531323730.roa File: 3131302e34302e32302e302f32342d3234203d3e20313531323730.roa (raw, json) Hash identifier: ImRRVtB0oFAe/o9QR/JWsPg+8dQpeAu+2h50TZkGRjg= Subject key identifier: 1F:78:D9:82:D3:E6:A5:E3:45:46:CC:6A:37:02:34:E7:C2:7C:C7:8C Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C Certificate serial: 0A209E5348BC89DBDF3AF27305E1DACA8C9FC511 Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e32302e302f32342d3234203d3e20313531323730.roa Signing time: Tue 20 Jan 2026 02:12:00 +0000 ROA not before: Tue 20 Jan 2026 02:07:00 +0000 ROA not after: Tue 19 Jan 2027 02:12:00 +0000 asID: 151270 IP address blocks: 110.40.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:20:9e:53:48:bc:89:db:df:3a:f2:73:05:e1:da:ca:8c:9f:c5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C Validity Not Before: Jan 20 02:07:00 2026 GMT Not After : Jan 19 02:12:00 2027 GMT Subject: CN=1F78D982D3E6A5E34546CC6A370234E7C27CC78C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:af:d2:2c:1a:08:be:28:cd:13:83:13:1d:0e: c2:69:91:9c:94:ca:6b:fc:7e:a5:bf:b9:fe:01:74: 81:74:e1:40:5f:4a:34:63:20:c3:a4:e3:97:fb:0d: 23:db:f1:57:59:bf:3e:3c:41:e2:bc:45:1d:fe:8c: 9c:84:71:ba:02:04:ab:d8:c0:1d:98:95:d6:50:fb: 67:ff:24:07:ca:6d:58:ee:63:7c:a2:f7:52:8f:7d: f7:88:64:f7:38:45:fd:58:a8:db:d0:b3:c0:a9:fc: e9:82:35:06:a2:e5:d5:20:02:66:ef:e2:90:db:07: 71:b5:4a:29:62:8b:01:e4:38:c3:ac:05:0a:fc:8e: d8:12:21:25:d4:b7:7d:e6:f4:c0:28:fe:35:7a:69: de:d0:d0:75:9c:b5:af:bb:eb:d4:6b:39:c3:e3:09: 26:53:e1:8c:6a:61:57:c9:98:3b:5a:71:27:6c:35: 87:3e:13:50:71:32:81:9b:ad:fc:b4:1b:ae:8d:6c: 51:01:aa:3b:e1:41:86:04:c2:c0:cc:58:34:69:33: a8:87:8d:7e:87:1d:ca:25:e5:62:f0:8a:7d:04:c3: 6b:5a:e3:2d:d6:cf:37:1e:20:fb:4c:1e:96:ed:52: 90:62:6c:a4:9e:73:27:38:ad:64:77:25:e6:fc:3d: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:78:D9:82:D3:E6:A5:E3:45:46:CC:6A:37:02:34:E7:C2:7C:C7:8C X509v3 Authority Key Identifier: keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e32302e302f32342d3234203d3e20313531323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.40.20.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:b7:12:98:60:6a:ed:29:79:9c:27:56:d6:f0:a7:59:56:6c: 9f:f3:4f:64:b6:4c:97:60:d9:ac:58:8f:9f:a4:31:3a:ef:5a: 7a:55:cc:bc:20:8d:70:f8:fb:bd:e7:82:31:fb:a7:c6:db:53: 8a:98:1b:19:0b:f3:4b:1d:b0:7a:eb:a3:0f:c3:6c:05:58:85: 8d:c0:db:c0:2b:f6:2f:21:d3:90:ab:d8:51:dd:26:cc:a0:93: be:91:fd:cc:36:b6:15:33:a3:00:56:5a:f2:25:a7:70:ad:9d: 3b:52:f9:7e:75:67:c8:dc:83:98:77:1f:34:b9:9c:22:c8:47: ef:c4:19:74:74:cc:22:26:6e:98:47:89:95:da:22:de:ed:46: 81:22:72:2e:54:11:54:ae:fc:46:d0:e9:5e:90:e1:69:39:60: cf:dd:a0:6e:67:9f:c8:01:66:12:8e:ba:0b:17:3c:d2:f4:4a: 55:e4:37:6d:bb:64:03:d3:92:7f:4f:bf:94:ca:c3:24:ed:e5: 10:0e:90:e1:3e:27:ee:f8:48:f7:87:76:dd:53:40:da:b9:d1: 89:cf:70:95:f2:20:2e:63:5e:e7:8f:76:ae:c0:b1:33:af:54: 6a:61:d0:bf:44:46:dc:47:26:10:2c:f4:dd:2a:93:20:6c:0b: 10:52:4e:94 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCiCeU0i8idvfOvJzBeHayoyfxREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1 RDkyRjAzQzAeFw0yNjAxMjAwMjA3MDBaFw0yNzAxMTkwMjEyMDBaMDMxMTAvBgNV BAMTKDFGNzhEOTgyRDNFNkE1RTM0NTQ2Q0M2QTM3MDIzNEU3QzI3Q0M3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUr9IsGgi+KM0TgxMdDsJpkZyU ymv8fqW/uf4BdIF04UBfSjRjIMOk45f7DSPb8VdZvz48QeK8RR3+jJyEcboCBKvY wB2YldZQ+2f/JAfKbVjuY3yi91KPffeIZPc4Rf1YqNvQs8Cp/OmCNQai5dUgAmbv 4pDbB3G1SiliiwHkOMOsBQr8jtgSISXUt33m9MAo/jV6ad7Q0HWcta+769RrOcPj CSZT4YxqYVfJmDtacSdsNYc+E1BxMoGbrfy0G66NbFEBqjvhQYYEwsDMWDRpM6iH jX6HHcol5WLwin0Ew2ta4y3WzzceIPtMHpbtUpBibKSecyc4rWR3Jeb8PXnvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUH3jZgtPmpeNFRsxqNwI058J8x4wwHwYDVR0j BBgwFoAU3kr15VH4ICEohBc/KruxZl2S8DwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzEyNzQyNy8wL0RFNEFGNUU1NTFGODIwMjEyODg0MTczRjJBQkJC MTY2NUQ5MkYwM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzEyNzQyNy8wLzMxMzEzMDJlMzQz MDJlMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAG4oFDANBgkqhkiG9w0BAQsFAAOCAQEACrcSmGBq7Sl5nCdW1vCnWVZs n/NPZLZMl2DZrFiPn6QxOu9aelXMvCCNcPj7veeCMfunxttTipgbGQvzSx2weuuj D8NsBViFjcDbwCv2LyHTkKvYUd0mzKCTvpH9zDa2FTOjAFZa8iWncK2dO1L5fnVn yNyDmHcfNLmcIshH78QZdHTMIiZumEeJldoi3u1GgSJyLlQRVK78RtDpXpDhaTlg z92gbmefyAFmEo66Cxc80vRKVeQ3bbtkA9OSf0+/lMrDJO3lEA6Q4T4n7vhI94d2 3VNA2rnRic9wlfIgLmNe5492rsCxM69UamHQv0RG3EcmECz03SqTIGwLEFJOlA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:22 2026 by rpki-client