This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35372e302f32342d3234203d3e20313531323730.roa File: 3131302e34302e35372e302f32342d3234203d3e20313531323730.roa (raw, json) Hash identifier: 4RmDRzcMhBN2hJIGrEmHQdAQCG7fzvdw/LrNzFu0YEY= Subject key identifier: 72:FA:67:42:61:CA:A1:3C:84:5B:6A:14:D7:C3:6D:DB:47:1F:72:90 Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C Certificate serial: 1458CBC4632B94D1F9ACBDA4BF9F57E56972AE8C Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35372e302f32342d3234203d3e20313531323730.roa Signing time: Tue 20 Jan 2026 02:12:01 +0000 ROA not before: Tue 20 Jan 2026 02:07:01 +0000 ROA not after: Tue 19 Jan 2027 02:12:01 +0000 asID: 151270 IP address blocks: 110.40.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:58:cb:c4:63:2b:94:d1:f9:ac:bd:a4:bf:9f:57:e5:69:72:ae:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C Validity Not Before: Jan 20 02:07:01 2026 GMT Not After : Jan 19 02:12:01 2027 GMT Subject: CN=72FA674261CAA13C845B6A14D7C36DDB471F7290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:ea:00:d7:3b:37:f1:9b:bd:b6:19:54:1e: 0e:1a:29:57:44:83:3b:d0:ca:21:35:a2:37:08:3c: 22:71:17:73:10:94:70:df:d9:33:72:02:f4:34:15: 09:d3:00:58:08:65:95:c2:84:bd:1e:92:d9:b7:0b: 1f:af:9b:38:74:45:56:67:d9:f3:3f:ae:b1:cc:d0: 0f:c1:ba:01:1f:2c:bd:3d:71:3f:fe:97:a6:e2:6e: 60:27:ea:22:53:00:8f:f4:c6:65:82:d8:8b:09:11: 8a:24:49:e3:4b:ae:7c:ae:76:1e:76:69:47:af:bc: c4:c8:19:c0:3c:54:44:b8:6f:83:30:f4:74:b8:51: 71:78:24:aa:bc:fc:00:f3:34:69:f5:b8:03:4f:eb: c2:1a:8c:a8:cc:cf:ca:0e:71:83:dd:df:1f:b6:69: bd:ec:8c:36:81:57:43:c3:ce:22:0c:6a:f3:b0:3d: 23:42:b5:2d:95:ad:b1:65:a2:d5:82:97:d6:fa:23: 45:6c:5d:52:80:5c:f4:1c:2a:e4:fe:76:ec:84:43: e0:9d:fb:c1:c2:f3:41:93:aa:22:3a:77:00:37:c7: ca:82:f6:b0:37:77:bf:4c:6a:27:c5:9d:55:7f:dd: cf:9d:4f:d2:a9:15:78:23:f3:93:64:44:4c:0d:5c: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FA:67:42:61:CA:A1:3C:84:5B:6A:14:D7:C3:6D:DB:47:1F:72:90 X509v3 Authority Key Identifier: keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35372e302f32342d3234203d3e20313531323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.40.57.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:04:d1:71:9f:7a:e8:34:d8:0a:d0:85:56:16:d6:d2:5a:4d: ec:f1:3c:db:28:27:bb:f2:fa:d1:da:5a:fb:6f:ac:d3:db:01: 6f:11:3c:8b:24:25:34:66:bf:a5:87:1d:af:49:9a:e8:0c:a2: 94:97:a7:07:61:d6:b1:82:20:6f:fa:57:b7:13:74:c3:46:d6: 3b:90:37:70:15:97:19:c3:06:25:41:df:9a:64:1a:58:d5:de: 77:33:8c:64:be:d7:16:77:a1:82:c5:64:d3:cf:a5:8a:ad:c8: 11:f9:3c:bf:fc:4c:87:b1:35:9f:ed:35:79:4b:06:c0:12:98: 28:17:ce:ef:5f:3e:37:99:d3:42:41:f0:e4:bd:9b:d2:b6:8c: a5:59:6c:0b:81:55:be:41:a3:ed:40:9f:04:f4:02:cd:c7:d7: d7:ea:75:3f:fd:01:87:9a:af:2a:a1:a7:8d:8c:09:aa:ce:74: 74:23:18:7f:0d:b2:3b:32:fa:fc:64:70:58:89:08:78:3a:6a: 15:43:22:dc:21:73:8a:5e:a9:54:2d:52:de:c0:44:f4:b4:1a: 84:e2:8a:d4:b9:33:c1:ff:bb:2b:77:5f:c6:c5:4a:0f:7f:7e: 28:43:ae:5e:52:4e:9d:19:10:b0:00:9b:be:52:47:a0:bd:6f: 71:c7:51:e3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFFjLxGMrlNH5rL2kv59X5WlyrowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1 RDkyRjAzQzAeFw0yNjAxMjAwMjA3MDFaFw0yNzAxMTkwMjEyMDFaMDMxMTAvBgNV BAMTKDcyRkE2NzQyNjFDQUExM0M4NDVCNkExNEQ3QzM2RERCNDcxRjcyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5uoA1zs38Zu9thlUHg4aKVdE gzvQyiE1ojcIPCJxF3MQlHDf2TNyAvQ0FQnTAFgIZZXChL0ektm3Cx+vmzh0RVZn 2fM/rrHM0A/BugEfLL09cT/+l6bibmAn6iJTAI/0xmWC2IsJEYokSeNLrnyudh52 aUevvMTIGcA8VES4b4Mw9HS4UXF4JKq8/ADzNGn1uANP68IajKjMz8oOcYPd3x+2 ab3sjDaBV0PDziIMavOwPSNCtS2VrbFlotWCl9b6I0VsXVKAXPQcKuT+duyEQ+Cd +8HC80GTqiI6dwA3x8qC9rA3d79MaifFnVV/3c+dT9KpFXgj85NkREwNXA3lAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUcvpnQmHKoTyEW2oU18Nt20cfcpAwHwYDVR0j BBgwFoAU3kr15VH4ICEohBc/KruxZl2S8DwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzEyNzQyNy8wL0RFNEFGNUU1NTFGODIwMjEyODg0MTczRjJBQkJC MTY2NUQ5MkYwM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzEyNzQyNy8wLzMxMzEzMDJlMzQz MDJlMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAG4oOTANBgkqhkiG9w0BAQsFAAOCAQEALATRcZ966DTYCtCFVhbW0lpN 7PE82ygnu/L60dpa+2+s09sBbxE8iyQlNGa/pYcdr0ma6AyilJenB2HWsYIgb/pX txN0w0bWO5A3cBWXGcMGJUHfmmQaWNXedzOMZL7XFnehgsVk08+liq3IEfk8v/xM h7E1n+01eUsGwBKYKBfO718+N5nTQkHw5L2b0raMpVlsC4FVvkGj7UCfBPQCzcfX 1+p1P/0Bh5qvKqGnjYwJqs50dCMYfw2yOzL6/GRwWIkIeDpqFUMi3CFzil6pVC1S 3sBE9LQahOKK1Lkzwf+7K3dfxsVKD39+KEOuXlJOnRkQsACbvlJHoL1vccdR4w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:17 2026 by rpki-client