This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35392e302f32342d3234203d3e20313531323730.roa File: 3131302e34302e35392e302f32342d3234203d3e20313531323730.roa (raw, json) Hash identifier: A8v4yHSCDZM7KMJ5vjdxIHI73ykbpwQPv3248ev+Ggs= Subject key identifier: 4A:4C:5C:14:5C:87:EB:91:1D:84:0C:53:DE:62:9C:16:11:A0:2F:AD Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C Certificate serial: 1AA43745F2C109D72EE585E6A01CBD2414F335BF Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35392e302f32342d3234203d3e20313531323730.roa Signing time: Tue 20 Jan 2026 02:11:59 +0000 ROA not before: Tue 20 Jan 2026 02:06:59 +0000 ROA not after: Tue 19 Jan 2027 02:11:59 +0000 asID: 151270 IP address blocks: 110.40.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a4:37:45:f2:c1:09:d7:2e:e5:85:e6:a0:1c:bd:24:14:f3:35:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C Validity Not Before: Jan 20 02:06:59 2026 GMT Not After : Jan 19 02:11:59 2027 GMT Subject: CN=4A4C5C145C87EB911D840C53DE629C1611A02FAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:a8:9b:d9:ae:88:61:1d:5c:17:f7:25:3a: 79:57:63:4e:6a:de:39:ed:55:3e:81:8d:01:51:ef: 6f:2b:48:fd:62:c2:0f:e7:0c:db:db:9a:ae:f1:48: c7:b9:ed:e5:02:f8:b4:a7:0c:01:ce:b2:19:ce:5a: f7:c4:e7:2f:ed:53:67:1a:04:99:b0:5a:12:68:e4: 78:b0:39:78:f8:a2:de:86:f8:bd:45:d1:77:d3:3e: 1e:e2:8d:ea:26:24:71:12:55:f4:1b:cc:b4:0c:58: 0d:c1:4a:b8:bc:dd:88:85:9c:b3:4e:11:29:66:55: 48:f8:c8:d4:86:21:cb:3e:32:4e:e4:28:87:65:d8: 0b:b7:0f:8c:e1:2e:80:09:2a:9a:2c:2a:7a:ec:62: 6c:0f:c7:67:72:f0:4a:4b:a8:85:06:a6:4c:5a:f5: 15:8e:51:cb:14:e6:d2:2a:c1:ed:01:16:57:d8:78: 0d:e3:a2:bc:35:42:32:f0:a7:f8:bf:38:78:31:c3: c3:4a:8a:24:a2:f6:6a:36:34:7b:e6:3a:db:0b:1c: 2c:87:bd:46:54:e6:07:a8:b3:3f:fd:58:9f:29:52: e1:83:eb:28:1e:b6:8c:6c:4e:5f:66:1c:1f:3a:5a: 4a:2e:a3:97:1b:1b:c1:05:d2:6a:be:66:53:15:aa: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4C:5C:14:5C:87:EB:91:1D:84:0C:53:DE:62:9C:16:11:A0:2F:AD X509v3 Authority Key Identifier: keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35392e302f32342d3234203d3e20313531323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.40.59.0/24 Signature Algorithm: sha256WithRSAEncryption 18:88:d3:6f:f5:e0:88:74:61:9c:f3:a0:14:0c:f6:3c:f7:98: f2:4e:bf:ce:a6:03:0c:53:8d:b2:e4:9a:24:19:26:b6:d3:1e: 8c:d8:d5:5f:78:05:87:71:88:5f:51:fa:ac:56:88:da:7c:70: 28:71:94:2e:c3:90:ad:1e:79:f6:13:d0:19:78:10:8d:84:be: ca:2c:39:3f:5b:f4:8d:36:a9:85:e9:bb:f1:4d:1a:13:b6:b8: b5:84:93:c8:b0:a5:ec:bc:10:9b:b5:8d:d4:99:fe:9e:b9:45: b9:84:ae:f9:eb:f9:54:0f:d9:80:43:bf:e7:7a:79:3f:f9:d6: 0d:25:aa:1b:14:af:ff:3d:f8:5b:12:48:48:0a:07:16:7b:20: d3:5c:f4:fc:aa:01:83:b7:14:4e:d0:9f:fb:59:a6:80:15:3f: e8:e3:c9:85:5b:1b:54:ac:8c:4d:1f:3e:12:45:b4:e7:5c:08: 7b:63:fa:74:e4:b0:5e:bc:14:71:5b:fd:a1:0f:33:a7:61:03: 30:04:06:bb:1c:2c:ab:73:c9:98:a9:89:9d:01:54:60:d4:1d: 8c:0c:a0:ff:c4:9e:78:24:43:ad:96:09:1d:01:b0:00:9e:46: 8c:11:ee:d1:34:24:20:15:46:f0:0c:2e:ac:80:de:24:0a:c4: be:52:ec:eb -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUGqQ3RfLBCdcu5YXmoBy9JBTzNb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1 RDkyRjAzQzAeFw0yNjAxMjAwMjA2NTlaFw0yNzAxMTkwMjExNTlaMDMxMTAvBgNV BAMTKDRBNEM1QzE0NUM4N0VCOTExRDg0MEM1M0RFNjI5QzE2MTFBMDJGQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTaib2a6IYR1cF/clOnlXY05q 3jntVT6BjQFR728rSP1iwg/nDNvbmq7xSMe57eUC+LSnDAHOshnOWvfE5y/tU2ca BJmwWhJo5HiwOXj4ot6G+L1F0XfTPh7ijeomJHESVfQbzLQMWA3BSri83YiFnLNO ESlmVUj4yNSGIcs+Mk7kKIdl2Au3D4zhLoAJKposKnrsYmwPx2dy8EpLqIUGpkxa 9RWOUcsU5tIqwe0BFlfYeA3jorw1QjLwp/i/OHgxw8NKiiSi9mo2NHvmOtsLHCyH vUZU5geosz/9WJ8pUuGD6ygetoxsTl9mHB86Wkouo5cbG8EF0mq+ZlMVqgDZAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUSkxcFFyH65EdhAxT3mKcFhGgL60wHwYDVR0j BBgwFoAU3kr15VH4ICEohBc/KruxZl2S8DwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzEyNzQyNy8wL0RFNEFGNUU1NTFGODIwMjEyODg0MTczRjJBQkJC MTY2NUQ5MkYwM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzEyNzQyNy8wLzMxMzEzMDJlMzQz MDJlMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAG4oOzANBgkqhkiG9w0BAQsFAAOCAQEAGIjTb/XgiHRhnPOgFAz2PPeY 8k6/zqYDDFONsuSaJBkmttMejNjVX3gFh3GIX1H6rFaI2nxwKHGULsOQrR559hPQ GXgQjYS+yiw5P1v0jTaphem78U0aE7a4tYSTyLCl7LwQm7WN1Jn+nrlFuYSu+ev5 VA/ZgEO/53p5P/nWDSWqGxSv/z34WxJISAoHFnsg01z0/KoBg7cUTtCf+1mmgBU/ 6OPJhVsbVKyMTR8+EkW051wIe2P6dOSwXrwUcVv9oQ8zp2EDMAQGuxwsq3PJmKmJ nQFUYNQdjAyg/8SeeCRDrZYJHQGwAJ5GjBHu0TQkIBVG8AwurIDeJArEvlLs6w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:05 2026 by rpki-client