This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa File: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (raw, json) Hash identifier: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg= Subject key identifier: 8C:1D:46:BC:B5:7C:3F:DB:A6:B2:0D:4E:5F:D9:20:47:D2:95:E5:CD Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 519AE33E4BED1DB085E11238F41324B0753C9457 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa Signing time: Tue 20 Jan 2026 02:07:17 +0000 ROA not before: Tue 20 Jan 2026 02:02:17 +0000 ROA not after: Tue 19 Jan 2027 02:07:17 +0000 asID: 137264 IP address blocks: 165.101.71.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9a:e3:3e:4b:ed:1d:b0:85:e1:12:38:f4:13:24:b0:75:3c:94:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Jan 20 02:02:17 2026 GMT Not After : Jan 19 02:07:17 2027 GMT Subject: CN=8C1D46BCB57C3FDBA6B20D4E5FD92047D295E5CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:53:78:13:54:c2:e1:94:ad:d1:ee:eb:d3: e4:6b:63:b2:1b:d9:9e:77:8a:9a:18:a7:23:e8:24: e0:fc:59:c6:58:02:d0:20:e6:6c:84:41:d2:4a:f8: 8a:19:f5:19:96:6f:4d:cf:c1:ea:d8:0f:7e:0b:5d: 86:bd:85:0f:04:5e:37:36:1a:61:e3:06:02:0f:bc: 1e:57:27:7c:5e:78:16:ce:72:ff:93:20:f8:90:f2: 89:22:ee:af:9a:98:26:ee:78:fe:1a:de:bb:b9:53: bf:c8:d5:5b:5f:6a:f3:79:9e:cb:ed:87:39:87:ab: 71:ec:b6:50:7d:a1:bd:ec:5d:32:19:be:37:d8:f8: 21:1d:2a:71:b7:7e:bf:df:50:62:de:68:d5:a3:5e: 04:fc:3a:ec:7a:c1:3f:c5:bc:59:1f:33:44:e3:0a: 3b:f2:6c:48:76:44:35:b6:e0:78:a8:35:63:b9:b1: cb:d5:27:4b:c1:5f:eb:bc:4b:af:c0:7a:05:fd:6c: 0d:a5:7d:47:8c:a7:2b:87:38:69:df:f9:5e:ae:38: b2:56:3a:e3:db:10:c2:b5:99:6e:64:c2:9c:66:9d: 89:65:46:8a:30:dd:f1:8e:20:0b:9d:fc:04:09:4e: b8:40:94:b0:de:f7:b2:88:26:b1:cf:a4:23:b0:fd: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1D:46:BC:B5:7C:3F:DB:A6:B2:0D:4E:5F:D9:20:47:D2:95:E5:CD X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.71.0/24 Signature Algorithm: sha256WithRSAEncryption 56:e4:c9:b7:9d:0b:15:47:ee:27:8b:f7:7f:2a:82:fc:86:5b: 8c:43:ee:72:a5:ed:47:f6:8d:3e:b9:34:d4:e8:c2:2d:29:0e: 40:84:94:d5:23:d3:6f:e4:8f:a8:c3:14:6c:2f:e9:35:ef:fc: ac:a6:8a:3d:64:59:09:97:c2:c2:97:92:18:a3:cc:ef:e8:d3: fc:87:9d:88:5d:f8:79:cb:08:33:0f:8d:0a:4e:4c:50:90:3d: 1f:e3:16:c1:5b:2e:b9:62:cf:3a:ef:cf:3a:f8:25:14:f7:82: 6b:a5:a6:eb:da:cc:4a:33:01:66:7e:5a:c4:3e:d4:a9:6f:0f: dc:c7:0e:0f:ea:8f:30:44:74:b4:df:24:73:68:bf:a0:ce:19: 65:fc:c2:2d:62:e3:28:33:ae:ec:b8:17:31:f3:5f:8a:43:ef: c7:b9:66:ca:21:f9:f1:5d:88:7a:61:c0:fe:00:32:4e:1f:1c: 5a:3c:0a:29:62:ca:97:5c:98:45:04:21:35:70:8e:bd:3c:36: bb:ea:1f:cf:2c:e5:41:84:2b:83:7c:13:26:6c:67:9a:d0:9a: 78:de:2f:b0:cb:8b:40:bc:2b:94:cf:3c:e7:de:f6:36:f6:fb: 9b:69:ba:6d:42:14:23:19:f0:d5:20:50:81:6a:f8:14:8c:51: e8:ed:6c:ce -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUUZrjPkvtHbCF4RI49BMksHU8lFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjAxMjAwMjAyMTdaFw0yNzAxMTkwMjA3MTdaMDMxMTAvBgNV BAMTKDhDMUQ0NkJDQjU3QzNGREJBNkIyMEQ0RTVGRDkyMDQ3RDI5NUU1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkK1N4E1TC4ZSt0e7r0+RrY7Ib 2Z53ipoYpyPoJOD8WcZYAtAg5myEQdJK+IoZ9RmWb03PwerYD34LXYa9hQ8EXjc2 GmHjBgIPvB5XJ3xeeBbOcv+TIPiQ8oki7q+amCbueP4a3ru5U7/I1VtfavN5nsvt hzmHq3HstlB9ob3sXTIZvjfY+CEdKnG3fr/fUGLeaNWjXgT8Oux6wT/FvFkfM0Tj CjvybEh2RDW24HioNWO5scvVJ0vBX+u8S6/AegX9bA2lfUeMpyuHOGnf+V6uOLJW OuPbEMK1mW5kwpxmnYllRoow3fGOIAud/AQJTrhAlLDe97KIJrHPpCOw/TJhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUjB1GvLV8P9umsg1OX9kgR9KV5c0wHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS8zMTM2MzUyZTMx MzAzMTJlMzczMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNzMyMzYzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVlRzANBgkqhkiG9w0BAQsFAAOCAQEAVuTJt50LFUfuJ4v3fyqC /IZbjEPucqXtR/aNPrk01OjCLSkOQISU1SPTb+SPqMMUbC/pNe/8rKaKPWRZCZfC wpeSGKPM7+jT/IediF34ecsIMw+NCk5MUJA9H+MWwVsuuWLPOu/POvglFPeCa6Wm 69rMSjMBZn5axD7UqW8P3McOD+qPMER0tN8kc2i/oM4ZZfzCLWLjKDOu7LgXMfNf ikPvx7lmyiH58V2IemHA/gAyTh8cWjwKKWLKl1yYRQQhNXCOvTw2u+ofzyzlQYQr g3wTJmxnmtCaeN4vsMuLQLwrlM885972Nvb7m2m6bUIUIxnw1SBQgWr4FIxR6O1s zg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:30 2026 by rpki-client