This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e203134363138.roa File: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (raw, json) Hash identifier: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE= Subject key identifier: 00:FE:C9:A1:07:B6:FF:01:10:09:B6:A9:A5:C3:0C:6A:E7:79:89:F2 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 25395F11FFBA6252D2F54CF93E95F3A2AD696176 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e203134363138.roa Signing time: Tue 20 Jan 2026 02:07:16 +0000 ROA not before: Tue 20 Jan 2026 02:02:16 +0000 ROA not after: Tue 19 Jan 2027 02:07:16 +0000 asID: 14618 IP address blocks: 165.101.71.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:39:5f:11:ff:ba:62:52:d2:f5:4c:f9:3e:95:f3:a2:ad:69:61:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Jan 20 02:02:16 2026 GMT Not After : Jan 19 02:07:16 2027 GMT Subject: CN=00FEC9A107B6FF011009B6A9A5C30C6AE77989F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:4e:6b:88:c0:af:7c:fa:6e:56:7e:6e:cc: a0:8b:e8:27:8d:0f:39:08:21:34:c4:d5:11:6d:f5: 19:75:2f:a5:02:26:63:4f:67:57:77:6a:63:25:cd: 22:01:53:aa:6d:f9:36:28:0a:c1:65:27:1c:23:fd: 1d:a2:51:cf:95:ea:2d:c7:97:5d:e8:b8:c5:80:35: c9:77:ee:69:fc:5e:7f:ae:9c:7c:4a:37:9c:d1:9e: 1a:ef:93:79:47:1c:af:30:77:52:86:f2:b4:90:0f: 54:b7:f1:96:5d:08:6b:23:be:8d:52:31:62:8f:2a: a8:c4:9c:fb:87:1e:ac:42:51:41:a4:be:02:6a:e4: d5:e1:3f:24:93:e0:0b:b5:d5:35:76:10:8f:8a:6d: cb:65:7b:67:8e:40:44:83:17:af:aa:cb:58:6f:02: 10:0e:42:a6:25:94:e4:e0:04:6a:05:46:de:07:76: 0b:52:03:15:aa:f3:bc:23:7d:c0:d3:e0:59:e7:e2: ec:21:70:e3:6f:00:d8:79:53:23:a6:e1:d0:09:41: 42:07:bd:9e:e8:3d:b3:0e:a2:ca:f8:d3:b2:f6:83: a2:4c:a1:e3:26:0f:54:d9:b9:fb:b2:d4:ee:55:8b: f0:39:05:4d:2c:70:33:18:e3:6d:45:1b:50:16:d3: 9f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FE:C9:A1:07:B6:FF:01:10:09:B6:A9:A5:C3:0C:6A:E7:79:89:F2 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.71.0/24 Signature Algorithm: sha256WithRSAEncryption 47:8f:85:29:46:2b:e7:8f:6d:fd:28:8d:3a:79:86:e3:ea:f6: 50:4a:08:57:04:b3:bd:17:02:9a:c3:b1:9a:5c:5e:72:3a:ad: 0c:cd:0a:c3:6c:8f:c2:44:0d:d9:76:d9:c0:9c:c3:f4:a9:2a: d3:d0:e0:65:5f:39:2f:d2:6e:08:01:68:bf:82:60:3d:38:19: d4:b1:2e:a5:60:31:cd:c9:b2:b4:4a:fe:e8:2c:e6:d6:d8:33: 73:3a:b0:10:dc:16:e1:11:11:37:18:f2:4a:59:d5:8d:60:9a: bc:cd:ad:ed:87:89:1b:a8:33:8f:9d:c7:b7:b8:28:ce:69:8a: 8e:7e:b4:ef:d9:b1:74:82:eb:d2:b1:5b:d5:72:24:c2:2d:28: 98:eb:3e:0e:3c:da:d8:d2:71:e0:1c:8a:c4:42:74:a3:8f:7c: 7b:b0:3f:ed:05:e2:10:72:d2:0a:a8:b9:08:e2:43:f0:33:a6: e0:a6:22:2d:01:16:6e:c9:ef:a7:9b:be:81:3d:e3:dc:d0:23: ea:d6:b2:79:8b:d8:77:ad:14:55:a4:ba:f6:a5:9b:cc:54:ce: 46:a7:33:a2:ed:8d:bb:be:e3:08:6c:6b:a3:ad:18:30:f1:fd: 80:d8:74:5d:d0:bb:d5:87:2b:bd:2a:1f:6e:12:4a:7b:11:c6: 9b:54:7a:de -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJTlfEf+6YlLS9Uz5PpXzoq1pYXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjAxMjAwMjAyMTZaFw0yNzAxMTkwMjA3MTZaMDMxMTAvBgNV BAMTKDAwRkVDOUExMDdCNkZGMDExMDA5QjZBOUE1QzMwQzZBRTc3OTg5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dE5riMCvfPpuVn5uzKCL6CeN DzkIITTE1RFt9Rl1L6UCJmNPZ1d3amMlzSIBU6pt+TYoCsFlJxwj/R2iUc+V6i3H l13ouMWANcl37mn8Xn+unHxKN5zRnhrvk3lHHK8wd1KG8rSQD1S38ZZdCGsjvo1S MWKPKqjEnPuHHqxCUUGkvgJq5NXhPyST4Au11TV2EI+Kbctle2eOQESDF6+qy1hv AhAOQqYllOTgBGoFRt4HdgtSAxWq87wjfcDT4Fnn4uwhcONvANh5UyOm4dAJQUIH vZ7oPbMOosr407L2g6JMoeMmD1TZufuy1O5Vi/A5BU0scDMY421FG1AW059BAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUAP7JoQe2/wEQCbappcMMaud5ifIwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzY1MTcxNS8xLzMxMzYzNTJlMzEz MDMxMmUzNzMxMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzNDM2MzEzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAKVlRzANBgkqhkiG9w0BAQsFAAOCAQEAR4+FKUYr549t/SiNOnmG4+r2 UEoIVwSzvRcCmsOxmlxecjqtDM0Kw2yPwkQN2XbZwJzD9Kkq09DgZV85L9JuCAFo v4JgPTgZ1LEupWAxzcmytEr+6Czm1tgzczqwENwW4RERNxjySlnVjWCavM2t7YeJ G6gzj53Ht7gozmmKjn6079mxdILr0rFb1XIkwi0omOs+Djza2NJx4ByKxEJ0o498 e7A/7QXiEHLSCqi5COJD8DOm4KYiLQEWbsnvp5u+gT3j3NAj6tayeYvYd60UVaS6 9qWbzFTORqczou2Nu77jCGxro60YMPH9gNh0XdC71YcrvSofbhJKexHGm1R63g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:27 2026 by rpki-client