This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/3133382e3235322e37322e302f32332d3233203d3e20313337373331.roa File: 3133382e3235322e37322e302f32332d3233203d3e20313337373331.roa (raw, json) Hash identifier: Bj7faP7dbLHP8DKHtGy7odbPHjPoUjxSJmi90LoGi/o= Subject key identifier: 70:55:68:5D:6D:4B:5B:54:30:CD:4A:D4:C0:42:04:25:33:39:63:A9 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 78CDF34CAA0E9059417C904F8EFE2684ED341294 Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/3133382e3235322e37322e302f32332d3233203d3e20313337373331.roa Signing time: Tue 20 Jan 2026 02:10:54 +0000 ROA not before: Tue 20 Jan 2026 02:05:54 +0000 ROA not after: Tue 19 Jan 2027 02:10:54 +0000 asID: 137731 IP address blocks: 138.252.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:cd:f3:4c:aa:0e:90:59:41:7c:90:4f:8e:fe:26:84:ed:34:12:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: Jan 20 02:05:54 2026 GMT Not After : Jan 19 02:10:54 2027 GMT Subject: CN=7055685D6D4B5B5430CD4AD4C0420425333963A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:38:71:28:55:e9:a2:52:89:de:65:a9:70: 6c:98:cb:19:f0:37:a6:12:75:6a:0d:f1:f2:f2:c7: 5e:62:9c:83:5b:f0:4f:e9:ba:f9:b1:4b:1a:79:61: 0e:82:17:e9:54:41:c7:34:69:7d:2b:16:c0:4c:2f: 6e:70:da:18:87:fe:33:a9:9c:df:75:69:62:81:06: f9:ad:81:5f:f8:81:7e:33:32:02:25:62:30:26:c1: ae:b9:8e:af:29:a1:f0:99:4b:aa:6f:8e:1d:fb:d2: 64:65:f4:d0:31:53:e5:11:73:21:73:d6:35:1f:5a: 44:67:ce:5a:4d:61:c3:69:b6:09:1c:f8:31:1b:4c: d6:14:6e:a7:8b:70:54:13:61:7a:90:58:0f:47:90: 0e:09:54:cd:49:ee:d5:f8:db:50:98:11:3c:bf:b3: 1d:06:c8:32:29:e6:66:5a:b2:86:2c:a2:0b:d9:f0: 26:32:81:f7:f1:c8:50:12:02:43:e3:fe:97:93:30: 09:7c:8c:b9:bb:bb:94:3d:fd:a2:28:4b:0e:88:25: d9:01:62:ec:6b:6f:69:55:2b:96:5d:ab:32:03:ba: 7e:a5:6e:c0:e4:82:b1:60:7c:dd:c2:a0:bf:4b:54: b2:f5:d7:25:11:d2:46:87:c5:ef:00:71:79:79:a1: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:55:68:5D:6D:4B:5B:54:30:CD:4A:D4:C0:42:04:25:33:39:63:A9 X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/3133382e3235322e37322e302f32332d3233203d3e20313337373331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.72.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:9a:78:ae:7d:11:09:dc:cc:85:ff:d0:1d:6d:2f:6f:ea:af: 5c:d2:57:4e:d1:f0:5c:3d:84:4f:d9:38:06:76:60:cb:92:12: d2:8d:7d:f1:ad:6c:27:09:df:9d:fb:7c:f9:cb:02:7d:4c:25: 16:30:65:6d:62:d6:67:e4:2e:46:9f:57:70:0c:49:d3:43:81: cf:0b:63:46:28:8c:1d:d0:55:28:d2:a9:c1:67:f7:62:99:e3: e8:ac:e2:87:eb:8b:27:11:06:29:18:ba:b8:18:c6:e3:09:35: 2f:18:d2:56:68:54:62:cb:a1:1d:95:69:7c:fd:28:85:c9:b9: 30:94:dc:88:a6:e8:3d:fe:17:bb:03:0c:e3:8f:75:61:45:88: 18:b3:9f:5a:75:81:f0:6a:b1:9d:ae:14:dc:11:bd:70:5a:e4: 94:52:fb:1b:21:c5:3e:c9:9b:43:93:a9:13:8a:41:dc:88:59: 28:dc:93:b8:1c:aa:52:61:88:5d:21:5e:6b:1e:ea:51:3e:00: 73:68:17:a9:73:dd:3d:61:01:7d:f7:c0:4f:e8:ca:73:74:0c: 52:fd:eb:59:b0:4a:3f:e9:16:68:d0:f2:c4:b5:ac:a5:b5:d3: 2a:ba:41:64:e7:35:fb:b5:4f:94:38:4e:16:44:09:13:fa:e9: 21:65:4c:d8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUeM3zTKoOkFlBfJBPjv4mhO00EpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjAxMjAwMjA1NTRaFw0yNzAxMTkwMjEwNTRaMDMxMTAvBgNV BAMTKDcwNTU2ODVENkQ0QjVCNTQzMENENEFENEMwNDIwNDI1MzMzOTYzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSThxKFXpolKJ3mWpcGyYyxnw N6YSdWoN8fLyx15inINb8E/puvmxSxp5YQ6CF+lUQcc0aX0rFsBML25w2hiH/jOp nN91aWKBBvmtgV/4gX4zMgIlYjAmwa65jq8pofCZS6pvjh370mRl9NAxU+URcyFz 1jUfWkRnzlpNYcNptgkc+DEbTNYUbqeLcFQTYXqQWA9HkA4JVM1J7tX421CYETy/ sx0GyDIp5mZasoYsogvZ8CYygffxyFASAkPj/peTMAl8jLm7u5Q9/aIoSw6IJdkB Yuxrb2lVK5ZdqzIDun6lbsDkgrFgfN3CoL9LVLL11yUR0kaHxe8AcXl5obgTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUcFVoXW1LW1QwzUrUwEIEJTM5Y6kwHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS8zMTMzMzgyZTMy MzUzMjJlMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNzM3MzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8SDANBgkqhkiG9w0BAQsFAAOCAQEAfJp4rn0RCdzMhf/QHW0v b+qvXNJXTtHwXD2ET9k4BnZgy5IS0o198a1sJwnfnft8+csCfUwlFjBlbWLWZ+Qu Rp9XcAxJ00OBzwtjRiiMHdBVKNKpwWf3Ypnj6Kzih+uLJxEGKRi6uBjG4wk1LxjS VmhUYsuhHZVpfP0ohcm5MJTciKboPf4XuwMM4491YUWIGLOfWnWB8Gqxna4U3BG9 cFrklFL7GyHFPsmbQ5OpE4pB3IhZKNyTuByqUmGIXSFeax7qUT4Ac2gXqXPdPWEB fffAT+jKc3QMUv3rWbBKP+kWaNDyxLWspbXTKrpBZOc1+7VPlDhOFkQJE/rpIWVM 2A== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:56 2026 by rpki-client