This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa File: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (raw, json) Hash identifier: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo= Subject key identifier: 73:4D:59:91:D7:E3:09:70:BE:E5:7E:CD:82:9C:35:5A:07:4E:DB:61 Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 3DD08D16F27E60061F85456FC46F48041DECCFBF Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa Signing time: Tue 20 Jan 2026 02:07:14 +0000 ROA not before: Tue 20 Jan 2026 02:02:14 +0000 ROA not after: Tue 19 Jan 2027 02:07:14 +0000 asID: 38283 IP address blocks: 211.149.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d0:8d:16:f2:7e:60:06:1f:85:45:6f:c4:6f:48:04:1d:ec:cf:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Jan 20 02:02:14 2026 GMT Not After : Jan 19 02:07:14 2027 GMT Subject: CN=734D5991D7E30970BEE57ECD829C355A074EDB61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:3a:0a:a8:76:61:a3:15:c4:11:04:17:4c: e8:59:c2:44:b2:1c:4f:a6:53:3a:16:3f:ec:6b:57: df:0b:77:02:66:94:f8:8a:5c:13:c8:b4:b3:9e:4b: 1a:91:e4:86:aa:91:d1:33:a6:65:a9:42:40:0c:8a: a3:3a:15:b3:5e:6d:b5:cf:08:08:41:c2:8f:c3:8e: de:6f:90:b5:88:5f:ca:09:63:1b:ca:73:e3:b6:d2: 2a:d1:10:8e:68:df:df:0d:17:13:a4:0a:36:1b:7d: 35:90:64:64:91:9f:e9:b6:ab:ba:53:cf:0a:11:79: 37:1f:eb:a4:df:40:c7:db:05:10:78:9d:3d:91:18: 04:30:f3:1b:d9:99:bf:65:b8:23:3b:73:9c:f8:c4: 3e:67:34:95:98:79:87:89:6e:25:b1:36:cd:60:34: 5c:10:99:33:bf:28:ca:84:f1:60:75:47:73:ac:37: ad:31:2e:59:e0:46:5e:37:48:58:04:de:04:33:c8: 61:fa:39:6d:28:73:c7:7e:da:77:77:c5:2a:e0:65: 5c:5a:92:53:5e:2c:21:b8:e5:c6:0c:19:19:97:8b: 07:6b:89:32:2a:e1:13:32:b0:7b:94:18:97:4d:1d: 94:9a:15:7e:dd:c9:26:95:ba:6b:6b:c1:44:45:cd: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4D:59:91:D7:E3:09:70:BE:E5:7E:CD:82:9C:35:5A:07:4E:DB:61 X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.149.128.0/17 Signature Algorithm: sha256WithRSAEncryption 27:13:d2:15:2d:25:fd:9c:3a:99:7e:e1:25:b0:ce:a8:2f:ad: 96:12:15:b7:8a:29:1a:8b:06:87:0e:3a:14:91:b0:e0:b1:d7: 78:a9:25:f8:64:83:12:06:da:0d:3b:c1:36:87:58:4a:ad:71: 22:0c:52:ad:83:16:0f:b1:17:04:b2:ed:a9:74:2f:aa:66:ee: 1e:e6:0f:c2:3d:12:c2:c1:78:ac:83:81:9f:e5:63:a2:c6:f2: d0:dc:52:78:f9:83:db:52:02:0f:51:05:3c:45:97:90:70:d6: 1b:24:ef:0b:ee:05:f6:17:63:51:90:f5:dc:9f:df:e6:92:45: fb:78:f2:0c:85:25:bd:95:b4:7c:a8:9c:40:fb:9a:40:96:da: c9:6f:bb:83:e6:a8:ca:44:19:d5:08:8b:09:56:08:41:d1:a8: 11:6e:c1:4f:a9:ef:2a:6d:d6:de:3b:ca:ec:2b:ff:57:fa:42: 17:12:da:a0:3c:45:6e:ae:41:c2:b7:30:78:78:98:24:6b:81: 70:7e:23:14:c1:22:71:39:d6:f5:93:1f:44:83:2f:6d:37:92: b0:23:35:b2:25:8d:83:44:9f:06:29:a4:7a:d1:67:cc:ac:b0: 94:e1:31:4a:55:c6:9a:c9:32:6c:aa:0d:c1:e5:96:fe:22:3f: 5d:4b:dd:d6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPdCNFvJ+YAYfhUVvxG9IBB3sz78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjAxMjAwMjAyMTRaFw0yNzAxMTkwMjA3MTRaMDMxMTAvBgNV BAMTKDczNEQ1OTkxRDdFMzA5NzBCRUU1N0VDRDgyOUMzNTVBMDc0RURCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgzDoKqHZhoxXEEQQXTOhZwkSy HE+mUzoWP+xrV98LdwJmlPiKXBPItLOeSxqR5IaqkdEzpmWpQkAMiqM6FbNebbXP CAhBwo/Djt5vkLWIX8oJYxvKc+O20irREI5o398NFxOkCjYbfTWQZGSRn+m2q7pT zwoReTcf66TfQMfbBRB4nT2RGAQw8xvZmb9luCM7c5z4xD5nNJWYeYeJbiWxNs1g NFwQmTO/KMqE8WB1R3OsN60xLlngRl43SFgE3gQzyGH6OW0oc8d+2nd3xSrgZVxa klNeLCG45cYMGRmXiwdriTIq4RMysHuUGJdNHZSaFX7dySaVumtrwURFzcH5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUc01ZkdfjCXC+5X7Ngpw1WgdO22EwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC8zMjMxMzEyZTMx MzQzOTJlMzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzMzODMyMzgzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEB9OVgDANBgkqhkiG9w0BAQsFAAOCAQEAJxPSFS0l/Zw6mX7hJbDO qC+tlhIVt4opGosGhw46FJGw4LHXeKkl+GSDEgbaDTvBNodYSq1xIgxSrYMWD7EX BLLtqXQvqmbuHuYPwj0SwsF4rIOBn+Vjosby0NxSePmD21ICD1EFPEWXkHDWGyTv C+4F9hdjUZD13J/f5pJF+3jyDIUlvZW0fKicQPuaQJbayW+7g+aoykQZ1QiLCVYI QdGoEW7BT6nvKm3W3jvK7Cv/V/pCFxLaoDxFbq5BwrcweHiYJGuBcH4jFMEicTnW 9ZMfRIMvbTeSsCM1siWNg0SfBimketFnzKywlOExSlXGmskybKoNweWW/iI/XUvd 1g== -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:10 2026 by rpki-client