This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/36302e3234372e3132382e302f31372d3234203d3e203338323833.roa File: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (raw, json) Hash identifier: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw= Subject key identifier: 64:C5:E2:2E:22:E3:4B:84:35:D2:C7:94:7A:2A:AE:74:31:85:70:F2 Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 59C923EE18DFCA509E772878185A29CA8AFD74C7 Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/36302e3234372e3132382e302f31372d3234203d3e203338323833.roa Signing time: Tue 20 Jan 2026 02:07:14 +0000 ROA not before: Tue 20 Jan 2026 02:02:14 +0000 ROA not after: Tue 19 Jan 2027 02:07:14 +0000 asID: 38283 IP address blocks: 60.247.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c9:23:ee:18:df:ca:50:9e:77:28:78:18:5a:29:ca:8a:fd:74:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Jan 20 02:02:14 2026 GMT Not After : Jan 19 02:07:14 2027 GMT Subject: CN=64C5E22E22E34B8435D2C7947A2AAE74318570F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:35:9f:7b:bc:43:4c:dc:07:64:44:65:a7: 32:cf:2e:25:df:4a:e6:50:36:58:f2:c4:28:a9:67: 1f:42:5f:96:72:fb:2c:58:5f:8c:56:79:69:2b:c2: 44:77:6c:89:27:fd:92:e2:e5:dc:2c:99:c6:19:21: 86:d5:b3:c5:ed:5d:6a:93:4d:af:66:4e:d4:5f:29: 6d:a7:43:37:b0:f6:5c:f9:dc:8d:f3:f9:d5:53:d8: 5e:c4:f2:6f:7e:50:b3:11:ce:88:1c:3f:ce:d6:1e: fc:cd:ee:6d:26:7d:2c:53:d1:66:5b:84:6a:c3:4d: 7d:01:ed:e2:39:79:3b:ec:a3:f7:03:27:63:1d:2d: f5:8f:af:59:f3:50:40:ee:c6:9b:83:8d:88:69:97: 7e:11:02:fc:65:db:dc:b1:f6:e4:62:5d:df:d8:51: 84:53:94:67:3d:13:b3:92:11:ff:3b:c9:46:2a:83: 64:08:c9:f5:8e:91:96:3e:a4:0b:35:a5:2b:65:54: 76:7b:4d:52:26:0d:41:03:45:29:f5:1c:41:13:17: 6f:d9:25:af:c6:d3:42:c6:4d:a5:29:48:f7:f1:da: 93:a8:44:11:20:29:08:fc:29:d8:f1:29:a5:68:8d: 4b:1e:95:70:dc:ce:d6:75:15:09:26:ef:e4:c2:06: 51:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C5:E2:2E:22:E3:4B:84:35:D2:C7:94:7A:2A:AE:74:31:85:70:F2 X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/36302e3234372e3132382e302f31372d3234203d3e203338323833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.247.128.0/17 Signature Algorithm: sha256WithRSAEncryption 78:01:b3:60:4b:4f:ac:36:b8:5d:44:71:f3:73:df:cb:05:87: 89:b6:8e:fd:c4:1b:0f:33:fc:28:3d:88:c5:5d:6a:8e:28:49: 8f:44:7a:2d:b0:58:fe:26:a2:22:2b:f4:f1:89:33:88:3b:75: df:95:1e:87:83:3a:ae:13:1a:f1:24:a2:9a:67:ec:e4:95:21: c5:39:db:85:c1:bb:f0:3b:d1:07:3e:71:1d:5f:13:2d:da:ab: 69:3d:7f:d6:75:cd:d4:0b:78:0f:0a:81:d3:09:aa:d4:60:1d: 38:a9:40:cf:82:8f:ff:91:7f:58:6f:f1:bd:bb:79:0e:f8:b5: 13:81:88:88:1a:de:1a:8d:24:08:ec:c4:80:6e:9a:0c:55:ce: 92:e6:2a:e4:57:4d:4c:28:17:31:87:28:24:7d:be:83:54:10: e2:4d:83:fd:07:b7:04:64:50:58:e3:eb:e1:2e:27:a7:4f:c0: 3d:14:77:82:1c:b9:90:2f:fc:01:98:e7:f8:68:aa:46:8e:1b: 50:e3:ea:44:b3:be:02:2b:5c:32:2a:06:4b:7a:a3:b8:ed:36: 28:f0:33:1a:1b:19:cd:c1:c4:3f:1d:c5:53:64:18:b2:32:06: 9a:ed:21:ba:4c:57:bb:fe:6f:72:df:46:5c:7c:8e:98:a0:fa: 50:98:55:2d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWckj7hjfylCedyh4GFopyor9dMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjAxMjAwMjAyMTRaFw0yNzAxMTkwMjA3MTRaMDMxMTAvBgNV BAMTKDY0QzVFMjJFMjJFMzRCODQzNUQyQzc5NDdBMkFBRTc0MzE4NTcwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcUzWfe7xDTNwHZERlpzLPLiXf SuZQNljyxCipZx9CX5Zy+yxYX4xWeWkrwkR3bIkn/ZLi5dwsmcYZIYbVs8XtXWqT Ta9mTtRfKW2nQzew9lz53I3z+dVT2F7E8m9+ULMRzogcP87WHvzN7m0mfSxT0WZb hGrDTX0B7eI5eTvso/cDJ2MdLfWPr1nzUEDuxpuDjYhpl34RAvxl29yx9uRiXd/Y UYRTlGc9E7OSEf87yUYqg2QIyfWOkZY+pAs1pStlVHZ7TVImDUEDRSn1HEETF2/Z Ja/G00LGTaUpSPfx2pOoRBEgKQj8KdjxKaVojUselXDcztZ1FQkm7+TCBlEnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZMXiLiLjS4Q10seUeiqudDGFcPIwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODMzNTUyNDkwNDk2MS8wLzM2MzAyZTMyMzQz NzJlMzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzMzODMyMzgzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBzz3gDANBgkqhkiG9w0BAQsFAAOCAQEAeAGzYEtPrDa4XURx83PfywWH ibaO/cQbDzP8KD2IxV1qjihJj0R6LbBY/iaiIiv08YkziDt135Ueh4M6rhMa8SSi mmfs5JUhxTnbhcG78DvRBz5xHV8TLdqraT1/1nXN1At4DwqB0wmq1GAdOKlAz4KP /5F/WG/xvbt5Dvi1E4GIiBreGo0kCOzEgG6aDFXOkuYq5FdNTCgXMYcoJH2+g1QQ 4k2D/Qe3BGRQWOPr4S4np0/APRR3ghy5kC/8AZjn+GiqRo4bUOPqRLO+AitcMioG S3qjuO02KPAzGhsZzcHEPx3FU2QYsjIGmu0hukxXu/5vct9GXHyOmKD6UJhVLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:38:04 2026 by rpki-client