This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138322e35302e372e302f32342d3234203d3e20313334373030.roa File: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (raw, json) Hash identifier: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E= Subject key identifier: B6:85:F0:B3:28:FB:E0:B7:63:96:1B:7A:CD:C4:ED:90:44:C8:14:A0 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 4BA453964B71E2417BA932A3755397150C90F19F Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138322e35302e372e302f32342d3234203d3e20313334373030.roa Signing time: Tue 20 Jan 2026 02:27:20 +0000 ROA not before: Tue 20 Jan 2026 02:22:20 +0000 ROA not after: Tue 19 Jan 2027 02:27:20 +0000 asID: 134700 IP address blocks: 182.50.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a4:53:96:4b:71:e2:41:7b:a9:32:a3:75:53:97:15:0c:90:f1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Jan 20 02:22:20 2026 GMT Not After : Jan 19 02:27:20 2027 GMT Subject: CN=B685F0B328FBE0B763961B7ACDC4ED9044C814A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:b2:bd:7d:66:2d:1a:24:8e:14:16:a5:c8: 32:9b:01:7b:29:8d:43:c9:d2:46:f1:ce:ff:5e:52: c6:46:6b:4a:a0:6e:39:17:94:fe:47:9f:db:fa:1b: 07:93:3f:bd:27:3b:13:80:f1:e8:53:18:44:64:59: b5:45:08:01:c2:79:81:b3:b8:5b:16:40:ac:e0:5d: 63:0e:34:f6:50:ce:66:74:3f:e1:35:45:cc:cc:d3: 28:01:8f:30:b3:7d:8b:da:60:32:8c:e5:79:76:f8: 9f:71:b9:eb:7d:77:fa:21:01:25:8b:97:3e:14:75: c2:02:b3:f2:23:55:bc:cb:7b:03:6c:e3:6e:a6:94: ca:22:7c:88:0e:ca:8b:37:f8:65:1f:2a:64:36:92: 4f:6b:5d:fb:29:7c:3a:68:77:f9:a9:97:6c:8e:cb: 2d:07:de:93:84:d4:1b:45:82:b3:37:74:ca:0d:b3: 90:13:69:c3:1e:0d:53:5f:be:22:ee:bf:ba:92:54: 97:18:33:02:99:64:0e:fa:bb:5d:57:01:58:2c:4a: 6f:3c:61:b6:d9:c0:8f:6a:9b:6d:6c:db:da:33:b1: de:20:5a:f1:64:31:ad:33:0c:48:0e:14:3e:20:8f: a3:ca:2d:1f:87:34:c4:17:37:ea:64:a5:f4:01:93: 73:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:85:F0:B3:28:FB:E0:B7:63:96:1B:7A:CD:C4:ED:90:44:C8:14:A0 X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138322e35302e372e302f32342d3234203d3e20313334373030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.50.7.0/24 Signature Algorithm: sha256WithRSAEncryption c4:59:a7:01:c6:9a:b4:50:dc:a0:cf:52:92:08:58:bb:6e:4c: 36:b9:ce:d6:36:41:7c:8a:ae:a5:27:67:95:ac:29:b2:9a:19: ed:14:e7:28:3c:cc:49:06:50:a8:55:45:81:2a:ac:11:90:a4: 86:06:a7:2b:b2:19:ca:00:f6:ae:5b:a6:c6:67:00:ee:77:97: a8:6a:ef:ae:dd:b7:59:0c:6a:05:fc:9e:24:ad:57:b8:e7:df: 91:7f:9e:90:bd:8f:fb:3c:07:52:1e:8d:3d:20:eb:00:ba:90: 76:ff:24:a0:3d:89:97:5f:e9:5f:2b:03:56:7f:db:d2:0a:5a: 92:6c:06:64:5d:46:51:64:33:ea:45:42:2c:0d:bd:6d:56:3b: 8c:c0:6c:94:3d:d8:4c:9a:31:e9:6c:87:97:80:ad:c4:a9:64: 84:05:20:d0:25:aa:d8:ff:6f:f7:bf:9b:db:e2:bc:8e:4e:be: c1:13:ab:0e:a8:50:bf:02:b4:93:9a:96:cd:84:dc:a5:f1:bf: 8a:55:f0:e8:e4:b5:db:82:40:5d:85:8a:8a:4a:8b:03:9c:53: 5e:f5:b9:5b:70:cc:f5:6a:01:19:fb:3e:fe:66:9e:ca:b0:39: 6f:47:9b:0f:6c:58:17:74:59:a9:75:ec:b6:96:1e:54:c2:1e: 90:49:c7:27 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUS6RTlktx4kF7qTKjdVOXFQyQ8Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjAxMjAwMjIyMjBaFw0yNzAxMTkwMjI3MjBaMDMxMTAvBgNV BAMTKEI2ODVGMEIzMjhGQkUwQjc2Mzk2MUI3QUNEQzRFRDkwNDRDODE0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDm7K9fWYtGiSOFBalyDKbAXsp jUPJ0kbxzv9eUsZGa0qgbjkXlP5Hn9v6GweTP70nOxOA8ehTGERkWbVFCAHCeYGz uFsWQKzgXWMONPZQzmZ0P+E1RczM0ygBjzCzfYvaYDKM5Xl2+J9xuet9d/ohASWL lz4UdcICs/IjVbzLewNs426mlMoifIgOyos3+GUfKmQ2kk9rXfspfDpod/mpl2yO yy0H3pOE1BtFgrM3dMoNs5ATacMeDVNfviLuv7qSVJcYMwKZZA76u11XAVgsSm88 YbbZwI9qm21s29ozsd4gWvFkMa0zDEgOFD4gj6PKLR+HNMQXN+pkpfQBk3NrAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUtoXwsyj74Ldjlht6zcTtkETIFKAwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTkwNzg3LzAvMzEzODMyMmUzNTMw MmUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzAzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALYyBzANBgkqhkiG9w0BAQsFAAOCAQEAxFmnAcaatFDcoM9SkghYu25MNrnO 1jZBfIqupSdnlawpspoZ7RTnKDzMSQZQqFVFgSqsEZCkhganK7IZygD2rlumxmcA 7neXqGrvrt23WQxqBfyeJK1XuOffkX+ekL2P+zwHUh6NPSDrALqQdv8koD2Jl1/p XysDVn/b0gpakmwGZF1GUWQz6kVCLA29bVY7jMBslD3YTJox6WyHl4CtxKlkhAUg 0CWq2P9v97+b2+K8jk6+wROrDqhQvwK0k5qWzYTcpfG/ilXw6OS124JAXYWKikqL A5xTXvW5W3DM9WoBGfs+/maeyrA5b0ebD2xYF3RZqXXstpYeVMIekEnHJw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:46 2026 by rpki-client