This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230342e302f32342d3234203d3e203633363738.roa File: 32372e302e3230342e302f32342d3234203d3e203633363738.roa (raw, json) Hash identifier: Hx9VqQQEhxgaeT7KLW6yIfAzEMTB8K9rTxv2/TDSETk= Subject key identifier: 97:21:93:6B:CF:55:67:A6:F5:C7:33:89:5D:D2:66:83:94:25:84:54 Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE Certificate serial: 5908416CCAF67A5EFB7F47CBC03621EA7EA01029 Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230342e302f32342d3234203d3e203633363738.roa Signing time: Tue 20 Jan 2026 01:19:09 +0000 ROA not before: Tue 20 Jan 2026 01:14:09 +0000 ROA not after: Tue 19 Jan 2027 01:19:09 +0000 asID: 63678 IP address blocks: 27.0.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 05:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:08:41:6c:ca:f6:7a:5e:fb:7f:47:cb:c0:36:21:ea:7e:a0:10:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE Validity Not Before: Jan 20 01:14:09 2026 GMT Not After : Jan 19 01:19:09 2027 GMT Subject: CN=9721936BCF5567A6F5C733895DD2668394258454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:86:dd:8a:68:8f:7b:ff:0f:96:84:41:4a: c5:74:68:3c:62:b1:8c:1f:dc:4a:0f:f3:08:a3:4b: 4f:90:0c:a3:cb:41:c7:85:bd:28:26:ed:7c:84:94: 03:26:65:2a:08:ba:2a:21:79:c8:7e:e0:0b:0b:bb: 13:00:8b:c8:a7:45:84:24:00:2b:34:d1:19:dd:c0: 9e:f7:34:4b:2e:97:7a:d2:1f:df:2c:ef:8f:30:fe: 10:ff:cb:03:45:a4:76:d5:c2:3c:51:0f:53:08:0f: 85:d9:47:e7:12:76:4c:0d:dd:72:8a:51:70:13:86: 13:2c:81:f9:87:d3:f5:84:62:9d:d8:8a:d9:5c:44: ac:00:fe:21:f0:fb:64:45:04:c9:41:5c:46:f2:e0: 5d:dc:69:0b:92:8e:68:12:b2:c0:1a:96:a3:23:c2: 85:af:46:ff:20:12:bd:e2:27:4c:bd:47:00:65:3a: 88:5f:f5:b3:b2:c0:85:47:24:27:76:cf:bb:54:1b: db:80:f1:89:b6:5d:fb:0a:88:33:8c:6d:24:78:ad: ff:71:e3:83:31:3c:9b:86:4a:a6:27:fa:be:12:ff: 88:3b:b3:cb:c8:df:f7:0a:f1:13:3f:cc:44:07:50: 8a:21:20:97:08:7e:a2:03:73:00:e5:2e:c6:d6:6f: 25:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:21:93:6B:CF:55:67:A6:F5:C7:33:89:5D:D2:66:83:94:25:84:54 X509v3 Authority Key Identifier: keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230342e302f32342d3234203d3e203633363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.204.0/24 Signature Algorithm: sha256WithRSAEncryption 53:d7:90:bc:e9:60:ee:db:fe:dc:e8:43:c5:85:02:81:8f:40: b2:fb:f1:68:31:29:dc:07:0c:63:fa:e1:02:25:37:68:46:75: 2a:89:67:a9:01:7f:c1:43:ca:ee:e1:be:6c:c2:ce:81:7b:a9: 81:e8:29:5f:7f:43:49:7b:14:7f:4d:b8:46:20:94:4f:1e:bf: 2c:99:76:8e:6a:53:12:07:9b:76:c7:78:f5:37:34:21:be:a4: 4b:2c:6e:85:06:25:41:3c:a9:53:4e:fa:cd:55:63:c1:9b:10: 83:5e:78:ad:9e:74:9f:9e:f8:0d:61:3e:be:48:6b:74:ca:8a: 52:11:89:2a:79:78:5f:b7:92:11:e7:73:ec:89:0d:a2:f5:38: 43:9f:78:ea:7c:8b:58:92:ff:91:42:c9:3c:40:63:0c:9d:49: 77:0a:0f:e3:77:0e:d1:fe:e3:2a:f7:14:8c:01:c1:ee:5a:15: ed:4c:d6:62:25:55:0d:3d:a2:cb:db:10:4e:dd:cd:b8:f1:fb: 84:8a:e4:83:26:0f:03:f3:43:24:85:31:2a:89:10:d5:35:b5: 80:f3:d2:96:a4:61:32:e5:58:42:bf:ea:c7:78:4a:45:67:7b: 8c:fb:ba:21:f7:67:f4:86:e1:15:99:36:91:4f:fb:0a:32:97: 1b:4e:bb:26 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWQhBbMr2el77f0fLwDYh6n6gECkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4 QzMwOUNFRTAeFw0yNjAxMjAwMTE0MDlaFw0yNzAxMTkwMTE5MDlaMDMxMTAvBgNV BAMTKDk3MjE5MzZCQ0Y1NTY3QTZGNUM3MzM4OTVERDI2NjgzOTQyNTg0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2RIbdimiPe/8PloRBSsV0aDxi sYwf3EoP8wijS0+QDKPLQceFvSgm7XyElAMmZSoIuiohech+4AsLuxMAi8inRYQk ACs00RndwJ73NEsul3rSH98s748w/hD/ywNFpHbVwjxRD1MID4XZR+cSdkwN3XKK UXAThhMsgfmH0/WEYp3YitlcRKwA/iHw+2RFBMlBXEby4F3caQuSjmgSssAalqMj woWvRv8gEr3iJ0y9RwBlOohf9bOywIVHJCd2z7tUG9uA8Ym2XfsKiDOMbSR4rf9x 44MxPJuGSqYn+r4S/4g7s8vI3/cK8RM/zEQHUIohIJcIfqIDcwDlLsbWbyUPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUlyGTa89VZ6b1xzOJXdJmg5QlhFQwHwYDVR0j BBgwFoAUmyLBnYQuRaqEQ5NmaU5MgowwnO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTcyMTg1OS8wLzlCMjJDMTlEODQyRTQ1QUE4NDQzOTM2NjY5NEU0 QzgyOEMzMDlDRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NzIxODU5LzAvMzIzNzJlMzAyZTMy MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzNjM3Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAbAMwwDQYJKoZIhvcNAQELBQADggEBAFPXkLzpYO7b/tzoQ8WFAoGPQLL78Wgx KdwHDGP64QIlN2hGdSqJZ6kBf8FDyu7hvmzCzoF7qYHoKV9/Q0l7FH9NuEYglE8e vyyZdo5qUxIHm3bHePU3NCG+pEssboUGJUE8qVNO+s1VY8GbEINeeK2edJ+e+A1h Pr5Ia3TKilIRiSp5eF+3khHnc+yJDaL1OEOfeOp8i1iS/5FCyTxAYwydSXcKD+N3 DtH+4yr3FIwBwe5aFe1M1mIlVQ09osvbEE7dzbjx+4SK5IMmDwPzQySFMSqJENU1 tYDz0pakYTLlWEK/6sd4SkVne4z7uiH3Z/SG4RWZNpFP+woylxtOuyY= -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:27 2026 by rpki-client