This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230372e302f32342d3234203d3e203633363739.roa File: 32372e302e3230372e302f32342d3234203d3e203633363739.roa (raw, json) Hash identifier: FRkm9JB/rrai+gOwgOa3Nip6NXE5SBOt5jTPPdgIVnk= Subject key identifier: CA:84:6C:BF:D2:9D:DA:65:65:ED:97:9A:7F:80:C4:34:FC:90:99:F2 Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE Certificate serial: 7DFD7EFABB5D56AE2723D8F0905D7480CF1B7B5F Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230372e302f32342d3234203d3e203633363739.roa Signing time: Tue 20 Jan 2026 01:19:09 +0000 ROA not before: Tue 20 Jan 2026 01:14:09 +0000 ROA not after: Tue 19 Jan 2027 01:19:09 +0000 asID: 63679 IP address blocks: 27.0.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 05:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fd:7e:fa:bb:5d:56:ae:27:23:d8:f0:90:5d:74:80:cf:1b:7b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE Validity Not Before: Jan 20 01:14:09 2026 GMT Not After : Jan 19 01:19:09 2027 GMT Subject: CN=CA846CBFD29DDA6565ED979A7F80C434FC9099F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:dc:7a:43:13:56:f1:dc:a7:a9:fb:06:93: 47:b6:ca:75:b5:50:23:cb:b7:7b:2e:64:ae:0e:15: a7:ed:1d:74:b7:6c:d4:dc:3e:43:f2:05:b8:91:c1: 9d:78:8c:69:37:90:c9:5a:c8:f6:18:2b:d9:71:f4: 94:33:67:80:59:37:3c:9a:3b:17:1a:18:66:3a:57: cb:da:6a:11:37:6c:45:eb:17:35:89:22:48:e3:5f: ab:ae:8e:92:20:10:31:00:4f:6d:31:c0:fb:7e:02: 39:db:8d:a6:fc:5b:0c:ba:f4:74:aa:a5:60:27:6e: 80:c1:26:e5:b2:6e:26:d0:8b:85:7c:29:6c:a8:c9: 6b:f9:bf:87:49:5f:06:72:3d:a9:17:fa:49:52:03: 61:d0:03:f4:18:60:a1:b9:56:96:ca:59:ab:91:33: af:65:9c:95:04:00:05:6e:87:49:f0:10:5f:51:4f: 6b:06:aa:c8:b4:2c:47:af:7f:65:49:14:b2:0d:e5: 64:91:58:43:69:02:22:c8:73:e4:f5:32:b0:9a:91: 09:c2:93:28:19:6b:a6:0e:05:7f:5f:9a:86:b5:6f: 17:b2:f9:26:e3:6a:ad:0c:80:8a:43:dc:d6:a8:63: 85:c5:16:be:94:f5:cc:33:8c:22:70:d9:ce:08:d7: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:84:6C:BF:D2:9D:DA:65:65:ED:97:9A:7F:80:C4:34:FC:90:99:F2 X509v3 Authority Key Identifier: keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230372e302f32342d3234203d3e203633363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.207.0/24 Signature Algorithm: sha256WithRSAEncryption 42:0a:41:db:71:fe:5e:c9:c5:2a:c5:a4:20:da:46:bb:b0:50: ef:df:aa:b7:a3:f2:d7:5b:da:6d:b3:8c:24:bd:80:a0:6f:68: c8:9b:ca:e1:ba:9a:47:5a:10:72:21:3e:df:47:9d:9b:8d:fd: c9:b3:b0:3f:e7:c1:7d:27:45:fd:0f:09:65:cc:fd:08:9b:88: 17:38:53:e1:a4:54:13:56:9e:87:f7:b3:bc:a1:19:e6:11:4e: b0:72:75:d5:1c:76:ef:b6:7b:a4:ad:87:a3:6f:64:be:92:b6: a1:f7:93:df:78:f0:a0:3f:a9:6e:b1:38:35:48:7d:f6:e9:63: fb:bf:b8:ea:5a:61:70:d0:a7:a0:dd:4d:23:0a:4f:34:52:eb: e2:72:d0:70:8c:50:d7:3f:1e:0d:b8:f4:bf:98:be:29:c3:c5: 3c:2d:bc:17:9b:3d:23:a0:2a:44:63:67:97:d6:42:8a:d1:68: 21:77:03:b5:41:f2:b2:b6:76:d0:e0:7f:29:98:75:95:dd:bf: 86:46:1b:d3:69:32:fa:30:c6:95:c5:ed:d1:3f:9a:9b:d8:4b: 54:92:bd:c8:f1:3b:96:64:75:50:6a:9b:4d:d5:b7:53:0f:9f: fe:3b:d4:bc:c9:78:13:c3:96:b5:ec:da:cd:fb:14:5b:57:17: 7f:db:7b:ce -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUff1++rtdVq4nI9jwkF10gM8be18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4 QzMwOUNFRTAeFw0yNjAxMjAwMTE0MDlaFw0yNzAxMTkwMTE5MDlaMDMxMTAvBgNV BAMTKENBODQ2Q0JGRDI5RERBNjU2NUVEOTc5QTdGODBDNDM0RkM5MDk5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkUtx6QxNW8dynqfsGk0e2ynW1 UCPLt3suZK4OFaftHXS3bNTcPkPyBbiRwZ14jGk3kMlayPYYK9lx9JQzZ4BZNzya OxcaGGY6V8vaahE3bEXrFzWJIkjjX6uujpIgEDEAT20xwPt+Ajnbjab8Wwy69HSq pWAnboDBJuWybibQi4V8KWyoyWv5v4dJXwZyPakX+klSA2HQA/QYYKG5VpbKWauR M69lnJUEAAVuh0nwEF9RT2sGqsi0LEevf2VJFLIN5WSRWENpAiLIc+T1MrCakQnC kygZa6YOBX9fmoa1bxey+Sbjaq0MgIpD3NaoY4XFFr6U9cwzjCJw2c4I194vAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUyoRsv9Kd2mVl7Zeaf4DENPyQmfIwHwYDVR0j BBgwFoAUmyLBnYQuRaqEQ5NmaU5MgowwnO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTcyMTg1OS8wLzlCMjJDMTlEODQyRTQ1QUE4NDQzOTM2NjY5NEU0 QzgyOEMzMDlDRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NzIxODU5LzAvMzIzNzJlMzAyZTMy MzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzNjM3Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAbAM8wDQYJKoZIhvcNAQELBQADggEBAEIKQdtx/l7JxSrFpCDaRruwUO/fqrej 8tdb2m2zjCS9gKBvaMibyuG6mkdaEHIhPt9HnZuN/cmzsD/nwX0nRf0PCWXM/Qib iBc4U+GkVBNWnof3s7yhGeYRTrByddUcdu+2e6Sth6NvZL6StqH3k9948KA/qW6x ODVIffbpY/u/uOpaYXDQp6DdTSMKTzRS6+Jy0HCMUNc/Hg249L+YvinDxTwtvBeb PSOgKkRjZ5fWQorRaCF3A7VB8rK2dtDgfymYdZXdv4ZGG9NpMvowxpXF7dE/mpvY S1SSvcjxO5ZkdVBqm03Vt1MPn/471LzJeBPDlrXs2s37FFtXF3/be84= -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:21 2026 by rpki-client