This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa File: 3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa (raw, json) Hash identifier: edMuLWIKpK7nnE5WfHg22oT2gpNprnepwqo5yESrIQg= Subject key identifier: BF:A4:6B:49:6E:AA:91:FB:D6:12:36:5F:0E:89:98:5B:A8:51:E7:B9 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 19532932D1F30610B6224178918F4D6CFF3200B0 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:33 +0000 ROA not before: Tue 20 Jan 2026 02:16:33 +0000 ROA not after: Tue 19 Jan 2027 02:21:33 +0000 asID: 139021 IP address blocks: 150.242.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:53:29:32:d1:f3:06:10:b6:22:41:78:91:8f:4d:6c:ff:32:00:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:33 2026 GMT Not After : Jan 19 02:21:33 2027 GMT Subject: CN=BFA46B496EAA91FBD612365F0E89985BA851E7B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:38:59:fd:24:37:c3:0f:90:95:01:4e:84: 75:a2:7d:ec:95:c4:66:cf:6d:af:1d:b7:36:cc:e0: a8:80:d4:44:2f:ef:51:df:30:8f:3f:d6:0e:7a:56: 53:dc:35:7a:3e:a4:4d:bf:80:dc:a9:6d:9b:7f:51: 8d:91:e3:29:9e:7e:e6:a8:4e:99:d4:ab:62:ed:1e: 5e:c2:7f:26:77:47:f7:d8:a8:1a:a7:d5:f9:8a:8d: 67:56:51:1f:ac:64:d1:f8:32:09:9e:d6:fd:a2:b0: 3f:e0:7d:a8:93:7d:a4:ec:6a:67:1f:29:d6:3b:25: 8c:9e:34:5b:81:af:a8:c9:bb:e3:0a:f6:66:5b:fc: db:8b:c0:15:f3:f0:5e:6c:04:fd:e8:11:26:07:83: 13:48:7e:9b:5e:7b:93:3d:9e:42:e3:0f:1c:08:58: ce:36:8f:9c:08:a2:57:e8:cf:cf:98:9e:45:d7:7d: 99:59:16:b9:47:d7:99:15:9a:9c:1d:b8:5b:75:e1: 66:74:c3:64:c9:bd:7d:64:3f:d1:27:19:e9:b0:82: df:a1:b0:8b:24:87:9b:73:83:d0:b4:58:9b:af:f1: 52:fc:16:a1:dd:32:db:6d:45:2c:4e:7f:12:7d:65: 35:ff:2f:87:7d:f9:c8:40:12:60:8c:1b:15:3b:c4: b0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A4:6B:49:6E:AA:91:FB:D6:12:36:5F:0E:89:98:5B:A8:51:E7:B9 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.242.224.0/22 Signature Algorithm: sha256WithRSAEncryption a1:82:5b:a2:45:ff:83:bb:7b:80:33:7b:2b:d1:6f:4c:be:42: fb:a1:2c:d2:10:00:11:2d:cd:87:26:30:43:53:48:91:70:7c: 96:86:27:b3:fa:d6:00:1c:01:08:1d:0d:98:f6:f7:8e:8a:a3: a7:15:56:f6:21:9e:6f:25:16:a5:b7:f5:23:21:8d:72:bb:0d: fa:c3:dc:55:dc:6c:3b:00:59:c6:ea:ed:88:f6:ab:0a:8b:cb: 77:7c:37:56:ba:70:b9:55:23:09:ca:80:e8:8b:91:ab:71:1a: fc:5d:62:62:38:7a:f1:96:4c:95:6f:5b:85:b3:88:08:5d:39: d1:80:1d:e5:27:34:f2:01:8d:86:6e:2a:0c:e6:bb:fb:85:b8: f8:9a:b4:51:ed:10:c9:69:82:ca:46:98:f1:f2:1e:83:93:96: b0:2a:51:7c:a0:47:dc:cd:eb:39:c4:c9:20:82:93:2c:70:4d: b4:17:15:a4:f1:73:a4:9e:92:52:92:63:aa:5d:d1:36:c7:0d: 61:3e:99:a3:ad:30:ab:e9:2c:ad:5d:09:fd:b5:5d:59:56:ba: 84:61:4c:6f:79:cf:66:15:87:1a:35:f5:d7:17:c3:52:02:f0: 84:c5:6e:ef:75:d7:19:c4:92:c0:f6:cb:e4:c1:b0:79:1d:bc: 69:84:c9:e2 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUGVMpMtHzBhC2IkF4kY9NbP8yALAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzNaFw0yNzAxMTkwMjIxMzNaMDMxMTAvBgNV BAMTKEJGQTQ2QjQ5NkVBQTkxRkJENjEyMzY1RjBFODk5ODVCQTg1MUU3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11zhZ/SQ3ww+QlQFOhHWifeyV xGbPba8dtzbM4KiA1EQv71HfMI8/1g56VlPcNXo+pE2/gNypbZt/UY2R4ymefuao TpnUq2LtHl7CfyZ3R/fYqBqn1fmKjWdWUR+sZNH4Mgme1v2isD/gfaiTfaTsamcf KdY7JYyeNFuBr6jJu+MK9mZb/NuLwBXz8F5sBP3oESYHgxNIfptee5M9nkLjDxwI WM42j5wIolfoz8+YnkXXfZlZFrlH15kVmpwduFt14WZ0w2TJvX1kP9EnGemwgt+h sIskh5tzg9C0WJuv8VL8FqHdMtttRSxOfxJ9ZTX/L4d9+chAEmCMGxU7xLA3AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUv6RrSW6qkfvWEjZfDomYW6hR57kwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNDAwMzIxLzAvMzEzNTMwMmUz MjM0MzIyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzOTMwMzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEApby4DANBgkqhkiG9w0BAQsFAAOCAQEAoYJbokX/g7t7gDN7 K9FvTL5C+6Es0hAAES3NhyYwQ1NIkXB8loYns/rWABwBCB0NmPb3joqjpxVW9iGe byUWpbf1IyGNcrsN+sPcVdxsOwBZxurtiParCovLd3w3VrpwuVUjCcqA6IuRq3Ea /F1iYjh68ZZMlW9bhbOICF050YAd5Sc08gGNhm4qDOa7+4W4+Jq0Ue0QyWmCykaY 8fIeg5OWsCpRfKBH3M3rOcTJIIKTLHBNtBcVpPFzpJ6SUpJjql3RNscNYT6Zo60w q+ksrV0J/bVdWVa6hGFMb3nPZhWHGjX11xfDUgLwhMVu73XXGcSSwPbL5MGweR28 aYTJ4g== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:40 2026 by rpki-client