This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa File: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (raw, json) Hash identifier: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k= Subject key identifier: 55:F3:04:95:27:47:36:6F:12:FF:85:9D:78:C7:04:75:A4:10:42:E4 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 6D8EDEB1ADFD2DDFF2CDD61544F83525A955053E Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:33 +0000 ROA not before: Tue 20 Jan 2026 02:16:33 +0000 ROA not after: Tue 19 Jan 2027 02:21:33 +0000 asID: 139021 IP address blocks: 218.247.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8e:de:b1:ad:fd:2d:df:f2:cd:d6:15:44:f8:35:25:a9:55:05:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:33 2026 GMT Not After : Jan 19 02:21:33 2027 GMT Subject: CN=55F304952747366F12FF859D78C70475A41042E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:e5:19:bd:6b:3c:c6:9e:0c:c6:a4:e1:a4: 6a:4d:a1:d3:fd:20:1e:c7:89:4d:54:29:ea:d2:1c: b4:d6:d3:6c:f7:9b:ab:05:e5:8a:16:21:2d:f4:78: d6:2e:a3:0a:75:88:b9:cc:28:74:94:52:e4:9d:68: ef:6d:cb:6d:11:44:48:ee:fd:56:65:20:3d:ca:d4: e0:cc:41:3a:34:f9:5f:f5:93:74:9b:5b:e6:91:c1: e6:57:75:b1:00:c5:ef:38:bb:78:f1:6c:c9:1d:2b: d7:c4:52:f2:06:20:bb:b1:7d:b8:8a:cc:0f:86:d2: f0:0a:6c:49:bc:fe:28:9a:aa:c5:50:13:9e:fd:ba: 12:2c:ff:fc:5b:b0:a5:23:e1:f7:27:ff:18:69:26: 27:49:1f:b1:50:26:a3:ff:9c:a2:d5:5b:93:ac:95: b6:1d:f9:6b:ea:a9:34:df:85:4d:1a:6e:61:e3:4d: 94:3a:f1:16:8e:40:00:8a:12:50:47:e6:1a:ef:ae: 9e:b6:dc:0c:23:2b:ec:e8:ab:af:f6:ce:cb:bd:d8: b4:f5:35:34:ae:0e:f7:41:e7:74:f5:3b:77:da:2b: 5b:70:8a:39:4f:d8:32:2d:c7:88:e1:44:99:11:9c: 28:23:17:2d:11:ed:61:cf:81:13:3f:c9:b1:39:1e: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F3:04:95:27:47:36:6F:12:FF:85:9D:78:C7:04:75:A4:10:42:E4 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.247.64.0/19 Signature Algorithm: sha256WithRSAEncryption cb:a0:57:a1:c2:37:66:c0:12:60:f4:ce:68:8e:d5:1d:c3:ae: 7f:70:75:4e:45:62:f0:03:56:69:25:1e:01:d7:2f:79:eb:b5: c0:b7:82:54:0b:8b:b4:2f:ee:40:82:70:33:29:80:56:08:c5: 7a:6d:0b:dd:0c:31:c8:37:03:b1:4b:9b:6a:28:56:73:13:c2: 5a:31:a9:ab:cb:22:80:35:59:cd:4c:ef:cc:0a:0b:6f:66:bb: e1:b9:99:0e:36:01:d5:6c:a2:75:bb:2d:48:f7:b9:7a:5d:70: 5f:f0:36:c2:a9:f8:df:9b:18:12:77:d1:6a:9d:64:e1:c0:c9: 8c:35:6d:87:15:59:39:70:94:0a:8a:1e:35:be:76:8e:d5:61: 1c:79:49:73:e4:74:94:25:4a:8c:51:1e:4d:9a:8a:da:2b:30: c6:ed:4d:56:df:4e:8d:a0:2a:13:21:4c:12:db:b7:17:5b:1d: a4:df:37:14:fc:b7:e6:cc:1a:ad:be:47:41:24:4e:2b:1e:b1: c4:78:8b:c6:e9:88:47:09:67:f2:5d:76:27:e2:67:2a:9c:4b: 53:05:02:22:28:37:eb:64:08:69:c1:3b:7b:98:02:e1:9f:14: 41:4b:54:38:7b:98:02:7e:ec:80:33:a1:ff:31:48:4d:38:e0: d5:79:b9:2e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUbY7esa39Ld/yzdYVRPg1JalVBT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzNaFw0yNzAxMTkwMjIxMzNaMDMxMTAvBgNV BAMTKDU1RjMwNDk1Mjc0NzM2NkYxMkZGODU5RDc4QzcwNDc1QTQxMDQyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT2OUZvWs8xp4MxqThpGpNodP9 IB7HiU1UKerSHLTW02z3m6sF5YoWIS30eNYuowp1iLnMKHSUUuSdaO9ty20RREju /VZlID3K1ODMQTo0+V/1k3SbW+aRweZXdbEAxe84u3jxbMkdK9fEUvIGILuxfbiK zA+G0vAKbEm8/iiaqsVQE579uhIs//xbsKUj4fcn/xhpJidJH7FQJqP/nKLVW5Os lbYd+WvqqTTfhU0abmHjTZQ68RaOQACKElBH5hrvrp623AwjK+zoq6/2zsu92LT1 NTSuDvdB53T1O3faK1twijlP2DItx4jhRJkRnCgjFy0R7WHPgRM/ybE5Hl33AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUVfMElSdHNm8S/4WdeMcEdaQQQuQwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC8zMjMxMzgyZTMy MzQzNzJlMzYzNDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMxMzMzOTMwMzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBdr3QDANBgkqhkiG9w0BAQsFAAOCAQEAy6BXocI3ZsASYPTOaI7V HcOuf3B1TkVi8ANWaSUeAdcveeu1wLeCVAuLtC/uQIJwMymAVgjFem0L3QwxyDcD sUubaihWcxPCWjGpq8sigDVZzUzvzAoLb2a74bmZDjYB1WyidbstSPe5el1wX/A2 wqn435sYEnfRap1k4cDJjDVthxVZOXCUCooeNb52jtVhHHlJc+R0lCVKjFEeTZqK 2iswxu1NVt9OjaAqEyFMEtu3F1sdpN83FPy35swarb5HQSROKx6xxHiLxumIRwln 8l12J+JnKpxLUwUCIig362QIacE7e5gC4Z8UQUtUOHuYAn7sgDOh/zFITTjg1Xm5 Lg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:15 2026 by rpki-client