This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa File: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (raw, json) Hash identifier: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM= Subject key identifier: 51:C8:95:4D:DA:3B:01:4B:2B:98:A1:68:92:E0:52:C8:FB:3B:44:46 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 3375BA16DEECD4C2F4B1B9E28E60591EB3F0D942 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:33 +0000 ROA not before: Tue 20 Jan 2026 02:16:33 +0000 ROA not after: Tue 19 Jan 2027 02:21:33 +0000 asID: 139021 IP address blocks: 218.247.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:75:ba:16:de:ec:d4:c2:f4:b1:b9:e2:8e:60:59:1e:b3:f0:d9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:33 2026 GMT Not After : Jan 19 02:21:33 2027 GMT Subject: CN=51C8954DDA3B014B2B98A16892E052C8FB3B4446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:2f:b0:c7:5a:d9:90:f4:e5:ea:94:ee:8b: be:d9:68:2d:71:a8:25:a5:7f:bb:fb:a3:ce:c2:02: 99:e8:6c:b4:be:b6:da:5a:07:0c:fb:9b:42:1f:56: a8:bf:64:66:b7:ec:e8:ac:5e:0f:d1:b0:4e:fa:5d: 76:ca:bd:f8:7d:25:dc:fe:b7:9f:9a:61:b6:f0:73: 54:52:42:76:31:a0:3c:4a:c7:1c:b3:17:81:5d:b1: 31:6f:d2:9b:a7:9d:15:2d:0d:7e:d6:77:f8:ae:6d: b5:94:71:74:c1:ae:f7:ad:c2:b9:1b:70:30:72:49: dd:8e:25:57:a3:c7:11:11:16:d9:8c:7c:ef:db:ea: 41:e6:13:46:2d:cf:98:1d:5e:e6:25:1c:77:6e:51: c2:b4:54:e4:6f:7f:76:c3:14:13:e4:2d:67:8c:97: de:2a:79:e6:98:28:6c:bb:93:56:2c:0f:a7:f1:c6: bf:ad:69:34:81:6e:e3:03:9f:93:66:48:70:56:21: 3a:97:aa:6e:c4:f8:d2:1f:6c:18:70:9b:5c:be:4d: f1:d7:7a:ae:06:e2:6d:43:c7:25:43:f0:6a:09:20: 55:35:16:8a:ab:33:c8:32:e3:e1:a6:b4:c7:5c:29: d9:4f:50:ab:a3:ff:4c:b4:2d:68:2b:3f:4e:65:e1: 40:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C8:95:4D:DA:3B:01:4B:2B:98:A1:68:92:E0:52:C8:FB:3B:44:46 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.247.64.0/20 Signature Algorithm: sha256WithRSAEncryption 11:0b:e5:c6:5a:d2:c1:25:5f:c6:b5:ad:61:af:de:3f:b3:6b: 42:30:ac:33:87:53:cd:38:eb:da:9f:12:db:c0:71:18:be:ce: ed:4c:35:98:39:db:01:88:58:4b:63:ad:da:ee:7e:50:56:03: 43:59:cf:80:a3:f4:0c:f0:dd:af:24:1b:ec:f5:80:64:9b:a8: 90:19:c5:fc:f9:d9:d5:a3:dc:84:e7:d4:2f:81:e2:2b:c4:e7: f5:d7:31:f8:5f:bf:44:8e:59:7d:c0:06:97:dd:c5:1e:dd:6d: 51:0a:0b:d3:d7:dc:c1:51:fa:74:69:6a:70:35:4d:cc:c3:2f: dc:9f:a7:96:f0:69:95:52:91:96:31:01:a9:7a:aa:4c:ff:c8: 70:e8:d6:5d:23:3e:5a:48:b0:35:fe:2b:d0:44:12:6c:96:1e: b5:6a:ea:ca:61:c9:6f:ba:e3:c5:09:ca:25:12:28:34:a7:a3: c8:e5:20:e4:47:03:f8:a7:5b:ae:1f:ff:63:fb:dd:fb:4c:3a: 4a:39:9c:03:d6:73:81:61:c8:e6:d8:c6:59:7d:4e:70:ec:67: 9d:3c:e4:24:e9:43:24:28:a3:e3:37:28:39:f1:52:ab:f9:5a: ca:7f:87:d7:db:eb:d0:83:3f:dc:1a:27:17:73:c6:61:7a:5f: 13:59:fb:38 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUM3W6Ft7s1ML0sbnijmBZHrPw2UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzNaFw0yNzAxMTkwMjIxMzNaMDMxMTAvBgNV BAMTKDUxQzg5NTREREEzQjAxNEIyQjk4QTE2ODkyRTA1MkM4RkIzQjQ0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRty+wx1rZkPTl6pTui77ZaC1x qCWlf7v7o87CApnobLS+ttpaBwz7m0IfVqi/ZGa37OisXg/RsE76XXbKvfh9Jdz+ t5+aYbbwc1RSQnYxoDxKxxyzF4FdsTFv0punnRUtDX7Wd/iubbWUcXTBrvetwrkb cDBySd2OJVejxxERFtmMfO/b6kHmE0Ytz5gdXuYlHHduUcK0VORvf3bDFBPkLWeM l94qeeaYKGy7k1YsD6fxxr+taTSBbuMDn5NmSHBWITqXqm7E+NIfbBhwm1y+TfHX eq4G4m1DxyVD8GoJIFU1FoqrM8gy4+GmtMdcKdlPUKuj/0y0LWgrP05l4UAxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUUciVTdo7AUsrmKFokuBSyPs7REYwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC8zMjMxMzgyZTMy MzQzNzJlMzYzNDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzOTMwMzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBNr3QDANBgkqhkiG9w0BAQsFAAOCAQEAEQvlxlrSwSVfxrWtYa/e P7NrQjCsM4dTzTjr2p8S28BxGL7O7Uw1mDnbAYhYS2Ot2u5+UFYDQ1nPgKP0DPDd ryQb7PWAZJuokBnF/PnZ1aPchOfUL4HiK8Tn9dcx+F+/RI5ZfcAGl93FHt1tUQoL 09fcwVH6dGlqcDVNzMMv3J+nlvBplVKRljEBqXqqTP/IcOjWXSM+WkiwNf4r0EQS bJYetWrqymHJb7rjxQnKJRIoNKejyOUg5EcD+Kdbrh//Y/vd+0w6SjmcA9ZzgWHI 5tjGWX1OcOxnnTzkJOlDJCij4zcoOfFSq/layn+H19vr0IM/3BonF3PGYXpfE1n7 OA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:49 2026 by rpki-client