This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa File: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (raw, json) Hash identifier: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw= Subject key identifier: 7D:35:3F:47:43:A5:A1:4B:EF:EA:CF:88:DE:DA:4C:FC:AC:49:48:DD Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 0CEF7B5B02DD41AE8B45D3E2478A6D6C1303093D Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:33 +0000 ROA not before: Tue 20 Jan 2026 02:16:33 +0000 ROA not after: Tue 19 Jan 2027 02:21:33 +0000 asID: 139021 IP address blocks: 218.247.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ef:7b:5b:02:dd:41:ae:8b:45:d3:e2:47:8a:6d:6c:13:03:09:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:33 2026 GMT Not After : Jan 19 02:21:33 2027 GMT Subject: CN=7D353F4743A5A14BEFEACF88DEDA4CFCAC4948DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:c3:17:e8:27:4a:8d:fa:a3:7a:ec:05:ec: fb:c5:a2:d8:4f:75:61:89:7f:6c:b5:d7:dd:a6:e0: 6e:d2:91:21:18:2d:01:62:eb:66:4f:d4:08:7f:5d: c6:37:a5:0c:7b:f4:69:7c:04:b2:6d:25:20:5a:af: bb:f2:ad:58:5b:ca:5b:ec:e3:52:01:84:a7:1c:26: 22:a0:88:fa:fe:ec:e0:73:51:60:15:77:eb:f7:16: e1:36:45:73:bc:fa:e1:28:86:86:59:1d:46:b9:fc: b5:6e:4e:d2:ea:54:b3:fc:72:5a:25:bf:0a:e8:64: 8e:69:86:df:c6:cb:11:cc:25:ef:0b:72:4b:82:62: 12:6e:8d:02:cb:4e:cf:83:8c:96:a6:6e:d5:dd:37: 49:b8:c3:98:c6:e3:c8:53:37:ee:3b:49:b6:95:a3: 5b:16:72:82:ff:3d:7d:24:82:0d:26:bd:b2:7f:70: be:27:2d:4f:c8:07:e9:c0:25:ce:eb:90:f7:5c:d1: 77:fe:78:d6:33:95:9b:31:c1:3f:5a:a3:d6:26:7d: 74:18:cc:4c:f7:ff:b2:30:4a:c1:ee:5d:bf:0a:17: f8:55:78:ff:a1:9c:ff:10:78:f9:5c:b4:12:32:b7: 58:78:fa:6e:4b:c4:43:b2:21:e9:74:c8:b9:8d:c7: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:35:3F:47:43:A5:A1:4B:EF:EA:CF:88:DE:DA:4C:FC:AC:49:48:DD X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.247.80.0/22 Signature Algorithm: sha256WithRSAEncryption b7:3a:3a:8b:4c:cc:1a:5d:7c:11:46:fc:7c:02:42:c6:ba:9d: 9e:c1:51:b7:e4:e3:e8:f3:e2:e7:22:d8:cc:56:9d:48:02:ff: 81:23:74:7d:f8:1a:d0:99:d5:0f:c0:98:84:d1:23:81:4b:43: a1:7f:b1:c3:28:79:94:89:c5:38:21:0c:be:b7:3d:55:89:d6: af:c0:15:32:b9:82:cc:24:32:43:38:28:5e:32:3c:19:56:34: 68:f1:41:41:cb:e0:8f:52:71:f6:c8:2f:ec:91:85:8d:fa:44: 8d:d3:5b:39:9b:d8:ee:34:fc:07:cb:27:0d:da:7a:6d:44:85: 2c:4f:c8:c5:c4:50:1c:fd:27:9b:ff:e1:fe:e0:de:54:25:92: 8c:c1:f5:e9:e0:5e:6f:89:8d:b4:fc:67:d4:dc:d5:c0:44:fc: 4e:d4:cc:fe:5b:9d:08:ff:23:75:39:49:91:65:b7:4a:f1:89: 7c:50:f3:20:85:0c:1b:1e:db:4d:6c:56:bb:4a:94:35:94:50: f3:a8:0e:e5:72:a2:82:7b:8d:38:21:cd:b8:0f:89:07:e7:f0: 18:87:03:89:be:36:bd:21:11:89:54:7b:ff:64:06:42:16:21: 61:0c:03:14:21:92:c6:42:7c:d2:0b:30:af:5f:36:78:da:4d: c6:e0:b7:58 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDO97WwLdQa6LRdPiR4ptbBMDCT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzNaFw0yNzAxMTkwMjIxMzNaMDMxMTAvBgNV BAMTKDdEMzUzRjQ3NDNBNUExNEJFRkVBQ0Y4OERFREE0Q0ZDQUM0OTQ4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ucMX6CdKjfqjeuwF7PvFothP dWGJf2y1192m4G7SkSEYLQFi62ZP1Ah/XcY3pQx79Gl8BLJtJSBar7vyrVhbylvs 41IBhKccJiKgiPr+7OBzUWAVd+v3FuE2RXO8+uEohoZZHUa5/LVuTtLqVLP8clol vwroZI5pht/GyxHMJe8LckuCYhJujQLLTs+DjJambtXdN0m4w5jG48hTN+47SbaV o1sWcoL/PX0kgg0mvbJ/cL4nLU/IB+nAJc7rkPdc0Xf+eNYzlZsxwT9ao9YmfXQY zEz3/7IwSsHuXb8KF/hVeP+hnP8QePlctBIyt1h4+m5LxEOyIel0yLmNxyYHAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUfTU/R0OloUvv6s+I3tpM/KxJSN0wHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC8zMjMxMzgyZTMy MzQzNzJlMzgzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzOTMwMzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtr3UDANBgkqhkiG9w0BAQsFAAOCAQEAtzo6i0zMGl18EUb8fAJC xrqdnsFRt+Tj6PPi5yLYzFadSAL/gSN0ffga0JnVD8CYhNEjgUtDoX+xwyh5lInF OCEMvrc9VYnWr8AVMrmCzCQyQzgoXjI8GVY0aPFBQcvgj1Jx9sgv7JGFjfpEjdNb OZvY7jT8B8snDdp6bUSFLE/IxcRQHP0nm//h/uDeVCWSjMH16eBeb4mNtPxn1NzV wET8TtTM/ludCP8jdTlJkWW3SvGJfFDzIIUMGx7bTWxWu0qUNZRQ86gO5XKignuN OCHNuA+JB+fwGIcDib42vSERiVR7/2QGQhYhYQwDFCGSxkJ80gswr182eNpNxuC3 WA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:11 2026 by rpki-client