This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa File: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (raw, json) Hash identifier: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0= Subject key identifier: 4C:B0:E6:0E:7A:1F:72:89:9F:7E:28:63:D0:E7:85:0A:D8:A7:11:94 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 155468A128F097602A7634254142108E582C9520 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:32 +0000 ROA not before: Tue 20 Jan 2026 02:16:32 +0000 ROA not after: Tue 19 Jan 2027 02:21:32 +0000 asID: 139021 IP address blocks: 218.247.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:54:68:a1:28:f0:97:60:2a:76:34:25:41:42:10:8e:58:2c:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:32 2026 GMT Not After : Jan 19 02:21:32 2027 GMT Subject: CN=4CB0E60E7A1F72899F7E2863D0E7850AD8A71194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:94:8d:01:e5:fc:83:01:e1:e3:42:79:7d:9b: 96:32:eb:4a:29:e0:f9:9f:f7:97:a0:d7:f0:1c:8d: 4d:08:9a:3e:d4:26:77:ed:30:ae:cf:17:88:93:ca: 75:3f:de:ff:e5:f9:10:e2:c8:26:5d:03:a0:d9:a0: 30:6f:8a:f8:37:05:66:43:5a:c2:d2:79:b7:e4:1f: 67:2f:46:b5:a9:34:a4:d5:a7:28:d4:20:c8:09:29: f4:81:97:fc:1c:30:01:7b:4e:60:10:8d:a8:b3:3c: 03:f4:1b:d9:ca:bb:3b:12:46:77:3c:0a:7f:7e:4c: 1e:eb:80:38:e3:8d:a8:f5:74:e5:ab:9f:61:10:95: 0b:49:f0:f4:41:a3:9e:ac:ae:cf:68:61:2a:7b:c7: 5b:00:1a:07:21:3d:fd:93:f9:6f:78:ec:38:82:2e: 99:6d:5f:48:da:2c:ef:7a:4a:b9:8f:86:ec:33:3b: e7:fd:06:38:35:fb:b4:21:63:a2:26:e0:dd:88:4e: bc:53:77:ce:3b:80:68:28:82:f5:03:1b:2a:32:57: 4b:63:6e:b4:f0:64:8e:dc:10:1b:5e:57:46:9f:74: 7e:51:bf:18:89:e1:fb:31:ce:6a:ae:5f:45:c8:e9: e5:99:bc:bd:b8:04:12:08:8d:01:bd:96:e6:4e:31: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B0:E6:0E:7A:1F:72:89:9F:7E:28:63:D0:E7:85:0A:D8:A7:11:94 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.247.84.0/23 Signature Algorithm: sha256WithRSAEncryption 33:b4:e9:fe:9e:97:1d:14:49:7c:f1:33:86:da:5b:b7:7a:65: c0:d4:6c:cf:5b:c9:76:8b:7a:23:ae:6c:7e:a3:ff:9f:5b:c9: 16:dd:88:fb:e3:59:ea:02:17:f7:f9:af:ca:5c:f2:d3:d5:ff: e2:b2:2a:a3:97:79:37:9e:08:f2:21:3d:9b:f7:2e:d2:5d:d7: c7:3b:00:9a:c2:8d:44:c6:d2:57:da:7e:3b:2f:f5:78:d2:a7: 4a:33:33:8c:93:c6:c8:8d:87:fe:7d:77:f0:df:7b:b9:b1:b8: 58:ea:4d:39:ce:e5:f1:07:2d:c0:f6:80:ff:3a:50:46:2f:66: a7:15:52:c2:9b:dc:c5:33:b8:e3:dc:6e:b3:7a:76:50:13:0c: 4b:b5:7b:97:89:f3:36:e1:4c:83:d6:35:62:2a:b0:25:3e:3d: 8a:69:73:0e:7f:05:7a:72:ad:39:45:bf:1b:37:a0:55:50:55: b9:23:7d:6a:fa:4e:e3:9b:b4:8f:de:15:c7:0d:db:35:97:a8: f4:82:60:b1:82:ec:09:1c:9b:97:45:b8:03:24:c7:59:b4:2d: b7:13:89:85:e6:40:81:a3:31:52:79:99:73:d4:37:f7:03:55: e2:5a:32:da:05:e1:63:d3:67:f8:3f:70:4f:3d:6e:65:90:cf: 50:46:8a:15 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFVRooSjwl2AqdjQlQUIQjlgslSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzJaFw0yNzAxMTkwMjIxMzJaMDMxMTAvBgNV BAMTKDRDQjBFNjBFN0ExRjcyODk5RjdFMjg2M0QwRTc4NTBBRDhBNzExOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxlI0B5fyDAeHjQnl9m5Yy60op 4Pmf95eg1/AcjU0Imj7UJnftMK7PF4iTynU/3v/l+RDiyCZdA6DZoDBvivg3BWZD WsLSebfkH2cvRrWpNKTVpyjUIMgJKfSBl/wcMAF7TmAQjaizPAP0G9nKuzsSRnc8 Cn9+TB7rgDjjjaj1dOWrn2EQlQtJ8PRBo56srs9oYSp7x1sAGgchPf2T+W947DiC LpltX0jaLO96SrmPhuwzO+f9Bjg1+7QhY6Im4N2ITrxTd847gGgogvUDGyoyV0tj brTwZI7cEBteV0afdH5RvxiJ4fsxzmquX0XI6eWZvL24BBIIjQG9luZOMT6/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUTLDmDnofcomffihj0OeFCtinEZQwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC8zMjMxMzgyZTMy MzQzNzJlMzgzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzOTMwMzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAdr3VDANBgkqhkiG9w0BAQsFAAOCAQEAM7Tp/p6XHRRJfPEzhtpb t3plwNRsz1vJdot6I65sfqP/n1vJFt2I++NZ6gIX9/mvylzy09X/4rIqo5d5N54I 8iE9m/cu0l3XxzsAmsKNRMbSV9p+Oy/1eNKnSjMzjJPGyI2H/n138N97ubG4WOpN Oc7l8QctwPaA/zpQRi9mpxVSwpvcxTO449xus3p2UBMMS7V7l4nzNuFMg9Y1Yiqw JT49imlzDn8FenKtOUW/GzegVVBVuSN9avpO45u0j94Vxw3bNZeo9IJgsYLsCRyb l0W4AyTHWbQttxOJheZAgaMxUnmZc9Q39wNV4loy2gXhY9Nn+D9wTz1uZZDPUEaK FQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:21 2026 by rpki-client