This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e302e302f32312d3234203d3e20313339303231.roa File: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (raw, json) Hash identifier: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo= Subject key identifier: 01:83:71:55:64:F8:DD:74:D9:E4:CB:1B:B2:B1:51:A6:14:50:FF:2C Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 0FD76A0F269993AE0C4218B5C617DB7A53248F37 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e302e302f32312d3234203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:32 +0000 ROA not before: Tue 20 Jan 2026 02:16:32 +0000 ROA not after: Tue 19 Jan 2027 02:21:32 +0000 asID: 139021 IP address blocks: 219.234.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d7:6a:0f:26:99:93:ae:0c:42:18:b5:c6:17:db:7a:53:24:8f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:32 2026 GMT Not After : Jan 19 02:21:32 2027 GMT Subject: CN=0183715564F8DD74D9E4CB1BB2B151A61450FF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:7d:61:76:f7:1b:b7:fa:9b:0b:50:b8:be: 08:a3:eb:1f:f6:13:9a:d3:ae:fa:eb:fb:59:11:a1: ae:ef:6f:75:d6:a0:42:b1:57:09:83:da:47:af:22: 38:03:da:05:13:51:a4:74:5e:14:63:df:eb:b3:bd: 23:d2:3d:b7:3f:06:9d:2e:8d:0a:3d:dc:93:b0:42: 06:7e:00:d3:bf:da:dc:57:0b:1a:39:c1:0e:94:79: 16:71:1e:34:37:c7:eb:49:d4:40:3f:ae:73:f5:4a: 16:d0:a4:af:55:0c:1c:e7:78:06:ad:82:42:7f:ed: 7e:5f:12:87:35:f2:27:56:d6:62:9f:20:b6:e2:a9: d7:72:d8:7b:a6:cb:23:7b:2a:e5:c6:f5:b5:67:5b: 6d:d2:fd:72:29:5b:74:88:47:9e:b1:cf:a7:4c:55: b1:18:f8:f4:1f:a2:01:c9:b6:32:a4:c7:63:78:85: 06:81:5c:24:38:1a:4e:87:06:f8:46:cd:bb:07:62: ab:99:6f:04:58:f7:08:1a:25:3c:8d:ef:ac:be:16: c2:c9:d7:d1:4d:b4:58:9d:8d:3f:0a:82:3a:f5:b2: 97:c0:b4:9e:1f:dc:d5:27:0e:d1:a4:6d:7c:38:68: 99:57:b9:ea:6b:e2:a0:a2:ef:3d:cd:71:cb:56:f0: 26:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:83:71:55:64:F8:DD:74:D9:E4:CB:1B:B2:B1:51:A6:14:50:FF:2C X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e302e302f32312d3234203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.234.0.0/21 Signature Algorithm: sha256WithRSAEncryption 60:3f:e0:16:5c:0d:7d:5a:2c:ab:e1:8f:95:69:c9:c0:79:88: b0:a8:2b:85:32:5b:88:e7:71:ef:43:c0:64:57:2c:85:56:fe: c0:d0:3e:83:79:25:be:5a:1e:df:20:5c:90:e1:f3:6b:e4:65: b0:2f:e7:3d:3f:8f:a3:8e:58:7b:e0:57:72:70:14:47:0a:25: 9d:cf:7e:14:bb:0e:59:03:0c:62:59:b7:f0:3e:3b:1f:94:ac: 7b:20:97:ce:f1:6a:3c:48:da:14:7d:d9:6c:17:26:76:02:ac: 24:fe:57:c7:0d:17:f3:be:43:6d:49:eb:df:88:51:a7:98:84: 5a:9a:f9:7a:6f:0d:54:dd:b0:e3:c7:41:b9:82:85:bc:a2:f6: d4:69:cd:20:a9:6b:53:c9:13:2b:34:ce:c5:5b:5a:bf:66:52: 44:76:5d:34:cd:27:f3:2c:7e:ea:95:a9:81:b9:f4:39:1d:7d: d0:aa:b2:c8:1e:a4:05:98:67:6b:b8:fe:d9:84:84:a2:bc:da: ba:79:52:ba:1f:9e:12:cf:6d:95:42:07:cf:f6:a4:44:54:16: 9b:ee:a1:17:9d:80:15:56:ce:f7:46:e9:34:2e:9e:4c:c3:04: 4f:bc:c8:90:2d:9b:61:c6:84:b4:88:d2:52:18:98:9c:88:8a: 46:ed:7e:40 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUD9dqDyaZk64MQhi1xhfbelMkjzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzJaFw0yNzAxMTkwMjIxMzJaMDMxMTAvBgNV BAMTKDAxODM3MTU1NjRGOERENzREOUU0Q0IxQkIyQjE1MUE2MTQ1MEZGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pH1hdvcbt/qbC1C4vgij6x/2 E5rTrvrr+1kRoa7vb3XWoEKxVwmD2kevIjgD2gUTUaR0XhRj3+uzvSPSPbc/Bp0u jQo93JOwQgZ+ANO/2txXCxo5wQ6UeRZxHjQ3x+tJ1EA/rnP1ShbQpK9VDBzneAat gkJ/7X5fEoc18idW1mKfILbiqddy2HumyyN7KuXG9bVnW23S/XIpW3SIR56xz6dM VbEY+PQfogHJtjKkx2N4hQaBXCQ4Gk6HBvhGzbsHYquZbwRY9wgaJTyN76y+FsLJ 19FNtFidjT8Kgjr1spfAtJ4f3NUnDtGkbXw4aJlXuepr4qCi7z3NcctW8CbdAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUAYNxVWT43XTZ5MsbsrFRphRQ/ywwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTQwMDMyMS8wLzMyMzEzOTJlMzIz MzM0MmUzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzMzOTMwMzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9vqADANBgkqhkiG9w0BAQsFAAOCAQEAYD/gFlwNfVosq+GPlWnJwHmI sKgrhTJbiOdx70PAZFcshVb+wNA+g3klvloe3yBckOHza+RlsC/nPT+Po45Ye+BX cnAURwolnc9+FLsOWQMMYlm38D47H5SseyCXzvFqPEjaFH3ZbBcmdgKsJP5Xxw0X 875DbUnr34hRp5iEWpr5em8NVN2w48dBuYKFvKL21GnNIKlrU8kTKzTOxVtav2ZS RHZdNM0n8yx+6pWpgbn0OR190KqyyB6kBZhna7j+2YSEorzaunlSuh+eEs9tlUIH z/akRFQWm+6hF52AFVbO90bpNC6eTMMET7zIkC2bYcaEtIjSUhiYnIiKRu1+QA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:48 2026 by rpki-client