This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa File: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (raw, json) Hash identifier: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw= Subject key identifier: F4:5F:23:38:BD:3C:1F:6B:40:70:E1:12:CD:EE:BD:B7:B5:BF:A8:39 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 0238D1F51A676CF431A868394DACF5049B824DF3 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:33 +0000 ROA not before: Tue 20 Jan 2026 02:16:33 +0000 ROA not after: Tue 19 Jan 2027 02:21:33 +0000 asID: 139021 IP address blocks: 219.234.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:38:d1:f5:1a:67:6c:f4:31:a8:68:39:4d:ac:f5:04:9b:82:4d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:33 2026 GMT Not After : Jan 19 02:21:33 2027 GMT Subject: CN=F45F2338BD3C1F6B4070E112CDEEBDB7B5BFA839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:66:7c:40:9f:20:d1:d3:8d:6f:b5:a3:ba:66: 5a:65:af:76:2b:8e:a6:ca:3e:57:88:54:ea:28:ca: 17:e7:4a:f9:fc:45:58:5e:9c:4c:d6:3f:ee:60:4c: 57:b1:8a:2f:ce:43:21:7b:e2:d8:c2:55:c2:66:7c: cf:e0:10:d6:26:d6:db:db:a8:73:93:13:c5:59:d5: 9a:3c:25:25:ed:8b:c4:6e:86:18:56:9b:d3:6e:04: 23:f1:8c:55:36:ab:60:48:84:9e:73:29:12:f7:ea: ef:50:6c:cd:38:28:10:6e:7f:4e:91:54:0f:39:0d: 54:5b:c5:3d:2c:e4:c6:f5:d1:a7:c9:75:78:20:bc: 8d:a6:e0:92:11:d5:14:90:7b:18:cf:c5:b5:6d:0b: 2c:0c:19:c3:ab:50:2b:fb:c8:ac:f0:28:f2:6f:33: 71:61:db:cc:f3:02:aa:ed:2b:66:2a:69:a5:c4:c5: 7e:21:4d:4f:9e:cd:69:a9:6e:14:dc:06:33:86:e8: 8e:f4:98:43:57:d6:4e:16:bc:0d:0b:cb:ba:17:b4: 91:ad:99:ed:8c:31:b5:a3:a3:64:ca:e0:61:7f:63: 78:3e:df:67:10:74:0b:7a:4a:4c:f4:04:ed:76:82: 71:35:83:61:e3:50:68:d7:38:17:e9:93:92:60:ff: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5F:23:38:BD:3C:1F:6B:40:70:E1:12:CD:EE:BD:B7:B5:BF:A8:39 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.234.16.0/20 Signature Algorithm: sha256WithRSAEncryption 24:cb:e5:1e:59:ab:d5:c4:8a:f6:8f:15:a1:fa:bd:c8:0b:aa: 68:a5:32:75:03:34:b6:51:b5:c4:64:99:82:f3:b1:19:b3:ac: f7:96:c4:6a:8f:17:45:2c:14:ed:34:09:21:f4:fc:c0:b2:a3: 4d:9b:dc:30:99:a1:ca:a0:79:77:fd:77:4c:62:de:0b:08:e3: d8:23:21:57:92:7b:7c:7b:2f:6b:d3:d2:a6:6d:0c:bf:01:0b: f5:a3:ed:49:b8:7f:c8:ff:02:b5:4d:c1:f5:46:e4:49:ef:bc: 63:16:ec:b3:cb:60:a6:2c:18:1c:3d:39:ef:29:5c:92:24:ac: bc:6c:a8:63:77:a3:e1:ff:22:d8:7f:49:79:15:1e:be:33:d9: 84:86:6e:66:72:d2:9b:da:ca:e0:9c:2e:3f:3b:ee:44:32:fa: 30:cf:13:5c:49:80:ad:45:16:3c:67:dd:0c:e4:6e:36:c2:e2: 3d:b2:55:d5:8a:f1:05:0e:4b:06:e5:84:86:ea:26:e3:e1:66: 2d:0a:78:5d:b2:0c:f9:0f:8e:25:d8:c8:7b:a5:52:18:e4:75: 26:1c:27:78:83:91:c5:b7:d6:13:b1:60:66:8f:d8:48:57:5c: ac:28:3b:98:5f:c8:5f:a7:f8:1b:52:6e:de:8c:7d:26:59:33: a6:12:60:3e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUAjjR9RpnbPQxqGg5Taz1BJuCTfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzNaFw0yNzAxMTkwMjIxMzNaMDMxMTAvBgNV BAMTKEY0NUYyMzM4QkQzQzFGNkI0MDcwRTExMkNERUVCREI3QjVCRkE4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZnxAnyDR041vtaO6Zlplr3Yr jqbKPleIVOooyhfnSvn8RVhenEzWP+5gTFexii/OQyF74tjCVcJmfM/gENYm1tvb qHOTE8VZ1Zo8JSXti8RuhhhWm9NuBCPxjFU2q2BIhJ5zKRL36u9QbM04KBBuf06R VA85DVRbxT0s5Mb10afJdXggvI2m4JIR1RSQexjPxbVtCywMGcOrUCv7yKzwKPJv M3Fh28zzAqrtK2YqaaXExX4hTU+ezWmpbhTcBjOG6I70mENX1k4WvA0Ly7oXtJGt me2MMbWjo2TK4GF/Y3g+32cQdAt6Skz0BO12gnE1g2HjUGjXOBfpk5Jg/+v9AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU9F8jOL08H2tAcOESze69t7W/qDkwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC8zMjMxMzkyZTMy MzMzNDJlMzEzNjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzMzOTMwMzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBNvqEDANBgkqhkiG9w0BAQsFAAOCAQEAJMvlHlmr1cSK9o8Vofq9 yAuqaKUydQM0tlG1xGSZgvOxGbOs95bEao8XRSwU7TQJIfT8wLKjTZvcMJmhyqB5 d/13TGLeCwjj2CMhV5J7fHsva9PSpm0MvwEL9aPtSbh/yP8CtU3B9UbkSe+8Yxbs s8tgpiwYHD057ylckiSsvGyoY3ej4f8i2H9JeRUevjPZhIZuZnLSm9rK4JwuPzvu RDL6MM8TXEmArUUWPGfdDORuNsLiPbJV1YrxBQ5LBuWEhuom4+FmLQp4XbIM+Q+O JdjIe6VSGOR1JhwneIORxbfWE7FgZo/YSFdcrCg7mF/IX6f4G1Ju3ox9JlkzphJg Pg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:43 2026 by rpki-client