This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa File: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (raw, json) Hash identifier: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk= Subject key identifier: F4:76:5A:95:16:16:2C:C5:E0:49:CA:F3:EF:02:9A:3A:2C:3C:D8:4A Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 46BC0063EF0DFADD29DCACD342C230C369A36692 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:33 +0000 ROA not before: Tue 20 Jan 2026 02:16:33 +0000 ROA not after: Tue 19 Jan 2027 02:21:33 +0000 asID: 139021 IP address blocks: 219.234.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:bc:00:63:ef:0d:fa:dd:29:dc:ac:d3:42:c2:30:c3:69:a3:66:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:33 2026 GMT Not After : Jan 19 02:21:33 2027 GMT Subject: CN=F4765A9516162CC5E049CAF3EF029A3A2C3CD84A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:27:df:a6:39:28:2a:c5:04:67:46:e0:3e: b8:e3:fc:b3:8c:e2:e6:61:c4:31:4a:e4:fa:4c:49: 75:7f:f2:95:c0:c0:18:92:3b:9c:d7:df:ca:2f:ed: 43:44:18:da:af:03:cc:98:f4:98:65:11:c5:14:01: 93:de:2a:5a:bf:6d:97:96:3a:1c:da:6b:c4:65:6f: d5:e0:5f:c1:ff:fc:97:0c:39:cb:b8:90:61:44:27: fb:87:28:6f:6d:c6:3a:eb:a1:d8:f5:53:d4:94:9a: 7a:d4:ad:6e:10:4d:6a:4b:7a:56:87:10:43:4d:03: ab:35:9c:fa:00:2b:02:cc:56:07:eb:de:8c:f7:9b: 76:d9:f3:c8:0b:53:1f:57:47:c0:1e:2b:58:3d:e2: 62:50:e6:41:c1:cf:a6:4e:7c:ca:bd:78:f4:b3:c6: fb:e2:93:6d:34:d7:fd:6d:1d:38:87:47:64:9c:40: 88:e9:72:21:02:75:7a:81:2c:93:3f:fa:35:0e:8d: f9:40:11:c9:9f:71:0a:20:21:8b:03:73:07:1b:a9: 74:e7:59:3b:53:2f:03:c5:39:7a:a6:11:06:47:73: 53:43:30:ba:0b:26:36:8f:d2:35:33:51:44:69:3f: 05:5b:cb:29:79:fc:fa:dd:4d:9f:5f:ab:5e:c5:9c: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:76:5A:95:16:16:2C:C5:E0:49:CA:F3:EF:02:9A:3A:2C:3C:D8:4A X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.234.16.0/21 Signature Algorithm: sha256WithRSAEncryption 72:6c:a0:ef:3f:ef:6b:c8:72:d6:4e:e5:48:bd:a5:d9:6a:ca: 41:e3:9b:0d:6f:91:72:02:77:92:45:91:7c:73:e0:fb:3a:92: 78:6f:c8:6a:8a:b6:cf:84:de:5d:92:95:3a:cf:c7:cf:66:77: 7e:1c:b6:03:88:8f:df:d3:f1:55:4a:73:b8:df:f4:9f:20:05: 7e:df:1b:5e:70:59:dc:32:db:bf:51:ba:ca:01:66:10:e5:04: 4a:7c:4a:63:8e:6e:ce:68:17:e0:e4:ea:87:96:fc:27:92:e4: 61:19:69:06:e7:80:83:de:81:a3:1d:ab:f6:6e:f2:1f:c3:60: ba:2c:6a:7b:2e:92:46:a5:77:df:06:50:92:8c:4a:8f:16:15: 31:20:12:79:04:bb:89:4a:2c:f9:af:f6:1f:e7:72:1d:23:16: 44:3a:31:61:91:de:b3:73:62:6d:89:a2:c5:b8:45:c4:30:e5: e0:45:b8:4d:be:ce:df:ec:92:84:91:1d:75:8a:13:26:0d:df: 44:c0:41:fe:6a:23:44:b4:35:3f:79:6a:3b:16:b9:4c:b3:a5: 5c:c5:fb:bb:f3:54:fb:0d:cb:57:ca:38:19:70:6f:9f:a8:ae: 46:da:11:3f:3a:46:99:a2:da:f4:20:c6:52:5c:81:79:74:75: b4:30:c1:7f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIURrwAY+8N+t0p3KzTQsIww2mjZpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzNaFw0yNzAxMTkwMjIxMzNaMDMxMTAvBgNV BAMTKEY0NzY1QTk1MTYxNjJDQzVFMDQ5Q0FGM0VGMDI5QTNBMkMzQ0Q4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQVSffpjkoKsUEZ0bgPrjj/LOM 4uZhxDFK5PpMSXV/8pXAwBiSO5zX38ov7UNEGNqvA8yY9JhlEcUUAZPeKlq/bZeW Ohzaa8Rlb9XgX8H//JcMOcu4kGFEJ/uHKG9txjrrodj1U9SUmnrUrW4QTWpLelaH EENNA6s1nPoAKwLMVgfr3oz3m3bZ88gLUx9XR8AeK1g94mJQ5kHBz6ZOfMq9ePSz xvvik2001/1tHTiHR2ScQIjpciECdXqBLJM/+jUOjflAEcmfcQogIYsDcwcbqXTn WTtTLwPFOXqmEQZHc1NDMLoLJjaP0jUzUURpPwVbyyl5/PrdTZ9fq17FnPZ3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU9HZalRYWLMXgScrz7wKaOiw82EowHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC8zMjMxMzkyZTMy MzMzNDJlMzEzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzOTMwMzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9vqEDANBgkqhkiG9w0BAQsFAAOCAQEAcmyg7z/va8hy1k7lSL2l 2WrKQeObDW+RcgJ3kkWRfHPg+zqSeG/Iaoq2z4TeXZKVOs/Hz2Z3fhy2A4iP39Px VUpzuN/0nyAFft8bXnBZ3DLbv1G6ygFmEOUESnxKY45uzmgX4OTqh5b8J5LkYRlp BueAg96Box2r9m7yH8Nguixqey6SRqV33wZQkoxKjxYVMSASeQS7iUos+a/2H+dy HSMWRDoxYZHes3NibYmixbhFxDDl4EW4Tb7O3+yShJEddYoTJg3fRMBB/mojRLQ1 P3lqOxa5TLOlXMX7u/NU+w3LV8o4GXBvn6iuRtoRPzpGmaLa9CDGUlyBeXR1tDDB fw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:30 2026 by rpki-client