This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e382e302f32312d3234203d3e20313339303231.roa File: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (raw, json) Hash identifier: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4= Subject key identifier: 91:CC:46:88:BF:E9:8F:0E:35:86:CE:D5:E3:03:DC:6F:15:F4:FF:01 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 5F44BEE8CDE5A287BC145179B5D3A0BF7FBE8C55 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e382e302f32312d3234203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:32 +0000 ROA not before: Tue 20 Jan 2026 02:16:32 +0000 ROA not after: Tue 19 Jan 2027 02:21:32 +0000 asID: 139021 IP address blocks: 219.234.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:44:be:e8:cd:e5:a2:87:bc:14:51:79:b5:d3:a0:bf:7f:be:8c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:32 2026 GMT Not After : Jan 19 02:21:32 2027 GMT Subject: CN=91CC4688BFE98F0E3586CED5E303DC6F15F4FF01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:9d:e0:55:df:f0:02:4b:38:89:9d:0c:97: 40:f2:3e:37:dc:46:1f:cc:66:9d:b0:ce:89:3a:31: 11:4f:2a:f9:58:f4:3e:7c:2e:de:e5:1b:01:58:f5: 31:44:63:33:db:0d:c4:76:13:23:ce:da:3c:e4:31: a6:3e:b8:ff:2e:9e:d7:f9:0c:5d:f8:ee:50:42:c5: 3d:7e:4a:c6:a4:a7:60:6c:ba:f4:3e:2e:e9:69:95: 2f:e3:56:a0:da:f2:70:78:09:47:63:78:c4:e8:5c: 06:c6:51:0c:5e:1d:df:f0:ad:a5:ff:7e:8d:f1:ba: 02:66:dd:e2:1f:dc:f5:21:b2:7d:2f:36:5a:59:ea: 64:f8:09:fe:23:f5:23:95:6d:7b:3f:15:54:db:4b: b0:b9:6b:d9:b2:19:f4:9f:97:a4:ea:37:0f:85:b8: 61:04:c9:e4:bd:21:80:99:ed:6a:97:b7:54:9d:52: 64:ec:4a:d6:9a:49:9b:4c:ae:10:d3:96:5f:26:a9: f9:ee:0a:46:ee:8f:12:ca:e8:14:0f:47:bc:30:a4: c8:28:08:35:d6:b3:d9:70:2a:1f:8f:2b:67:be:d9: 7c:99:2a:9c:6c:e5:6b:91:32:d4:b1:90:75:04:73: 90:16:4d:22:a4:09:6c:86:6d:8f:33:5b:15:78:c4: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CC:46:88:BF:E9:8F:0E:35:86:CE:D5:E3:03:DC:6F:15:F4:FF:01 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3231392e3233342e382e302f32312d3234203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.234.8.0/21 Signature Algorithm: sha256WithRSAEncryption 39:58:bd:3c:74:82:c7:20:18:4f:59:6c:86:fb:08:aa:4e:b5: 1e:c6:53:ae:84:71:18:04:38:e3:c1:1b:14:fa:5f:6c:e6:48: 83:04:ad:06:3d:5d:59:74:0e:17:13:51:91:4f:49:bd:91:6a: 2b:a9:0e:87:09:cb:e3:4c:50:7f:3b:30:4e:b5:40:03:2f:78: 14:79:04:75:55:55:c8:31:c4:8d:2a:3d:5a:29:e5:24:7a:77: 1f:f5:c8:bb:22:de:a3:62:f2:ec:7d:76:a5:39:92:b2:ed:0a: f0:0b:80:bb:81:70:51:b3:7c:84:69:5d:60:64:f1:32:84:00: c9:06:a1:1d:2a:d1:7c:95:71:63:ae:12:72:68:35:88:58:5e: 53:51:66:63:74:a1:e6:f0:93:da:8f:16:c2:0b:ab:51:e1:9f: 37:4c:11:b7:c4:2c:a3:ba:d6:a1:9a:e1:53:6a:8e:0c:66:56: 87:f5:0c:37:d1:f9:d4:b1:f9:7a:05:25:39:3d:23:b7:c9:eb: a0:49:a5:68:9b:ee:a9:2e:69:7b:bf:b0:b0:62:60:c7:d0:39: e8:8c:44:20:76:24:75:fa:bf:16:db:49:30:6f:bf:2b:e7:c8: b0:98:37:55:e3:4a:b4:c8:00:fa:d9:c1:cb:22:86:54:07:46: d7:00:ba:45 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUX0S+6M3looe8FFF5tdOgv3++jFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzJaFw0yNzAxMTkwMjIxMzJaMDMxMTAvBgNV BAMTKDkxQ0M0Njg4QkZFOThGMEUzNTg2Q0VENUUzMDNEQzZGMTVGNEZGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPq53gVd/wAks4iZ0Ml0DyPjfc Rh/MZp2wzok6MRFPKvlY9D58Lt7lGwFY9TFEYzPbDcR2EyPO2jzkMaY+uP8untf5 DF347lBCxT1+Ssakp2BsuvQ+LulplS/jVqDa8nB4CUdjeMToXAbGUQxeHd/wraX/ fo3xugJm3eIf3PUhsn0vNlpZ6mT4Cf4j9SOVbXs/FVTbS7C5a9myGfSfl6TqNw+F uGEEyeS9IYCZ7WqXt1SdUmTsStaaSZtMrhDTll8mqfnuCkbujxLK6BQPR7wwpMgo CDXWs9lwKh+PK2e+2XyZKpxs5WuRMtSxkHUEc5AWTSKkCWyGbY8zWxV4xPRVAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUkcxGiL/pjw41hs7V4wPcbxX0/wEwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTQwMDMyMS8wLzMyMzEzOTJlMzIz MzM0MmUzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzMzOTMwMzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAOVi9PHSCxyAYT1lshvsIqk61 HsZTroRxGAQ448EbFPpfbOZIgwStBj1dWXQOFxNRkU9JvZFqK6kOhwnL40xQfzsw TrVAAy94FHkEdVVVyDHEjSo9WinlJHp3H/XIuyLeo2Ly7H12pTmSsu0K8AuAu4Fw UbN8hGldYGTxMoQAyQahHSrRfJVxY64Scmg1iFheU1FmY3Sh5vCT2o8WwgurUeGf N0wRt8Qso7rWoZrhU2qODGZWh/UMN9H51LH5egUlOT0jt8nroEmlaJvuqS5pe7+w sGJgx9A56IxEIHYkdfq/FttJMG+/K+fIsJg3VeNKtMgA+tnByyKGVAdG1wC6RQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:34 2026 by rpki-client