This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/3231302e38372e37322e302f32332d3233203d3e20323131333932.roa File: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (raw, json) Hash identifier: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg= Subject key identifier: 3C:99:E5:CC:05:BF:4D:BB:72:43:CC:FC:38:36:D3:89:14:F4:9E:01 Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E Certificate serial: 02778CAFF3ADFF5353545EA258EA48D60294CAD2 Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/3231302e38372e37322e302f32332d3233203d3e20323131333932.roa Signing time: Tue 20 Jan 2026 02:14:13 +0000 ROA not before: Tue 20 Jan 2026 02:09:13 +0000 ROA not after: Tue 19 Jan 2027 02:14:13 +0000 asID: 211392 IP address blocks: 210.87.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:77:8c:af:f3:ad:ff:53:53:54:5e:a2:58:ea:48:d6:02:94:ca:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E Validity Not Before: Jan 20 02:09:13 2026 GMT Not After : Jan 19 02:14:13 2027 GMT Subject: CN=3C99E5CC05BF4DBB7243CCFC3836D38914F49E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:3f:00:70:dc:79:13:01:93:44:60:82:ae: 01:4b:d6:5e:00:00:db:6b:70:16:74:c1:40:6f:0f: 52:f6:8e:57:6f:3d:dd:41:78:6d:2b:08:cd:56:d9: f7:16:af:98:41:b0:6c:01:d0:b6:06:d7:bd:3b:61: 15:2a:09:39:c0:05:ae:f6:33:c2:e4:39:3d:4b:f0: 68:fa:9b:26:07:c5:73:f5:35:76:ee:95:fb:cc:6f: 29:04:f7:66:2d:fa:88:3c:3b:de:79:f1:58:2f:f0: c9:87:12:4a:a1:6c:f9:46:83:ba:ea:74:de:6b:60: 20:24:aa:d0:34:e1:20:86:04:92:f4:98:cf:d5:28: 12:9c:ff:bc:77:94:1b:23:09:34:05:1f:23:2d:39: f3:3e:cb:ab:2b:2d:91:e3:14:db:1d:81:c4:cf:c8: 6d:ba:33:ac:f6:bc:60:20:e7:92:81:b7:85:ee:3a: 3e:aa:f5:0e:35:55:a3:98:6c:f3:23:02:b9:d5:a5: 0b:9a:41:0e:49:6d:8a:45:81:ec:1a:94:f9:28:bf: f6:56:e2:95:0c:a7:af:99:9d:aa:63:a4:1e:b7:76: 57:bf:64:fb:fd:f2:89:56:d8:a8:56:be:50:7a:4d: a9:4c:7b:be:9f:df:4c:6b:9f:e1:e6:15:ab:ab:8e: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:99:E5:CC:05:BF:4D:BB:72:43:CC:FC:38:36:D3:89:14:F4:9E:01 X509v3 Authority Key Identifier: keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/3231302e38372e37322e302f32332d3233203d3e20323131333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.72.0/23 Signature Algorithm: sha256WithRSAEncryption ae:31:59:6b:c9:63:da:fe:c5:41:53:d8:77:ca:1e:90:54:8e: 8b:31:3a:6a:fc:b3:c9:54:fc:a7:f7:3a:b8:92:c7:4d:9e:7d: bf:4a:aa:d9:af:70:51:eb:70:d6:27:53:b1:2d:28:96:6a:a0: 62:9c:7f:54:5b:2c:ac:7f:eb:df:6e:29:ec:cc:25:72:98:a4: 7a:37:9a:f7:f5:04:29:7c:86:8e:63:c2:07:6c:ed:43:2c:04: c5:5b:f5:4b:68:30:96:0f:71:b3:8e:db:2a:fe:95:2e:76:ff: 96:d6:d0:a0:94:ff:7b:4a:8e:54:18:6c:d0:97:4b:e0:32:19: 24:03:f1:a6:f4:4d:cf:cd:5a:58:7e:8b:ab:23:1d:6d:20:51: d5:45:76:08:63:2b:e2:25:be:d5:06:fb:d2:e1:af:e7:f7:bc: b0:e7:ec:b9:17:b6:54:58:a0:8a:6e:f4:31:e6:74:82:12:b7: 1b:0f:77:0f:66:f1:4e:21:c4:e9:01:83:db:11:e4:bc:a5:5f: d1:d8:f4:df:72:69:6a:1b:f5:b6:c3:8a:f4:7c:6c:7a:c4:9a: e5:50:18:2a:9c:7c:e7:59:c0:b0:4b:7f:f2:74:0f:05:95:7f: 86:23:52:02:70:ba:17:17:07:90:ca:43:ed:61:f0:ac:03:57: 7d:68:3e:2b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAneMr/Ot/1NTVF6iWOpI1gKUytIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZB QjNCOTA3RTAeFw0yNjAxMjAwMjA5MTNaFw0yNzAxMTkwMjE0MTNaMDMxMTAvBgNV BAMTKDNDOTlFNUNDMDVCRjREQkI3MjQzQ0NGQzM4MzZEMzg5MTRGNDlFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWED8AcNx5EwGTRGCCrgFL1l4A ANtrcBZ0wUBvD1L2jldvPd1BeG0rCM1W2fcWr5hBsGwB0LYG1707YRUqCTnABa72 M8LkOT1L8Gj6myYHxXP1NXbulfvMbykE92Yt+og8O9558Vgv8MmHEkqhbPlGg7rq dN5rYCAkqtA04SCGBJL0mM/VKBKc/7x3lBsjCTQFHyMtOfM+y6srLZHjFNsdgcTP yG26M6z2vGAg55KBt4XuOj6q9Q41VaOYbPMjArnVpQuaQQ5JbYpFgewalPkov/ZW 4pUMp6+ZnapjpB63dle/ZPv98olW2KhWvlB6TalMe76f30xrn+HmFaurjqvPAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUPJnlzAW/TbtyQ8z8ODbTiRT0ngEwHwYDVR0j BBgwFoAUbsHjTq3qInCV1XjnhMhcj6s7kH4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTkwNzQ1OC8wLzZFQzFFMzRFQURFQTIyNzA5NUQ1NzhFNzg0Qzg1 QzhGQUIzQjkwN0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZBQjNCOTA3RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTY4MzA2MTkwNzQ1OC8wLzMyMzEzMDJlMzgz NzJlMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzEzMTMzMzkzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAdJXSDANBgkqhkiG9w0BAQsFAAOCAQEArjFZa8lj2v7FQVPYd8oekFSO izE6avyzyVT8p/c6uJLHTZ59v0qq2a9wUetw1idTsS0olmqgYpx/VFssrH/r324p 7Mwlcpikejea9/UEKXyGjmPCB2ztQywExVv1S2gwlg9xs47bKv6VLnb/ltbQoJT/ e0qOVBhs0JdL4DIZJAPxpvRNz81aWH6LqyMdbSBR1UV2CGMr4iW+1Qb70uGv5/e8 sOfsuRe2VFigim70MeZ0ghK3Gw93D2bxTiHE6QGD2xHkvKVf0dj033Jpahv1tsOK 9HxsesSa5VAYKpx851nAsEt/8nQPBZV/hiNSAnC6FxcHkMpD7WHwrANXfWg+Kw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:48 2026 by rpki-client