This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20323131333932.roa File: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (raw, json) Hash identifier: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo= Subject key identifier: E0:D7:B6:F2:B6:10:6C:5C:77:5A:45:CD:5F:B2:A8:C2:93:CD:47:9D Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Certificate serial: 71D17E755CB3EC008739B307039343A8D4FE2AF8 Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20323131333932.roa Signing time: Tue 20 Jan 2026 02:09:29 +0000 ROA not before: Tue 20 Jan 2026 02:04:29 +0000 ROA not after: Tue 19 Jan 2027 02:09:29 +0000 asID: 211392 IP address blocks: 157.66.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d1:7e:75:5c:b3:ec:00:87:39:b3:07:03:93:43:a8:d4:fe:2a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Validity Not Before: Jan 20 02:04:29 2026 GMT Not After : Jan 19 02:09:29 2027 GMT Subject: CN=E0D7B6F2B6106C5C775A45CD5FB2A8C293CD479D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:90:64:57:36:58:11:7f:ab:31:98:26:c0: a3:7a:9c:56:df:94:0d:82:99:12:bc:41:b5:61:21: c0:00:3b:e9:08:bc:32:59:cd:7d:99:fc:1e:0d:7a: e1:46:9a:21:15:05:27:41:9d:0e:0d:a7:cc:b4:34: 0f:37:2e:97:d3:2b:7e:00:e6:5c:96:a1:da:e3:82: 3a:d9:55:a7:a9:da:fc:28:e1:b0:85:01:13:16:52: c0:a1:bc:27:dc:10:66:ae:c6:f0:91:99:c0:1b:79: 39:f6:80:14:31:99:f2:9d:99:47:92:de:4c:b2:ec: a9:16:57:ec:e8:14:6d:f2:6d:ef:71:ee:59:7d:08: 97:b7:78:48:e0:a8:2e:55:1a:a9:5c:5b:f8:04:6d: a0:6b:d1:c7:32:73:f2:98:63:ba:85:81:b2:43:9e: 2c:3c:15:89:2a:80:bb:4e:8d:01:07:ec:1f:29:b1: e6:32:06:89:19:3c:ca:47:4c:5c:6f:5e:63:d0:2f: be:54:00:9c:c8:d2:51:d9:14:17:5d:fb:ca:e0:b8: 29:fc:d1:0b:7b:01:91:67:25:01:c5:d5:b9:54:03: e0:8f:d1:ac:af:2e:69:40:71:7f:5a:7b:2f:be:49: 84:5e:1f:d0:c5:91:bf:d8:17:98:e8:ab:db:dd:8c: dc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D7:B6:F2:B6:10:6C:5C:77:5A:45:CD:5F:B2:A8:C2:93:CD:47:9D X509v3 Authority Key Identifier: keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20323131333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.42.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:17:8a:68:fd:f4:b0:47:14:86:f5:41:fc:dd:49:f7:a5:40: 12:1b:ea:fc:df:17:bd:20:4b:db:2e:9d:c8:d1:4b:df:4c:4b: c0:aa:46:04:01:d2:4c:05:7f:d7:da:89:30:c7:5b:3c:e8:a0: aa:bb:a8:78:f5:6f:50:9a:fe:e9:25:cb:93:a0:45:71:1a:0f: ba:de:87:b6:09:e2:2d:9d:4e:0c:8d:65:0c:91:55:fd:80:ff: 6d:ea:b3:fe:48:07:ed:d8:cd:f0:04:fa:31:ca:ee:c9:7f:69: 30:d1:db:97:b2:2f:05:f3:dc:be:f4:a8:23:9d:4f:24:0c:bc: 0a:90:16:55:fd:dc:4c:a9:fa:8a:31:09:fc:da:ed:e7:57:04: 9c:2e:58:06:e9:53:9b:54:cc:2a:92:11:66:e2:98:37:42:e6: e6:2f:6c:01:d6:c5:17:12:a1:ea:2f:16:42:46:4f:25:83:a3: c3:74:9b:29:f9:d7:8e:f5:95:af:5f:16:36:a6:89:b5:46:c5: 84:34:2c:3b:a5:2c:29:a0:0c:67:6d:23:95:b6:f9:a2:d8:3b: b6:e0:de:96:4d:e5:e1:f0:27:53:ce:cf:98:2e:4f:7e:ca:2e: 06:90:16:4b:88:6b:57:bd:1f:a3:49:29:27:7d:53:86:9d:65: 32:a5:32:a9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUcdF+dVyz7ACHObMHA5NDqNT+KvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3 QzkwNTUxNjAeFw0yNjAxMjAwMjA0MjlaFw0yNzAxMTkwMjA5MjlaMDMxMTAvBgNV BAMTKEUwRDdCNkYyQjYxMDZDNUM3NzVBNDVDRDVGQjJBOEMyOTNDRDQ3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1h5BkVzZYEX+rMZgmwKN6nFbf lA2CmRK8QbVhIcAAO+kIvDJZzX2Z/B4NeuFGmiEVBSdBnQ4Np8y0NA83LpfTK34A 5lyWodrjgjrZVaep2vwo4bCFARMWUsChvCfcEGauxvCRmcAbeTn2gBQxmfKdmUeS 3kyy7KkWV+zoFG3ybe9x7ll9CJe3eEjgqC5VGqlcW/gEbaBr0ccyc/KYY7qFgbJD niw8FYkqgLtOjQEH7B8pseYyBokZPMpHTFxvXmPQL75UAJzI0lHZFBdd+8rguCn8 0Qt7AZFnJQHF1blUA+CP0ayvLmlAcX9aey++SYReH9DFkb/YF5joq9vdjNyxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU4Ne28rYQbFx3WkXNX7KowpPNR50wHwYDVR0j BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTY4MzA2MTk3Mjk5NC8wLzMxMzUzNzJlMzYz NjJlMzQzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzEzMTMzMzkzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAZ1CKjANBgkqhkiG9w0BAQsFAAOCAQEACheKaP30sEcUhvVB/N1J96VA Ehvq/N8XvSBL2y6dyNFL30xLwKpGBAHSTAV/19qJMMdbPOigqruoePVvUJr+6SXL k6BFcRoPut6HtgniLZ1ODI1lDJFV/YD/beqz/kgH7djN8AT6McruyX9pMNHbl7Iv BfPcvvSoI51PJAy8CpAWVf3cTKn6ijEJ/Nrt51cEnC5YBulTm1TMKpIRZuKYN0Lm 5i9sAdbFFxKh6i8WQkZPJYOjw3SbKfnXjvWVr18WNqaJtUbFhDQsO6UsKaAMZ20j lbb5otg7tuDelk3l4fAnU87PmC5PfsouBpAWS4hrV70fo0kpJ31Thp1lMqUyqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:55 2026 by rpki-client