This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20343031313630.roa File: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (raw, json) Hash identifier: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw= Subject key identifier: 0F:F7:AD:74:F8:CF:7E:5A:FA:7D:32:95:2A:6A:C6:C2:B3:A6:67:07 Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Certificate serial: 41C150380A00EA85E2821FF5EF55C30F884A8681 Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20343031313630.roa Signing time: Tue 20 Jan 2026 02:09:30 +0000 ROA not before: Tue 20 Jan 2026 02:04:30 +0000 ROA not after: Tue 19 Jan 2027 02:09:30 +0000 asID: 401160 IP address blocks: 157.66.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c1:50:38:0a:00:ea:85:e2:82:1f:f5:ef:55:c3:0f:88:4a:86:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Validity Not Before: Jan 20 02:04:30 2026 GMT Not After : Jan 19 02:09:30 2027 GMT Subject: CN=0FF7AD74F8CF7E5AFA7D32952A6AC6C2B3A66707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:82:d9:24:7e:93:5e:b9:e3:93:9a:b5:71: 7a:a8:38:35:4d:9c:da:cc:74:ed:5b:e3:1d:b4:23: 29:b6:55:c9:93:6d:65:2f:41:80:be:3c:55:06:ae: 80:1f:74:06:f8:10:b6:e9:0c:a7:22:70:7f:8b:c5: 49:e6:39:dd:09:93:c0:3c:ec:f6:3c:b7:d1:1c:f0: 2e:4a:77:be:b4:17:63:1d:0e:c1:21:8d:41:ed:0c: 66:65:e7:f2:8f:b2:0b:d8:df:ab:81:98:89:84:91: f7:5b:af:a6:de:b0:f9:b4:f4:6f:a7:99:5b:15:fa: 92:6e:6b:be:b8:e8:13:ec:65:76:3b:f7:34:af:a1: d8:22:e7:48:27:26:02:ee:73:2a:41:e2:84:e3:e7: 0f:df:ca:00:7b:e3:6c:00:12:1b:46:28:6e:72:01: 41:99:81:5c:50:a6:6b:0f:81:f2:52:5b:37:76:44: e5:ca:04:cf:e3:e3:fd:7c:0e:d9:c4:88:aa:af:be: a6:76:be:bd:71:3b:73:8a:69:35:b7:05:57:bd:60: 16:1a:ea:65:f3:0a:82:41:94:ae:e1:7c:65:d2:8e: 29:80:71:72:fc:1a:56:12:b8:65:58:2a:bc:52:bb: 84:06:80:07:df:cc:19:2c:53:b3:29:c6:16:51:78: 67:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F7:AD:74:F8:CF:7E:5A:FA:7D:32:95:2A:6A:C6:C2:B3:A6:67:07 X509v3 Authority Key Identifier: keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20343031313630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.42.0/23 Signature Algorithm: sha256WithRSAEncryption 53:80:6b:a1:01:df:4c:3a:c0:df:53:20:a4:3b:a8:96:52:95: b9:59:e7:80:65:8b:4f:be:18:5e:3d:32:2c:6f:8b:d1:9f:93: 52:7c:73:b1:fa:9f:43:5b:ce:f4:20:d9:cc:22:ff:3c:a1:23: 3c:f8:d5:3c:95:18:8a:14:dc:a9:35:f9:9e:1e:fe:58:22:61: 56:1a:66:f3:ee:65:d1:66:73:d1:30:d5:ad:f3:0d:70:b8:d3: ac:72:fb:b3:f8:b1:2f:55:34:9a:de:a1:27:9f:42:9a:61:5f: 53:fd:a0:69:eb:0a:5a:f2:81:19:c5:38:2d:96:83:2f:7d:00: 4d:8c:d5:79:1e:49:d0:06:41:e0:16:57:9b:af:f3:ce:e4:15: 98:6f:df:c9:69:cc:62:d4:0a:07:60:2e:68:23:35:a6:8e:06: 40:c6:29:8e:24:03:dc:85:d2:59:e8:0c:bc:ce:57:0e:4f:38: 3b:94:af:a6:f2:9f:92:b2:dc:b2:69:87:03:49:73:bd:9c:59: 4c:da:ad:f6:56:19:f5:b9:31:32:7b:3c:23:9d:75:28:da:c6: 76:00:54:7b:60:75:ca:69:74:56:0b:2f:7e:a6:f3:34:0a:42: f9:36:e6:6c:51:0b:ef:d7:9a:a9:4c:ec:67:28:64:c3:c6:65: 1c:59:88:bb -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQcFQOAoA6oXigh/171XDD4hKhoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3 QzkwNTUxNjAeFw0yNjAxMjAwMjA0MzBaFw0yNzAxMTkwMjA5MzBaMDMxMTAvBgNV BAMTKDBGRjdBRDc0RjhDRjdFNUFGQTdEMzI5NTJBNkFDNkMyQjNBNjY3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKILZJH6TXrnjk5q1cXqoODVN nNrMdO1b4x20Iym2VcmTbWUvQYC+PFUGroAfdAb4ELbpDKcicH+LxUnmOd0Jk8A8 7PY8t9Ec8C5Kd760F2MdDsEhjUHtDGZl5/KPsgvY36uBmImEkfdbr6besPm09G+n mVsV+pJua7646BPsZXY79zSvodgi50gnJgLucypB4oTj5w/fygB742wAEhtGKG5y AUGZgVxQpmsPgfJSWzd2ROXKBM/j4/18DtnEiKqvvqZ2vr1xO3OKaTW3BVe9YBYa 6mXzCoJBlK7hfGXSjimAcXL8GlYSuGVYKrxSu4QGgAffzBksU7MpxhZReGeJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUD/etdPjPflr6fTKVKmrGwrOmZwcwHwYDVR0j BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTY4MzA2MTk3Mjk5NC8wLzMxMzUzNzJlMzYz NjJlMzQzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzAzMTMxMzYzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAZ1CKjANBgkqhkiG9w0BAQsFAAOCAQEAU4BroQHfTDrA31MgpDuollKV uVnngGWLT74YXj0yLG+L0Z+TUnxzsfqfQ1vO9CDZzCL/PKEjPPjVPJUYihTcqTX5 nh7+WCJhVhpm8+5l0WZz0TDVrfMNcLjTrHL7s/ixL1U0mt6hJ59CmmFfU/2gaesK WvKBGcU4LZaDL30ATYzVeR5J0AZB4BZXm6/zzuQVmG/fyWnMYtQKB2AuaCM1po4G QMYpjiQD3IXSWegMvM5XDk84O5SvpvKfkrLcsmmHA0lzvZxZTNqt9lYZ9bkxMns8 I511KNrGdgBUe2B1yml0VgsvfqbzNApC+TbmbFEL79eaqUzsZyhkw8ZlHFmIuw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:35 2026 by rpki-client