This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34332e302f32342d3234203d3e20323131333932.roa File: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (raw, json) Hash identifier: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI= Subject key identifier: D8:9E:74:4F:6E:A5:6A:51:9A:33:FC:B2:F6:D1:F5:4C:36:CE:08:B0 Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Certificate serial: 2D6C3112D14AED4D96FB313160A0CEB87B061E2F Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34332e302f32342d3234203d3e20323131333932.roa Signing time: Tue 20 Jan 2026 02:09:29 +0000 ROA not before: Tue 20 Jan 2026 02:04:29 +0000 ROA not after: Tue 19 Jan 2027 02:09:29 +0000 asID: 211392 IP address blocks: 157.66.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6c:31:12:d1:4a:ed:4d:96:fb:31:31:60:a0:ce:b8:7b:06:1e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Validity Not Before: Jan 20 02:04:29 2026 GMT Not After : Jan 19 02:09:29 2027 GMT Subject: CN=D89E744F6EA56A519A33FCB2F6D1F54C36CE08B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:bb:f2:90:bb:59:52:99:e9:d9:62:74:31: 99:32:19:58:da:75:62:3a:db:af:18:06:5b:0f:87: 2c:0b:da:7e:04:12:45:83:b0:57:a3:80:db:b6:ab: 82:8b:75:79:a2:7d:a5:bb:a7:59:5f:61:41:a7:b5: b7:6f:d3:b3:e4:d1:51:45:48:32:91:05:b6:21:45: e8:a2:cd:bd:64:d8:a7:f8:dd:ba:22:79:b6:f2:0a: f1:5b:3b:7e:4a:8a:92:50:6a:ec:d9:12:b1:1f:89: 68:e6:fb:cf:a9:db:c8:68:c1:a1:1d:dc:82:68:91: df:2a:c8:1d:67:00:ca:2a:d3:48:b4:6b:94:bd:8a: 3b:ee:5c:e0:23:2c:ed:3d:2e:5c:72:3b:45:f7:5f: fc:48:a3:48:a7:33:13:2c:43:b1:ec:32:b1:3b:f5: 15:98:4c:d1:28:09:d9:56:b3:5c:2a:18:a2:62:74: 88:52:05:ad:ab:97:9d:60:01:92:0a:5c:e1:c7:87: 50:90:12:de:2f:31:64:93:4a:15:9b:ce:5b:f0:e0: 1e:40:0e:49:19:12:f1:bb:c9:1e:3a:0b:b4:4a:75: d3:70:0f:e4:fd:e7:12:6e:81:da:a9:39:7f:12:a6: fe:9e:f5:d3:62:ef:36:78:5b:b0:e0:3b:b3:43:41: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9E:74:4F:6E:A5:6A:51:9A:33:FC:B2:F6:D1:F5:4C:36:CE:08:B0 X509v3 Authority Key Identifier: keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34332e302f32342d3234203d3e20323131333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.43.0/24 Signature Algorithm: sha256WithRSAEncryption 33:d3:5c:3f:2c:63:a7:8f:d2:ca:10:d7:4e:db:96:e3:12:86: 0c:1e:4f:78:a0:56:06:53:c8:90:8b:6b:cd:ed:92:86:2c:8a: ab:b7:b9:75:09:62:bb:79:69:f3:12:ee:f7:8f:a9:6d:0e:44: ef:81:a2:83:68:3c:e9:07:69:87:02:4d:af:95:b7:de:30:bb: 74:f4:fd:af:49:9b:a2:2a:8d:68:64:d5:53:14:80:51:8f:93: 31:e3:de:5f:33:cd:70:00:5c:fe:16:e5:ac:89:58:3f:f5:bb: 15:a9:3f:71:f5:d6:f1:66:9a:21:45:10:4f:0c:67:aa:05:f1: 50:df:33:0d:b5:1d:b5:d1:3d:52:b8:07:a0:34:85:b0:97:14: b7:b2:fb:75:09:e4:4a:fa:f6:d6:08:75:28:4b:cf:e9:cc:a2: 0f:97:fb:92:82:f1:2f:e6:79:f7:d7:76:48:9c:f9:88:03:16: cc:d3:df:23:0c:33:24:7f:af:f3:68:57:12:91:a2:8d:c9:ff: 9a:b4:10:50:fe:43:05:1c:dc:47:4a:8c:87:2d:bb:00:3a:07: dd:41:1c:b0:e2:20:38:39:5f:b2:d0:86:0b:a0:6b:25:3c:fd: e5:7a:18:f9:88:26:d4:b5:f3:bb:9e:20:79:74:c3:b7:e2:53: 6c:53:72:65 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULWwxEtFK7U2W+zExYKDOuHsGHi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3 QzkwNTUxNjAeFw0yNjAxMjAwMjA0MjlaFw0yNzAxMTkwMjA5MjlaMDMxMTAvBgNV BAMTKEQ4OUU3NDRGNkVBNTZBNTE5QTMzRkNCMkY2RDFGNTRDMzZDRTA4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetbvykLtZUpnp2WJ0MZkyGVja dWI6268YBlsPhywL2n4EEkWDsFejgNu2q4KLdXmifaW7p1lfYUGntbdv07Pk0VFF SDKRBbYhReiizb1k2Kf43boiebbyCvFbO35KipJQauzZErEfiWjm+8+p28howaEd 3IJokd8qyB1nAMoq00i0a5S9ijvuXOAjLO09LlxyO0X3X/xIo0inMxMsQ7HsMrE7 9RWYTNEoCdlWs1wqGKJidIhSBa2rl51gAZIKXOHHh1CQEt4vMWSTShWbzlvw4B5A DkkZEvG7yR46C7RKddNwD+T95xJugdqpOX8Spv6e9dNi7zZ4W7DgO7NDQfL1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU2J50T26lalGaM/yy9tH1TDbOCLAwHwYDVR0j BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTY4MzA2MTk3Mjk5NC8wLzMxMzUzNzJlMzYz NjJlMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMzMzkzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAJ1CKzANBgkqhkiG9w0BAQsFAAOCAQEAM9NcPyxjp4/SyhDXTtuW4xKG DB5PeKBWBlPIkItrze2ShiyKq7e5dQliu3lp8xLu94+pbQ5E74Gig2g86QdphwJN r5W33jC7dPT9r0mboiqNaGTVUxSAUY+TMePeXzPNcABc/hblrIlYP/W7Fak/cfXW 8WaaIUUQTwxnqgXxUN8zDbUdtdE9UrgHoDSFsJcUt7L7dQnkSvr21gh1KEvP6cyi D5f7koLxL+Z599d2SJz5iAMWzNPfIwwzJH+v82hXEpGijcn/mrQQUP5DBRzcR0qM hy27ADoH3UEcsOIgODlfstCGC6BrJTz95XoY+Ygm1LXzu54geXTDt+JTbFNyZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:46 2026 by rpki-client