This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS136897.roa File: AS136897.roa (raw, json) Hash identifier: BmKDzEqoqpKXS2dYeA1+8IcIV6gMdCP8Ne5uyd0f6cU= Subject key identifier: B2:E4:78:D0:C6:71:73:5F:7D:41:C4:49:B4:AD:62:75:4A:B0:E9:6C Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 561A3F5D9F5EE3276B1E4FC90018F012449C7383 Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS136897.roa Signing time: Tue 20 Jan 2026 02:15:28 +0000 ROA not before: Tue 20 Jan 2026 02:10:28 +0000 ROA not after: Tue 19 Jan 2027 02:15:28 +0000 asID: 136897 IP address blocks: 103.198.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 20:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1a:3f:5d:9f:5e:e3:27:6b:1e:4f:c9:00:18:f0:12:44:9c:73:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: Jan 20 02:10:28 2026 GMT Not After : Jan 19 02:15:28 2027 GMT Subject: CN=B2E478D0C671735F7D41C449B4AD62754AB0E96C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:54:13:73:28:81:c0:75:0e:db:93:67:2f: 77:61:5c:57:40:19:83:c5:41:39:fd:4f:b5:3d:dc: 6c:a0:34:78:58:58:78:2a:ac:04:06:4a:ed:17:d7: 66:fd:8e:ed:7b:22:46:a5:c0:79:20:89:7c:08:de: 2a:2a:9e:2d:8e:a1:23:d8:36:8e:bf:58:ed:16:c6: e1:0a:82:4a:30:11:65:96:54:23:f6:e7:17:e6:21: 51:b3:05:6b:1a:1e:a4:43:7e:53:22:7a:e0:47:fc: cd:57:b0:04:8a:1a:bc:55:44:83:12:90:c3:92:2e: 14:ca:05:de:87:47:4b:9a:54:7d:a8:9a:57:cb:01: 8d:99:22:1e:13:47:5e:8e:49:f9:6a:f5:ae:9e:7e: 29:2d:53:97:cc:90:82:94:f6:73:98:0a:21:fc:2b: fb:94:29:ee:28:94:f8:c4:61:57:4d:db:69:53:50: 34:0f:d3:a6:3e:c7:a0:a7:eb:98:ba:c3:6a:48:7f: 21:1a:99:33:b0:f3:cb:02:88:b4:45:84:bc:6a:27: d1:c8:fb:b8:79:2d:c0:ee:3b:1b:16:27:4b:fa:8c: 57:c2:b1:98:fd:dc:6d:df:22:a5:b8:ba:eb:bb:b3: f0:f2:5f:e7:35:1f:d0:80:20:4f:c1:48:eb:e6:04: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E4:78:D0:C6:71:73:5F:7D:41:C4:49:B4:AD:62:75:4A:B0:E9:6C X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS136897.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.240.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:66:65:b5:4b:49:1f:25:47:ab:a0:b9:e1:7e:20:cf:9a:65: 69:c2:96:27:e7:cb:7c:3c:1a:ce:ae:62:78:20:c7:6e:63:94: e3:57:ae:32:64:19:e4:6f:1d:f1:5a:71:49:71:39:75:c5:a7: 23:5c:c2:48:8a:dc:ea:f9:4b:f1:98:21:8a:23:b0:93:26:d8: b7:78:17:7e:90:f6:9d:a5:f4:fc:8e:f8:0e:1c:b4:3b:1b:16: 2b:a2:ab:59:1c:20:d3:b7:b7:b2:d1:1e:e7:ae:95:a5:10:9d: 9c:63:08:f0:d9:74:1d:d9:fd:f8:89:de:0e:df:86:f1:93:6b: 28:58:89:10:2b:b4:eb:10:ee:37:e0:4a:09:05:ba:7c:1e:0f: c1:b3:26:fe:14:e8:73:ae:03:aa:c2:b3:e4:fe:a2:bb:e8:a6: 5d:5a:9e:e8:f6:75:d0:9b:18:c3:a3:65:ab:54:48:25:22:8c: 3c:e1:d1:07:3d:c8:68:3d:3b:fd:da:23:12:b2:f9:eb:7e:3f: 6b:77:c8:77:cc:6b:85:05:09:99:fe:07:6c:ba:fe:bf:60:82: 13:7b:c6:70:53:cb:03:43:77:8f:3b:f1:34:c5:38:36:0f:e6: 94:a8:49:75:fe:1e:75:c1:d3:4f:1f:96:24:40:c8:61:72:78: 44:a8:7e:7e -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUVho/XZ9e4ydrHk/JABjwEkScc4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjAxMjAwMjEwMjhaFw0yNzAxMTkwMjE1MjhaMDMxMTAvBgNV BAMTKEIyRTQ3OEQwQzY3MTczNUY3RDQxQzQ0OUI0QUQ2Mjc1NEFCMEU5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeFQTcyiBwHUO25NnL3dhXFdA GYPFQTn9T7U93GygNHhYWHgqrAQGSu0X12b9ju17IkalwHkgiXwI3ioqni2OoSPY No6/WO0WxuEKgkowEWWWVCP25xfmIVGzBWsaHqRDflMieuBH/M1XsASKGrxVRIMS kMOSLhTKBd6HR0uaVH2omlfLAY2ZIh4TR16OSflq9a6efiktU5fMkIKU9nOYCiH8 K/uUKe4olPjEYVdN22lTUDQP06Y+x6Cn65i6w2pIfyEamTOw88sCiLRFhLxqJ9HI +7h5LcDuOxsWJ0v6jFfCsZj93G3fIqW4uuu7s/DyX+c1H9CAIE/BSOvmBC1ZAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUsuR40MZxc199QcRJtK1idUqw6WwwHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzEzNjg5Ny5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfG8DANBgkqhkiG9w0BAQsFAAOCAQEAf2ZltUtJHyVHq6C54X4gz5pl acKWJ+fLfDwazq5ieCDHbmOU41euMmQZ5G8d8VpxSXE5dcWnI1zCSIrc6vlL8Zgh iiOwkybYt3gXfpD2naX0/I74Dhy0OxsWK6KrWRwg07e3stEe566VpRCdnGMI8Nl0 Hdn9+IneDt+G8ZNrKFiJECu06xDuN+BKCQW6fB4PwbMm/hToc64DqsKz5P6iu+im XVqe6PZ10JsYw6Nlq1RIJSKMPOHRBz3IaD07/dojErL5634/a3fId8xrhQUJmf4H bLr+v2CCE3vGcFPLA0N3jzvxNMU4Ng/mlKhJdf4edcHTTx+WJEDIYXJ4RKh+fg== -----END CERTIFICATE-----Generated at Wed Jan 21 09:38:35 2026 by rpki-client