This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS138527.roa File: AS138527.roa (raw, json) Hash identifier: O5kVuwbCg2wl7TZ3PYtpZXLCpjh4EZ+6YLFnM/TE3u8= Subject key identifier: 6C:8A:1F:C9:E7:97:57:26:43:45:F3:5B:F4:1D:5A:A2:7B:58:76:8E Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 239714FBD7EC03231903A724AC75624D565DAF1E Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS138527.roa Signing time: Tue 20 Jan 2026 02:15:30 +0000 ROA not before: Tue 20 Jan 2026 02:10:30 +0000 ROA not after: Tue 19 Jan 2027 02:15:30 +0000 asID: 138527 IP address blocks: 45.252.8.0/22 maxlen: 24 45.252.12.0/22 maxlen: 24 45.252.16.0/22 maxlen: 24 45.252.20.0/22 maxlen: 24 45.252.24.0/22 maxlen: 24 45.252.28.0/22 maxlen: 24 45.252.32.0/22 maxlen: 24 45.252.36.0/22 maxlen: 24 45.252.40.0/22 maxlen: 24 45.252.44.0/22 maxlen: 24 45.252.48.0/22 maxlen: 24 45.252.100.0/22 maxlen: 24 45.252.144.0/22 maxlen: 24 103.198.240.0/22 maxlen: 24 103.220.248.0/22 maxlen: 24 103.220.252.0/22 maxlen: 24 103.221.0.0/22 maxlen: 24 103.221.4.0/22 maxlen: 24 103.221.8.0/22 maxlen: 24 103.221.12.0/22 maxlen: 24 103.221.16.0/22 maxlen: 24 103.221.20.0/22 maxlen: 24 103.221.24.0/22 maxlen: 24 103.221.28.0/22 maxlen: 24 103.221.32.0/22 maxlen: 24 103.221.36.0/22 maxlen: 24 103.221.40.0/22 maxlen: 24 103.221.44.0/22 maxlen: 24 103.221.48.0/22 maxlen: 24 103.221.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 20:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:97:14:fb:d7:ec:03:23:19:03:a7:24:ac:75:62:4d:56:5d:af:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: Jan 20 02:10:30 2026 GMT Not After : Jan 19 02:15:30 2027 GMT Subject: CN=6C8A1FC9E79757264345F35BF41D5AA27B58768E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:04:35:a5:7e:cb:27:c7:5b:3e:c4:77:1a:78: a8:24:2c:16:8c:f0:88:92:80:2a:91:ed:b9:62:cb: 77:e0:cd:e9:d3:a5:4a:d0:14:bf:c4:0d:6d:80:49: 9e:c5:47:1b:e4:2a:47:09:9d:dd:48:55:4e:56:f5: 71:77:78:47:a0:ec:5f:29:f5:96:44:42:9f:76:92: 95:be:68:8d:a9:5e:86:10:45:8d:a8:d3:4c:0f:81: c4:0d:88:4d:7c:18:3a:f1:f8:f4:52:65:fc:fe:ac: 94:e4:91:ca:fd:f3:8c:11:f3:be:ce:a2:6e:d2:d3: 52:fe:61:8d:b7:54:ad:ee:19:9b:6e:e7:a0:a2:24: d4:32:66:8a:75:1c:25:c8:ec:14:a4:d1:cd:97:34: 91:e7:5d:26:1e:3e:cd:44:19:ef:78:3e:f0:a4:d1: 19:6c:09:53:04:db:ed:69:69:41:a4:e9:7c:20:9f: e5:4c:a2:3e:f1:87:ca:34:2d:5a:9a:73:25:3c:77: c8:50:53:9c:e6:d8:d5:81:8a:0a:f0:3b:a5:58:38: b6:2a:f0:6a:cf:be:6d:ff:3d:f8:12:6c:f0:55:4d: 11:83:1d:48:f2:54:f2:79:3b:70:03:cf:76:63:08: 7a:4e:1d:33:1d:94:af:1e:ed:6d:4e:91:c2:83:74: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8A:1F:C9:E7:97:57:26:43:45:F3:5B:F4:1D:5A:A2:7B:58:76:8E X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS138527.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.252.8.0-45.252.51.255 45.252.100.0/22 45.252.144.0/22 103.198.240.0/22 103.220.248.0-103.221.51.255 103.221.92.0/22 Signature Algorithm: sha256WithRSAEncryption 33:71:07:77:78:52:7f:72:8f:4c:8b:2e:17:09:e0:42:cc:52: f6:98:af:88:a4:b1:77:5e:23:42:c9:63:1d:25:a4:62:a6:a4: 5e:c5:53:d9:e1:32:a1:b1:2b:1f:3f:c6:ad:2f:a8:ba:f1:f1: 63:0b:5b:e5:52:07:c2:ff:a4:81:85:6c:20:72:48:7f:eb:91: fd:fa:93:27:92:ca:85:df:a8:b6:48:33:5e:42:af:3a:a7:97: 14:6e:96:0d:de:70:c7:c8:05:20:46:89:24:44:db:db:a7:26: 67:94:23:d5:1b:e5:d9:d1:cc:af:21:2a:ae:2a:63:08:94:72: 66:fd:22:3b:53:74:56:f6:8f:03:e3:50:d3:89:38:aa:ae:87: 39:30:11:dc:de:20:92:9e:43:bb:3c:86:69:06:f0:da:7d:94: 12:b4:0c:2d:ab:3e:7c:c5:1d:30:22:8e:56:ec:e6:70:e1:78: d1:fc:20:9b:02:0e:39:4b:21:d2:6e:88:0d:ce:76:85:41:44: 2d:be:ea:bf:4e:3e:4b:75:4a:78:25:d2:09:cc:5f:bd:3c:68: 69:8e:e3:4b:4a:85:4e:24:ab:c6:5c:02:c5:4e:e3:27:9a:b8: 36:2b:02:44:27:1c:a3:7f:a2:c0:c3:ea:43:55:20:d9:1d:c1: 1a:bd:74:66 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUI5cU+9fsAyMZA6ckrHViTVZdrx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjAxMjAwMjEwMzBaFw0yNzAxMTkwMjE1MzBaMDMxMTAvBgNV BAMTKDZDOEExRkM5RTc5NzU3MjY0MzQ1RjM1QkY0MUQ1QUEyN0I1ODc2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeBDWlfssnx1s+xHcaeKgkLBaM 8IiSgCqR7bliy3fgzenTpUrQFL/EDW2ASZ7FRxvkKkcJnd1IVU5W9XF3eEeg7F8p 9ZZEQp92kpW+aI2pXoYQRY2o00wPgcQNiE18GDrx+PRSZfz+rJTkkcr984wR877O om7S01L+YY23VK3uGZtu56CiJNQyZop1HCXI7BSk0c2XNJHnXSYePs1EGe94PvCk 0RlsCVME2+1paUGk6Xwgn+VMoj7xh8o0LVqacyU8d8hQU5zm2NWBigrwO6VYOLYq 8GrPvm3/PfgSbPBVTRGDHUjyVPJ5O3ADz3ZjCHpOHTMdlK8e7W1OkcKDdJh/AgMB AAGjggISMIICDjAdBgNVHQ4EFgQUbIofyeeXVyZDRfNb9B1aontYdo4wHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzEzODUyNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBNBggrBgEFBQcBBwEB/wQ+MDwwOgQC AAEwNDAMAwQDLfwIAwQCLfwwAwQCLfxkAwQCLfyQAwQCZ8bwMAwDBANn3PgDBAJn 3TADBAJn3VwwDQYJKoZIhvcNAQELBQADggEBADNxB3d4Un9yj0yLLhcJ4ELMUvaY r4iksXdeI0LJYx0lpGKmpF7FU9nhMqGxKx8/xq0vqLrx8WMLW+VSB8L/pIGFbCBy SH/rkf36kyeSyoXfqLZIM15CrzqnlxRulg3ecMfIBSBGiSRE29unJmeUI9Ub5dnR zK8hKq4qYwiUcmb9IjtTdFb2jwPjUNOJOKquhzkwEdzeIJKeQ7s8hmkG8Np9lBK0 DC2rPnzFHTAijlbs5nDheNH8IJsCDjlLIdJuiA3OdoVBRC2+6r9OPkt1Sngl0gnM X708aGmO40tKhU4kq8ZcAsVO4yeauDYrAkQnHKN/osDD6kNVINkdwRq9dGY= -----END CERTIFICATE-----Generated at Wed Jan 21 12:29:10 2026 by rpki-client