This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139259.roa File: AS139259.roa (raw, json) Hash identifier: b98Fq36BOttqiOM4/djRqrmYEmWfycySLi/qH4KvII4= Subject key identifier: 6D:EC:6C:39:02:B5:63:2E:A5:CA:8F:62:50:33:BB:9C:AD:F2:F5:2C Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 7E887E38E8EF111B8F021480AA8841C521F3DD5B Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139259.roa Signing time: Tue 20 Jan 2026 02:15:30 +0000 ROA not before: Tue 20 Jan 2026 02:10:30 +0000 ROA not after: Tue 19 Jan 2027 02:15:30 +0000 asID: 139259 IP address blocks: 45.252.8.0/22 maxlen: 24 45.252.12.0/22 maxlen: 24 45.252.16.0/22 maxlen: 24 45.252.20.0/22 maxlen: 24 45.252.24.0/22 maxlen: 24 45.252.28.0/22 maxlen: 24 45.252.32.0/22 maxlen: 24 45.252.36.0/22 maxlen: 24 45.252.40.0/22 maxlen: 24 45.252.44.0/22 maxlen: 24 45.252.48.0/22 maxlen: 24 45.252.84.0/22 maxlen: 24 45.252.84.0/24 maxlen: 24 45.252.100.0/22 maxlen: 24 45.252.100.0/24 maxlen: 24 45.252.102.0/24 maxlen: 24 45.252.103.0/24 maxlen: 24 45.252.144.0/22 maxlen: 24 45.252.144.0/24 maxlen: 24 45.252.145.0/24 maxlen: 24 103.6.108.0/22 maxlen: 24 103.6.108.0/24 maxlen: 24 103.6.109.0/24 maxlen: 24 103.6.110.0/24 maxlen: 24 103.6.111.0/24 maxlen: 24 103.6.228.0/24 maxlen: 24 103.220.248.0/22 maxlen: 24 103.220.248.0/24 maxlen: 24 103.220.249.0/24 maxlen: 24 103.220.250.0/24 maxlen: 24 103.220.251.0/24 maxlen: 24 103.220.252.0/22 maxlen: 24 103.220.252.0/24 maxlen: 24 103.220.253.0/24 maxlen: 24 103.220.254.0/24 maxlen: 24 103.220.255.0/24 maxlen: 24 103.221.0.0/22 maxlen: 24 103.221.0.0/24 maxlen: 24 103.221.1.0/24 maxlen: 24 103.221.2.0/24 maxlen: 24 103.221.3.0/24 maxlen: 24 103.221.4.0/22 maxlen: 24 103.221.4.0/24 maxlen: 24 103.221.5.0/24 maxlen: 24 103.221.6.0/24 maxlen: 24 103.221.7.0/24 maxlen: 24 103.221.8.0/22 maxlen: 24 103.221.8.0/24 maxlen: 24 103.221.9.0/24 maxlen: 24 103.221.10.0/24 maxlen: 24 103.221.11.0/24 maxlen: 24 103.221.12.0/22 maxlen: 24 103.221.12.0/24 maxlen: 24 103.221.13.0/24 maxlen: 24 103.221.14.0/24 maxlen: 24 103.221.15.0/24 maxlen: 24 103.221.16.0/22 maxlen: 24 103.221.16.0/24 maxlen: 24 103.221.17.0/24 maxlen: 24 103.221.18.0/24 maxlen: 24 103.221.19.0/24 maxlen: 24 103.221.20.0/22 maxlen: 24 103.221.20.0/24 maxlen: 24 103.221.21.0/24 maxlen: 24 103.221.22.0/24 maxlen: 24 103.221.23.0/24 maxlen: 24 103.221.24.0/22 maxlen: 24 103.221.24.0/24 maxlen: 24 103.221.25.0/24 maxlen: 24 103.221.26.0/24 maxlen: 24 103.221.27.0/24 maxlen: 24 103.221.28.0/22 maxlen: 24 103.221.28.0/24 maxlen: 24 103.221.29.0/24 maxlen: 24 103.221.30.0/24 maxlen: 24 103.221.31.0/24 maxlen: 24 103.221.32.0/22 maxlen: 24 103.221.32.0/24 maxlen: 24 103.221.33.0/24 maxlen: 24 103.221.34.0/24 maxlen: 24 103.221.35.0/24 maxlen: 24 103.221.36.0/22 maxlen: 24 103.221.36.0/24 maxlen: 24 103.221.37.0/24 maxlen: 24 103.221.38.0/24 maxlen: 24 103.221.39.0/24 maxlen: 24 103.221.40.0/22 maxlen: 24 103.221.40.0/24 maxlen: 24 103.221.41.0/24 maxlen: 24 103.221.42.0/24 maxlen: 24 103.221.43.0/24 maxlen: 24 103.221.44.0/22 maxlen: 24 103.221.44.0/24 maxlen: 24 103.221.45.0/24 maxlen: 24 103.221.46.0/24 maxlen: 24 103.221.47.0/24 maxlen: 24 103.221.48.0/22 maxlen: 24 103.221.48.0/24 maxlen: 24 103.221.49.0/24 maxlen: 24 103.221.50.0/23 maxlen: 24 103.221.50.0/24 maxlen: 24 103.221.51.0/24 maxlen: 24 103.221.92.0/22 maxlen: 24 103.221.92.0/24 maxlen: 24 103.221.93.0/24 maxlen: 24 103.221.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 20:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:88:7e:38:e8:ef:11:1b:8f:02:14:80:aa:88:41:c5:21:f3:dd:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: Jan 20 02:10:30 2026 GMT Not After : Jan 19 02:15:30 2027 GMT Subject: CN=6DEC6C3902B5632EA5CA8F625033BB9CADF2F52C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:19:4e:23:89:ed:7a:aa:fa:31:ac:47:f3: ab:91:79:fe:17:fd:bf:08:09:79:1a:df:75:42:92: b1:c7:4d:46:f0:74:5a:81:eb:d8:99:be:68:f6:5c: e1:b2:14:30:33:48:f7:d3:f0:00:18:17:2c:eb:f1: 2b:7b:c6:92:0c:6b:03:a8:03:e9:75:21:c3:16:26: cb:7d:84:01:6a:27:03:a6:48:13:8f:8e:d9:d8:64: 49:17:7f:0c:ce:ed:67:3f:f4:cc:ed:cb:f9:e2:15: b5:ec:db:28:f1:ae:c4:71:f1:27:56:2a:64:dd:b4: 6b:ec:b6:a3:fd:6c:75:21:b4:11:a7:a0:28:c9:40: 34:aa:aa:e6:76:e0:bc:c3:45:99:a0:0c:88:f1:9c: 58:29:84:ba:f2:be:43:d3:15:13:11:2a:38:f9:e7: ac:0b:9e:23:9e:d6:2f:c3:98:03:ae:48:1b:9d:0b: d2:1a:c8:3e:c8:2d:02:26:7a:d2:d6:88:11:07:3a: b2:cd:c2:26:29:20:c9:a7:03:16:e0:ef:aa:e5:98: b6:a2:27:06:b9:2b:29:1b:0c:64:27:11:4e:da:ed: a8:9e:de:1a:f7:9e:85:86:d6:64:2b:cc:90:b2:2a: a4:84:c8:2a:11:5e:9f:84:a3:3b:b4:b1:1f:5b:0f: 26:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EC:6C:39:02:B5:63:2E:A5:CA:8F:62:50:33:BB:9C:AD:F2:F5:2C X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139259.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.252.8.0-45.252.51.255 45.252.84.0/22 45.252.100.0/22 45.252.144.0/22 103.6.108.0/22 103.6.228.0/24 103.220.248.0-103.221.51.255 103.221.92.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:9a:e3:85:49:f2:16:e6:ff:56:69:5b:b3:77:ef:19:49:fb: e8:ff:88:ac:77:60:8f:7c:ec:a5:f6:73:6a:38:8a:96:74:91: a9:70:ac:d7:6b:09:7f:2b:ee:35:2b:57:9c:63:7b:47:13:00: 89:d8:44:05:4e:7b:dd:6d:0c:31:dd:e5:5d:a0:fb:b2:b0:50: 25:e3:f3:ab:17:dd:28:cd:77:07:16:b7:ee:7f:e7:97:fa:48: 86:94:e1:79:f0:62:1c:82:e5:ac:62:d0:a1:1b:04:90:44:31: 4e:f8:7e:5e:60:8c:0a:a1:85:0e:f6:13:a2:6e:8b:00:cb:45: 99:4f:2b:bc:e3:cb:d8:d6:79:41:8c:87:8c:bd:e9:d4:88:ca: 2c:88:ff:54:47:ab:65:55:16:98:b0:02:9d:87:ca:b1:27:74: 83:cc:97:80:bd:05:ad:4f:16:bd:11:0a:8d:fa:7e:9b:fd:db: b8:11:ee:f5:c5:07:ae:06:81:e1:bb:b1:a1:2a:e7:2d:65:ee: 50:ac:08:93:a0:c7:43:c0:16:d6:d0:a1:bb:ea:aa:af:29:12: b7:c3:45:12:a2:24:97:d6:8c:a8:ee:65:53:5e:35:80:17:2a: 66:fc:09:07:86:75:0a:cd:cd:3e:72:7b:5d:74:e4:84:a2:66: 8f:bf:29:05 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUfoh+OOjvERuPAhSAqohBxSHz3VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjAxMjAwMjEwMzBaFw0yNzAxMTkwMjE1MzBaMDMxMTAvBgNV BAMTKDZERUM2QzM5MDJCNTYzMkVBNUNBOEY2MjUwMzNCQjlDQURGMkY1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfixlOI4nteqr6MaxH86uRef4X /b8ICXka33VCkrHHTUbwdFqB69iZvmj2XOGyFDAzSPfT8AAYFyzr8St7xpIMawOo A+l1IcMWJst9hAFqJwOmSBOPjtnYZEkXfwzO7Wc/9Mzty/niFbXs2yjxrsRx8SdW KmTdtGvstqP9bHUhtBGnoCjJQDSqquZ24LzDRZmgDIjxnFgphLryvkPTFRMRKjj5 56wLniOe1i/DmAOuSBudC9IayD7ILQImetLWiBEHOrLNwiYpIMmnAxbg76rlmLai Jwa5KykbDGQnEU7a7aie3hr3noWG1mQrzJCyKqSEyCoRXp+Eozu0sR9bDyaBAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUbexsOQK1Yy6lyo9iUDO7nK3y9SwwHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzEzOTI1OS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBggrBgEFBQcBBwEB/wRKMEgwRgQC AAEwQDAMAwQDLfwIAwQCLfwwAwQCLfxUAwQCLfxkAwQCLfyQAwQCZwZsAwQAZwbk MAwDBANn3PgDBAJn3TADBAJn3VwwDQYJKoZIhvcNAQELBQADggEBACua44VJ8hbm /1ZpW7N37xlJ++j/iKx3YI987KX2c2o4ipZ0kalwrNdrCX8r7jUrV5xje0cTAInY RAVOe91tDDHd5V2g+7KwUCXj86sX3SjNdwcWt+5/55f6SIaU4XnwYhyC5axi0KEb BJBEMU74fl5gjAqhhQ72E6JuiwDLRZlPK7zjy9jWeUGMh4y96dSIyiyI/1RHq2VV FpiwAp2HyrEndIPMl4C9Ba1PFr0RCo36fpv927gR7vXFB64GgeG7saEq5y1l7lCs CJOgx0PAFtbQobvqqq8pErfDRRKiJJfWjKjuZVNeNYAXKmb8CQeGdQrNzT5ye110 5ISiZo+/KQU= -----END CERTIFICATE-----Generated at Wed Jan 21 12:29:10 2026 by rpki-client