This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: PyEJ9jiI4zJ41G/B0QCB9AEFiPf7Sjty7tslKA90CEA= Subject key identifier: 96:6D:D0:FA:16:18:97:AF:74:BD:70:19:B2:53:52:06:D5:48:70:84 Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 3110AAC5B7A93941D3B95481BB8FCE81342EA830 Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS21859.roa Signing time: Tue 20 Jan 2026 02:15:29 +0000 ROA not before: Tue 20 Jan 2026 02:10:29 +0000 ROA not after: Tue 19 Jan 2027 02:15:29 +0000 asID: 21859 IP address blocks: 45.252.8.0/24 maxlen: 24 103.6.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 20:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:10:aa:c5:b7:a9:39:41:d3:b9:54:81:bb:8f:ce:81:34:2e:a8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: Jan 20 02:10:29 2026 GMT Not After : Jan 19 02:15:29 2027 GMT Subject: CN=966DD0FA161897AF74BD7019B2535206D5487084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:61:de:ef:77:c4:fd:0b:dc:4f:74:a5:b2: 5b:db:47:06:9d:a3:d8:95:ee:6f:fb:05:c8:dd:e1: 45:1d:16:da:06:c8:c6:08:94:0a:5f:3d:f3:68:a8: 51:f3:35:62:51:f5:7b:15:14:74:a6:ef:4e:5c:cc: 81:e6:5d:57:92:fa:0c:31:00:53:ff:f7:e1:57:28: 78:b5:39:c4:cc:66:75:ee:5b:af:40:c6:50:9e:f5: 43:5d:f7:51:db:1d:13:3d:23:9f:13:71:c6:4b:3e: 82:cb:87:4b:8d:56:69:56:76:1a:da:dc:cd:05:fa: 38:f7:19:bb:b2:ad:63:b7:74:77:85:e1:10:0c:f1: b3:f0:2a:bd:e2:63:8b:f6:18:6a:08:23:fe:82:7f: 41:16:f7:dd:ab:13:ff:2b:67:24:fb:d9:8b:30:ea: 54:31:62:b3:7e:93:89:da:1f:bb:e1:d6:94:0d:9c: df:e9:3c:7e:9e:6d:26:72:a9:03:a2:c0:87:c4:97: 7d:0f:0f:2c:55:99:80:c2:33:1d:77:4d:3b:26:a6: 01:b2:c2:89:17:6a:da:0d:d8:62:81:3b:ca:ca:cb: 18:0d:fc:a2:da:e8:5a:3a:03:28:ae:96:bf:9f:50: 2a:e9:8c:c2:94:7b:8f:6b:4e:2f:2e:a0:d2:13:1e: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6D:D0:FA:16:18:97:AF:74:BD:70:19:B2:53:52:06:D5:48:70:84 X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.252.8.0/24 103.6.228.0/22 Signature Algorithm: sha256WithRSAEncryption 14:a4:09:74:4a:a5:a3:de:fe:44:55:7a:17:e8:7e:3a:85:10: 2a:2e:5b:c0:c5:8d:d7:19:f9:a0:ef:21:13:ab:17:48:70:b7: 1d:ea:b1:2f:a8:cd:66:de:e0:24:52:9b:08:3c:f1:6e:27:ee: 41:20:5b:e3:83:bd:d5:16:64:3c:15:48:6b:2b:33:0d:fe:2b: 96:48:d8:29:6b:59:8a:94:ea:22:f5:66:9d:f1:a6:89:cd:66: c9:69:ec:89:da:f4:7a:73:04:01:ee:07:70:c3:e7:eb:96:90: e4:c0:f6:1e:41:49:3f:10:50:42:d0:f6:7f:b6:0d:43:67:99: cf:00:6c:8c:3e:79:6d:10:21:35:72:ce:8e:a6:49:6c:6e:31: 47:57:27:04:77:b4:2a:16:a5:91:bb:c0:09:e3:5f:9c:52:08: 2c:a5:97:fb:eb:2b:08:d2:a3:e8:85:cb:74:3a:89:29:4c:5d: 3a:06:05:78:fa:de:53:1b:03:4a:87:8d:23:e0:3d:39:02:f5: 58:50:a2:da:de:89:d5:1d:55:be:43:14:9c:dd:e5:f6:4f:82: f7:0c:0c:61:d9:19:bb:34:42:6f:cc:3d:d9:39:2a:8b:79:06: 85:ac:5f:82:f0:80:c6:bb:a2:24:63:f9:23:3b:ee:f6:7f:9a: ad:33:fc:c9 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUMRCqxbepOUHTuVSBu4/OgTQuqDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjAxMjAwMjEwMjlaFw0yNzAxMTkwMjE1MjlaMDMxMTAvBgNV BAMTKDk2NkREMEZBMTYxODk3QUY3NEJENzAxOUIyNTM1MjA2RDU0ODcwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJP2He73fE/QvcT3SlslvbRwad o9iV7m/7Bcjd4UUdFtoGyMYIlApfPfNoqFHzNWJR9XsVFHSm705czIHmXVeS+gwx AFP/9+FXKHi1OcTMZnXuW69AxlCe9UNd91HbHRM9I58TccZLPoLLh0uNVmlWdhra 3M0F+jj3GbuyrWO3dHeF4RAM8bPwKr3iY4v2GGoII/6Cf0EW992rE/8rZyT72Ysw 6lQxYrN+k4naH7vh1pQNnN/pPH6ebSZyqQOiwIfEl30PDyxVmYDCMx13TTsmpgGy wokXatoN2GKBO8rKyxgN/KLa6Fo6Ayiulr+fUCrpjMKUe49rTi8uoNITHhKhAgMB AAGjggHpMIIB5TAdBgNVHQ4EFgQUlm3Q+hYYl690vXAZslNSBtVIcIQwHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzIxODU5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQALfwIAwQCZwbkMA0GCSqGSIb3DQEBCwUAA4IBAQAUpAl0SqWj3v5EVXoX 6H46hRAqLlvAxY3XGfmg7yETqxdIcLcd6rEvqM1m3uAkUpsIPPFuJ+5BIFvjg73V FmQ8FUhrKzMN/iuWSNgpa1mKlOoi9Wad8aaJzWbJaeyJ2vR6cwQB7gdww+frlpDk wPYeQUk/EFBC0PZ/tg1DZ5nPAGyMPnltECE1cs6OpklsbjFHVycEd7QqFqWRu8AJ 41+cUggspZf76ysI0qPohct0OokpTF06BgV4+t5TGwNKh40j4D05AvVYUKLa3onV HVW+QxSc3eX2T4L3DAxh2Rm7NEJvzD3ZOSqLeQaFrF+C8IDGu6IkY/kjO+72f5qt M/zJ -----END CERTIFICATE-----Generated at Wed Jan 21 12:28:46 2026 by rpki-client