This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3232342e302f31392d3139203d3e2034383038.roa File: 3131372e35302e3232342e302f31392d3139203d3e2034383038.roa (raw, json) Hash identifier: gLeecRQcc5Kn1Uf6LT7QDM8i5k/BXs6Zsv2+VzewbgU= Subject key identifier: 37:ED:CA:F5:41:F0:4E:22:3A:5C:31:32:EC:E8:21:35:DF:30:7C:6F Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 536C225FD3E0646E1798BC51D16B2F55D59365E9 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3232342e302f31392d3139203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:10:50 +0000 ROA not before: Tue 20 Jan 2026 02:05:50 +0000 ROA not after: Tue 19 Jan 2027 02:10:50 +0000 asID: 4808 IP address blocks: 117.50.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6c:22:5f:d3:e0:64:6e:17:98:bc:51:d1:6b:2f:55:d5:93:65:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:50 2026 GMT Not After : Jan 19 02:10:50 2027 GMT Subject: CN=37EDCAF541F04E223A5C3132ECE82135DF307C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:18:20:49:a0:98:8f:c7:32:73:5e:f0:35: d3:4e:ca:01:6a:15:0a:f6:7a:3c:6b:23:5b:84:67: 5c:18:c9:cc:e2:57:dc:74:89:e7:8c:6b:47:d3:93: 79:00:18:d6:38:cf:54:99:f1:e2:41:f5:ae:2f:88: 1b:c9:ab:81:24:55:1d:81:8c:2c:02:09:9f:59:39: a2:f4:d8:ec:dc:bd:89:bd:f1:a4:6f:d2:2b:92:73: 4f:b1:70:a1:f4:b3:b6:1f:ed:88:10:d8:67:ce:39: 22:b7:4c:f0:33:d5:73:fb:50:98:c8:44:63:05:70: 04:fd:db:64:25:ea:3c:40:46:2e:c7:c6:67:87:c3: 60:27:10:b3:56:98:b7:ca:f1:08:0c:ab:3f:a0:04: be:fd:af:65:be:a2:9e:46:74:97:75:05:8e:64:48: e7:ca:86:8b:9c:91:20:4f:c3:83:cf:7b:19:d5:ea: 6e:ba:76:eb:77:9e:bd:f7:d3:bc:09:15:35:e1:e5: b1:4e:fe:3e:a5:e2:c2:9b:d1:71:f2:13:b5:23:b5: 7f:50:c6:8c:dc:6e:8b:2c:c5:83:ce:6b:d5:ae:a8: 05:c4:70:ff:d1:2f:0b:6e:c6:7d:8f:c8:ff:4f:d0: fb:f3:cb:6f:d2:5c:d1:2b:2c:b9:a9:b1:a4:45:d2: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:ED:CA:F5:41:F0:4E:22:3A:5C:31:32:EC:E8:21:35:DF:30:7C:6F X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3232342e302f31392d3139203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.50.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:08:df:43:16:a5:32:32:e2:c5:5c:73:28:02:c7:da:e8:d4: 8f:aa:b2:05:2e:7e:f4:dc:07:f4:11:9e:15:ac:a2:20:7e:23: e7:d7:ac:a8:1f:ec:47:92:a2:d9:1c:1a:68:d1:e3:26:f4:25: 3c:bf:dc:e4:a1:4b:18:09:5c:c6:1f:6c:8b:d5:6a:e6:90:ed: f7:c1:87:3d:c3:14:ad:21:4a:49:c6:89:93:ae:07:7f:29:fe: ef:22:72:b8:a0:ac:51:18:1b:53:68:9f:82:a1:66:a4:da:d5: 2f:42:26:dd:89:6b:ec:bb:d6:4d:c1:6a:b3:eb:18:67:b6:25: 00:03:f6:5b:b1:71:6e:62:38:35:6f:df:11:0b:3c:5b:74:96: 93:10:9f:c8:c9:0c:7e:d9:9a:a5:0f:88:5c:2c:b0:03:40:66: b4:25:5e:d8:64:93:05:f3:12:4a:8f:37:9a:d4:d7:86:8c:b3: b0:ea:8e:02:7d:39:c1:f3:d7:b6:68:e5:99:f0:67:1e:df:88: 20:65:dc:4f:c3:51:3a:65:1d:ee:25:a5:12:25:e1:b2:c1:b2: 3f:90:96:19:2d:73:e8:2b:c4:1a:36:f1:c0:f3:f2:9e:aa:96: 02:e3:a5:17:ad:f3:63:31:44:28:0f:28:d3:fd:1e:80:97:87: ad:6b:99:ab -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUU2wiX9PgZG4XmLxR0WsvVdWTZekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTBaFw0yNzAxMTkwMjEwNTBaMDMxMTAvBgNV BAMTKDM3RURDQUY1NDFGMDRFMjIzQTVDMzEzMkVDRTgyMTM1REYzMDdDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTxggSaCYj8cyc17wNdNOygFq FQr2ejxrI1uEZ1wYycziV9x0ieeMa0fTk3kAGNY4z1SZ8eJB9a4viBvJq4EkVR2B jCwCCZ9ZOaL02OzcvYm98aRv0iuSc0+xcKH0s7Yf7YgQ2GfOOSK3TPAz1XP7UJjI RGMFcAT922Ql6jxARi7HxmeHw2AnELNWmLfK8QgMqz+gBL79r2W+op5GdJd1BY5k SOfKhouckSBPw4PPexnV6m66dut3nr3307wJFTXh5bFO/j6l4sKb0XHyE7UjtX9Q xozcbossxYPOa9WuqAXEcP/RLwtuxn2PyP9P0Pvzy2/SXNErLLmpsaRF0vuFAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUN+3K9UHwTiI6XDEy7OghNd8wfG8wHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMTM3MmUzNTMw MmUzMjMyMzQyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXUy4DANBgkqhkiG9w0BAQsFAAOCAQEASwjfQxalMjLixVxzKALH2ujUj6qy BS5+9NwH9BGeFayiIH4j59esqB/sR5Ki2RwaaNHjJvQlPL/c5KFLGAlcxh9si9Vq 5pDt98GHPcMUrSFKScaJk64Hfyn+7yJyuKCsURgbU2ifgqFmpNrVL0Im3Ylr7LvW TcFqs+sYZ7YlAAP2W7FxbmI4NW/fEQs8W3SWkxCfyMkMftmapQ+IXCywA0BmtCVe 2GSTBfMSSo83mtTXhoyzsOqOAn05wfPXtmjlmfBnHt+IIGXcT8NROmUd7iWlEiXh ssGyP5CWGS1z6CvEGjbxwPPynqqWAuOlF63zYzFEKA8o0/0egJeHrWuZqw== -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:16 2026 by rpki-client