This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e33322e302f31392d3139203d3e203233373234.roa File: 3131372e35302e33322e302f31392d3139203d3e203233373234.roa (raw, json) Hash identifier: zkWHs1IzR4eTT+bitMUbURpiXnBId/dgwjQFK7CGxxo= Subject key identifier: 7A:C0:1F:68:C5:AE:49:98:4E:ED:6C:D6:B5:AC:AE:C5:75:0B:87:80 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 4B1BCBD9698DAC8701F56979EA0DCAF2803BED24 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e33322e302f31392d3139203d3e203233373234.roa Signing time: Tue 20 Jan 2026 02:10:48 +0000 ROA not before: Tue 20 Jan 2026 02:05:48 +0000 ROA not after: Tue 19 Jan 2027 02:10:48 +0000 asID: 23724 IP address blocks: 117.50.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1b:cb:d9:69:8d:ac:87:01:f5:69:79:ea:0d:ca:f2:80:3b:ed:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:48 2026 GMT Not After : Jan 19 02:10:48 2027 GMT Subject: CN=7AC01F68C5AE49984EED6CD6B5ACAEC5750B8780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:10:6b:20:79:0f:4c:f3:1c:4f:ce:8e:aa: 96:eb:84:69:52:b1:64:18:9e:3f:07:df:b8:8a:ca: 39:14:6a:b7:13:52:d3:0c:a9:1f:a6:9c:99:8b:ed: 14:9f:11:01:7a:59:11:09:b7:0a:25:36:3a:21:d3: 12:17:33:36:46:31:fc:d1:8d:85:43:ce:55:79:79: 49:f9:8b:a6:84:b6:7c:94:17:f1:b8:f1:dc:cd:8a: db:fb:7f:d5:03:3d:d5:05:3c:33:2a:72:e2:53:e3: d6:6e:5e:bb:14:c7:80:6d:6b:69:c2:c4:6c:a9:54: bb:90:a1:a7:d9:8f:58:ff:8c:67:28:3a:06:93:ca: b4:d2:c3:33:83:5a:05:6e:33:6c:38:6e:9d:14:2c: cd:34:31:52:33:62:9f:a6:79:98:aa:b7:e9:ee:e1: 5b:e4:cc:84:c1:73:d3:fb:e7:9c:f0:3d:93:b8:ef: 44:6a:fb:e8:09:41:49:3a:81:e4:f0:ee:d5:84:13: fa:d3:3f:42:86:b7:9f:0c:e7:da:02:55:c2:e0:3f: 1a:25:30:db:d6:fc:ac:ff:bb:01:f6:54:f5:5c:3d: 82:e7:65:c0:7b:7f:76:95:59:d1:f1:e5:ac:aa:68: b2:20:45:56:86:4c:b7:d3:0a:d8:a6:f8:cb:1e:9d: c2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C0:1F:68:C5:AE:49:98:4E:ED:6C:D6:B5:AC:AE:C5:75:0B:87:80 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e33322e302f31392d3139203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.50.32.0/19 Signature Algorithm: sha256WithRSAEncryption 35:bf:89:8c:df:e8:57:c4:f9:f3:4a:83:03:9d:3a:83:27:f5: 3b:39:bf:23:f3:21:e9:a3:81:48:24:1b:3b:32:56:4c:d7:8c: 4b:8f:ad:2d:44:42:f0:54:70:12:f9:b2:75:e0:13:08:be:c0: b9:11:44:65:94:90:38:a6:4e:2a:b2:3b:23:fa:10:69:41:4e: 99:f3:fe:8a:1d:bb:fb:28:90:cf:b9:a1:ce:95:ad:0d:03:c0: ce:ca:3a:84:83:2e:39:41:71:a7:e8:14:ef:f2:24:e3:17:65: 2e:dd:13:78:94:b4:64:12:67:fe:7c:81:0a:75:13:a4:66:ea: 37:03:91:b3:b4:d7:df:a9:68:a6:24:96:73:4a:0b:a7:a1:13: d1:12:38:a3:84:c6:31:01:37:04:62:6c:58:35:43:6b:a8:00: 05:c3:89:b3:2e:05:29:7d:d5:ce:04:a9:c9:5c:2e:4d:12:b9: 8c:3e:35:91:76:80:87:81:94:ba:69:88:76:a7:d2:51:e4:0a: 75:33:9b:e9:55:3d:d0:36:64:6a:af:b1:d1:06:3d:2c:bc:63: de:b2:41:88:8d:49:e5:55:fc:0e:6e:eb:de:37:8b:5c:44:dc: 04:d5:7e:00:19:21:9a:ec:7e:ae:86:e7:68:ad:ef:ce:1f:7d: d2:90:fc:18 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUSxvL2WmNrIcB9Wl56g3K8oA77SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDhaFw0yNzAxMTkwMjEwNDhaMDMxMTAvBgNV BAMTKDdBQzAxRjY4QzVBRTQ5OTg0RUVENkNENkI1QUNBRUM1NzUwQjg3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JxBrIHkPTPMcT86OqpbrhGlS sWQYnj8H37iKyjkUarcTUtMMqR+mnJmL7RSfEQF6WREJtwolNjoh0xIXMzZGMfzR jYVDzlV5eUn5i6aEtnyUF/G48dzNitv7f9UDPdUFPDMqcuJT49ZuXrsUx4Bta2nC xGypVLuQoafZj1j/jGcoOgaTyrTSwzODWgVuM2w4bp0ULM00MVIzYp+meZiqt+nu 4VvkzITBc9P755zwPZO470Rq++gJQUk6geTw7tWEE/rTP0KGt58M59oCVcLgPxol MNvW/Kz/uwH2VPVcPYLnZcB7f3aVWdHx5ayqaLIgRVaGTLfTCtim+MsencJvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUesAfaMWuSZhO7WzWtayuxXULh4AwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMTM3MmUzNTMw MmUzMzMyMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXUyIDANBgkqhkiG9w0BAQsFAAOCAQEANb+JjN/oV8T580qDA506gyf1Ozm/ I/Mh6aOBSCQbOzJWTNeMS4+tLURC8FRwEvmydeATCL7AuRFEZZSQOKZOKrI7I/oQ aUFOmfP+ih27+yiQz7mhzpWtDQPAzso6hIMuOUFxp+gU7/Ik4xdlLt0TeJS0ZBJn /nyBCnUTpGbqNwORs7TX36lopiSWc0oLp6ET0RI4o4TGMQE3BGJsWDVDa6gABcOJ sy4FKX3VzgSpyVwuTRK5jD41kXaAh4GUummIdqfSUeQKdTOb6VU90DZkaq+x0QY9 LLxj3rJBiI1J5VX8Dm7r3jeLXETcBNV+ABkhmux+robnaK3vzh990pD8GA== -----END CERTIFICATE-----Generated at Wed Jan 21 04:23:25 2026 by rpki-client