This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e39362e302f31392d3139203d3e2034383038.roa File: 3131372e35302e39362e302f31392d3139203d3e2034383038.roa (raw, json) Hash identifier: KUOHJlZA2w+3a7mSjvMwqKF+/3z7VBGs1qjbOkLdYrc= Subject key identifier: 8B:17:85:2C:CB:2E:18:36:7E:D9:57:26:8B:1E:EB:42:17:3C:16:16 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 0D85454DEBBA0E1DDAA80A365B55BF71B093B54C Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e39362e302f31392d3139203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:10:52 +0000 ROA not before: Tue 20 Jan 2026 02:05:52 +0000 ROA not after: Tue 19 Jan 2027 02:10:52 +0000 asID: 4808 IP address blocks: 117.50.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:85:45:4d:eb:ba:0e:1d:da:a8:0a:36:5b:55:bf:71:b0:93:b5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:52 2026 GMT Not After : Jan 19 02:10:52 2027 GMT Subject: CN=8B17852CCB2E18367ED957268B1EEB42173C1616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:6f:0e:75:52:fe:18:97:ac:09:12:c1:ae: 89:30:4f:23:d4:e3:64:46:dd:93:79:97:f0:d6:27: 94:42:0a:1e:df:33:46:ee:98:04:87:f3:63:f0:5c: a3:67:4d:6c:03:fc:6f:8e:53:ee:f6:e6:32:e5:82: 2c:44:8e:19:4f:1e:ea:30:58:22:4a:d3:e9:2d:4c: ae:13:0e:05:5d:d0:34:d3:54:22:1d:92:de:3a:19: 38:53:c9:b6:6f:db:b4:b0:72:42:87:21:cc:e8:97: 6e:d7:4b:69:14:1b:54:02:07:dc:75:75:ae:c5:2f: 27:74:30:48:62:22:27:54:3c:48:49:a4:6b:56:d5: b5:a8:7b:b1:2f:ce:c3:b2:b2:86:29:1f:64:9a:71: 35:4e:89:f9:6e:64:36:34:1b:47:28:3f:74:9e:ee: d0:e6:ed:23:2b:11:d3:55:ed:0f:95:b6:82:24:7a: 10:56:f9:dd:2d:b5:6f:24:ac:f0:c9:d8:cf:76:7d: 87:a1:91:49:61:b5:75:8f:9e:f6:ad:0e:72:fb:38: ef:a3:e2:73:19:bb:8e:04:6f:aa:25:5f:f7:fd:d8: f3:dd:fd:03:dc:df:2d:84:29:30:2f:1a:76:26:51: 90:47:bf:e6:1b:28:2e:fc:78:74:cf:c6:73:ab:f4: 8d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:17:85:2C:CB:2E:18:36:7E:D9:57:26:8B:1E:EB:42:17:3C:16:16 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e39362e302f31392d3139203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.50.96.0/19 Signature Algorithm: sha256WithRSAEncryption a7:31:5f:a8:ae:8c:6a:8b:3d:1f:0e:35:ec:04:15:36:32:80: fa:50:09:09:8b:ef:34:ed:96:0d:85:24:dd:94:63:09:d3:b8: 41:37:1c:03:a1:9f:21:79:c6:eb:d7:a0:9b:f4:b3:d9:d9:a0: 9d:d7:8a:6b:6e:7a:e1:6d:64:2c:6b:00:a5:f1:62:24:c3:b0: 8b:49:e9:a0:26:b1:95:64:04:bb:26:96:d5:08:c5:ec:8a:f5: 43:b3:24:73:5e:ac:73:d3:f5:65:51:4b:ce:66:6b:39:69:ae: 73:42:75:72:64:0a:c8:30:17:fd:f7:57:15:a9:e1:4c:41:b0: 4e:40:0e:83:ec:01:bb:15:33:30:b8:6d:8a:18:28:12:05:de: 3a:66:ce:57:f6:49:22:40:46:2c:27:73:75:76:a7:c5:70:92: 43:56:c6:4c:60:f6:fb:c5:bd:fe:b8:a8:b3:48:17:5b:be:56: 55:02:56:1b:7d:4c:9d:a7:86:6c:55:86:28:15:49:f6:a0:89: 01:9f:5a:ee:18:ea:60:21:69:e2:35:18:db:e0:d9:58:41:fe: ae:c2:f5:65:84:f5:0f:7c:12:5a:e6:4a:0f:32:21:59:0f:93: c7:7f:30:b0:78:de:18:10:3d:89:a4:58:f5:62:48:15:f8:40: 65:2b:fe:1a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUDYVFTeu6Dh3aqAo2W1W/cbCTtUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTJaFw0yNzAxMTkwMjEwNTJaMDMxMTAvBgNV BAMTKDhCMTc4NTJDQ0IyRTE4MzY3RUQ5NTcyNjhCMUVFQjQyMTczQzE2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABW8OdVL+GJesCRLBrokwTyPU 42RG3ZN5l/DWJ5RCCh7fM0bumASH82PwXKNnTWwD/G+OU+725jLlgixEjhlPHuow WCJK0+ktTK4TDgVd0DTTVCIdkt46GThTybZv27SwckKHIczol27XS2kUG1QCB9x1 da7FLyd0MEhiIidUPEhJpGtW1bWoe7EvzsOysoYpH2SacTVOifluZDY0G0coP3Se 7tDm7SMrEdNV7Q+VtoIkehBW+d0ttW8krPDJ2M92fYehkUlhtXWPnvatDnL7OO+j 4nMZu44Eb6olX/f92PPd/QPc3y2EKTAvGnYmUZBHv+YbKC78eHTPxnOr9I0PAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUixeFLMsuGDZ+2Vcmix7rQhc8FhYwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMTM3MmUzNTMw MmUzOTM2MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAV1MmAwDQYJKoZIhvcNAQELBQADggEBAKcxX6iujGqLPR8ONewEFTYygPpQCQmL 7zTtlg2FJN2UYwnTuEE3HAOhnyF5xuvXoJv0s9nZoJ3XimtueuFtZCxrAKXxYiTD sItJ6aAmsZVkBLsmltUIxeyK9UOzJHNerHPT9WVRS85mazlprnNCdXJkCsgwF/33 VxWp4UxBsE5ADoPsAbsVMzC4bYoYKBIF3jpmzlf2SSJARiwnc3V2p8VwkkNWxkxg 9vvFvf64qLNIF1u+VlUCVht9TJ2nhmxVhigVSfagiQGfWu4Y6mAhaeI1GNvg2VhB /q7C9WWE9Q98ElrmSg8yIVkPk8d/MLB43hgQPYmkWPViSBX4QGUr/ho= -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:45 2026 by rpki-client