This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/34332e3234372e3233362e302f32322d3234203d3e203137343239.roa File: 34332e3234372e3233362e302f32322d3234203d3e203137343239.roa (raw, json) Hash identifier: OkspnUQvKjtS72CeXZeKKyXqfiA+KxT6HHhEv5NC4NQ= Subject key identifier: BA:8A:8D:E3:70:D9:24:50:0C:ED:E3:D4:AF:7A:ED:6E:34:A8:26:C2 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 0BCF6FB8E2BCA4B78F3967C328F732C1C81B57A1 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/34332e3234372e3233362e302f32322d3234203d3e203137343239.roa Signing time: Tue 20 Jan 2026 02:07:13 +0000 ROA not before: Tue 20 Jan 2026 02:02:13 +0000 ROA not after: Tue 19 Jan 2027 02:07:13 +0000 asID: 17429 IP address blocks: 43.247.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cf:6f:b8:e2:bc:a4:b7:8f:39:67:c3:28:f7:32:c1:c8:1b:57:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Jan 20 02:02:13 2026 GMT Not After : Jan 19 02:07:13 2027 GMT Subject: CN=BA8A8DE370D924500CEDE3D4AF7AED6E34A826C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:1b:e1:47:be:c7:42:34:75:f8:11:96:b2: 59:c5:db:a5:8a:69:6b:99:57:e1:73:e3:a7:14:e4: 5c:3b:ac:a0:e3:e7:4a:61:c8:dd:fc:66:8d:e1:b7: aa:cf:f2:da:5c:8c:02:f7:52:c3:9e:b0:37:4e:00: b2:b1:cc:6c:74:e2:7c:52:26:8a:80:14:f1:65:c7: e4:59:9f:e0:28:c5:fe:87:12:66:f6:e8:dd:28:1c: 57:f9:92:fb:9c:a5:d0:70:11:cd:fa:4d:36:b8:11: 88:11:ec:1e:ae:5b:70:b3:06:e9:d6:28:0a:43:ab: 79:6e:28:7c:b5:e8:52:f5:15:d6:8f:05:f3:87:1e: 5d:a7:74:8e:13:31:e9:b0:de:40:c6:9d:90:d3:ba: 94:85:61:7f:5c:d5:4e:26:19:46:12:ba:5a:d0:09: fc:c5:0c:d5:b2:a8:9c:ba:eb:b9:be:bd:16:de:c6: 26:ab:a6:43:e1:d5:b2:85:22:3c:38:3d:2e:b8:61: a1:c2:1b:74:0c:89:07:c3:a9:91:3a:21:9e:df:b9: 2f:c8:3f:43:d6:a8:9b:71:0c:30:7e:7b:3d:e4:b2: 6d:bf:44:70:9d:15:7d:8f:70:4d:dd:47:19:36:a2: ac:89:ec:9d:42:b3:1e:df:6d:14:7a:26:51:ea:d4: 16:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8A:8D:E3:70:D9:24:50:0C:ED:E3:D4:AF:7A:ED:6E:34:A8:26:C2 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/34332e3234372e3233362e302f32322d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.236.0/22 Signature Algorithm: sha256WithRSAEncryption 16:e9:1d:60:30:27:86:9a:2c:26:80:50:e7:47:87:d7:24:41: 46:30:49:8d:91:ad:91:1c:83:e0:c7:54:9f:1c:92:28:8d:05: 5c:32:f0:ef:7f:b3:76:1e:d0:4a:5d:f3:37:1e:0b:e7:13:48: 55:90:9b:39:c8:fe:ee:eb:f3:49:d1:89:88:f0:59:96:aa:cf: 88:3f:88:f4:f8:7b:57:4c:17:4d:7e:10:cd:ad:60:bb:18:88: 07:e6:60:c8:db:d2:01:11:46:0c:d9:46:7d:20:e7:38:b6:92: a6:ad:68:c2:33:e5:55:94:9c:d4:92:5d:84:25:b8:6f:86:8c: 13:d4:f2:1b:ba:9c:f0:4a:3b:a7:3c:c4:db:e0:3b:b1:62:35: 64:13:a0:13:be:54:1a:4f:96:70:d2:71:b5:54:36:1b:09:b5: 68:d1:30:c1:8a:ed:bb:ad:5a:27:61:9b:67:82:74:37:c1:1e: 5e:e5:44:7c:b3:0c:9c:f2:4f:44:87:bd:14:3e:52:62:f6:ce: 53:02:d2:e9:10:f8:ec:fb:bf:1d:6a:85:6f:0b:d5:2c:85:14: bf:62:56:a6:7f:6c:3b:b7:51:3e:59:c5:2c:a6:e4:3e:be:d2: 4d:ff:85:a9:30:7c:ec:0a:2b:db:70:39:c2:08:fa:5d:da:05: 0f:db:48:f9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUC89vuOK8pLePOWfDKPcywcgbV6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjAxMjAwMjAyMTNaFw0yNzAxMTkwMjA3MTNaMDMxMTAvBgNV BAMTKEJBOEE4REUzNzBEOTI0NTAwQ0VERTNENEFGN0FFRDZFMzRBODI2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgThvhR77HQjR1+BGWslnF26WK aWuZV+Fz46cU5Fw7rKDj50phyN38Zo3ht6rP8tpcjAL3UsOesDdOALKxzGx04nxS JoqAFPFlx+RZn+Aoxf6HEmb26N0oHFf5kvucpdBwEc36TTa4EYgR7B6uW3CzBunW KApDq3luKHy16FL1FdaPBfOHHl2ndI4TMemw3kDGnZDTupSFYX9c1U4mGUYSulrQ CfzFDNWyqJy667m+vRbexiarpkPh1bKFIjw4PS64YaHCG3QMiQfDqZE6IZ7fuS/I P0PWqJtxDDB+ez3ksm2/RHCdFX2PcE3dRxk2oqyJ7J1Csx7fbRR6JlHq1BZBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUuoqN43DZJFAM7ePUr3rtbjSoJsIwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzM0MzMyZTMyMzQz NzJlMzIzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv37DANBgkqhkiG9w0BAQsFAAOCAQEAFukdYDAnhposJoBQ50eH1yRB RjBJjZGtkRyD4MdUnxySKI0FXDLw73+zdh7QSl3zNx4L5xNIVZCbOcj+7uvzSdGJ iPBZlqrPiD+I9Ph7V0wXTX4Qza1guxiIB+ZgyNvSARFGDNlGfSDnOLaSpq1owjPl VZSc1JJdhCW4b4aME9TyG7qc8Eo7pzzE2+A7sWI1ZBOgE75UGk+WcNJxtVQ2Gwm1 aNEwwYrtu61aJ2GbZ4J0N8EeXuVEfLMMnPJPRIe9FD5SYvbOUwLS6RD47Pu/HWqF bwvVLIUUv2JWpn9sO7dRPlnFLKbkPr7STf+FqTB87Aor23A5wgj6XdoFD9tI+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:45 2026 by rpki-client