This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3233392e34382e302f32322d3232203d3e203234343236.roa File: 34332e3233392e34382e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: v+Hpqk29TkAYHiGloUuAOiYMqKolRD3MeAjZqyCBWPg= Subject key identifier: 9E:CE:B3:D8:47:C1:CB:07:89:50:A5:4E:6E:98:D3:A7:FD:30:E6:2C Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 3FD8135B12D9F76E1BE3CC8EAAFAAE8D9F33231A Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3233392e34382e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:07 +0000 ROA not before: Tue 20 Jan 2026 01:14:07 +0000 ROA not after: Tue 19 Jan 2027 01:19:07 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d8:13:5b:12:d9:f7:6e:1b:e3:cc:8e:aa:fa:ae:8d:9f:33:23:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:07 2026 GMT Not After : Jan 19 01:19:07 2027 GMT Subject: CN=9ECEB3D847C1CB078950A54E6E98D3A7FD30E62C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:14:85:56:e2:c2:d2:96:45:48:7d:5e:cd: 6f:02:f5:bf:ea:18:5d:2c:7b:bb:09:78:d2:3b:83: b6:32:19:d3:c3:10:ef:15:0f:ea:b5:89:9a:5b:8a: 81:3b:a2:f4:1d:20:fe:43:6f:3a:2b:37:81:80:4d: 23:98:5f:db:e6:9d:57:ac:29:8c:c0:f9:15:85:97: 27:83:13:c7:22:df:46:0c:58:5d:06:ee:bd:bc:f7: 08:71:ec:3d:a6:ff:b4:dd:b4:82:52:d3:d2:60:c6: 0f:ac:6c:1e:f0:5d:61:b6:40:57:47:e5:28:0e:2c: b6:2a:3e:bd:d3:03:b6:38:5c:10:3f:a5:f9:ec:c6: ae:0e:8c:9a:6d:af:4b:66:d1:b6:21:a5:d5:61:3d: 45:a6:de:fa:bf:70:82:1a:1d:bb:e3:f9:c9:d2:db: 90:88:ea:8d:57:5d:7e:af:39:52:35:7d:9b:93:11: 8e:1e:ca:40:67:79:15:16:9a:f4:f5:46:a1:1f:da: 68:71:23:ed:02:0c:8a:15:9b:a6:0a:cd:b1:b2:0e: 6c:27:10:ee:8c:ba:65:5e:db:c1:7f:a7:f1:a3:e3: 71:4b:e7:04:8b:a7:01:39:a2:80:56:18:bf:b2:a6: 04:3a:69:44:b2:f4:86:95:8d:40:f5:e4:16:99:43: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CE:B3:D8:47:C1:CB:07:89:50:A5:4E:6E:98:D3:A7:FD:30:E6:2C X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3233392e34382e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 Signature Algorithm: sha256WithRSAEncryption 29:74:f6:c9:b6:75:64:92:95:8b:11:3c:f4:83:c5:0e:67:d0: 90:62:2a:79:3b:34:e5:02:a1:f5:f2:8a:f0:6c:c8:c6:89:78: 0e:44:a2:98:c1:cd:b3:5e:6c:94:3e:44:20:b7:88:77:6a:58: 80:e8:17:aa:6c:62:b5:e5:b6:0b:7f:c9:41:6c:50:ae:6f:86: a7:ce:85:58:2e:dd:e1:e0:13:56:54:16:7e:86:1a:21:3f:1f: f1:20:ca:cd:80:ff:38:3b:da:90:73:40:41:a9:20:f8:b8:b8: 11:a2:1e:98:77:ca:23:f2:19:39:30:18:a1:36:2e:a3:c2:6a: 37:97:19:03:b3:9f:77:69:8a:75:c3:5a:12:26:29:5c:12:9d: 5a:c6:a7:f4:f7:63:75:23:22:f9:50:5e:58:c4:4f:b8:66:d3: f2:65:7c:2e:41:5d:53:f4:a7:17:a0:6b:28:bf:7e:b0:b0:14: ec:8a:5a:12:6d:82:21:1c:04:8f:b1:0e:41:b1:77:8c:91:59: 5b:f5:16:3c:8b:41:ba:c6:67:4d:93:9c:75:d2:77:2d:a6:cb: 25:de:c5:9c:2a:3f:1f:86:6d:22:76:a7:af:65:00:85:d4:0d: a2:2a:dd:ce:e0:73:7d:f0:77:13:8d:84:88:97:5a:b4:b6:35: 8c:dd:3c:1f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUP9gTWxLZ924b48yOqvqujZ8zIxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDdaFw0yNzAxMTkwMTE5MDdaMDMxMTAvBgNV BAMTKDlFQ0VCM0Q4NDdDMUNCMDc4OTUwQTU0RTZFOThEM0E3RkQzMEU2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfOhSFVuLC0pZFSH1ezW8C9b/q GF0se7sJeNI7g7YyGdPDEO8VD+q1iZpbioE7ovQdIP5DbzorN4GATSOYX9vmnVes KYzA+RWFlyeDE8ci30YMWF0G7r289whx7D2m/7TdtIJS09Jgxg+sbB7wXWG2QFdH 5SgOLLYqPr3TA7Y4XBA/pfnsxq4OjJptr0tm0bYhpdVhPUWm3vq/cIIaHbvj+cnS 25CI6o1XXX6vOVI1fZuTEY4eykBneRUWmvT1RqEf2mhxI+0CDIoVm6YKzbGyDmwn EO6MumVe28F/p/Gj43FL5wSLpwE5ooBWGL+ypgQ6aUSy9IaVjUD15BaZQz+hAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUns6z2EfByweJUKVObpjTp/0w5iwwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzMzM5 MmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivvMDANBgkqhkiG9w0BAQsFAAOCAQEAKXT2ybZ1ZJKVixE89IPFDmfQkGIq eTs05QKh9fKK8GzIxol4DkSimMHNs15slD5EILeId2pYgOgXqmxiteW2C3/JQWxQ rm+Gp86FWC7d4eATVlQWfoYaIT8f8SDKzYD/ODvakHNAQakg+Li4EaIemHfKI/IZ OTAYoTYuo8JqN5cZA7Ofd2mKdcNaEiYpXBKdWsan9PdjdSMi+VBeWMRPuGbT8mV8 LkFdU/SnF6BrKL9+sLAU7IpaEm2CIRwEj7EOQbF3jJFZW/UWPItBusZnTZOcddJ3 LabLJd7FnCo/H4ZtInanr2UAhdQNoirdzuBzffB3E42EiJdatLY1jN08Hw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:49 2026 by rpki-client