This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3232302e302f32322d3234203d3e203337393633.roa File: 34352e3131322e3232302e302f32322d3234203d3e203337393633.roa (raw, json) Hash identifier: O50RoXkWuwqIp3tU4cqtQBbuC+H8D0RovNcoO+GmWt4= Subject key identifier: 52:45:62:7D:C9:4C:E2:E3:70:93:F9:11:D7:B1:50:78:DA:ED:4A:92 Certificate issuer: /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Certificate serial: 201B181384613422F4E1DB9CAC3840CB01DC4866 Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3232302e302f32322d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 02:20:17 +0000 ROA not before: Tue 20 Jan 2026 02:15:17 +0000 ROA not after: Tue 19 Jan 2027 02:20:17 +0000 asID: 37963 IP address blocks: 45.112.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1b:18:13:84:61:34:22:f4:e1:db:9c:ac:38:40:cb:01:dc:48:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Validity Not Before: Jan 20 02:15:17 2026 GMT Not After : Jan 19 02:20:17 2027 GMT Subject: CN=5245627DC94CE2E37093F911D7B15078DAED4A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:4e:5b:f2:11:59:5d:97:c0:f3:69:44:07: f2:46:41:4a:11:e8:67:82:58:6e:76:e1:07:a8:5c: d9:fc:38:ae:9a:7b:98:91:35:24:26:71:d2:f6:c6: 55:71:4a:f6:4e:ae:fc:2b:ba:bd:7c:cb:5b:da:88: 7b:6a:ce:c4:2f:23:ec:22:e5:24:78:ab:d3:d8:53: 9b:ed:62:35:a2:2c:3b:1b:c9:fb:e5:0d:16:7e:94: c5:b6:5b:88:4a:d6:67:ee:4f:bc:59:87:58:f0:b3: e5:7d:f4:23:0f:89:73:25:76:98:a4:77:1b:98:b7: b7:01:a3:0a:61:f6:01:2b:af:5f:4a:58:16:67:93: 96:05:ad:e9:56:cc:7d:f8:41:b4:bf:0c:c3:f8:60: 41:38:69:b4:19:ac:57:13:0c:6f:89:b8:0f:79:2a: 98:b9:5d:39:84:85:59:2c:56:fd:38:1f:56:84:7c: 05:e2:0e:e3:b1:cc:0b:47:a4:7c:ea:da:68:d0:6c: b8:72:43:cf:08:8f:57:a9:76:74:dd:f4:c6:c3:7f: 18:bc:3e:99:64:6c:33:b1:f0:ee:20:68:8f:7e:a2: 5b:3f:8f:a5:fc:7e:91:0e:a5:50:78:8a:cc:e2:3c: db:8f:34:6a:76:06:3c:45:83:52:0c:15:56:ff:de: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:45:62:7D:C9:4C:E2:E3:70:93:F9:11:D7:B1:50:78:DA:ED:4A:92 X509v3 Authority Key Identifier: keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3232302e302f32322d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.112.220.0/22 Signature Algorithm: sha256WithRSAEncryption a3:e4:39:fe:cb:f7:40:e2:4c:ce:5e:90:19:ca:33:69:ed:de: e1:95:29:09:1a:79:36:96:2f:d2:25:02:a9:29:8f:68:c8:27: 69:d7:86:8a:85:f2:b1:ce:fb:c1:6b:78:9d:5b:3b:a0:4b:f8: 7c:30:7c:df:6a:a5:3f:f3:e5:0d:54:40:a3:8e:d9:b7:c1:e7: d8:d2:25:05:cb:73:e2:2b:a6:b7:2a:92:76:e3:55:e0:1a:e4: 40:5f:66:f1:b9:3c:f8:ce:ba:49:75:2f:83:37:bf:b8:c1:39: 5f:b9:f8:74:6b:aa:60:00:d4:9b:96:9c:d5:fa:7c:e6:3e:54: ae:7c:64:48:fb:b2:ea:a6:85:7d:b1:10:3b:e5:9b:ac:02:c5: d0:f2:65:2b:e0:99:26:d9:47:c3:53:4b:4c:87:8b:fd:b1:d3: 03:34:5d:7a:ab:af:dd:6e:73:65:77:86:4e:a8:12:b5:8f:67: ad:44:ef:3c:cc:d0:fe:cc:57:76:de:ac:1a:86:32:cd:71:7a: d6:1d:55:f2:b2:1c:2b:46:26:17:2d:fb:e6:7e:61:b1:0f:f8: ef:53:5c:bc:e9:6d:df:58:61:a4:f5:98:34:fc:b4:75:df:5b: f9:bf:88:a6:9a:7c:43:3b:5b:ab:35:a0:5f:f6:70:36:13:42: 1a:a8:34:b0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUIBsYE4RhNCL04ducrDhAywHcSGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFD MENGMTU3RjAeFw0yNjAxMjAwMjE1MTdaFw0yNzAxMTkwMjIwMTdaMDMxMTAvBgNV BAMTKDUyNDU2MjdEQzk0Q0UyRTM3MDkzRjkxMUQ3QjE1MDc4REFFRDRBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aE5b8hFZXZfA82lEB/JGQUoR 6GeCWG524QeoXNn8OK6ae5iRNSQmcdL2xlVxSvZOrvwrur18y1vaiHtqzsQvI+wi 5SR4q9PYU5vtYjWiLDsbyfvlDRZ+lMW2W4hK1mfuT7xZh1jws+V99CMPiXMldpik dxuYt7cBowph9gErr19KWBZnk5YFrelWzH34QbS/DMP4YEE4abQZrFcTDG+JuA95 Kpi5XTmEhVksVv04H1aEfAXiDuOxzAtHpHzq2mjQbLhyQ88Ij1epdnTd9MbDfxi8 PplkbDOx8O4gaI9+ols/j6X8fpEOpVB4isziPNuPNGp2BjxFg1IMFVb/3le5AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUUkVifclM4uNwk/kR17FQeNrtSpIwHwYDVR0j BBgwFoAUBW9/ngNYfd/sagSeoPIPocDPFX8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODMzNzE1NS8wLzA1NkY3RjlFMDM1ODdEREZFQzZBMDQ5RUEwRjIw RkExQzBDRjE1N0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFDMENGMTU3Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODMzNzE1NS8wLzM0MzUyZTMxMzEz MjJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi1w3DANBgkqhkiG9w0BAQsFAAOCAQEAo+Q5/sv3QOJMzl6QGcozae3e 4ZUpCRp5NpYv0iUCqSmPaMgnadeGioXysc77wWt4nVs7oEv4fDB832qlP/PlDVRA o47Zt8Hn2NIlBctz4iumtyqSduNV4BrkQF9m8bk8+M66SXUvgze/uME5X7n4dGuq YADUm5ac1fp85j5UrnxkSPuy6qaFfbEQO+WbrALF0PJlK+CZJtlHw1NLTIeL/bHT AzRdequv3W5zZXeGTqgStY9nrUTvPMzQ/sxXdt6sGoYyzXF61h1V8rIcK0YmFy37 5n5hsQ/471NcvOlt31hhpPWYNPy0dd9b+b+Ippp8QztbqzWgX/ZwNhNCGqg0sA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:54 2026 by rpki-client