This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/34322e3139392e302e302f31362d3234203d3e203338333635.roa File: 34322e3139392e302e302f31362d3234203d3e203338333635.roa (raw, json) Hash identifier: 7KEjERmB4Z/A9sqOzm5s/N9mbMV9i8uoubqBMFMghAM= Subject key identifier: 6B:EB:85:4E:80:B4:D9:2F:B1:53:4B:5B:89:A5:BC:11:02:D4:DF:FC Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 7C403C6C82974B2647903AF781F2F52C98020772 Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/34322e3139392e302e302f31362d3234203d3e203338333635.roa Signing time: Tue 20 Jan 2026 02:13:11 +0000 ROA not before: Tue 20 Jan 2026 02:08:11 +0000 ROA not after: Tue 19 Jan 2027 02:13:11 +0000 asID: 38365 IP address blocks: 42.199.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:40:3c:6c:82:97:4b:26:47:90:3a:f7:81:f2:f5:2c:98:02:07:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: Jan 20 02:08:11 2026 GMT Not After : Jan 19 02:13:11 2027 GMT Subject: CN=6BEB854E80B4D92FB1534B5B89A5BC1102D4DFFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:9a:3e:a3:69:b9:87:06:5c:51:bf:11:95: 34:24:51:82:1c:d9:53:ce:60:88:8a:b2:91:0b:26: 4b:a7:19:e0:2f:b6:9d:c0:a5:7c:b8:21:fb:d7:da: c0:ca:71:bf:27:ae:2f:38:3e:4c:7b:a9:7b:3a:27: b3:a7:7c:de:35:c9:60:a6:b8:b4:9a:c7:cb:9d:e2: df:b1:e3:d7:9a:c9:b5:db:3e:65:2d:96:20:86:32: 32:6c:cc:e6:6e:65:5f:a3:d5:bb:f8:e6:a8:d9:73: 70:0a:11:eb:94:a0:ad:d1:62:bd:27:f7:5f:7c:41: 91:a1:36:dc:28:25:57:91:4e:ab:b9:f8:f9:64:49: 2a:a8:1b:1c:d3:ea:73:63:fa:5a:d9:44:4e:b7:82: 26:f0:90:89:c7:55:9b:1c:12:0e:cc:c0:87:f2:cf: 03:3a:35:50:42:e8:3a:09:ec:8a:9e:52:6e:03:0f: a6:3b:19:9a:58:07:6c:58:85:6a:e2:3c:07:6c:df: 03:9a:17:54:2c:47:77:b9:84:87:1b:16:d1:b8:4d: 4f:b7:34:3b:49:ad:24:87:48:2a:e8:38:c4:24:93: e9:14:05:81:8a:1f:87:1d:f6:19:46:ee:ed:c9:bf: 0a:07:38:04:fb:16:cb:85:ce:e3:4d:61:f9:fa:23: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EB:85:4E:80:B4:D9:2F:B1:53:4B:5B:89:A5:BC:11:02:D4:DF:FC X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/34322e3139392e302e302f31362d3234203d3e203338333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.199.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:bd:93:65:6f:03:5f:12:b6:68:71:ab:72:33:52:d2:11:e7: 9a:72:b6:c8:3a:a5:40:1b:9d:29:20:54:f2:4c:3f:f3:a8:60: 1d:ea:29:86:ad:a8:27:16:54:be:ae:d9:0c:60:12:84:a6:5a: 7c:ef:de:13:ea:76:79:6a:6e:33:7a:58:02:9d:11:6b:4d:22: f1:6e:72:55:af:f2:e9:83:80:2f:d6:eb:55:df:c4:a6:85:3d: 2f:e5:85:bd:7a:b4:13:cd:45:95:43:65:c8:fe:b0:60:6b:54: c8:2e:da:5d:10:21:d4:37:c7:8c:aa:5f:52:f6:1b:bd:dd:b1: 5b:6c:da:7b:34:e7:89:cd:a3:c5:2d:62:1e:1c:c2:bf:ef:e5: 28:87:67:6b:a8:29:49:1a:39:37:13:2a:cc:b5:2c:55:ea:74: f8:91:96:b9:b7:c1:49:8a:47:a6:2b:3c:3d:22:3f:01:90:f7: b0:eb:76:e6:13:d4:ee:c5:af:dd:ed:0d:bb:6c:01:48:b1:d5: be:46:69:a7:32:f2:04:47:9c:2e:0e:12:4b:51:a8:fb:90:59: 92:7a:1d:70:4b:db:4e:20:e6:ae:53:ff:04:1e:48:93:0b:dd: c2:33:ec:02:c6:c5:c0:29:c9:81:e8:1f:02:1b:7b:c0:96:67: 1f:08:c7:88 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUfEA8bIKXSyZHkDr3gfL1LJgCB3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjAxMjAwMjA4MTFaFw0yNzAxMTkwMjEzMTFaMDMxMTAvBgNV BAMTKDZCRUI4NTRFODBCNEQ5MkZCMTUzNEI1Qjg5QTVCQzExMDJENERGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUEJo+o2m5hwZcUb8RlTQkUYIc 2VPOYIiKspELJkunGeAvtp3ApXy4IfvX2sDKcb8nri84Pkx7qXs6J7OnfN41yWCm uLSax8ud4t+x49eaybXbPmUtliCGMjJszOZuZV+j1bv45qjZc3AKEeuUoK3RYr0n 9198QZGhNtwoJVeRTqu5+PlkSSqoGxzT6nNj+lrZRE63gibwkInHVZscEg7MwIfy zwM6NVBC6DoJ7IqeUm4DD6Y7GZpYB2xYhWriPAds3wOaF1QsR3e5hIcbFtG4TU+3 NDtJrSSHSCroOMQkk+kUBYGKH4cd9hlG7u3JvwoHOAT7FsuFzuNNYfn6I/x5AgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUa+uFToC02S+xU0tbiaW8EQLU3/wwHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTEzOTIyLzAvMzQzMjJlMzEzOTM5 MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzgzMzM2MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAqxzANBgkqhkiG9w0BAQsFAAOCAQEABb2TZW8DXxK2aHGrcjNS0hHnmnK2yDql QBudKSBU8kw/86hgHeophq2oJxZUvq7ZDGAShKZafO/eE+p2eWpuM3pYAp0Ra00i 8W5yVa/y6YOAL9brVd/EpoU9L+WFvXq0E81FlUNlyP6wYGtUyC7aXRAh1DfHjKpf UvYbvd2xW2zaezTnic2jxS1iHhzCv+/lKIdna6gpSRo5NxMqzLUsVep0+JGWubfB SYpHpis8PSI/AZD3sOt25hPU7sWv3e0Nu2wBSLHVvkZppzLyBEecLg4SS1Go+5BZ knodcEvbTiDmrlP/BB5IkwvdwjPsAsbFwCnJgegfAht7wJZnHwjHiA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:58 2026 by rpki-client