This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3232382e302f32322d3234203d3e203435313130.roa File: 34332e3235342e3232382e302f32322d3234203d3e203435313130.roa (raw, json) Hash identifier: xkTXCqdqeVI+Xrgo9PUO1HTTi3bx7XtcQJ8tsJy96KQ= Subject key identifier: 55:D3:F7:30:DB:2C:F9:80:FC:18:22:3E:3A:BE:F6:13:FD:10:48:94 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 11FB325C813C598B870E2F952533AAE5ACF3699A Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3232382e302f32322d3234203d3e203435313130.roa Signing time: Tue 20 Jan 2026 01:19:13 +0000 ROA not before: Tue 20 Jan 2026 01:14:13 +0000 ROA not after: Tue 19 Jan 2027 01:19:13 +0000 asID: 45110 IP address blocks: 43.254.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fb:32:5c:81:3c:59:8b:87:0e:2f:95:25:33:aa:e5:ac:f3:69:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jan 20 01:14:13 2026 GMT Not After : Jan 19 01:19:13 2027 GMT Subject: CN=55D3F730DB2CF980FC18223E3ABEF613FD104894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:8a:b2:26:dc:51:3a:94:bb:aa:21:65:e4: 27:0d:71:ca:e5:be:e4:31:c4:b9:05:c1:75:55:96: e4:3c:4d:88:9a:1d:50:65:c7:87:4f:4e:34:fe:7f: 40:27:92:81:08:87:06:d3:80:c9:6e:8e:58:e0:c0: 0a:74:64:f5:81:b2:60:fe:20:03:e3:cf:14:a5:fe: 61:c0:fc:59:93:c5:8e:79:35:5b:5f:f1:60:50:c4: 58:86:8d:88:f6:34:51:e4:51:de:07:61:79:7c:b0: a3:41:aa:57:57:28:a7:c4:7b:3e:6b:d7:91:44:31: 37:e8:bf:ad:1a:de:ca:37:42:30:f5:6c:9c:91:37: 03:67:2d:e1:5d:a3:71:14:fc:95:a5:38:ae:aa:12: 93:53:fa:50:78:12:a6:f1:3f:f5:2f:d9:68:eb:9f: dc:78:8b:22:29:0a:22:e9:62:e4:f0:5d:39:45:36: 88:12:fb:47:fa:43:3b:45:10:b0:c2:04:7a:db:95: 93:d0:8b:9b:9f:36:d0:70:7f:61:fc:c4:3c:25:c5: a5:27:09:be:b5:9e:57:32:ef:e7:0d:81:5e:97:ef: 20:07:01:3f:6a:52:02:89:e5:5a:e0:b7:2c:ca:f4: e3:c5:4d:9d:ac:4d:33:4a:dc:2a:42:6a:ef:a2:d8: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D3:F7:30:DB:2C:F9:80:FC:18:22:3E:3A:BE:F6:13:FD:10:48:94 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3232382e302f32322d3234203d3e203435313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.228.0/22 Signature Algorithm: sha256WithRSAEncryption 75:d1:95:a5:ec:7e:9e:10:d3:18:fd:e0:d3:c1:8d:17:c8:e6: aa:d3:2a:7d:26:10:ee:21:33:ed:f6:92:03:7a:1f:32:a5:57: 31:71:f3:90:3c:94:d6:5c:02:52:e4:2b:ef:ff:3b:36:2a:64: 1c:0b:52:0a:04:c0:ac:8c:77:e3:a7:54:a0:4f:ac:5c:98:70: 8a:f9:1e:a1:30:f7:75:5f:4f:0b:93:60:bc:f8:42:b8:ae:5f: e4:1c:39:02:8f:fb:5e:27:1f:b7:17:1a:66:60:ef:9a:f6:b4: ed:fa:f2:cf:b3:2e:48:8e:9e:01:bd:cc:cf:5b:98:88:76:82: bb:59:f7:db:77:e2:bb:7c:44:72:29:ab:b0:ff:3f:ff:8c:f8: cd:2b:98:5b:55:7a:72:ce:12:9d:98:c0:a3:69:0c:b6:4d:42: 17:b4:93:fa:54:a8:56:99:99:5f:e0:eb:f0:e7:6a:ac:93:45: 7f:58:14:e3:6b:e5:cd:c6:b3:33:68:49:a7:31:40:df:11:d2: ee:a4:c6:ac:8c:5d:ad:56:c3:38:9b:9b:93:92:5a:41:de:ab: cb:b7:17:e9:fe:aa:88:c4:8e:db:02:f1:9e:82:7c:ca:2c:0a: 4b:1d:59:e0:d5:ad:87:fb:da:fd:b1:0d:11:7e:1b:ce:14:09: b7:5e:18:b8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUEfsyXIE8WYuHDi+VJTOq5azzaZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAxMjAwMTE0MTNaFw0yNzAxMTkwMTE5MTNaMDMxMTAvBgNV BAMTKDU1RDNGNzMwREIyQ0Y5ODBGQzE4MjIzRTNBQkVGNjEzRkQxMDQ4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHoqyJtxROpS7qiFl5CcNccrl vuQxxLkFwXVVluQ8TYiaHVBlx4dPTjT+f0AnkoEIhwbTgMlujljgwAp0ZPWBsmD+ IAPjzxSl/mHA/FmTxY55NVtf8WBQxFiGjYj2NFHkUd4HYXl8sKNBqldXKKfEez5r 15FEMTfov60a3so3QjD1bJyRNwNnLeFdo3EU/JWlOK6qEpNT+lB4EqbxP/Uv2Wjr n9x4iyIpCiLpYuTwXTlFNogS+0f6QztFELDCBHrblZPQi5ufNtBwf2H8xDwlxaUn Cb61nlcy7+cNgV6X7yAHAT9qUgKJ5VrgtyzK9OPFTZ2sTTNK3CpCau+i2N7/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUVdP3MNss+YD8GCI+Or72E/0QSJQwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjE3OTQ1OC8wLzM0MzMyZTMyMzUz NDJlMzIzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNTMxMzEzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv+5DANBgkqhkiG9w0BAQsFAAOCAQEAddGVpex+nhDTGP3g08GNF8jm qtMqfSYQ7iEz7faSA3ofMqVXMXHzkDyU1lwCUuQr7/87NipkHAtSCgTArIx346dU oE+sXJhwivkeoTD3dV9PC5NgvPhCuK5f5Bw5Ao/7XicftxcaZmDvmva07fryz7Mu SI6eAb3Mz1uYiHaCu1n323fiu3xEcimrsP8//4z4zSuYW1V6cs4SnZjAo2kMtk1C F7ST+lSoVpmZX+Dr8OdqrJNFf1gU42vlzcazM2hJpzFA3xHS7qTGrIxdrVbDOJub k5JaQd6ry7cX6f6qiMSO2wLxnoJ8yiwKSx1Z4NWth/va/bENEX4bzhQJt14YuA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:27 2026 by rpki-client