This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3232382e302f32342d3234203d3e203435313130.roa File: 34332e3235342e3232382e302f32342d3234203d3e203435313130.roa (raw, json) Hash identifier: FXoD21RBqOqwuywgeejLde35DBrBDAnRi0f85zG0xj0= Subject key identifier: EB:CB:4B:14:02:F9:A7:A8:E6:1A:00:BF:75:D7:0D:EF:C5:AF:59:21 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 7A52EDCD5A829873D4AC784461DD4B9851DA7394 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3232382e302f32342d3234203d3e203435313130.roa Signing time: Tue 20 Jan 2026 01:19:13 +0000 ROA not before: Tue 20 Jan 2026 01:14:13 +0000 ROA not after: Tue 19 Jan 2027 01:19:13 +0000 asID: 45110 IP address blocks: 43.254.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:52:ed:cd:5a:82:98:73:d4:ac:78:44:61:dd:4b:98:51:da:73:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jan 20 01:14:13 2026 GMT Not After : Jan 19 01:19:13 2027 GMT Subject: CN=EBCB4B1402F9A7A8E61A00BF75D70DEFC5AF5921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:c2:7a:1a:e5:d8:34:06:9c:71:e2:07:17: 02:19:ff:89:67:5b:3f:3c:37:0c:b3:6a:04:bc:e2: 1f:21:84:1e:cd:f4:62:93:aa:89:5c:11:ea:17:ee: e3:df:06:41:bb:d1:1b:44:38:e5:34:a4:a8:44:c4: 04:c4:8d:ba:a3:ab:c4:82:1a:73:2e:a0:0d:02:0a: cb:25:1b:c4:d9:b4:bd:e7:01:92:de:d2:e0:56:0d: ad:15:24:7f:4d:6d:0b:01:b0:4c:4e:ba:73:91:d5: b0:cf:a5:c7:69:4e:38:8f:12:76:41:75:ea:37:42: f8:9b:fa:9f:fe:43:9c:09:ce:2a:65:39:46:cc:be: de:fc:17:5b:6f:bf:ac:75:e3:a0:57:0b:5d:ec:9d: d2:78:01:4d:38:63:2b:09:54:ef:b4:51:53:06:57: bd:8d:6e:3f:6e:e2:3d:b5:32:2f:d6:f2:76:b5:b3: 65:ef:71:cf:99:23:5b:17:17:2d:c7:85:79:1a:72: a0:63:ae:95:79:a2:a8:6c:8f:d5:8d:d5:09:ec:c0: 7c:a4:e9:9c:43:64:e5:07:09:f0:05:78:7d:28:cb: 8c:bf:4b:76:fe:fa:36:db:34:85:67:82:33:40:4c: 75:ed:9f:4e:b4:00:4a:5e:a9:e4:16:54:08:50:b4: af:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CB:4B:14:02:F9:A7:A8:E6:1A:00:BF:75:D7:0D:EF:C5:AF:59:21 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3232382e302f32342d3234203d3e203435313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.228.0/24 Signature Algorithm: sha256WithRSAEncryption 52:8f:65:3b:55:c2:f5:0e:6b:53:13:56:83:5b:83:e6:56:5a: 49:a7:48:e1:0e:50:34:51:6a:bd:c3:52:7c:74:ee:2e:cc:13: ca:b4:51:65:d5:45:b0:d9:0d:b5:dd:aa:72:3d:c1:2a:1d:70: 7f:c1:44:1d:c4:14:3a:c6:3f:80:b8:0e:64:21:cf:c3:45:2e: db:4c:dd:b4:91:38:2b:af:d8:13:e6:21:40:30:dd:66:76:9c: cf:46:75:d4:88:f5:59:5b:ee:5c:49:63:61:8b:8c:2a:e8:92: 52:2f:ca:2a:3b:bd:60:28:ab:eb:8d:c1:19:3d:f0:8f:4f:82: 3d:b1:23:2a:a8:a7:35:fa:26:7b:b2:c5:b1:c7:12:46:1f:1e: e1:c0:60:c9:1a:25:c9:49:2e:4b:07:e5:bd:2c:60:6a:a7:95: 81:c8:3b:3a:6b:b8:d4:8c:20:ed:d5:57:04:0b:30:e8:30:0e: 27:ae:10:62:99:6b:5c:79:73:7d:1c:11:fd:3a:eb:29:22:cf: 96:19:b5:93:fd:23:ba:ea:4c:8a:0a:5e:05:4e:aa:7c:47:b5: b1:b8:6c:b8:04:aa:7a:61:86:78:47:52:cb:ad:8a:a0:b7:8f: 06:f6:5a:89:5e:ca:8d:53:06:9a:69:27:59:75:c2:dd:cb:fe: 81:f4:57:d0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUelLtzVqCmHPUrHhEYd1LmFHac5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAxMjAwMTE0MTNaFw0yNzAxMTkwMTE5MTNaMDMxMTAvBgNV BAMTKEVCQ0I0QjE0MDJGOUE3QThFNjFBMDBCRjc1RDcwREVGQzVBRjU5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOcJ6GuXYNAacceIHFwIZ/4ln Wz88NwyzagS84h8hhB7N9GKTqolcEeoX7uPfBkG70RtEOOU0pKhExATEjbqjq8SC GnMuoA0CCsslG8TZtL3nAZLe0uBWDa0VJH9NbQsBsExOunOR1bDPpcdpTjiPEnZB deo3Qvib+p/+Q5wJziplOUbMvt78F1tvv6x146BXC13sndJ4AU04YysJVO+0UVMG V72Nbj9u4j21Mi/W8na1s2Xvcc+ZI1sXFy3HhXkacqBjrpV5oqhsj9WN1QnswHyk 6ZxDZOUHCfAFeH0oy4y/S3b++jbbNIVngjNATHXtn060AEpeqeQWVAhQtK+hAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU68tLFAL5p6jmGgC/ddcN78WvWSEwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjE3OTQ1OC8wLzM0MzMyZTMyMzUz NDJlMzIzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMxMzEzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACv+5DANBgkqhkiG9w0BAQsFAAOCAQEAUo9lO1XC9Q5rUxNWg1uD5lZa SadI4Q5QNFFqvcNSfHTuLswTyrRRZdVFsNkNtd2qcj3BKh1wf8FEHcQUOsY/gLgO ZCHPw0Uu20zdtJE4K6/YE+YhQDDdZnacz0Z11Ij1WVvuXEljYYuMKuiSUi/KKju9 YCir643BGT3wj0+CPbEjKqinNfome7LFsccSRh8e4cBgyRolyUkuSwflvSxgaqeV gcg7Omu41Iwg7dVXBAsw6DAOJ64QYplrXHlzfRwR/TrrKSLPlhm1k/0juupMigpe BU6qfEe1sbhsuASqemGGeEdSy62KoLePBvZaiV7KjVMGmmknWXXC3cv+gfRX0A== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:35 2026 by rpki-client