This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3232362e39362e302f32302d3230203d3e203633353637.roa File: 34332e3232362e39362e302f32302d3230203d3e203633353637.roa (raw, json) Hash identifier: Fmf8TYs3zzXnLl9iq8IFZg7QuqhisyZN3WSiZItCZJA= Subject key identifier: E8:1D:43:88:3E:E3:3A:74:82:C3:BF:33:D6:35:75:39:CD:CE:1C:E6 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 64B5B98CE33FC399B4D1871796C27A4DCCE97218 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3232362e39362e302f32302d3230203d3e203633353637.roa Signing time: Tue 20 Jan 2026 02:27:21 +0000 ROA not before: Tue 20 Jan 2026 02:22:21 +0000 ROA not after: Tue 19 Jan 2027 02:27:21 +0000 asID: 63567 IP address blocks: 43.226.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b5:b9:8c:e3:3f:c3:99:b4:d1:87:17:96:c2:7a:4d:cc:e9:72:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jan 20 02:22:21 2026 GMT Not After : Jan 19 02:27:21 2027 GMT Subject: CN=E81D43883EE33A7482C3BF33D6357539CDCE1CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:53:7b:4b:44:fd:96:51:82:8a:0d:dd:c5:fd: 3f:63:cb:bf:a9:4c:3a:e7:c6:3d:47:f2:b0:ea:dd: ae:ab:c0:aa:6f:4d:7c:52:32:e7:66:b5:a0:05:db: fe:17:76:9c:fc:c2:b8:cd:fe:a3:49:c0:82:a7:bd: 63:b1:c6:cb:c2:4d:80:26:2c:18:3a:a3:7a:d0:24: 8d:10:83:d1:1e:c5:6a:2b:d4:93:33:fe:f3:a3:f6: 14:e4:da:68:b8:32:c7:87:75:86:47:1b:33:08:db: 5c:1d:9c:28:02:e0:7d:11:1e:e0:ba:62:f8:3a:9c: 18:2b:b8:d3:e9:10:1f:1b:13:56:aa:57:27:d8:77: 42:b0:ad:32:05:6f:41:d9:f8:17:08:04:8d:65:62: 7f:47:e7:a2:78:c7:1b:3d:af:f4:af:40:0d:65:85: 4c:6d:54:1c:06:9d:c0:84:6a:7d:32:95:c0:cd:c4: de:f9:f4:7e:04:e9:9a:3b:69:e4:f3:0f:a6:65:bc: 64:4c:e9:00:72:eb:58:e3:25:95:24:90:01:bd:ca: aa:ec:66:35:a6:1e:ee:20:48:2d:1f:98:6a:52:14: 02:60:5a:95:70:37:83:b5:89:23:35:47:b7:e2:fb: 0e:30:fd:f6:7e:7d:51:76:4e:26:48:97:f0:d9:de: 17:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1D:43:88:3E:E3:3A:74:82:C3:BF:33:D6:35:75:39:CD:CE:1C:E6 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3232362e39362e302f32302d3230203d3e203633353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.96.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:ee:31:f4:4b:73:ff:b1:d2:3c:2b:95:cf:95:ef:62:47:2c: 3a:e8:ae:97:a6:38:a5:6b:b9:35:b9:b6:82:b1:1e:36:ed:c5: b0:6a:76:66:d9:88:ab:5b:1e:93:15:59:be:34:bc:11:e9:16: 5c:c4:49:b8:bc:66:17:ef:86:2e:8f:fb:f2:a1:b0:e0:be:dc: 2b:38:4e:7b:02:07:d4:3a:81:2f:c7:94:93:52:f5:d6:36:3c: 16:4a:f2:87:54:76:6e:d3:a1:cd:0d:db:16:85:45:b0:14:8b: c1:26:88:30:84:ed:7c:c9:a6:fc:73:b9:8a:05:8f:72:9c:da: d8:b0:89:90:54:4f:dd:ae:2a:0d:90:5a:29:4e:92:c9:f7:9f: a6:9f:c1:2a:c8:e6:4e:43:59:06:70:11:da:ca:46:87:ff:3a: 7f:8b:b2:0d:1d:4e:b9:2b:01:be:e7:59:e4:2b:09:2e:75:fe: 47:48:fc:60:8e:04:1e:23:70:91:7b:fc:59:b8:45:7a:c7:fe: b7:ec:ce:90:d0:02:30:49:09:e3:12:b6:44:ab:c9:6b:44:ec: d8:c4:28:a2:1c:12:96:ed:f9:c7:a4:c7:19:32:ce:e4:6d:24: ae:fc:55:99:64:4d:0b:11:73:59:1c:27:54:cf:66:f2:ca:6e: e1:b4:17:a3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZLW5jOM/w5m00YcXlsJ6TczpchgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAxMjAwMjIyMjFaFw0yNzAxMTkwMjI3MjFaMDMxMTAvBgNV BAMTKEU4MUQ0Mzg4M0VFMzNBNzQ4MkMzQkYzM0Q2MzU3NTM5Q0RDRTFDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZU3tLRP2WUYKKDd3F/T9jy7+p TDrnxj1H8rDq3a6rwKpvTXxSMudmtaAF2/4Xdpz8wrjN/qNJwIKnvWOxxsvCTYAm LBg6o3rQJI0Qg9EexWor1JMz/vOj9hTk2mi4MseHdYZHGzMI21wdnCgC4H0RHuC6 Yvg6nBgruNPpEB8bE1aqVyfYd0KwrTIFb0HZ+BcIBI1lYn9H56J4xxs9r/SvQA1l hUxtVBwGncCEan0ylcDNxN759H4E6Zo7aeTzD6ZlvGRM6QBy61jjJZUkkAG9yqrs ZjWmHu4gSC0fmGpSFAJgWpVwN4O1iSM1R7fi+w4w/fZ+fVF2TiZIl/DZ3hfpAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU6B1DiD7jOnSCw78z1jV1Oc3OHOYwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzMjM2 MmUzOTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzYzMzM1MzYzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBCviYDANBgkqhkiG9w0BAQsFAAOCAQEALO4x9Etz/7HSPCuVz5XvYkcsOuiu l6Y4pWu5Nbm2grEeNu3FsGp2ZtmIq1sekxVZvjS8EekWXMRJuLxmF++GLo/78qGw 4L7cKzhOewIH1DqBL8eUk1L11jY8Fkryh1R2btOhzQ3bFoVFsBSLwSaIMITtfMmm /HO5igWPcpza2LCJkFRP3a4qDZBaKU6Syfefpp/BKsjmTkNZBnAR2spGh/86f4uy DR1OuSsBvudZ5CsJLnX+R0j8YI4EHiNwkXv8WbhFesf+t+zOkNACMEkJ4xK2RKvJ a0Ts2MQoohwSlu35x6THGTLO5G0krvxVmWRNCxFzWRwnVM9m8spu4bQXow== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:39 2026 by rpki-client