This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35312e302f32342d3234203d3e203633353637.roa File: 34332e3234312e35312e302f32342d3234203d3e203633353637.roa (raw, json) Hash identifier: xNq1x6rcWhlJtcLVmOS0CcdqSWIQcrWdeplRGbxlLaE= Subject key identifier: A7:C0:DD:34:48:9C:7A:2F:DD:5E:81:63:19:B1:AC:5B:E5:B4:A7:18 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 19AF7265E2B48A2BF319FEE5A8DA595C5A601302 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35312e302f32342d3234203d3e203633353637.roa Signing time: Tue 20 Jan 2026 02:27:21 +0000 ROA not before: Tue 20 Jan 2026 02:22:21 +0000 ROA not after: Tue 19 Jan 2027 02:27:21 +0000 asID: 63567 IP address blocks: 43.241.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:af:72:65:e2:b4:8a:2b:f3:19:fe:e5:a8:da:59:5c:5a:60:13:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jan 20 02:22:21 2026 GMT Not After : Jan 19 02:27:21 2027 GMT Subject: CN=A7C0DD34489C7A2FDD5E816319B1AC5BE5B4A718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fa:20:51:5e:f4:e3:bd:6b:f6:2a:60:24:2c: dc:60:92:a9:12:f6:c3:54:12:50:2e:7c:67:c3:a4: 49:9f:97:12:68:6c:c0:f7:ee:1e:d2:c7:bb:7b:40: e0:4f:d8:0a:78:e2:90:64:51:0d:85:06:c0:f0:d8: 3f:d7:71:dd:09:80:f1:1b:2d:56:03:87:d1:f2:ea: 71:ce:3b:11:09:40:13:cb:f7:31:b8:cd:3b:87:9e: a4:db:82:13:1a:54:61:b4:09:5c:3c:10:d9:ed:a5: 61:98:17:c6:a4:b5:60:c4:26:32:62:cb:9e:4a:04: ea:c5:aa:4c:ce:90:35:3d:3a:b0:5d:d0:84:b5:06: 72:01:75:6e:cd:fd:f0:1d:95:60:97:87:f8:3f:a7: 9d:6f:4c:cc:91:4c:93:10:bb:53:3e:67:cc:73:20: 60:91:9e:19:e5:f0:e5:96:26:0b:a8:f0:81:c0:bc: 31:c8:c0:96:1a:c2:60:75:7b:4b:93:cb:ec:55:9d: 12:bb:c8:a9:f0:53:c7:0b:df:6b:68:1f:a3:a7:62: 39:bf:7e:78:c0:a4:de:8d:1e:64:19:df:28:6c:1f: df:18:5c:a2:81:ba:59:2e:b9:53:3c:8a:00:56:00: ce:44:06:3f:d0:f4:7f:42:94:f3:87:8c:64:19:ff: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C0:DD:34:48:9C:7A:2F:DD:5E:81:63:19:B1:AC:5B:E5:B4:A7:18 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35312e302f32342d3234203d3e203633353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.51.0/24 Signature Algorithm: sha256WithRSAEncryption 27:3f:96:05:d6:81:99:3b:45:31:68:f0:3a:34:c0:66:13:e3: 3d:0d:5a:01:eb:59:e4:9e:20:67:8a:ba:c8:c6:fb:97:54:90: 69:41:8d:45:b5:a7:ba:e9:68:c8:f6:fc:36:fd:f6:7a:88:dc: 40:36:1e:d0:33:85:16:ff:58:87:3f:e0:54:c3:30:c1:e9:1d: 51:c9:c9:8e:ba:7b:9f:4b:0b:90:b8:4a:18:26:bb:05:a3:45: e6:bb:ae:e3:48:06:78:1b:9a:5c:10:21:79:87:b6:91:46:fa: cb:ec:20:ec:13:eb:f5:8f:df:07:bc:8b:4a:fe:15:11:18:2b: f0:9f:5d:bd:9a:b9:54:0a:a9:8b:c1:99:81:f0:b4:b4:1e:35: f8:af:c0:38:e3:ca:aa:f2:da:2b:a1:cd:a9:28:cd:c8:36:bc: a8:1f:c2:ee:fc:e3:9c:e7:db:15:01:16:86:a5:bd:2c:45:61: 77:65:40:f5:af:ff:e7:c7:63:19:73:5d:bc:2f:0d:40:f2:aa: b8:1f:25:59:9d:c3:ef:a2:9e:24:b7:99:9a:03:a2:1c:77:54: b3:59:9b:56:93:25:8f:76:1d:db:2f:57:c3:da:e0:28:ba:5a: 77:b0:10:db:fe:d1:0e:7a:a3:ca:20:46:c0:f3:70:7e:3f:7c: d9:a8:0e:61 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUGa9yZeK0iivzGf7lqNpZXFpgEwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAxMjAwMjIyMjFaFw0yNzAxMTkwMjI3MjFaMDMxMTAvBgNV BAMTKEE3QzBERDM0NDg5QzdBMkZERDVFODE2MzE5QjFBQzVCRTVCNEE3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm+iBRXvTjvWv2KmAkLNxgkqkS 9sNUElAufGfDpEmflxJobMD37h7Sx7t7QOBP2Ap44pBkUQ2FBsDw2D/Xcd0JgPEb LVYDh9Hy6nHOOxEJQBPL9zG4zTuHnqTbghMaVGG0CVw8ENntpWGYF8aktWDEJjJi y55KBOrFqkzOkDU9OrBd0IS1BnIBdW7N/fAdlWCXh/g/p51vTMyRTJMQu1M+Z8xz IGCRnhnl8OWWJguo8IHAvDHIwJYawmB1e0uTy+xVnRK7yKnwU8cL32toH6OnYjm/ fnjApN6NHmQZ3yhsH98YXKKBulkuuVM8igBWAM5EBj/Q9H9ClPOHjGQZ/0ihAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUp8DdNEicei/dXoFjGbGsW+W0pxgwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMx MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzYzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvxMzANBgkqhkiG9w0BAQsFAAOCAQEAJz+WBdaBmTtFMWjwOjTAZhPjPQ1a AetZ5J4gZ4q6yMb7l1SQaUGNRbWnuuloyPb8Nv32eojcQDYe0DOFFv9Yhz/gVMMw wekdUcnJjrp7n0sLkLhKGCa7BaNF5ruu40gGeBuaXBAheYe2kUb6y+wg7BPr9Y/f B7yLSv4VERgr8J9dvZq5VAqpi8GZgfC0tB41+K/AOOPKqvLaK6HNqSjNyDa8qB/C 7vzjnOfbFQEWhqW9LEVhd2VA9a//58djGXNdvC8NQPKquB8lWZ3D76KeJLeZmgOi HHdUs1mbVpMlj3Yd2y9Xw9rgKLpad7AQ2/7RDnqjyiBGwPNwfj982agOYQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:40 2026 by rpki-client