This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234372e39322e302f32322d3232203d3e203633353637.roa File: 34332e3234372e39322e302f32322d3232203d3e203633353637.roa (raw, json) Hash identifier: TWBPIceMErTmM3bBa5s13kmWazMVd/xcv4XaT8mek6s= Subject key identifier: 35:7D:02:82:8C:C4:70:4C:E7:33:5F:DF:A5:11:A5:7A:CF:65:95:47 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 7717D85C282BE47B5C0E587D9314B727E68B6A08 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234372e39322e302f32322d3232203d3e203633353637.roa Signing time: Tue 20 Jan 2026 02:27:21 +0000 ROA not before: Tue 20 Jan 2026 02:22:21 +0000 ROA not after: Tue 19 Jan 2027 02:27:21 +0000 asID: 63567 IP address blocks: 43.247.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:17:d8:5c:28:2b:e4:7b:5c:0e:58:7d:93:14:b7:27:e6:8b:6a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jan 20 02:22:21 2026 GMT Not After : Jan 19 02:27:21 2027 GMT Subject: CN=357D02828CC4704CE7335FDFA511A57ACF659547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:5a:a3:a6:a9:43:42:68:72:0e:45:8d:16: 70:9c:b9:b0:81:0b:fc:6f:bb:99:32:81:48:5a:46: b1:30:c1:70:b5:57:a6:58:1a:fd:d5:2d:ff:44:aa: a0:a0:bc:bb:f8:21:bf:94:84:b2:74:ea:2a:84:7d: 71:cc:14:89:50:4f:de:1f:fa:f7:df:b6:fb:5e:b9: 53:89:bd:cf:92:d7:b0:2e:da:12:f4:9e:b0:9a:2d: 97:c7:eb:20:3e:77:c3:ac:62:93:c3:49:b2:66:94: a9:88:7b:b9:d8:62:74:19:df:6e:87:97:22:64:39: 31:1d:b3:72:7e:17:b4:a2:5b:5e:9e:a7:be:fd:c4: 6f:2e:1a:8f:e2:c6:48:3f:72:ec:62:d8:c7:b6:f6: 3b:dc:0f:ec:84:c0:25:c8:7f:58:c7:ec:57:aa:41: 83:f8:c5:18:d8:3d:80:ed:66:a6:1e:5f:2e:e6:a1: 85:f9:94:c4:97:d5:c6:20:1d:14:31:33:8a:fb:8c: 23:eb:13:2a:3a:63:e3:03:0d:1e:0e:f7:f4:bb:27: 6a:a7:92:ed:14:ba:cc:b7:74:de:28:e2:8b:09:71: eb:40:90:3e:4a:42:59:25:1c:b5:05:a1:87:a7:bc: e4:12:d8:77:7f:0b:a1:59:62:f4:a5:fa:52:19:c5: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7D:02:82:8C:C4:70:4C:E7:33:5F:DF:A5:11:A5:7A:CF:65:95:47 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234372e39322e302f32322d3232203d3e203633353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.92.0/22 Signature Algorithm: sha256WithRSAEncryption 77:dd:aa:ee:e5:0f:d5:f2:d1:fe:2c:26:36:84:16:3a:3a:46: 5d:26:71:5f:57:da:78:94:22:4c:a5:5f:97:70:dc:99:3d:bf: 26:cf:ef:f7:2e:7b:bd:7a:72:d5:79:ad:31:a0:b3:84:30:dc: 72:13:7b:69:af:57:3c:3f:f7:86:48:d7:81:34:55:c2:dd:25: 59:e6:99:7e:65:50:74:43:46:44:95:64:30:68:b3:49:17:59: 04:cb:e8:5f:f9:63:ce:a8:25:a9:de:80:2b:22:93:59:0c:aa: 81:2a:d5:56:dd:26:99:4c:56:80:3c:d7:83:10:ff:c6:69:c7: 99:e7:58:02:ec:f6:04:67:2d:12:05:2e:d0:9b:48:e1:41:61: e4:7c:b1:2c:7d:c2:e5:0d:71:9a:cb:d3:0e:3c:ba:29:ac:06: 2a:f7:50:a9:28:e7:b8:31:1c:14:09:88:6b:d6:f7:d4:ae:36: 62:44:cb:35:12:d3:44:97:3b:f3:df:8e:49:45:46:17:30:82: 1d:69:af:98:e0:25:c0:13:b7:e7:45:c2:3a:7b:c7:e2:fb:d1: 41:2e:56:f5:df:fd:ed:e7:5d:e4:fb:62:8c:f0:6f:93:44:10: f8:16:32:17:5d:2e:2f:4d:3d:b5:08:0a:86:e2:6f:4c:d3:dd: 7f:d2:2a:c2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdxfYXCgr5HtcDlh9kxS3J+aLaggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAxMjAwMjIyMjFaFw0yNzAxMTkwMjI3MjFaMDMxMTAvBgNV BAMTKDM1N0QwMjgyOENDNDcwNENFNzMzNUZERkE1MTFBNTdBQ0Y2NTk1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhVqjpqlDQmhyDkWNFnCcubCB C/xvu5kygUhaRrEwwXC1V6ZYGv3VLf9EqqCgvLv4Ib+UhLJ06iqEfXHMFIlQT94f +vfftvteuVOJvc+S17Au2hL0nrCaLZfH6yA+d8OsYpPDSbJmlKmIe7nYYnQZ326H lyJkOTEds3J+F7SiW16ep779xG8uGo/ixkg/cuxi2Me29jvcD+yEwCXIf1jH7Feq QYP4xRjYPYDtZqYeXy7moYX5lMSX1cYgHRQxM4r7jCPrEyo6Y+MDDR4O9/S7J2qn ku0Uusy3dN4o4osJcetAkD5KQlklHLUFoYenvOQS2Hd/C6FZYvSl+lIZxYhRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUNX0CgozEcEznM1/fpRGles9llUcwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM3 MmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM1MzYzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv3XDANBgkqhkiG9w0BAQsFAAOCAQEAd92q7uUP1fLR/iwmNoQWOjpGXSZx X1faeJQiTKVfl3DcmT2/Js/v9y57vXpy1XmtMaCzhDDcchN7aa9XPD/3hkjXgTRV wt0lWeaZfmVQdENGRJVkMGizSRdZBMvoX/ljzqglqd6AKyKTWQyqgSrVVt0mmUxW gDzXgxD/xmnHmedYAuz2BGctEgUu0JtI4UFh5HyxLH3C5Q1xmsvTDjy6KawGKvdQ qSjnuDEcFAmIa9b31K42YkTLNRLTRJc789+OSUVGFzCCHWmvmOAlwBO350XCOnvH 4vvRQS5W9d/97edd5PtijPBvk0QQ+BYyF10uL009tQgKhuJvTNPdf9Iqwg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:14:12 2026 by rpki-client