This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034383337.roa File: 34332e3234382e3138342e302f32312d3231203d3e2034383337.roa (raw, json) Hash identifier: jawpvfpnIh9qGodp6c/NHrzmXHiczZ41m82UYVYjACE= Subject key identifier: 4B:C2:D2:58:F5:E1:03:10:B5:F0:A3:53:42:8B:41:87:A5:4D:A7:31 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 50F16A80CD3CB1E8134D746A42EF3D731F91D828 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034383337.roa Signing time: Tue 20 Jan 2026 02:27:21 +0000 ROA not before: Tue 20 Jan 2026 02:22:21 +0000 ROA not after: Tue 19 Jan 2027 02:27:21 +0000 asID: 4837 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f1:6a:80:cd:3c:b1:e8:13:4d:74:6a:42:ef:3d:73:1f:91:d8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jan 20 02:22:21 2026 GMT Not After : Jan 19 02:27:21 2027 GMT Subject: CN=4BC2D258F5E10310B5F0A353428B4187A54DA731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:6d:77:7c:af:fe:06:2d:e8:db:a3:30:9a: b7:96:8d:d4:4a:c0:84:a3:c7:f2:fd:67:c2:70:fa: 41:99:19:ec:5c:30:c8:18:4c:e8:f2:8c:d0:db:c6: a9:73:8b:6d:b8:aa:c4:d4:64:fd:61:91:13:31:9d: ac:45:ae:a5:c1:50:8e:e1:e2:3e:a1:4c:cf:e7:0c: 46:7b:d2:b5:44:1e:3d:df:7c:5b:3f:12:ee:53:22: 9e:ed:92:f3:10:e9:4a:52:d7:3f:29:6e:d7:25:99: ab:14:7f:a3:8b:27:ed:d6:2d:66:6f:bf:ce:f4:5f: 00:94:f0:ce:c6:70:ab:11:0c:7b:7a:d3:a8:93:a4: 17:92:b5:c0:ed:70:8b:35:19:91:7e:89:f4:62:0d: 70:dd:6b:e3:50:8f:a2:70:b8:6c:1c:15:2d:b9:33: fe:27:ce:0a:0b:fb:cf:67:69:b8:bc:e6:85:8f:22: 83:15:72:95:74:63:38:75:eb:44:79:a8:24:c9:98: 01:88:26:c6:1c:2c:7e:15:cb:89:73:05:f1:2e:82: b3:22:0e:0b:b1:9a:d6:dc:33:17:42:18:4e:97:48: 19:26:23:91:af:31:a8:c6:a4:48:8e:55:39:d1:7b: 4e:c7:b3:2b:b9:41:fa:a3:07:82:fc:11:13:b8:1c: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C2:D2:58:F5:E1:03:10:B5:F0:A3:53:42:8B:41:87:A5:4D:A7:31 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 74:17:be:44:fe:cf:f4:aa:a5:1a:a2:7a:9a:9a:f3:23:bc:29: 73:6a:4b:64:33:9a:15:d5:6b:aa:a4:6f:a7:41:dc:8e:33:d1: 55:19:68:74:be:fc:03:1b:f9:2d:db:97:69:85:8d:97:7e:4c: bf:2f:26:f7:af:97:50:69:b2:dc:fe:48:59:23:04:12:1e:4a: d8:fb:fc:88:b5:b3:98:d9:89:f8:d0:a7:b4:04:fb:45:10:89: f8:6d:1d:ab:8d:d0:dd:7c:d6:10:36:d2:70:cf:76:55:bb:e8: 21:cd:3c:6e:f5:0b:2b:8b:53:d0:db:fc:8f:4d:df:d6:58:4f: 69:5f:0f:0f:51:e4:bf:8f:30:61:cd:f3:b1:86:3e:f7:2d:7a: 80:18:78:bc:5c:f8:50:f7:a8:fa:cd:dc:b6:bc:ae:8c:ed:fd: 13:7c:1f:e1:7f:ea:a8:fd:2e:39:5b:b1:1e:15:57:de:3c:a2: df:c4:af:4d:99:59:0f:42:c2:4a:05:8a:12:01:7b:9f:ad:c0: 7f:cc:cf:cf:08:ae:2e:8b:0b:a8:b9:39:1b:31:46:27:dd:fe: da:34:ce:7e:73:a2:9d:a0:00:5c:7d:72:45:5d:7d:f4:a0:6c: a2:af:ef:77:3a:8e:f6:83:99:61:9c:bf:72:2f:38:da:26:47: b9:34:87:2a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUPFqgM08segTTXRqQu89cx+R2CgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAxMjAwMjIyMjFaFw0yNzAxMTkwMjI3MjFaMDMxMTAvBgNV BAMTKDRCQzJEMjU4RjVFMTAzMTBCNUYwQTM1MzQyOEI0MTg3QTU0REE3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0SG13fK/+Bi3o26MwmreWjdRK wISjx/L9Z8Jw+kGZGexcMMgYTOjyjNDbxqlzi224qsTUZP1hkRMxnaxFrqXBUI7h 4j6hTM/nDEZ70rVEHj3ffFs/Eu5TIp7tkvMQ6UpS1z8pbtclmasUf6OLJ+3WLWZv v870XwCU8M7GcKsRDHt606iTpBeStcDtcIs1GZF+ifRiDXDda+NQj6JwuGwcFS25 M/4nzgoL+89nabi85oWPIoMVcpV0Yzh160R5qCTJmAGIJsYcLH4Vy4lzBfEugrMi DguxmtbcMxdCGE6XSBkmI5GvMajGpEiOVTnRe07Hsyu5QfqjB4L8ERO4HJR3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUS8LSWPXhAxC18KNTQotBh6VNpzEwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM4MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAdBe+RP7P9KqlGqJ6mprzI7wpc2pL ZDOaFdVrqqRvp0HcjjPRVRlodL78Axv5LduXaYWNl35Mvy8m96+XUGmy3P5IWSME Eh5K2Pv8iLWzmNmJ+NCntAT7RRCJ+G0dq43Q3XzWEDbScM92VbvoIc08bvULK4tT 0Nv8j03f1lhPaV8PD1Hkv48wYc3zsYY+9y16gBh4vFz4UPeo+s3ctryujO39E3wf 4X/qqP0uOVuxHhVX3jyi38SvTZlZD0LCSgWKEgF7n63Af8zPzwiuLosLqLk5GzFG J93+2jTOfnOinaAAXH1yRV199KBsoq/vdzqO9oOZYZy/ci842iZHuTSHKg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:47 2026 by rpki-client