This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203633353637.roa File: 34332e3234382e3138342e302f32312d3231203d3e203633353637.roa (raw, json) Hash identifier: AIOWf2rnd3G5ICGkvrsyQlCoBqqePcJfvboxXn3EeP4= Subject key identifier: 81:3A:E3:00:49:76:9A:12:64:D9:F7:29:7F:D9:FE:A0:24:3F:CD:D9 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 590E7E21E936A998A7F889995484F3FB781C2236 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203633353637.roa Signing time: Tue 20 Jan 2026 02:27:21 +0000 ROA not before: Tue 20 Jan 2026 02:22:21 +0000 ROA not after: Tue 19 Jan 2027 02:27:21 +0000 asID: 63567 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0e:7e:21:e9:36:a9:98:a7:f8:89:99:54:84:f3:fb:78:1c:22:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jan 20 02:22:21 2026 GMT Not After : Jan 19 02:27:21 2027 GMT Subject: CN=813AE30049769A1264D9F7297FD9FEA0243FCDD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:21:23:1c:ee:68:08:69:41:54:b5:f5:1b: 77:d9:70:c6:39:b8:7e:09:92:4c:78:9f:7b:a2:ae: fe:4a:41:a6:63:6a:a1:ca:bb:ba:f2:cb:5a:93:84: 8b:ab:0c:c6:e6:6d:e4:50:6d:9b:bd:34:5a:39:4f: 5c:b4:c6:cc:1f:1c:37:a8:40:86:38:6b:84:72:40: 67:f1:fb:a3:17:3a:d9:d3:e8:23:80:57:1d:80:07: 3a:dc:40:39:50:1c:d7:36:47:21:e7:b1:0c:66:35: 67:e4:7c:62:68:f7:93:7c:75:ed:b7:4a:a8:07:1e: 22:4d:f3:d3:b7:e5:cb:26:97:6c:61:f8:c0:ff:36: 76:63:fe:d0:1c:67:02:82:25:b0:7f:05:a5:01:cf: d6:a2:86:dd:65:73:00:43:57:42:b1:1b:b1:29:86: d4:8f:1c:4f:45:96:11:80:78:34:20:9e:25:e0:99: 14:34:40:a9:9e:a8:6d:08:1d:fb:26:05:29:1b:5a: 06:3a:4e:a5:de:a3:e3:d5:3b:34:a7:7b:c9:68:e6: 67:a8:10:c8:79:62:48:18:ee:f1:d3:1c:d8:92:98: ef:90:63:23:70:e7:4d:47:bc:eb:95:64:62:1d:0c: 72:f5:d6:82:2d:93:3a:ae:79:c4:cb:e7:f7:37:6c: 21:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3A:E3:00:49:76:9A:12:64:D9:F7:29:7F:D9:FE:A0:24:3F:CD:D9 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203633353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 00:d1:23:d2:08:c0:d5:5e:d4:e0:3d:c8:63:0f:32:13:a9:b5: 90:f5:95:9a:8c:f8:45:41:2c:e8:b1:39:3b:e1:b9:d2:3d:08: b2:95:64:cb:bb:ce:3d:fb:0f:18:a8:83:6f:2d:af:5c:6c:b9: 80:54:81:4d:a7:99:b5:98:f4:2d:f4:a3:05:b7:56:ef:fe:79: ab:40:1c:43:fb:39:17:91:98:41:c7:98:33:68:93:c9:5c:86: 76:ec:f3:a5:18:dd:60:bf:41:21:9b:c5:7f:24:b3:92:c8:ab: 40:1b:6f:63:4f:7a:8a:41:72:6e:b4:55:55:02:eb:49:60:87: 3e:af:48:38:27:ad:c4:4b:19:57:9f:5a:0f:41:29:27:5b:5a: 35:0e:0f:c2:0d:8b:aa:f6:33:eb:67:83:5f:8c:d7:73:37:89: ed:ec:af:47:d5:c6:54:8b:db:66:2e:94:e1:56:65:d8:b8:f3: 99:e9:60:e3:8e:fc:9b:95:4f:c9:c6:81:c5:d8:cd:b3:e0:a7: 4f:e1:df:02:93:1d:46:22:31:18:46:6e:b8:64:47:ac:3a:2a: c5:7f:f3:24:f6:41:e9:a2:2a:09:7c:9b:4f:05:21:2b:73:f4: 4c:22:e9:5f:a9:66:7c:67:85:ca:74:94:0a:73:41:f9:db:3d: 1e:f2:8a:3c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWQ5+Iek2qZin+ImZVITz+3gcIjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAxMjAwMjIyMjFaFw0yNzAxMTkwMjI3MjFaMDMxMTAvBgNV BAMTKDgxM0FFMzAwNDk3NjlBMTI2NEQ5RjcyOTdGRDlGRUEwMjQzRkNERDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KiEjHO5oCGlBVLX1G3fZcMY5 uH4Jkkx4n3uirv5KQaZjaqHKu7ryy1qThIurDMbmbeRQbZu9NFo5T1y0xswfHDeo QIY4a4RyQGfx+6MXOtnT6COAVx2ABzrcQDlQHNc2RyHnsQxmNWfkfGJo95N8de23 SqgHHiJN89O35csml2xh+MD/NnZj/tAcZwKCJbB/BaUBz9aiht1lcwBDV0KxG7Ep htSPHE9FlhGAeDQgniXgmRQ0QKmeqG0IHfsmBSkbWgY6TqXeo+PVOzSne8lo5meo EMh5YkgY7vHTHNiSmO+QYyNw501HvOuVZGIdDHL11oItkzquecTL5/c3bCHnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUgTrjAEl2mhJk2fcpf9n+oCQ/zdkwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzM0MzMyZTMyMzQz ODJlMzEzODM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzYzMzM1MzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAANEj0gjA1V7U4D3IYw8yE6m1 kPWVmoz4RUEs6LE5O+G50j0IspVky7vOPfsPGKiDby2vXGy5gFSBTaeZtZj0LfSj BbdW7/55q0AcQ/s5F5GYQceYM2iTyVyGduzzpRjdYL9BIZvFfySzksirQBtvY096 ikFybrRVVQLrSWCHPq9IOCetxEsZV59aD0EpJ1taNQ4Pwg2LqvYz62eDX4zXczeJ 7eyvR9XGVIvbZi6U4VZl2Ljzmelg4478m5VPycaBxdjNs+CnT+HfApMdRiIxGEZu uGRHrDoqxX/zJPZB6aIqCXybTwUhK3P0TCLpX6lmfGeFynSUCnNB+ds9HvKKPA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:20 2026 by rpki-client