This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e38302e302f32302d3230203d3e203633353637.roa File: 34332e3234382e38302e302f32302d3230203d3e203633353637.roa (raw, json) Hash identifier: VkQGCtVJyviO04wqgZyxJPSPG8lvhM5uDjyNdvHCq8s= Subject key identifier: 17:F8:0A:01:25:3C:63:66:04:65:86:90:81:61:E5:CD:73:2B:76:9F Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 679C8A344E586AE0005AE289625580B936079ACF Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e38302e302f32302d3230203d3e203633353637.roa Signing time: Tue 20 Jan 2026 02:27:21 +0000 ROA not before: Tue 20 Jan 2026 02:22:21 +0000 ROA not after: Tue 19 Jan 2027 02:27:21 +0000 asID: 63567 IP address blocks: 43.248.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9c:8a:34:4e:58:6a:e0:00:5a:e2:89:62:55:80:b9:36:07:9a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jan 20 02:22:21 2026 GMT Not After : Jan 19 02:27:21 2027 GMT Subject: CN=17F80A01253C6366046586908161E5CD732B769F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:6b:9b:de:15:c6:7f:4a:be:50:44:09:49: de:18:da:59:4d:5e:52:ec:c8:66:25:f2:a8:3e:b1: 74:60:44:0a:7a:07:eb:1f:47:20:66:6f:a2:84:d0: f9:bd:e2:4d:75:d5:ff:c5:fb:bd:02:84:b0:88:01: bc:61:1f:a4:07:0f:ee:e8:b7:0b:35:ca:1f:62:90: 3c:82:93:76:31:42:6d:9b:38:8b:66:ae:5c:4f:04: d2:93:a1:a5:1b:5a:b1:8d:61:25:14:16:92:b3:52: e5:e1:94:03:e3:ac:e5:04:5f:a3:ba:8f:c1:eb:69: 0b:c5:d9:58:3c:66:4a:4e:69:de:19:86:8e:9b:04: dd:5e:5c:d4:ed:83:b9:dd:4b:41:5d:02:04:f0:a0: e6:e9:59:b6:12:b2:90:08:1b:68:77:65:4c:82:b2: c0:8f:a0:da:4f:31:1a:ea:12:59:8b:2f:ac:fa:6d: 96:3e:bc:19:8a:b2:d7:9a:b5:69:43:0f:30:d8:56: 17:6a:36:06:ca:58:cd:ff:2b:05:db:a9:cd:48:2b: 3a:a9:a0:06:6f:7c:d6:43:53:6c:b2:63:c1:fb:1c: de:74:de:6d:8d:7d:ce:f9:72:df:ec:6d:c8:cf:7b: a5:4e:12:96:f9:d3:46:0a:5f:72:d6:29:6d:ba:f0: af:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F8:0A:01:25:3C:63:66:04:65:86:90:81:61:E5:CD:73:2B:76:9F X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e38302e302f32302d3230203d3e203633353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.80.0/20 Signature Algorithm: sha256WithRSAEncryption 5d:23:b3:2a:2e:97:a2:0b:85:dc:f9:c9:69:81:03:21:61:d1: b5:2f:74:6a:54:aa:1f:47:0b:c3:18:95:50:64:00:c0:0b:d4: 93:01:ad:81:64:03:ea:f2:a2:0b:74:37:58:8d:97:5b:60:d5: 73:37:4f:e8:42:f4:8c:04:1d:f3:13:72:64:9f:39:75:16:01: 67:e0:23:f4:c7:7f:98:5f:d5:5b:6f:dd:c9:bd:26:c2:97:89: f3:87:18:b7:6d:13:41:fb:59:7e:eb:d9:50:8f:4a:0c:38:ec: 37:8c:78:ed:98:aa:28:f4:59:c8:80:98:3d:6e:39:22:5a:7f: a6:7f:44:d9:3c:e3:32:2a:c7:92:71:02:9b:34:ff:da:d3:d7: 13:69:37:6c:bc:3e:6c:28:5d:07:4a:0d:63:67:d5:23:4f:81: d9:ca:7d:f0:0a:2e:92:ca:9e:e2:0d:3d:eb:6f:72:b3:ad:51: 41:4f:c9:79:bc:b1:ed:a2:76:ee:15:72:b8:f9:d2:ba:a4:e6: 8d:2c:04:08:ac:25:f6:1f:94:37:ef:51:3a:d2:42:aa:8e:cc: 56:c0:5e:a0:1d:bd:bc:c6:5a:25:3a:ed:59:a0:b9:36:57:78: 93:5f:cd:be:dd:64:f4:a4:15:5b:7d:c2:bb:3c:fb:93:4f:3a: 4c:e2:45:0b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZ5yKNE5YauAAWuKJYlWAuTYHms8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAxMjAwMjIyMjFaFw0yNzAxMTkwMjI3MjFaMDMxMTAvBgNV BAMTKDE3RjgwQTAxMjUzQzYzNjYwNDY1ODY5MDgxNjFFNUNENzMyQjc2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnhmub3hXGf0q+UEQJSd4Y2llN XlLsyGYl8qg+sXRgRAp6B+sfRyBmb6KE0Pm94k111f/F+70ChLCIAbxhH6QHD+7o tws1yh9ikDyCk3YxQm2bOItmrlxPBNKToaUbWrGNYSUUFpKzUuXhlAPjrOUEX6O6 j8HraQvF2Vg8ZkpOad4Zho6bBN1eXNTtg7ndS0FdAgTwoObpWbYSspAIG2h3ZUyC ssCPoNpPMRrqElmLL6z6bZY+vBmKsteatWlDDzDYVhdqNgbKWM3/KwXbqc1IKzqp oAZvfNZDU2yyY8H7HN503m2Nfc75ct/sbcjPe6VOEpb500YKX3LWKW268K+vAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUF/gKASU8Y2YEZYaQgWHlzXMrdp8wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzODMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzYzMzM1MzYzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBCv4UDANBgkqhkiG9w0BAQsFAAOCAQEAXSOzKi6XoguF3PnJaYEDIWHRtS90 alSqH0cLwxiVUGQAwAvUkwGtgWQD6vKiC3Q3WI2XW2DVczdP6EL0jAQd8xNyZJ85 dRYBZ+Aj9Md/mF/VW2/dyb0mwpeJ84cYt20TQftZfuvZUI9KDDjsN4x47ZiqKPRZ yICYPW45Ilp/pn9E2TzjMirHknECmzT/2tPXE2k3bLw+bChdB0oNY2fVI0+B2cp9 8Aouksqe4g09629ys61RQU/Jebyx7aJ27hVyuPnSuqTmjSwECKwl9h+UN+9ROtJC qo7MVsBeoB29vMZaJTrtWaC5Nld4k1/Nvt1k9KQVW33Cuzz7k086TOJFCw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:38 2026 by rpki-client