This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/34352e3131352e3234342e302f32322d3232203d3e203539303232.roa
File: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (raw, json)
Hash identifier: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=
Subject key identifier: 13:E3:86:57:1E:8A:3F:73:9E:D3:19:40:16:A3:D6:56:73:03:87:87
Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977
Certificate serial: 525B63AC55C00C51C8A5D383B58F05883C4C594C
Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/34352e3131352e3234342e302f32322d3232203d3e203539303232.roa
Signing time: Tue 20 Jan 2026 02:24:52 +0000
ROA not before: Tue 20 Jan 2026 02:19:52 +0000
ROA not after: Tue 19 Jan 2027 02:24:52 +0000
asID: 59022
IP address blocks: 45.115.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5b:63:ac:55:c0:0c:51:c8:a5:d3:83:b5:8f:05:88:3c:4c:59:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977
Validity
Not Before: Jan 20 02:19:52 2026 GMT
Not After : Jan 19 02:24:52 2027 GMT
Subject: CN=13E386571E8A3F739ED3194016A3D65673038787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:3e:3a:6a:24:17:0c:5b:ff:4b:73:9e:b4:
e3:62:fe:a2:4c:45:01:76:97:a7:27:55:84:f4:b5:
96:22:b0:03:48:e3:df:01:82:9a:05:52:9a:bc:b1:
e1:e6:56:12:38:d1:ed:40:04:06:41:5f:0a:a2:bc:
c6:7a:93:c6:72:ad:22:0b:c6:1f:a8:c1:e3:64:60:
38:b7:b4:fd:ef:a6:12:7c:89:15:c6:84:00:80:b2:
a5:48:14:7a:1c:86:61:2d:e9:11:61:0e:15:38:a4:
19:14:a3:56:f1:d8:94:2d:4e:07:c0:dc:bd:88:a0:
70:13:42:3e:f3:77:00:24:60:c6:2d:db:e4:17:7f:
e9:07:61:ac:36:10:bf:ae:87:dd:70:08:58:c0:a2:
f8:18:d3:d7:08:6a:e6:52:1d:89:ba:19:e5:78:d4:
94:2c:09:8f:a3:fb:ce:dd:62:0c:79:64:e2:fb:4d:
7d:a1:2d:c6:92:81:38:9f:a7:e5:fc:d0:3e:55:b1:
cc:11:41:3a:bd:f2:62:a2:bb:d0:54:95:91:e2:e6:
3c:0a:e1:2f:f5:57:e2:0c:25:6a:de:0d:23:6d:8c:
49:e2:ed:ce:67:f6:3e:eb:c2:07:9d:7f:dc:18:94:
ab:3d:42:d2:fa:f1:b5:25:47:d1:24:42:f8:f7:40:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E3:86:57:1E:8A:3F:73:9E:D3:19:40:16:A3:D6:56:73:03:87:87
X509v3 Authority Key Identifier:
keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/34352e3131352e3234342e302f32322d3232203d3e203539303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.244.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:d6:f1:ef:79:f5:b2:a9:a0:35:9f:b0:3f:7f:5c:83:e3:32:
0f:30:84:22:3b:7d:43:76:30:0b:f3:f7:af:07:68:c3:47:34:
83:ca:09:df:c1:dd:4a:a8:40:29:09:6d:89:cf:e5:c0:f4:5a:
a1:9d:c8:39:fd:6c:57:81:ec:fd:b2:9b:bf:1f:a6:00:76:70:
59:5c:70:13:d5:54:94:84:7b:83:ad:ad:2b:5f:36:5b:44:9b:
e1:0a:21:26:07:35:b7:dc:ed:86:f4:c6:cc:97:6f:cf:0c:34:
05:3f:4b:da:f2:e9:70:33:15:94:5e:99:a2:31:7b:13:22:e4:
79:2b:ce:dd:75:03:9a:22:6b:57:0d:99:32:10:09:ee:d8:02:
a1:c5:87:7d:e5:e4:14:31:57:65:4d:ed:d6:6b:d7:02:39:9e:
ac:53:f4:fe:5f:c8:de:7a:ef:87:5f:a4:63:50:47:a9:b1:50:
78:7f:43:09:27:fb:5c:cc:a5:4e:d2:9d:21:6b:7f:0c:ad:81:
ae:b1:b7:18:f1:23:d9:5a:78:94:d9:92:b6:e1:6c:55:07:dd:
ce:df:e2:e3:6f:bb:e4:69:06:34:0e:65:9d:ac:bf:13:2f:2e:
76:a0:c9:b9:0a:a6:e8:c8:c7:15:61:ae:3d:12:0a:11:de:84:
c8:3d:da:d6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUUltjrFXADFHIpdODtY8FiDxMWUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5
NDI3OTk3NzAeFw0yNjAxMjAwMjE5NTJaFw0yNzAxMTkwMjI0NTJaMDMxMTAvBgNV
BAMTKDEzRTM4NjU3MUU4QTNGNzM5RUQzMTk0MDE2QTNENjU2NzMwMzg3ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50D46aiQXDFv/S3OetONi/qJM
RQF2l6cnVYT0tZYisANI498BgpoFUpq8seHmVhI40e1ABAZBXwqivMZ6k8ZyrSIL
xh+oweNkYDi3tP3vphJ8iRXGhACAsqVIFHochmEt6RFhDhU4pBkUo1bx2JQtTgfA
3L2IoHATQj7zdwAkYMYt2+QXf+kHYaw2EL+uh91wCFjAovgY09cIauZSHYm6GeV4
1JQsCY+j+87dYgx5ZOL7TX2hLcaSgTifp+X80D5VscwRQTq98mKiu9BUlZHi5jwK
4S/1V+IMJWreDSNtjEni7c5n9j7rwgedf9wYlKs9QtL68bUlR9EkQvj3QKeNAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUE+OGVx6KP3Oe0xlAFqPWVnMDh4cwHwYDVR0j
BBgwFoAUQVVDnut37RnjAx9jio5jM5QnmXcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDg1MTMzMS8wLzQxNTU0MzlFRUI3N0VEMTlFMzAzMUY2MzhBOEU2
MzMzOTQyNzk5NzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5NDI3OTk3Ny5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDg1MTMzMS8wLzM0MzUyZTMxMzEz
NTJlMzIzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzIzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAi1z9DANBgkqhkiG9w0BAQsFAAOCAQEAntbx73n1sqmgNZ+wP39cg+My
DzCEIjt9Q3YwC/P3rwdow0c0g8oJ38HdSqhAKQltic/lwPRaoZ3IOf1sV4Hs/bKb
vx+mAHZwWVxwE9VUlIR7g62tK182W0Sb4QohJgc1t9zthvTGzJdvzww0BT9L2vLp
cDMVlF6ZojF7EyLkeSvO3XUDmiJrVw2ZMhAJ7tgCocWHfeXkFDFXZU3t1mvXAjme
rFP0/l/I3nrvh1+kY1BHqbFQeH9DCSf7XMylTtKdIWt/DK2BrrG3GPEj2Vp4lNmS
tuFsVQfdzt/i42+75GkGNA5lnay/Ey8udqDJuQqm6MjHFWGuPRIKEd6EyD3a1g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:33 2026 by rpki-client