This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/34332e3234332e3234342e302f32322d3232203d3e203538383334.roa File: 34332e3234332e3234342e302f32322d3232203d3e203538383334.roa (raw, json) Hash identifier: KpX0yyw7ZdrablqwdDxRc0iQbVSnasZZRgXN65PuI10= Subject key identifier: DD:2C:E0:6D:75:08:5A:88:50:34:AD:91:CD:3A:FE:A0:4E:1A:BD:95 Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E Certificate serial: 1CFB4B7B2854F3C8BAD6B1294DF11DD15ACE90E1 Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/34332e3234332e3234342e302f32322d3232203d3e203538383334.roa Signing time: Tue 20 Jan 2026 02:13:06 +0000 ROA not before: Tue 20 Jan 2026 02:08:06 +0000 ROA not after: Tue 19 Jan 2027 02:13:06 +0000 asID: 58834 IP address blocks: 43.243.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fb:4b:7b:28:54:f3:c8:ba:d6:b1:29:4d:f1:1d:d1:5a:ce:90:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E Validity Not Before: Jan 20 02:08:06 2026 GMT Not After : Jan 19 02:13:06 2027 GMT Subject: CN=DD2CE06D75085A885034AD91CD3AFEA04E1ABD95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:c4:8d:59:85:e2:db:8f:83:fb:2a:8f:18: 93:5a:84:c8:d7:42:fc:94:e9:1f:9b:a2:39:ee:ab: e4:d0:1e:1f:ab:36:88:23:12:8d:07:94:df:3c:9b: a7:cc:08:f2:cd:4e:bd:ca:28:2f:bd:db:45:b4:8a: 5f:85:74:7a:e8:6b:ed:7e:18:1a:03:9f:c0:86:d4: 69:8d:de:98:a8:9c:b0:e2:46:c3:a3:0e:62:e7:fe: d3:28:be:9d:f5:e4:e6:30:7a:0d:19:70:17:6b:67: e2:81:57:0a:e1:88:95:e7:75:2d:b5:86:62:9c:ec: d1:07:1d:5e:2c:e2:be:a7:f7:97:f9:32:e8:5b:59: 3f:bb:ff:fb:c6:e1:a1:b5:0a:39:ca:5a:1b:80:d9: 0c:a8:96:0a:7e:8e:bf:d4:d8:b2:7a:25:44:b4:46: 78:7e:11:ce:54:46:dc:fb:8d:be:97:35:5b:6f:d1: ee:01:f5:f1:9a:2e:35:4f:11:d0:23:d0:81:ff:6d: 78:4c:3d:04:54:e8:17:12:6b:56:61:c1:7c:dc:a8: 9d:bd:79:68:60:93:2d:0a:0b:70:36:5b:5d:be:e8: 2a:de:19:62:5f:93:dd:c2:00:9a:a1:06:82:31:8b: 55:ce:49:a5:36:57:f4:ad:f5:7d:0d:7a:d2:f5:78: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2C:E0:6D:75:08:5A:88:50:34:AD:91:CD:3A:FE:A0:4E:1A:BD:95 X509v3 Authority Key Identifier: keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/34332e3234332e3234342e302f32322d3232203d3e203538383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.243.244.0/22 Signature Algorithm: sha256WithRSAEncryption ae:81:9a:c3:1f:0f:60:9b:05:3f:d5:94:10:29:de:f5:d8:32: 0c:2e:2a:91:e7:b2:25:79:1d:c3:ea:67:9c:ba:76:6b:95:74: 9e:e2:28:b2:ae:e6:20:71:d3:45:cc:b6:d7:6f:93:5f:fa:fb: 87:83:30:f3:fd:4e:ee:02:c1:80:cf:7f:2f:ef:1f:71:06:30: ee:32:ba:59:3b:2a:0d:f8:37:fc:f4:a4:d9:6b:79:55:f4:51: 8c:20:1c:3d:35:ff:1f:6c:0c:78:78:b7:06:ed:e2:5f:ad:32: a4:05:15:6c:5f:1a:e2:30:e8:96:28:b7:9c:59:b0:17:ab:19: 4b:82:ad:e2:69:a1:57:cf:5f:79:7e:09:91:7e:95:ac:e2:39: 1e:58:e3:7a:c6:1c:d0:14:7f:a3:ec:76:5f:1a:47:87:22:b1: cb:4f:51:56:a6:eb:53:6b:8b:4d:ca:6e:5c:de:e0:ba:78:3e: ea:a9:e3:56:36:21:81:97:ab:d6:6c:01:f9:29:1a:6b:38:7d: 0d:83:1b:41:fd:51:de:3a:81:8f:9b:cf:8e:3f:68:6f:03:0c: 6b:82:0a:f2:f8:88:6f:b5:f4:3d:3c:e2:ce:44:cd:9b:34:2c: 45:b4:a0:f8:67:bf:77:03:78:ab:b9:56:de:e8:9e:77:67:73: 4c:45:2a:08 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHPtLeyhU88i61rEpTfEd0VrOkOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3 OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDZaFw0yNzAxMTkwMjEzMDZaMDMxMTAvBgNV BAMTKEREMkNFMDZENzUwODVBODg1MDM0QUQ5MUNEM0FGRUEwNEUxQUJEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlsSNWYXi24+D+yqPGJNahMjX QvyU6R+bojnuq+TQHh+rNogjEo0HlN88m6fMCPLNTr3KKC+920W0il+FdHroa+1+ GBoDn8CG1GmN3pionLDiRsOjDmLn/tMovp315OYweg0ZcBdrZ+KBVwrhiJXndS21 hmKc7NEHHV4s4r6n95f5MuhbWT+7//vG4aG1CjnKWhuA2Qyolgp+jr/U2LJ6JUS0 Rnh+Ec5URtz7jb6XNVtv0e4B9fGaLjVPEdAj0IH/bXhMPQRU6BcSa1ZhwXzcqJ29 eWhgky0KC3A2W12+6CreGWJfk93CAJqhBoIxi1XOSaU2V/St9X0NetL1eLFLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU3SzgbXUIWohQNK2RzTr+oE4avZUwHwYDVR0j BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDU1MzM0NS8wLzM0MzMyZTMyMzQz MzJlMzIzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivz9DANBgkqhkiG9w0BAQsFAAOCAQEAroGawx8PYJsFP9WUECne9dgy DC4qkeeyJXkdw+pnnLp2a5V0nuIosq7mIHHTRcy212+TX/r7h4Mw8/1O7gLBgM9/ L+8fcQYw7jK6WTsqDfg3/PSk2Wt5VfRRjCAcPTX/H2wMeHi3Bu3iX60ypAUVbF8a 4jDolii3nFmwF6sZS4Kt4mmhV89feX4JkX6VrOI5HljjesYc0BR/o+x2XxpHhyKx y09RVqbrU2uLTcpuXN7gung+6qnjVjYhgZer1mwB+Skaazh9DYMbQf1R3jqBj5vP jj9obwMMa4IK8viIb7X0PTzizkTNmzQsRbSg+Ge/dwN4q7lW3uied2dzTEUqCA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:54 2026 by rpki-client