This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/34332e3234332e3234342e302f32332d3233203d3e203538383334.roa File: 34332e3234332e3234342e302f32332d3233203d3e203538383334.roa (raw, json) Hash identifier: h6YJE7VfTeYkA82QZ1PH+QrJaQeY/T7cozll3HCbv0Q= Subject key identifier: 29:CA:F7:0D:4F:3B:5B:F8:8A:AA:AC:DC:6A:9C:8D:C3:06:E7:28:36 Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E Certificate serial: 23126541A6DB7E54EFCE73DE1CB84D57C8778ABC Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/34332e3234332e3234342e302f32332d3233203d3e203538383334.roa Signing time: Tue 20 Jan 2026 02:13:06 +0000 ROA not before: Tue 20 Jan 2026 02:08:06 +0000 ROA not after: Tue 19 Jan 2027 02:13:06 +0000 asID: 58834 IP address blocks: 43.243.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:12:65:41:a6:db:7e:54:ef:ce:73:de:1c:b8:4d:57:c8:77:8a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E Validity Not Before: Jan 20 02:08:06 2026 GMT Not After : Jan 19 02:13:06 2027 GMT Subject: CN=29CAF70D4F3B5BF88AAAACDC6A9C8DC306E72836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:93:ba:6c:30:dd:c8:9d:b0:4f:64:ef:3c: d6:0f:02:03:14:d1:8e:32:ae:a7:ac:30:a8:15:c6: a2:5c:91:e2:fe:aa:94:5d:48:53:20:41:a2:3c:6b: c9:9d:5d:dd:3b:f2:90:08:7b:f6:9b:d7:83:20:a5: 82:b5:f5:8b:d5:46:fb:22:5b:5f:fa:15:50:d4:e1: 1b:33:12:33:22:ab:66:48:e4:8b:b9:40:b5:df:b6: 6d:ef:79:65:fd:e0:2e:9f:3b:0c:cd:5e:40:8d:36: 24:69:c0:bb:cd:24:b3:b2:7e:7b:f2:0d:4b:8a:ab: 2c:be:2f:08:8d:57:90:76:01:f7:5c:58:ab:00:16: 5c:6c:68:1b:93:a4:ae:aa:be:0c:f3:7e:4d:7c:e9: 9e:2c:7f:68:34:c1:da:c3:4b:96:02:a9:b2:e0:d7: 3e:40:14:22:b9:c9:39:de:c2:bd:1e:4e:ab:a3:a2: a9:df:d3:4a:5f:64:99:19:37:40:4b:a5:78:28:64: 81:c5:0c:74:7c:fe:c7:9b:21:51:8b:68:c0:e7:53: 0c:f7:97:04:e4:3a:1f:8d:75:48:bb:f3:c9:32:2c: 39:fa:a9:b9:f8:42:88:37:24:52:2e:4f:f4:28:19: c6:af:fb:69:6d:86:c8:af:97:79:7a:8d:d2:d2:02: 41:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CA:F7:0D:4F:3B:5B:F8:8A:AA:AC:DC:6A:9C:8D:C3:06:E7:28:36 X509v3 Authority Key Identifier: keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/34332e3234332e3234342e302f32332d3233203d3e203538383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.243.244.0/23 Signature Algorithm: sha256WithRSAEncryption c2:b1:d9:70:01:bb:0a:d2:80:fa:a6:34:31:a7:d5:c0:2e:e2: fb:2f:f5:f8:1a:06:3a:7b:94:07:c9:7e:50:6a:2a:26:ed:50: 61:da:e6:57:76:6b:c4:34:c2:ba:6f:de:70:16:db:15:f9:3d: 79:5d:54:d8:3e:e6:18:01:6f:5f:f4:30:f9:4f:7f:cf:3e:5b: 18:1b:75:02:da:a9:03:df:b9:ad:9c:75:c5:2e:b6:9a:11:52: ad:58:d3:24:13:7d:56:d2:93:f9:20:f8:8f:e8:61:01:fc:92: c8:98:b6:f4:d3:9a:fa:ed:50:41:70:ca:73:2e:cf:8f:4c:b1: 70:7c:c3:64:78:19:31:33:09:f4:c8:b2:8e:cb:a3:ca:9d:72: 25:2f:22:1f:f4:5f:62:fc:8d:ef:e6:8c:fe:eb:58:97:8f:91: f9:01:f3:50:61:18:9c:b9:46:1d:ba:77:14:21:79:5b:00:d8: 7c:e8:14:c9:a8:97:a9:d4:c8:0b:c5:2b:69:d2:14:4e:9c:36: e4:fb:3b:c0:1c:ef:55:16:58:35:cb:eb:e1:1d:1c:73:3f:46: 5a:ae:5e:0c:5f:0f:21:c4:ed:ef:35:83:5c:fc:1f:b8:78:13: de:94:8e:96:94:f2:8a:e9:8b:8b:ba:13:6b:ce:fc:18:73:a5: 13:f8:86:e5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUIxJlQabbflTvznPeHLhNV8h3irwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3 OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDZaFw0yNzAxMTkwMjEzMDZaMDMxMTAvBgNV BAMTKDI5Q0FGNzBENEYzQjVCRjg4QUFBQUNEQzZBOUM4REMzMDZFNzI4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNJO6bDDdyJ2wT2TvPNYPAgMU 0Y4yrqesMKgVxqJckeL+qpRdSFMgQaI8a8mdXd078pAIe/ab14MgpYK19YvVRvsi W1/6FVDU4RszEjMiq2ZI5Iu5QLXftm3veWX94C6fOwzNXkCNNiRpwLvNJLOyfnvy DUuKqyy+LwiNV5B2AfdcWKsAFlxsaBuTpK6qvgzzfk186Z4sf2g0wdrDS5YCqbLg 1z5AFCK5yTnewr0eTqujoqnf00pfZJkZN0BLpXgoZIHFDHR8/sebIVGLaMDnUwz3 lwTkOh+NdUi788kyLDn6qbn4Qog3JFIuT/QoGcav+2lthsivl3l6jdLSAkFjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUKcr3DU87W/iKqqzcapyNwwbnKDYwHwYDVR0j BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDU1MzM0NS8wLzM0MzMyZTMyMzQz MzJlMzIzNDM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzODM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASvz9DANBgkqhkiG9w0BAQsFAAOCAQEAwrHZcAG7CtKA+qY0MafVwC7i +y/1+BoGOnuUB8l+UGoqJu1QYdrmV3ZrxDTCum/ecBbbFfk9eV1U2D7mGAFvX/Qw +U9/zz5bGBt1AtqpA9+5rZx1xS62mhFSrVjTJBN9VtKT+SD4j+hhAfySyJi29NOa +u1QQXDKcy7Pj0yxcHzDZHgZMTMJ9Miyjsujyp1yJS8iH/RfYvyN7+aM/utYl4+R +QHzUGEYnLlGHbp3FCF5WwDYfOgUyaiXqdTIC8UradIUTpw25Ps7wBzvVRZYNcvr 4R0ccz9GWq5eDF8PIcTt7zWDXPwfuHgT3pSOlpTyiumLi7oTa878GHOlE/iG5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:18 2026 by rpki-client