This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/34352e3132332e3132382e302f32322d3234203d3e203633373031.roa File: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (raw, json) Hash identifier: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM= Subject key identifier: BD:51:A9:54:3E:E0:01:C1:D7:81:C6:BC:8E:9A:61:CD:2B:F4:17:83 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 34DC7F6C9CE5B1D9E81CFB6D72C6FF851030D7D9 Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/34352e3132332e3132382e302f32322d3234203d3e203633373031.roa Signing time: Tue 20 Jan 2026 02:19:09 +0000 ROA not before: Tue 20 Jan 2026 02:14:09 +0000 ROA not after: Tue 19 Jan 2027 02:19:09 +0000 asID: 63701 IP address blocks: 45.123.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:dc:7f:6c:9c:e5:b1:d9:e8:1c:fb:6d:72:c6:ff:85:10:30:d7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: Jan 20 02:14:09 2026 GMT Not After : Jan 19 02:19:09 2027 GMT Subject: CN=BD51A9543EE001C1D781C6BC8E9A61CD2BF41783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:3a:c4:a6:ed:c9:5a:0d:ab:65:50:fa:b2: 73:68:b2:d3:0e:db:fb:16:49:1b:70:60:f9:fe:d0: b2:c9:81:e9:5f:d0:f3:2c:da:07:11:66:a6:3a:15: 92:d4:e5:7f:8f:28:cc:0b:9a:09:a3:f6:92:9a:fa: b7:62:8a:cb:00:ed:2a:38:a2:78:38:27:4b:33:ad: 7c:00:63:9b:0c:f0:d1:3e:6a:2e:fe:cd:17:ce:11: 77:f5:a4:ad:1f:a9:3e:ee:cb:09:9e:26:36:55:1a: 56:cf:c7:b5:31:0c:e5:f3:d2:97:00:13:a2:b7:62: 37:93:3b:58:50:97:f0:22:98:ae:65:b9:39:d4:27: 9d:dd:db:e0:59:e6:a8:51:18:c1:64:68:c0:05:3c: e6:87:a3:5f:89:00:4f:88:d5:f1:d8:0d:42:24:77: bf:7b:ee:a4:e0:16:e3:59:1d:4e:2f:39:e3:41:58: db:9d:78:29:7c:62:61:79:14:b2:18:bb:58:32:92: 2e:70:5e:a4:cd:74:8b:9e:a1:4e:b5:58:a9:69:01: 69:a1:c8:dc:c0:34:b7:b2:23:3a:89:5e:46:d2:43: a4:50:a1:97:48:c5:fd:9d:29:15:04:b7:ee:c7:0b: 1c:60:0f:92:98:21:d7:53:d1:f5:49:99:76:38:fb: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:51:A9:54:3E:E0:01:C1:D7:81:C6:BC:8E:9A:61:CD:2B:F4:17:83 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/34352e3132332e3132382e302f32322d3234203d3e203633373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.128.0/22 Signature Algorithm: sha256WithRSAEncryption 02:2b:fa:d9:bd:ed:b4:bf:d0:8d:c0:7a:83:21:20:d7:f2:a9: 80:f1:3e:e9:58:33:b7:ff:b2:c6:12:4c:07:87:d2:ae:22:70: 17:6b:a5:46:84:06:44:38:7b:50:e2:95:c3:da:53:a7:fb:1d: b1:3a:da:b5:38:71:73:bc:e7:6d:82:e6:5c:9d:bd:8f:6e:fe: c7:03:3d:de:c4:d6:d3:44:f5:39:0c:33:0a:13:f9:33:72:6a: 1f:ec:ec:6d:76:e5:de:61:62:16:fc:54:6d:43:61:79:5d:b5: 18:3a:d1:bb:65:7c:23:0a:ae:e4:bb:af:f0:67:a5:93:a5:d7: fe:3c:29:47:c1:5b:8d:e1:28:b1:20:c4:51:87:6e:d4:23:e1: 01:9a:e2:7d:83:1d:3a:e3:22:31:75:47:94:ca:8f:5e:91:af: 3d:9c:a7:3f:ba:ca:83:2b:92:f3:d2:6d:75:a2:74:e1:1e:34: db:85:6e:ba:98:b8:d5:c4:76:fc:97:98:e2:c6:a5:ed:ed:a7: 99:fd:40:39:7a:b9:89:d6:45:79:fe:8d:25:32:01:97:28:9e: 4f:00:e9:be:f6:b5:3f:39:6f:ba:1c:92:1b:2f:08:18:f7:e6: d8:0f:84:a3:32:cf:6b:24:a7:7f:ab:04:1f:a7:5c:c6:06:ce: 10:c1:12:54 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNNx/bJzlsdnoHPttcsb/hRAw19kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjAxMjAwMjE0MDlaFw0yNzAxMTkwMjE5MDlaMDMxMTAvBgNV BAMTKEJENTFBOTU0M0VFMDAxQzFENzgxQzZCQzhFOUE2MUNEMkJGNDE3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQMzrEpu3JWg2rZVD6snNostMO 2/sWSRtwYPn+0LLJgelf0PMs2gcRZqY6FZLU5X+PKMwLmgmj9pKa+rdiissA7So4 ong4J0szrXwAY5sM8NE+ai7+zRfOEXf1pK0fqT7uywmeJjZVGlbPx7UxDOXz0pcA E6K3YjeTO1hQl/AimK5luTnUJ53d2+BZ5qhRGMFkaMAFPOaHo1+JAE+I1fHYDUIk d7977qTgFuNZHU4vOeNBWNudeCl8YmF5FLIYu1gyki5wXqTNdIueoU61WKlpAWmh yNzANLeyIzqJXkbSQ6RQoZdIxf2dKRUEt+7HCxxgD5KYIddT0fVJmXY4+3EXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvVGpVD7gAcHXgca8jpphzSv0F4MwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDY4NDQxNy8wLzM0MzUyZTMxMzIz MzJlMzEzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi17gDANBgkqhkiG9w0BAQsFAAOCAQEAAiv62b3ttL/QjcB6gyEg1/Kp gPE+6Vgzt/+yxhJMB4fSriJwF2ulRoQGRDh7UOKVw9pTp/sdsTratThxc7znbYLm XJ29j27+xwM93sTW00T1OQwzChP5M3JqH+zsbXbl3mFiFvxUbUNheV21GDrRu2V8 Iwqu5Luv8Gelk6XX/jwpR8FbjeEosSDEUYdu1CPhAZrifYMdOuMiMXVHlMqPXpGv PZynP7rKgyuS89JtdaJ04R4024Vuupi41cR2/JeY4sal7e2nmf1AOXq5idZFef6N JTIBlyieTwDpvva1PzlvuhySGy8IGPfm2A+EozLPaySnf6sEH6dcxgbOEMESVA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:48 2026 by rpki-client