This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234302e302f32342d3234203d3e20313338343537.roa File: 34352e3132302e3234302e302f32342d3234203d3e20313338343537.roa (raw, json) Hash identifier: 0V7HTxpV0TdXBzE5wStwIeTM5L/cVVk8H5WmOogHCAg= Subject key identifier: 83:86:9D:D4:D6:2B:A4:37:3B:CD:BD:5D:D1:F4:BC:A7:67:52:9A:61 Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 3DB5BAF1FC2A73515F2BE9868A981444D8C9934A Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234302e302f32342d3234203d3e20313338343537.roa Signing time: Tue 20 Jan 2026 02:15:38 +0000 ROA not before: Tue 20 Jan 2026 02:10:38 +0000 ROA not after: Tue 19 Jan 2027 02:15:38 +0000 asID: 138457 IP address blocks: 45.120.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b5:ba:f1:fc:2a:73:51:5f:2b:e9:86:8a:98:14:44:d8:c9:93:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:38 2026 GMT Not After : Jan 19 02:15:38 2027 GMT Subject: CN=83869DD4D62BA4373BCDBD5DD1F4BCA767529A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:95:4e:c2:51:01:ae:c5:84:72:80:42:25: 1c:7c:b8:dc:73:10:dd:62:41:51:e1:2d:72:9f:99: 92:8f:15:63:23:3d:59:a2:82:1a:06:da:09:74:44: 07:8f:b7:8f:db:22:64:7d:3d:4a:3d:da:5a:f7:7c: 87:e8:b8:1c:cd:0d:66:77:39:91:f8:90:f1:6f:21: 98:d2:62:f1:f0:c0:6a:fc:3b:a3:70:10:bf:b7:60: 1f:d9:2a:7e:ad:0f:93:03:98:da:e7:e4:51:d5:93: 76:c9:a7:b9:9a:dd:57:63:a8:66:e5:06:ba:c8:7e: 08:04:aa:97:cc:3f:a6:94:d4:b6:b3:d1:a6:4d:7c: 26:eb:0a:54:94:bc:43:e3:8f:af:8b:2a:b5:05:77: 2e:c5:63:61:d0:36:94:d4:d5:9d:db:83:a7:e9:74: 35:ef:a6:22:5b:8d:ec:8f:97:15:65:c5:68:4f:22: f6:96:18:26:d4:0e:b5:9d:ec:25:09:26:5e:c8:63: 45:f3:db:74:1e:a6:ed:db:da:6b:08:7c:c2:9c:a3: 61:1f:ea:09:a1:1d:94:7b:d7:d4:eb:dd:8e:7d:7c: df:75:42:2f:8e:d2:0e:ff:db:31:ad:d8:14:27:63: 7a:79:7f:aa:90:de:25:7f:15:54:14:0d:36:3d:e1: dc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:86:9D:D4:D6:2B:A4:37:3B:CD:BD:5D:D1:F4:BC:A7:67:52:9A:61 X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234302e302f32342d3234203d3e20313338343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.240.0/24 Signature Algorithm: sha256WithRSAEncryption c1:9b:dd:ed:f3:05:37:ee:f1:0b:26:4f:55:12:63:8b:fa:a2: 73:2c:01:9c:8b:9f:fb:f4:b8:64:15:61:e8:6c:b6:a9:ae:74: aa:ab:08:56:54:37:2a:3e:1a:e2:1b:04:94:0d:ad:44:32:26: 55:12:64:97:c2:94:e5:ee:6e:d6:0e:52:eb:b5:9a:d6:2b:e9: a0:db:9a:30:bc:b1:fa:2f:04:e3:c9:3b:99:09:23:fc:d3:5e: 09:ab:8c:f1:e9:f4:20:af:d8:f2:82:78:63:10:87:dd:d6:c1: d2:bd:8f:36:e6:ad:d4:ba:10:34:9a:b7:3c:34:47:33:5e:86: c6:ee:66:71:fb:0a:15:ee:cf:7b:5c:7e:c6:36:64:77:7f:55: e9:c2:6f:2d:33:b0:6c:fc:08:79:9f:0e:bf:be:f3:f9:95:17: 44:21:c9:25:b4:dc:42:86:84:db:5d:77:25:66:72:cd:ad:33: ef:92:29:a0:24:b1:ae:91:ab:e6:75:c5:a9:10:50:75:15:46: 02:1c:24:c1:ca:97:43:e4:02:f6:75:d4:fd:df:b7:98:67:37: 9c:cc:ec:c5:88:d0:27:eb:79:39:32:b2:08:2e:8b:a6:74:60: 82:19:83:3b:a4:ed:3e:6f:ed:b3:d4:0d:a8:bb:91:d6:bc:d2: ab:c9:f2:5f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPbW68fwqc1FfK+mGipgURNjJk0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzhaFw0yNzAxMTkwMjE1MzhaMDMxMTAvBgNV BAMTKDgzODY5REQ0RDYyQkE0MzczQkNEQkQ1REQxRjRCQ0E3Njc1MjlBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpspVOwlEBrsWEcoBCJRx8uNxz EN1iQVHhLXKfmZKPFWMjPVmighoG2gl0RAePt4/bImR9PUo92lr3fIfouBzNDWZ3 OZH4kPFvIZjSYvHwwGr8O6NwEL+3YB/ZKn6tD5MDmNrn5FHVk3bJp7ma3VdjqGbl BrrIfggEqpfMP6aU1Laz0aZNfCbrClSUvEPjj6+LKrUFdy7FY2HQNpTU1Z3bg6fp dDXvpiJbjeyPlxVlxWhPIvaWGCbUDrWd7CUJJl7IY0Xz23Qepu3b2msIfMKco2Ef 6gmhHZR719Tr3Y59fN91Qi+O0g7/2zGt2BQnY3p5f6qQ3iV/FVQUDTY94dyXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUg4ad1NYrpDc7zb1d0fS8p2dSmmEwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE3NTYxNjIvMC8zNDM1MmUzMTMy MzAyZTMyMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzUzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC148DANBgkqhkiG9w0BAQsFAAOCAQEAwZvd7fMFN+7xCyZPVRJj i/qicywBnIuf+/S4ZBVh6Gy2qa50qqsIVlQ3Kj4a4hsElA2tRDImVRJkl8KU5e5u 1g5S67Wa1ivpoNuaMLyx+i8E48k7mQkj/NNeCauM8en0IK/Y8oJ4YxCH3dbB0r2P Nuat1LoQNJq3PDRHM16Gxu5mcfsKFe7Pe1x+xjZkd39V6cJvLTOwbPwIeZ8Ov77z +ZUXRCHJJbTcQoaE2113JWZyza0z75IpoCSxrpGr5nXFqRBQdRVGAhwkwcqXQ+QC 9nXU/d+3mGc3nMzsxYjQJ+t5OTKyCC6LpnRgghmDO6TtPm/ts9QNqLuR1rzSq8ny Xw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:56 2026 by rpki-client