This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234302e302f32342d3234203d3e20313339313430.roa File: 34352e3132302e3234302e302f32342d3234203d3e20313339313430.roa (raw, json) Hash identifier: iPlvV8KrJ85XVY8dzwy1TsoLZxhlCoJEDuGNRdE5Ptg= Subject key identifier: 9A:97:8F:46:44:52:F4:9D:1B:14:B9:63:D7:74:15:BF:3C:4A:01:4F Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 349640D6F8602B611187A4F90211E9B9ECEC11B6 Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234302e302f32342d3234203d3e20313339313430.roa Signing time: Tue 20 Jan 2026 02:15:37 +0000 ROA not before: Tue 20 Jan 2026 02:10:37 +0000 ROA not after: Tue 19 Jan 2027 02:15:37 +0000 asID: 139140 IP address blocks: 45.120.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:96:40:d6:f8:60:2b:61:11:87:a4:f9:02:11:e9:b9:ec:ec:11:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:37 2026 GMT Not After : Jan 19 02:15:37 2027 GMT Subject: CN=9A978F464452F49D1B14B963D77415BF3C4A014F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:aa:f1:5c:72:6e:31:63:c5:68:7a:2e:51: 51:14:08:d8:9f:e2:a9:31:b3:43:74:36:bd:54:31: b1:f2:83:cd:99:12:9e:08:a6:5b:02:a6:73:3b:70: a0:17:8c:a0:4b:10:13:c7:d6:f1:6e:e1:34:ec:dc: fc:90:44:42:41:3a:7e:17:ca:b1:3e:8a:8b:29:d2: aa:7f:bc:dc:36:7e:a2:f3:34:9f:8c:d7:53:03:53: d4:71:19:25:03:88:ae:0f:96:2c:57:bb:6a:ef:da: a0:a3:22:18:ae:a8:cd:fc:62:a1:c3:8d:c6:73:df: 92:e7:1a:0b:8d:13:7a:2b:76:bb:f7:7c:4a:52:c2: 4b:58:cd:98:f5:16:a6:63:19:4a:a5:59:ca:fa:99: 1a:79:65:ee:e6:cb:d8:0c:b6:02:9d:40:d0:15:a7: 42:c5:f3:32:63:7d:0c:3d:db:de:c0:08:06:67:63: 06:ae:f3:a3:5b:a8:cf:d8:6b:0f:73:f1:33:a4:b3: a8:33:09:39:49:da:f3:d2:cc:71:e7:55:f0:e0:68: 36:f6:92:47:fd:53:51:db:b6:15:98:c2:fb:5d:55: ff:c3:a8:47:74:b6:4e:ac:b0:a8:f2:b0:fa:0b:2a: c0:67:06:b3:ec:cf:f7:0a:8f:6f:dd:72:c6:5e:a7: 59:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:97:8F:46:44:52:F4:9D:1B:14:B9:63:D7:74:15:BF:3C:4A:01:4F X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234302e302f32342d3234203d3e20313339313430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.240.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:fc:fb:1a:bb:ad:f5:7b:4a:cd:76:c1:16:72:28:be:b4:53: dc:16:ff:27:01:dd:52:52:8c:3a:6d:6d:18:a7:37:a0:81:d7: f0:c9:a7:cb:c5:fa:73:b0:af:88:d8:e3:a4:c7:79:8f:6b:a0: 87:2c:2a:d8:df:dd:bd:3f:f2:31:bd:6a:82:83:7b:db:29:fb: 23:80:e6:44:8b:3c:cc:8f:dc:40:f9:28:52:5e:c3:44:52:b0: 6a:49:4d:d6:8a:5d:1f:f5:21:81:49:4b:eb:85:5f:eb:54:77: 8c:44:d4:33:54:c8:7c:8d:fa:de:84:24:ab:91:8a:b1:b6:ea: 3c:06:40:fb:49:78:03:39:5f:3c:7c:80:d9:66:03:75:4c:c1: d0:ad:71:97:55:6e:20:dc:50:bf:a4:71:9f:bf:ab:36:7a:a6: da:4b:c6:39:80:94:ff:f2:9d:f8:cd:8f:dc:ec:92:3d:6e:16: 12:cc:47:86:44:89:4a:c1:41:8d:3c:cf:53:df:91:18:1e:f2: d1:03:68:cb:6f:b3:5b:35:88:bb:03:30:3f:72:1e:75:45:18: 64:4c:9b:84:ff:b9:b0:b0:f9:90:af:30:3d:7f:f5:18:7d:1e: 13:db:45:33:02:51:31:b8:0e:48:d6:89:82:f5:6f:6a:82:8e: cd:bc:d7:5d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUNJZA1vhgK2ERh6T5AhHpuezsEbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzdaFw0yNzAxMTkwMjE1MzdaMDMxMTAvBgNV BAMTKDlBOTc4RjQ2NDQ1MkY0OUQxQjE0Qjk2M0Q3NzQxNUJGM0M0QTAxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKqrxXHJuMWPFaHouUVEUCNif 4qkxs0N0Nr1UMbHyg82ZEp4IplsCpnM7cKAXjKBLEBPH1vFu4TTs3PyQREJBOn4X yrE+iosp0qp/vNw2fqLzNJ+M11MDU9RxGSUDiK4PlixXu2rv2qCjIhiuqM38YqHD jcZz35LnGguNE3ordrv3fEpSwktYzZj1FqZjGUqlWcr6mRp5Ze7my9gMtgKdQNAV p0LF8zJjfQw9297ACAZnYwau86NbqM/Yaw9z8TOks6gzCTlJ2vPSzHHnVfDgaDb2 kkf9U1HbthWYwvtdVf/DqEd0tk6ssKjysPoLKsBnBrPsz/cKj2/dcsZep1nNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmpePRkRS9J0bFLlj13QVvzxKAU8wHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE3NTYxNjIvMC8zNDM1MmUzMTMy MzAyZTMyMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC148DANBgkqhkiG9w0BAQsFAAOCAQEAf/z7Grut9XtKzXbBFnIo vrRT3Bb/JwHdUlKMOm1tGKc3oIHX8Mmny8X6c7CviNjjpMd5j2ughywq2N/dvT/y Mb1qgoN72yn7I4DmRIs8zI/cQPkoUl7DRFKwaklN1opdH/UhgUlL64Vf61R3jETU M1TIfI363oQkq5GKsbbqPAZA+0l4AzlfPHyA2WYDdUzB0K1xl1VuINxQv6Rxn7+r Nnqm2kvGOYCU//Kd+M2P3OySPW4WEsxHhkSJSsFBjTzPU9+RGB7y0QNoy2+zWzWI uwMwP3IedUUYZEybhP+5sLD5kK8wPX/1GH0eE9tFMwJRMbgOSNaJgvVvaoKOzbzX XQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:48 2026 by rpki-client