This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234302e302f32342d3234203d3e203633353832.roa File: 34352e3132302e3234302e302f32342d3234203d3e203633353832.roa (raw, json) Hash identifier: rJf0RnL6pxUu/Vsc1wv2ge7rqQj0bZ13ZZ0gZEWq9rU= Subject key identifier: 85:37:F7:23:3E:0A:37:AE:C9:E2:EA:5C:B7:82:FF:D0:99:43:C2:A2 Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 02860ABD3A2FB4268B60D4554B10C9F55B332635 Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234302e302f32342d3234203d3e203633353832.roa Signing time: Tue 20 Jan 2026 02:16:41 +0000 ROA not before: Tue 20 Jan 2026 02:11:41 +0000 ROA not after: Tue 19 Jan 2027 02:16:41 +0000 asID: 63582 IP address blocks: 45.120.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:86:0a:bd:3a:2f:b4:26:8b:60:d4:55:4b:10:c9:f5:5b:33:26:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:11:41 2026 GMT Not After : Jan 19 02:16:41 2027 GMT Subject: CN=8537F7233E0A37AEC9E2EA5CB782FFD09943C2A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:71:b8:6d:0d:9a:f7:7e:f0:7d:99:38:27:65: 00:29:e8:61:59:25:92:37:8d:32:4d:99:02:97:7e: a1:68:24:0d:8c:dd:28:fb:50:c1:1b:aa:7c:38:a3: 5b:ec:2a:3b:b5:9b:48:81:5a:66:03:3e:c1:9a:fd: aa:9a:57:f9:68:77:fb:3c:f5:56:ab:0d:24:8a:35: e8:2b:46:01:7a:47:f3:1f:e6:28:5b:f3:b0:8b:ec: a7:17:9e:5c:c4:eb:14:c7:e1:00:d5:8a:d4:b3:26: df:6e:cf:65:ae:63:8c:6e:e2:b9:18:f0:18:80:9c: 84:33:f2:8b:8b:9b:08:5e:77:00:0c:b4:9f:ca:a9: 64:69:42:51:ec:fb:a0:06:42:a4:04:58:7a:81:e5: 64:ca:06:14:86:52:2c:25:45:d2:41:c5:88:4f:a4: 23:83:d0:09:12:b1:66:21:cb:65:75:9f:29:a6:84: e0:1b:91:3b:e3:ee:cf:32:d6:ed:8c:96:27:b5:b1: bf:f4:a4:10:c1:1c:50:81:85:91:f5:75:b0:fe:d6: 33:7c:4c:0f:12:6e:d7:94:1b:cc:3b:e2:ad:e9:ae: a8:4a:3e:a9:27:88:6d:a4:55:99:88:a3:4a:c3:a1: 5f:f5:91:b6:ed:6a:57:8f:46:f3:b5:67:1b:96:97: 08:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:37:F7:23:3E:0A:37:AE:C9:E2:EA:5C:B7:82:FF:D0:99:43:C2:A2 X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234302e302f32342d3234203d3e203633353832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.240.0/24 Signature Algorithm: sha256WithRSAEncryption a1:74:f0:bf:b8:e7:78:16:1b:fb:df:7f:f0:1c:14:49:07:f3: ca:47:97:91:9c:2c:78:4b:73:c2:51:2f:46:f7:33:05:3c:59: 68:d0:02:5a:61:5e:02:ca:1f:af:52:52:d7:a3:38:1a:d2:19: fc:05:16:9b:26:c6:80:0d:06:df:04:31:0d:36:61:51:3f:ae: 41:1a:36:44:41:d7:ac:9d:e2:35:f2:11:63:90:b0:db:f5:99: 6f:07:93:db:a4:ae:e9:fe:b1:6c:1e:cf:f1:c8:03:67:89:91: 43:5f:d0:02:6a:24:55:bb:64:39:85:af:48:c6:f6:c5:91:c3: 64:67:bf:53:87:27:01:89:5b:db:9d:4b:61:d4:3c:fd:b9:3b: 03:d6:a2:93:db:54:8f:a9:b1:68:22:94:ab:ec:cb:d1:d1:4e: a9:4f:db:e7:c2:6a:ef:5e:af:b1:ff:5e:22:b1:5d:33:1d:eb: aa:75:ec:4a:23:8e:a7:b1:ef:67:de:bc:73:69:e2:4f:14:c2: ec:b2:19:9d:cb:87:0e:68:f4:f7:0a:c9:77:25:5d:c7:38:1e: b9:1b:c7:68:b6:d9:df:5f:cd:36:41:0f:3f:80:ce:d7:ea:55: ef:64:ea:df:8b:75:32:ae:5d:0e:22:ff:3b:90:51:7b:05:cf: a6:15:2c:4c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAoYKvTovtCaLYNRVSxDJ9VszJjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjExNDFaFw0yNzAxMTkwMjE2NDFaMDMxMTAvBgNV BAMTKDg1MzdGNzIzM0UwQTM3QUVDOUUyRUE1Q0I3ODJGRkQwOTk0M0MyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIcbhtDZr3fvB9mTgnZQAp6GFZ JZI3jTJNmQKXfqFoJA2M3Sj7UMEbqnw4o1vsKju1m0iBWmYDPsGa/aqaV/lod/s8 9VarDSSKNegrRgF6R/Mf5ihb87CL7KcXnlzE6xTH4QDVitSzJt9uz2WuY4xu4rkY 8BiAnIQz8ouLmwhedwAMtJ/KqWRpQlHs+6AGQqQEWHqB5WTKBhSGUiwlRdJBxYhP pCOD0AkSsWYhy2V1nymmhOAbkTvj7s8y1u2Mlie1sb/0pBDBHFCBhZH1dbD+1jN8 TA8SbteUG8w74q3prqhKPqkniG2kVZmIo0rDoV/1kbbtalePRvO1ZxuWlwiXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUhTf3Iz4KN67J4upct4L/0JlDwqIwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTc1NjE2Mi8wLzM0MzUyZTMxMzIz MDJlMzIzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzgzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC148DANBgkqhkiG9w0BAQsFAAOCAQEAoXTwv7jneBYb+99/8BwUSQfz ykeXkZwseEtzwlEvRvczBTxZaNACWmFeAsofr1JS16M4GtIZ/AUWmybGgA0G3wQx DTZhUT+uQRo2REHXrJ3iNfIRY5Cw2/WZbweT26Su6f6xbB7P8cgDZ4mRQ1/QAmok VbtkOYWvSMb2xZHDZGe/U4cnAYlb251LYdQ8/bk7A9aik9tUj6mxaCKUq+zL0dFO qU/b58Jq716vsf9eIrFdMx3rqnXsSiOOp7HvZ968c2niTxTC7LIZncuHDmj09wrJ dyVdxzgeuRvHaLbZ31/NNkEPP4DO1+pV72Tq34t1Mq5dDiL/O5BRewXPphUsTA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:52:01 2026 by rpki-client