This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e20313339313337.roa File: 34352e3132302e3234312e302f32342d3234203d3e20313339313337.roa (raw, json) Hash identifier: Uqk9Q6rTzj5kJLpOOH3ZFm48r1MtPhQukYZ9+Q513/E= Subject key identifier: 27:A8:07:0E:D5:F7:05:3A:67:A2:B0:9E:49:A6:E9:38:5B:F2:6F:6F Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 1287FB075CC7FD187D3617DF0562C3C0B81500D6 Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e20313339313337.roa Signing time: Tue 20 Jan 2026 02:16:41 +0000 ROA not before: Tue 20 Jan 2026 02:11:41 +0000 ROA not after: Tue 19 Jan 2027 02:16:41 +0000 asID: 139137 IP address blocks: 45.120.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:87:fb:07:5c:c7:fd:18:7d:36:17:df:05:62:c3:c0:b8:15:00:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:11:41 2026 GMT Not After : Jan 19 02:16:41 2027 GMT Subject: CN=27A8070ED5F7053A67A2B09E49A6E9385BF26F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:07:cd:00:a3:ed:95:0b:32:5c:9c:93:fe:65: 11:77:99:2e:30:3f:9b:32:e9:e3:1b:88:6a:d1:e9: 5e:0b:08:2a:54:ee:23:b4:c4:4d:17:a5:f2:f4:df: 39:02:7b:90:65:9e:d6:b4:c7:c0:8d:db:db:f2:7f: fb:b1:c6:13:82:86:3b:2a:aa:87:84:6f:12:77:35: ba:77:63:f1:51:4b:ae:db:33:1b:d1:03:c2:13:14: 31:b2:4b:bd:82:5a:21:99:23:86:34:01:51:e2:81: 9d:86:46:49:7f:b1:2c:7c:be:d8:85:ad:28:a8:66: 69:de:d4:1d:c5:3d:69:17:61:a5:6c:8f:89:a9:ab: 2e:b7:46:ad:f4:84:ce:aa:db:c2:d5:a3:d6:51:38: 18:fb:02:98:b4:ca:33:81:28:41:f7:26:5e:95:e3: 5f:d3:c2:d4:ef:c7:54:20:58:ba:21:47:aa:c9:77: ca:ab:c4:bf:02:eb:84:ee:45:23:3f:be:d7:60:93: bc:00:98:cc:91:ce:47:6b:cd:12:13:39:a8:03:c4: 35:a7:c4:be:6c:5d:7c:0f:8c:99:2e:67:f8:36:3e: 3e:49:ad:fd:9a:7a:5d:97:41:eb:64:58:21:56:ee: a4:10:35:98:59:a6:d3:47:db:0d:4a:7e:40:ee:78: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A8:07:0E:D5:F7:05:3A:67:A2:B0:9E:49:A6:E9:38:5B:F2:6F:6F X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e20313339313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.241.0/24 Signature Algorithm: sha256WithRSAEncryption 19:40:a2:a5:88:ca:51:df:89:b2:4f:0a:59:d3:05:b1:5f:1d: 35:b8:78:7b:c6:23:97:35:de:3b:5b:ef:11:f4:ee:b8:d3:41: 55:46:32:b8:20:47:48:bc:a0:fa:ab:35:51:6c:41:36:54:86: e3:fa:c1:b9:f6:4e:d2:6a:5d:88:4e:3d:83:d8:41:46:90:af: b9:82:b2:a1:6a:eb:c7:2b:7b:d9:c8:59:fb:56:9c:80:7f:8a: c2:98:51:ad:d4:45:ce:41:54:02:6f:7c:2e:8c:aa:81:fa:bc: 07:03:6e:7d:65:58:c3:4e:d3:7a:4d:b1:95:5d:a5:5d:a4:a8: cd:54:25:69:b9:64:00:5d:ff:48:97:7b:7f:fe:1e:16:d2:0a: 51:04:55:8c:46:ca:f8:a1:9c:f7:45:8a:b8:63:b1:89:a9:1f: 32:99:ee:95:f6:57:ed:e9:87:78:de:41:6f:16:5e:46:c9:87: 64:57:e5:ae:f8:3a:ac:5e:39:20:4e:b6:d6:92:d9:f1:9c:8b: 44:62:ec:75:44:02:af:21:ef:e6:b0:a3:82:7c:b1:b2:41:69: d7:70:1a:31:cc:ed:ad:80:b6:6f:70:e5:42:9f:c2:aa:db:48: 9f:15:d6:77:29:24:49:25:c2:0d:a6:80:cb:9a:b1:69:22:e8: e9:7a:36:55 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEof7B1zH/Rh9NhffBWLDwLgVANYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjExNDFaFw0yNzAxMTkwMjE2NDFaMDMxMTAvBgNV BAMTKDI3QTgwNzBFRDVGNzA1M0E2N0EyQjA5RTQ5QTZFOTM4NUJGMjZGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhB80Ao+2VCzJcnJP+ZRF3mS4w P5sy6eMbiGrR6V4LCCpU7iO0xE0XpfL03zkCe5Blnta0x8CN29vyf/uxxhOChjsq qoeEbxJ3Nbp3Y/FRS67bMxvRA8ITFDGyS72CWiGZI4Y0AVHigZ2GRkl/sSx8vtiF rSioZmne1B3FPWkXYaVsj4mpqy63Rq30hM6q28LVo9ZROBj7Api0yjOBKEH3Jl6V 41/TwtTvx1QgWLohR6rJd8qrxL8C64TuRSM/vtdgk7wAmMyRzkdrzRITOagDxDWn xL5sXXwPjJkuZ/g2Pj5Jrf2ael2XQetkWCFW7qQQNZhZptNH2w1KfkDueOJXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJ6gHDtX3BTpnorCeSabpOFvyb28wHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE3NTYxNjIvMC8zNDM1MmUzMTMy MzAyZTMyMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzMzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC148TANBgkqhkiG9w0BAQsFAAOCAQEAGUCipYjKUd+Jsk8KWdMF sV8dNbh4e8YjlzXeO1vvEfTuuNNBVUYyuCBHSLyg+qs1UWxBNlSG4/rBufZO0mpd iE49g9hBRpCvuYKyoWrrxyt72chZ+1acgH+KwphRrdRFzkFUAm98Loyqgfq8BwNu fWVYw07Tek2xlV2lXaSozVQlablkAF3/SJd7f/4eFtIKUQRVjEbK+KGc90WKuGOx iakfMpnulfZX7emHeN5BbxZeRsmHZFflrvg6rF45IE621pLZ8ZyLRGLsdUQCryHv 5rCjgnyxskFp13AaMcztrYC2b3DlQp/CqttInxXWdykkSSXCDaaAy5qxaSLo6Xo2 VQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:48 2026 by rpki-client