This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e20313339313430.roa File: 34352e3132302e3234312e302f32342d3234203d3e20313339313430.roa (raw, json) Hash identifier: dzRe2b3gV9oK9ECSA7dRuuoV9cc3jlOQuEX9OvuVbfg= Subject key identifier: 50:3B:9E:A8:73:02:8A:EA:3C:D0:B9:62:61:09:DE:F4:5E:86:98:46 Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 4FBD44BE506275BB777DC7BAD94910261D709480 Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e20313339313430.roa Signing time: Tue 20 Jan 2026 02:15:38 +0000 ROA not before: Tue 20 Jan 2026 02:10:38 +0000 ROA not after: Tue 19 Jan 2027 02:15:38 +0000 asID: 139140 IP address blocks: 45.120.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:bd:44:be:50:62:75:bb:77:7d:c7:ba:d9:49:10:26:1d:70:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:38 2026 GMT Not After : Jan 19 02:15:38 2027 GMT Subject: CN=503B9EA873028AEA3CD0B9626109DEF45E869846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:0b:32:35:f9:50:12:af:7b:c8:42:2d:27: 22:bc:f8:a4:bb:11:f4:c6:63:ab:39:e0:5a:10:59: c9:53:9a:ce:a4:e5:3e:31:5b:23:cf:1c:5d:21:63: 55:d4:b4:69:1d:99:5a:cb:02:df:04:fe:7c:7e:18: ce:32:1d:3f:d4:a1:61:7f:0f:ca:7b:fd:6f:87:ed: 6e:f3:2c:c5:d5:dd:1c:d9:ec:29:81:72:bc:50:ae: 8a:e1:9d:32:d8:3e:63:96:5b:0e:b2:1d:60:a5:59: a1:82:a8:ce:b0:66:16:cb:2d:0e:70:b8:73:bf:9c: 71:1b:18:e0:a4:33:78:3d:19:2e:35:d9:c4:b0:68: 49:71:78:e8:38:b4:f0:04:c4:5f:ee:1c:2b:ef:b0: 78:23:49:83:41:58:4c:84:11:b5:02:83:28:ac:eb: 3d:3b:fe:5d:77:9b:e5:c3:ff:3e:08:d5:be:10:8c: 0c:14:3d:c9:42:86:d6:c0:7b:1a:37:57:bd:20:d5: b9:98:20:bc:a4:22:d0:89:9a:7a:23:d8:a0:73:c0: c3:e0:b0:0a:59:b0:21:cb:6a:6f:03:cf:bf:ed:47: 63:ee:09:c7:6a:be:63:ad:de:3e:07:58:ec:39:7c: 3e:0d:c0:09:32:ef:9e:64:19:7b:65:b6:00:c0:78: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3B:9E:A8:73:02:8A:EA:3C:D0:B9:62:61:09:DE:F4:5E:86:98:46 X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e20313339313430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.241.0/24 Signature Algorithm: sha256WithRSAEncryption 71:0e:a5:a4:5d:c4:e8:21:5d:8c:1c:a2:4b:77:33:21:f2:37: dd:d2:8a:15:27:56:b0:d2:2b:db:70:46:ec:a3:55:a7:a5:be: 1b:47:07:c0:54:a5:50:66:e3:c4:80:13:c8:80:c2:e1:ba:c1: 01:8f:90:c2:42:a7:e7:02:4b:14:d1:91:ed:2f:f8:f1:b6:f6: 7b:45:a8:d4:c0:4f:c3:74:56:96:93:b0:09:09:53:95:c5:a5: a8:e8:93:1a:4a:09:72:b9:33:ff:94:2d:64:b0:39:45:04:e4: 75:63:cf:6c:db:f0:cf:54:28:35:91:65:8b:b2:b8:a5:df:e7: ad:c1:1f:6b:6e:70:6b:d0:81:da:22:ae:de:93:92:b1:25:48: 3b:29:b4:77:8f:70:94:7d:5f:48:72:62:49:60:aa:d6:c6:ce: 1f:38:92:60:4f:55:72:c4:63:7c:a9:41:66:b1:22:db:70:0f: 7d:64:a8:b7:2b:0a:81:bd:9e:a0:84:71:db:cc:92:fc:d3:89: 16:b1:40:ae:60:26:2d:68:b2:27:0e:19:4b:e6:ac:e7:4f:7f: 92:41:0c:95:6a:8d:33:c4:cd:29:45:e6:67:1f:a8:7b:d7:9b: 0c:b0:55:96:b0:f2:a6:3e:2a:aa:68:7c:01:da:f8:d8:d3:8d: 0b:8b:07:ae -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUT71EvlBidbt3fce62UkQJh1wlIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzhaFw0yNzAxMTkwMjE1MzhaMDMxMTAvBgNV BAMTKDUwM0I5RUE4NzMwMjhBRUEzQ0QwQjk2MjYxMDlERUY0NUU4Njk4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nwsyNflQEq97yEItJyK8+KS7 EfTGY6s54FoQWclTms6k5T4xWyPPHF0hY1XUtGkdmVrLAt8E/nx+GM4yHT/UoWF/ D8p7/W+H7W7zLMXV3RzZ7CmBcrxQrorhnTLYPmOWWw6yHWClWaGCqM6wZhbLLQ5w uHO/nHEbGOCkM3g9GS412cSwaElxeOg4tPAExF/uHCvvsHgjSYNBWEyEEbUCgyis 6z07/l13m+XD/z4I1b4QjAwUPclChtbAexo3V70g1bmYILykItCJmnoj2KBzwMPg sApZsCHLam8Dz7/tR2PuCcdqvmOt3j4HWOw5fD4NwAky755kGXtltgDAeLMTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUUDueqHMCiuo80LliYQne9F6GmEYwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE3NTYxNjIvMC8zNDM1MmUzMTMy MzAyZTMyMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC148TANBgkqhkiG9w0BAQsFAAOCAQEAcQ6lpF3E6CFdjByiS3cz IfI33dKKFSdWsNIr23BG7KNVp6W+G0cHwFSlUGbjxIATyIDC4brBAY+QwkKn5wJL FNGR7S/48bb2e0Wo1MBPw3RWlpOwCQlTlcWlqOiTGkoJcrkz/5QtZLA5RQTkdWPP bNvwz1QoNZFli7K4pd/nrcEfa25wa9CB2iKu3pOSsSVIOym0d49wlH1fSHJiSWCq 1sbOHziSYE9VcsRjfKlBZrEi23APfWSotysKgb2eoIRx28yS/NOJFrFArmAmLWiy Jw4ZS+as509/kkEMlWqNM8TNKUXmZx+oe9ebDLBVlrDypj4qqmh8Adr42NONC4sH rg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:52:01 2026 by rpki-client