This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e20313338343537.roa File: 34352e3132302e3234322e302f32342d3234203d3e20313338343537.roa (raw, json) Hash identifier: Hg+nJhXX3HEG000Utx5GVJte3UmufmqG/VQ42nEb1JI= Subject key identifier: DD:96:4D:D9:3E:3C:BB:40:A9:68:18:5A:20:6F:5F:9A:5A:07:69:BC Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 6BF481CDBD1D5DA0B4B44DCB40E48EEF88D4B0B1 Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e20313338343537.roa Signing time: Tue 20 Jan 2026 02:16:41 +0000 ROA not before: Tue 20 Jan 2026 02:11:41 +0000 ROA not after: Tue 19 Jan 2027 02:16:41 +0000 asID: 138457 IP address blocks: 45.120.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f4:81:cd:bd:1d:5d:a0:b4:b4:4d:cb:40:e4:8e:ef:88:d4:b0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:11:41 2026 GMT Not After : Jan 19 02:16:41 2027 GMT Subject: CN=DD964DD93E3CBB40A968185A206F5F9A5A0769BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:60:65:fd:f6:1c:a8:c7:22:eb:1a:40:31: 57:3f:1d:64:7f:cb:3f:50:9b:78:47:c4:7c:0b:30: b1:af:d8:72:7f:60:ae:53:0e:31:08:f5:44:85:72: f6:f0:3f:81:ee:97:d7:17:a0:96:31:83:fc:1a:50: 40:ae:69:e2:f8:a2:43:9f:fc:20:fa:a7:39:06:d9: b7:4e:60:0d:fc:96:c2:c2:64:81:d2:85:d4:22:90: 23:6c:0f:69:b9:e4:ce:5e:b2:20:89:89:7f:61:e3: dd:a6:6f:5a:86:0d:e5:aa:56:9f:a2:22:3c:3e:9f: 13:20:c9:88:85:18:db:62:12:20:f7:e3:79:6f:66: a4:29:83:b3:82:91:08:7e:82:a5:62:a9:bb:d3:db: 98:85:44:a1:1f:aa:66:e0:9f:a7:ef:12:25:d8:9e: c4:08:a4:75:e0:54:25:0f:70:c9:cb:4f:e6:c4:74: e5:07:06:00:4c:c9:7d:0a:e2:5f:fe:30:1b:93:9a: e3:50:5b:a1:e4:b9:42:98:90:87:64:b3:8e:4b:d1: 7a:7d:b2:ef:82:ee:3c:91:c7:39:72:c9:eb:21:9e: 7c:75:51:4c:2d:1b:aa:88:23:11:2b:e9:13:43:80: da:ef:7e:83:bf:3e:33:94:29:9e:e3:df:7d:62:d1: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:96:4D:D9:3E:3C:BB:40:A9:68:18:5A:20:6F:5F:9A:5A:07:69:BC X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e20313338343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.242.0/24 Signature Algorithm: sha256WithRSAEncryption bc:2b:16:e8:a7:2e:15:37:7e:7e:fa:d4:b7:7c:d7:91:c6:12: 8b:3b:1d:59:a8:df:b6:ed:53:ab:20:f1:53:a4:f9:0d:88:8b: 65:b0:55:43:0d:5d:e5:79:f3:a2:94:2b:35:90:a9:f7:b9:a1: ca:9b:9d:c5:76:ae:f1:6a:28:78:96:eb:61:f3:46:d6:dc:07: 88:cc:a9:71:1b:07:34:6a:39:f6:9c:c5:7b:6c:aa:92:53:97: ad:56:a5:20:64:56:b2:1c:0c:1b:e8:9a:a7:c9:b0:5d:0e:74: 79:83:7b:1e:ff:71:db:09:b3:c3:86:9e:79:48:ec:c8:da:42: ca:ba:41:7b:b3:4a:1d:0d:57:5a:5b:f8:a8:ae:a7:67:97:38: d9:24:95:25:75:0b:86:2e:bb:7c:d3:98:bb:a3:1c:5d:03:d3: 97:ae:8e:e3:b5:50:70:7e:76:44:64:83:b3:73:29:ff:85:de: 9d:57:32:47:fe:d3:54:a9:bc:e7:5e:58:06:da:05:9d:68:af: e4:9d:96:b0:81:d0:be:bf:d1:11:73:db:db:30:b6:3e:5d:21: 06:18:d5:4b:91:9d:86:0e:18:75:11:18:92:63:f4:13:90:8a: 6a:34:16:4b:67:c9:f3:5b:39:38:45:4a:5f:27:7e:d8:85:92: 78:55:6f:4e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUa/SBzb0dXaC0tE3LQOSO74jUsLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjExNDFaFw0yNzAxMTkwMjE2NDFaMDMxMTAvBgNV BAMTKEREOTY0REQ5M0UzQ0JCNDBBOTY4MTg1QTIwNkY1RjlBNUEwNzY5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLWBl/fYcqMci6xpAMVc/HWR/ yz9Qm3hHxHwLMLGv2HJ/YK5TDjEI9USFcvbwP4Hul9cXoJYxg/waUECuaeL4okOf /CD6pzkG2bdOYA38lsLCZIHShdQikCNsD2m55M5esiCJiX9h492mb1qGDeWqVp+i Ijw+nxMgyYiFGNtiEiD343lvZqQpg7OCkQh+gqViqbvT25iFRKEfqmbgn6fvEiXY nsQIpHXgVCUPcMnLT+bEdOUHBgBMyX0K4l/+MBuTmuNQW6HkuUKYkIdks45L0Xp9 su+C7jyRxzlyyeshnnx1UUwtG6qIIxEr6RNDgNrvfoO/PjOUKZ7j331i0bjXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU3ZZN2T48u0CpaBhaIG9fmloHabwwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE3NTYxNjIvMC8zNDM1MmUzMTMy MzAyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzUzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC148jANBgkqhkiG9w0BAQsFAAOCAQEAvCsW6KcuFTd+fvrUt3zX kcYSizsdWajftu1TqyDxU6T5DYiLZbBVQw1d5XnzopQrNZCp97mhypudxXau8Woo eJbrYfNG1twHiMypcRsHNGo59pzFe2yqklOXrValIGRWshwMG+iap8mwXQ50eYN7 Hv9x2wmzw4aeeUjsyNpCyrpBe7NKHQ1XWlv4qK6nZ5c42SSVJXULhi67fNOYu6Mc XQPTl66O47VQcH52RGSDs3Mp/4XenVcyR/7TVKm8515YBtoFnWiv5J2WsIHQvr/R EXPb2zC2Pl0hBhjVS5Gdhg4YdREYkmP0E5CKajQWS2fJ81s5OEVKXyd+2IWSeFVv Tg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:16:01 2026 by rpki-client