This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e20313339313337.roa File: 34352e3132302e3234322e302f32342d3234203d3e20313339313337.roa (raw, json) Hash identifier: UF2nF0bY7qxXG/wX5Bg/Ao0GwSGeSuLV7dercGmzEXA= Subject key identifier: C9:D7:7D:3A:91:A1:DF:13:3F:76:6C:FC:31:36:F0:89:E4:D4:2D:18 Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 6C635516B186C8199C3A0AB5952B7C890C2F3E7C Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e20313339313337.roa Signing time: Tue 20 Jan 2026 02:15:38 +0000 ROA not before: Tue 20 Jan 2026 02:10:38 +0000 ROA not after: Tue 19 Jan 2027 02:15:38 +0000 asID: 139137 IP address blocks: 45.120.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:63:55:16:b1:86:c8:19:9c:3a:0a:b5:95:2b:7c:89:0c:2f:3e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:38 2026 GMT Not After : Jan 19 02:15:38 2027 GMT Subject: CN=C9D77D3A91A1DF133F766CFC3136F089E4D42D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:b5:c7:de:30:34:f3:8e:4e:d7:65:0a:8d: 12:23:56:21:98:de:91:1a:c7:26:d7:02:6b:59:2a: 01:c7:3b:4c:f3:06:0b:c7:7c:10:ad:99:11:e0:11: 85:18:ec:b2:88:ee:4f:c2:dd:6a:65:be:ed:18:44: 73:92:9a:bb:b6:ed:cd:f1:7a:5c:ff:2c:5e:99:6c: e3:a3:a9:dc:2c:c8:93:fd:55:f1:7b:91:7d:69:e7: a5:0d:68:99:07:cc:35:51:68:ee:df:ae:1a:72:70: ef:b2:d3:10:49:b4:f7:ba:7b:e5:1a:63:c7:1b:26: 23:6c:9d:55:76:5e:57:c9:9d:60:6b:7d:97:43:a5: 29:b3:00:6a:91:97:71:06:ab:cc:04:3e:66:a9:ee: c4:82:df:8a:d0:7a:36:33:3d:85:27:26:0b:03:56: bf:d9:cb:b1:14:54:b5:29:c3:d3:59:1c:3a:17:f5: ac:f6:ca:71:0e:5d:c4:e9:fa:c2:d6:c8:65:5d:8e: 04:53:05:3b:e1:70:b4:28:e9:44:ba:e6:98:55:2a: ae:1f:4f:c3:b3:8a:e8:0d:4a:fc:17:28:e2:f8:cd: 08:24:52:7e:c3:08:ee:03:72:ab:cb:bd:1d:dd:24: e2:32:7e:c0:69:0e:55:ce:ed:04:f9:33:f8:45:bf: 2c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D7:7D:3A:91:A1:DF:13:3F:76:6C:FC:31:36:F0:89:E4:D4:2D:18 X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e20313339313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.242.0/24 Signature Algorithm: sha256WithRSAEncryption 41:cd:09:c6:61:8a:34:16:ca:ea:ea:41:4c:02:f9:36:3e:54: c3:d8:00:10:cd:fc:dc:60:26:b7:95:f7:fa:b4:ad:c8:be:d6: 27:de:9d:d3:a8:26:d6:24:9a:f4:7e:95:a6:ea:23:13:bc:a0: 46:91:35:3a:73:29:0e:6f:cb:8b:f5:8d:b6:b9:22:64:e3:6e: 2b:4d:60:89:e7:0b:ff:19:bc:08:69:ad:2b:52:16:d5:fd:24: 4f:fe:8c:97:db:e5:07:0c:28:ae:fb:9b:70:89:04:89:3e:8e: 97:cb:ef:c2:a3:93:fa:6a:2d:f7:91:09:b8:1a:4e:11:87:23: ff:f0:4a:0d:4a:3e:b8:4f:e5:24:a6:73:05:6b:c5:2a:96:11: e2:da:b5:13:98:9f:75:4f:d0:38:6b:e1:27:d0:9d:6a:16:17: df:e5:92:b0:f0:4b:b0:61:51:de:51:f5:9e:b9:f5:48:03:b9: b4:71:b2:69:93:a7:eb:b0:89:b4:28:fb:9e:0a:dc:42:06:7f: 8c:7d:12:6b:5d:f2:f6:09:45:85:01:0c:1d:4d:8f:e4:97:8f: 66:5f:60:7d:14:b4:30:e3:79:31:da:e9:6d:fb:a9:cf:b5:cf: 09:db:1b:07:32:e6:3e:e2:1e:f0:dc:b7:e1:7a:e6:20:b6:56: 80:2e:e8:6e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUbGNVFrGGyBmcOgq1lSt8iQwvPnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzhaFw0yNzAxMTkwMjE1MzhaMDMxMTAvBgNV BAMTKEM5RDc3RDNBOTFBMURGMTMzRjc2NkNGQzMxMzZGMDg5RTRENDJEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX/LXH3jA0845O12UKjRIjViGY 3pEaxybXAmtZKgHHO0zzBgvHfBCtmRHgEYUY7LKI7k/C3Wplvu0YRHOSmru27c3x elz/LF6ZbOOjqdwsyJP9VfF7kX1p56UNaJkHzDVRaO7frhpycO+y0xBJtPe6e+Ua Y8cbJiNsnVV2XlfJnWBrfZdDpSmzAGqRl3EGq8wEPmap7sSC34rQejYzPYUnJgsD Vr/Zy7EUVLUpw9NZHDoX9az2ynEOXcTp+sLWyGVdjgRTBTvhcLQo6US65phVKq4f T8OziugNSvwXKOL4zQgkUn7DCO4DcqvLvR3dJOIyfsBpDlXO7QT5M/hFvyw7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUydd9OpGh3xM/dmz8MTbwieTULRgwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE3NTYxNjIvMC8zNDM1MmUzMTMy MzAyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzMzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC148jANBgkqhkiG9w0BAQsFAAOCAQEAQc0JxmGKNBbK6upBTAL5 Nj5Uw9gAEM383GAmt5X3+rStyL7WJ96d06gm1iSa9H6VpuojE7ygRpE1OnMpDm/L i/WNtrkiZONuK01giecL/xm8CGmtK1IW1f0kT/6Ml9vlBwworvubcIkEiT6Ol8vv wqOT+mot95EJuBpOEYcj//BKDUo+uE/lJKZzBWvFKpYR4tq1E5ifdU/QOGvhJ9Cd ahYX3+WSsPBLsGFR3lH1nrn1SAO5tHGyaZOn67CJtCj7ngrcQgZ/jH0Sa13y9glF hQEMHU2P5JePZl9gfRS0MON5Mdrpbfupz7XPCdsbBzLmPuIe8Ny34XrmILZWgC7o bg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:16:09 2026 by rpki-client