This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e20313339313430.roa File: 34352e3132302e3234322e302f32342d3234203d3e20313339313430.roa (raw, json) Hash identifier: +q1EwOp7wfDrX2w5zfjyOptpyogYlAei0OqT76UlRr0= Subject key identifier: 5D:E8:16:ED:48:62:86:E5:A3:8C:27:B2:5A:72:B1:C8:5B:FB:8E:85 Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 7D9752D7A7EB0E643FEFC321C7B36D021711A5FB Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e20313339313430.roa Signing time: Tue 20 Jan 2026 02:16:42 +0000 ROA not before: Tue 20 Jan 2026 02:11:42 +0000 ROA not after: Tue 19 Jan 2027 02:16:42 +0000 asID: 139140 IP address blocks: 45.120.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:97:52:d7:a7:eb:0e:64:3f:ef:c3:21:c7:b3:6d:02:17:11:a5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:11:42 2026 GMT Not After : Jan 19 02:16:42 2027 GMT Subject: CN=5DE816ED486286E5A38C27B25A72B1C85BFB8E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:a2:14:45:2f:9a:5c:d7:cc:e5:7a:17:98: e1:13:42:af:e2:a0:1e:d3:fd:2d:d7:d6:82:4c:6a: 43:df:86:ec:4c:23:6a:8c:0a:5c:6a:84:c6:7d:e6: f6:a3:34:02:ae:04:34:04:fb:88:2e:13:5a:f3:7e: 9b:24:4d:8b:ea:da:7e:85:1a:5d:f8:6a:53:12:92: b3:70:96:81:be:5a:f2:24:50:ce:ac:b9:e1:9a:51: 84:ee:c8:ff:f9:69:08:37:7c:49:c6:f4:b3:eb:92: 5a:5c:cb:5c:5b:d0:1c:e1:01:47:8e:8b:21:2a:cc: 35:50:ea:70:e1:11:19:df:aa:3c:d4:04:bc:a9:4c: e9:93:4b:97:26:a3:c9:4a:1a:c2:f2:e4:66:08:e1: ce:0f:37:b5:ce:38:ec:a0:69:34:d5:34:5b:d0:11: 28:4a:25:eb:e1:2c:ce:0b:bf:dc:5f:fc:7e:be:a7: cb:b4:d2:5c:22:f7:44:93:5b:b1:a2:81:0d:a1:ef: fc:0c:0c:b2:c8:f4:a7:44:2a:57:c2:7d:97:da:44: 12:aa:77:73:c8:e8:9a:d2:f6:5f:57:48:2a:d0:6e: 5e:46:31:6b:03:e5:dd:09:5a:ad:23:32:88:d9:28: 0d:ed:18:0a:bc:10:8a:75:e9:c0:32:a3:b2:b6:be: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E8:16:ED:48:62:86:E5:A3:8C:27:B2:5A:72:B1:C8:5B:FB:8E:85 X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e20313339313430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.242.0/24 Signature Algorithm: sha256WithRSAEncryption d2:fa:5f:57:6b:90:69:85:2d:48:e9:27:4d:80:22:dd:2f:d6: c6:b8:3d:1b:7c:a9:ea:1a:8e:6c:17:a0:47:ee:7b:3c:34:26: 59:8d:8a:b0:d7:f9:ef:00:c9:72:70:a9:80:44:50:ee:ff:eb: 77:d1:84:2f:fe:82:aa:4a:95:91:52:b7:c6:f2:29:14:2e:97: c5:4b:dd:05:dd:f1:4f:21:94:47:b7:01:77:0b:d7:c4:f7:54: af:cf:a8:a3:da:94:68:19:52:b9:bc:3c:a8:cb:8a:0b:4b:68: b5:9c:96:55:97:3b:b4:7a:17:53:18:81:1f:b6:35:68:74:c6: ab:30:68:6d:c9:e2:10:57:20:0c:65:41:5d:78:67:a0:8c:a8: b1:77:db:7f:48:19:4e:f4:53:72:42:0d:c2:ee:fd:db:d8:e7: a3:00:07:42:b6:35:25:80:9e:b5:64:7e:d5:33:7c:72:ac:bc: 4b:2f:a0:e1:86:f3:03:a3:34:be:ff:68:f4:87:b9:5d:bc:6b: a5:f0:dd:bc:55:ef:e0:88:56:4d:76:38:1d:d9:ec:38:01:7b: 12:c8:bf:5b:76:a8:7f:fb:8a:64:27:26:86:b3:61:70:58:d6: 3e:38:01:ba:25:90:42:a1:84:58:4f:d9:05:6e:7b:22:41:6e: 81:cf:28:22 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUfZdS16frDmQ/78Mhx7NtAhcRpfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjExNDJaFw0yNzAxMTkwMjE2NDJaMDMxMTAvBgNV BAMTKDVERTgxNkVENDg2Mjg2RTVBMzhDMjdCMjVBNzJCMUM4NUJGQjhFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrNaIURS+aXNfM5XoXmOETQq/i oB7T/S3X1oJMakPfhuxMI2qMClxqhMZ95vajNAKuBDQE+4guE1rzfpskTYvq2n6F Gl34alMSkrNwloG+WvIkUM6sueGaUYTuyP/5aQg3fEnG9LPrklpcy1xb0BzhAUeO iyEqzDVQ6nDhERnfqjzUBLypTOmTS5cmo8lKGsLy5GYI4c4PN7XOOOygaTTVNFvQ EShKJevhLM4Lv9xf/H6+p8u00lwi90STW7GigQ2h7/wMDLLI9KdEKlfCfZfaRBKq d3PI6JrS9l9XSCrQbl5GMWsD5d0JWq0jMojZKA3tGAq8EIp16cAyo7K2vrzRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUXegW7UhihuWjjCeyWnKxyFv7joUwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE3NTYxNjIvMC8zNDM1MmUzMTMy MzAyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC148jANBgkqhkiG9w0BAQsFAAOCAQEA0vpfV2uQaYUtSOknTYAi 3S/Wxrg9G3yp6hqObBegR+57PDQmWY2KsNf57wDJcnCpgERQ7v/rd9GEL/6CqkqV kVK3xvIpFC6XxUvdBd3xTyGUR7cBdwvXxPdUr8+oo9qUaBlSubw8qMuKC0totZyW VZc7tHoXUxiBH7Y1aHTGqzBobcniEFcgDGVBXXhnoIyosXfbf0gZTvRTckINwu79 29jnowAHQrY1JYCetWR+1TN8cqy8Sy+g4YbzA6M0vv9o9Ie5XbxrpfDdvFXv4IhW TXY4HdnsOAF7Esi/W3aof/uKZCcmhrNhcFjWPjgBuiWQQqGEWE/ZBW57IkFugc8o Ig== -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:53 2026 by rpki-client