This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e203633353832.roa File: 34352e3132302e3234322e302f32342d3234203d3e203633353832.roa (raw, json) Hash identifier: Vu6zymaTw+XnzxCiO8JG5R1RyDtt1u/YxvH0dHkumXM= Subject key identifier: 03:D1:60:C2:0E:5A:F8:E3:18:2D:41:BA:EC:AD:AE:DE:E6:5B:CB:B9 Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 68EA57FF9DEE5E4451BC226CD84D20495D8AD3BF Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e203633353832.roa Signing time: Tue 20 Jan 2026 02:15:39 +0000 ROA not before: Tue 20 Jan 2026 02:10:39 +0000 ROA not after: Tue 19 Jan 2027 02:15:39 +0000 asID: 63582 IP address blocks: 45.120.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ea:57:ff:9d:ee:5e:44:51:bc:22:6c:d8:4d:20:49:5d:8a:d3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:39 2026 GMT Not After : Jan 19 02:15:39 2027 GMT Subject: CN=03D160C20E5AF8E3182D41BAECADAEDEE65BCBB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:38:d7:17:06:b0:84:ad:39:52:7c:02:42: c1:59:c6:2b:c3:a9:e2:30:aa:5b:14:a3:8e:5f:e1: 34:60:25:df:78:df:a1:4d:6d:65:d3:8c:4c:f9:ce: 71:fa:54:fd:5c:a5:3f:86:56:f8:78:da:56:71:9d: 6b:65:72:74:c2:4c:99:89:9a:90:1e:a5:72:5a:91: a2:26:f3:54:6c:a5:ca:50:c6:1f:01:02:6f:f4:c9: ca:4c:88:24:ae:0f:e5:9a:94:68:a2:47:71:00:2a: dd:15:f1:a8:a9:ef:56:bd:46:4b:50:03:f3:42:1f: 90:7a:03:9b:24:cf:25:d9:7e:17:53:ff:ec:6c:a1: e6:af:16:77:f5:62:83:0a:43:ac:2c:58:fc:67:64: 66:6c:1f:07:e0:a0:68:4f:df:06:5c:8c:60:66:1e: ea:4d:fb:4f:a1:0b:f9:ad:5f:c8:64:e5:8f:2e:1e: 07:7a:2e:2b:0e:18:c5:7e:e8:ea:61:e7:50:63:28: f5:60:42:15:30:47:a7:98:2e:7c:82:91:1c:72:1d: dc:43:f4:3c:0e:31:d5:07:2a:68:eb:2e:36:af:83: 41:d3:af:2d:5b:2d:33:73:98:6f:42:14:7d:d6:d8: a6:2b:60:65:d4:38:94:b5:1c:43:56:97:78:47:cc: 2c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D1:60:C2:0E:5A:F8:E3:18:2D:41:BA:EC:AD:AE:DE:E6:5B:CB:B9 X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234322e302f32342d3234203d3e203633353832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.242.0/24 Signature Algorithm: sha256WithRSAEncryption 39:9a:1c:0e:94:c0:1b:b3:b1:bc:fd:dd:77:c3:7f:ad:57:1e: 9b:c6:88:91:60:99:e6:0a:de:9c:a2:54:90:3f:e5:e0:a0:f0: bc:ba:fc:0a:d5:c9:6d:6e:1d:e7:23:16:68:d9:16:bf:36:59: f6:e7:1b:04:ba:fe:0f:1a:d2:d1:a6:df:07:da:b6:9a:21:ba: fc:9d:0e:64:ae:ac:71:10:58:e4:e2:12:db:d2:43:c0:71:08: de:ea:8e:62:b0:f0:62:93:d6:c4:c3:40:41:51:bc:e7:86:c6: d3:9d:b9:d7:85:3b:42:8e:00:5d:33:8d:86:f3:80:b1:29:4c: e2:dc:b2:d9:95:a6:0d:55:7c:76:13:22:bc:67:8b:dc:95:d6: b6:a2:65:a3:cf:b0:90:b2:37:d2:fd:d7:db:1d:aa:f0:3f:61: 5b:0f:5b:ee:25:d0:c4:a5:74:13:43:ae:b4:ad:05:c8:53:03: 5c:9e:10:d6:65:ea:ae:fb:da:26:e0:e5:e2:af:cf:72:bc:20: 8e:05:ff:4a:7b:89:f7:5d:d5:3f:6f:ab:fe:f0:f7:99:38:86: 0d:d9:1f:44:11:9a:ac:c7:3a:88:e4:0d:cb:cf:2b:8b:45:cb: f4:23:bc:fd:44:76:06:75:f9:59:d4:ef:b8:4b:60:ce:24:6d: 61:85:f4:64 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUaOpX/53uXkRRvCJs2E0gSV2K078wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzlaFw0yNzAxMTkwMjE1MzlaMDMxMTAvBgNV BAMTKDAzRDE2MEMyMEU1QUY4RTMxODJENDFCQUVDQURBRURFRTY1QkNCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPaDjXFwawhK05UnwCQsFZxivD qeIwqlsUo45f4TRgJd9436FNbWXTjEz5znH6VP1cpT+GVvh42lZxnWtlcnTCTJmJ mpAepXJakaIm81RspcpQxh8BAm/0ycpMiCSuD+WalGiiR3EAKt0V8aip71a9RktQ A/NCH5B6A5skzyXZfhdT/+xsoeavFnf1YoMKQ6wsWPxnZGZsHwfgoGhP3wZcjGBm HupN+0+hC/mtX8hk5Y8uHgd6LisOGMV+6Oph51BjKPVgQhUwR6eYLnyCkRxyHdxD 9DwOMdUHKmjrLjavg0HTry1bLTNzmG9CFH3W2KYrYGXUOJS1HENWl3hHzCyzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUA9Fgwg5a+OMYLUG67K2u3uZby7kwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTc1NjE2Mi8wLzM0MzUyZTMxMzIz MDJlMzIzNDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzgzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC148jANBgkqhkiG9w0BAQsFAAOCAQEAOZocDpTAG7OxvP3dd8N/rVce m8aIkWCZ5grenKJUkD/l4KDwvLr8CtXJbW4d5yMWaNkWvzZZ9ucbBLr+DxrS0abf B9q2miG6/J0OZK6scRBY5OIS29JDwHEI3uqOYrDwYpPWxMNAQVG854bG052514U7 Qo4AXTONhvOAsSlM4tyy2ZWmDVV8dhMivGeL3JXWtqJlo8+wkLI30v3X2x2q8D9h Ww9b7iXQxKV0E0OutK0FyFMDXJ4Q1mXqrvvaJuDl4q/PcrwgjgX/SnuJ913VP2+r /vD3mTiGDdkfRBGarMc6iOQNy88ri0XL9CO8/UR2BnX5WdTvuEtgziRtYYX0ZA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:16:25 2026 by rpki-client