This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/34332e3234302e3231362e302f32322d3332203d3e20313337363930.roa File: 34332e3234302e3231362e302f32322d3332203d3e20313337363930.roa (raw, json) Hash identifier: cA3Izx4ClkaAnSH+4/BkPGWm/Zj6K4Lk6sR06Fy3Cjc= Subject key identifier: 7A:03:91:E8:0F:4E:1F:06:B4:A7:60:EE:6A:7D:0A:B8:9C:A9:58:13 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 719C847AEA99B28A62C49614C0FDE71EE14E6B04 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/34332e3234302e3231362e302f32322d3332203d3e20313337363930.roa Signing time: Tue 20 Jan 2026 02:20:16 +0000 ROA not before: Tue 20 Jan 2026 02:15:16 +0000 ROA not after: Tue 19 Jan 2027 02:20:16 +0000 asID: 137690 IP address blocks: 43.240.216.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9c:84:7a:ea:99:b2:8a:62:c4:96:14:c0:fd:e7:1e:e1:4e:6b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jan 20 02:15:16 2026 GMT Not After : Jan 19 02:20:16 2027 GMT Subject: CN=7A0391E80F4E1F06B4A760EE6A7D0AB89CA95813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:c3:a2:9c:f7:d5:8f:b4:39:2d:70:32:b8: 9a:ac:a0:b3:d4:a2:3e:81:06:7a:da:54:70:d1:6c: ce:1b:aa:2e:d6:0a:83:fd:78:cb:55:3b:f6:85:62: 58:6d:44:77:1a:46:35:bb:b8:66:b7:3e:64:81:21: 3a:43:31:3d:06:d1:2e:c9:35:86:f8:77:20:df:03: fe:54:b4:15:1c:b1:8f:6b:04:af:f7:91:55:5c:d9: 46:60:47:44:64:69:aa:72:06:73:e3:1a:81:53:7d: 14:68:76:e5:f9:48:eb:2b:ea:79:6c:c4:07:39:8f: e2:45:2c:2d:6d:8b:9b:50:6f:eb:5d:ac:4a:1b:07: 3c:8b:06:aa:b7:fa:9a:e8:8f:6d:7d:8a:8a:bd:64: 3d:9d:af:ba:fb:51:72:f1:1b:02:8a:5b:d7:90:0d: e1:14:02:3d:53:6b:1a:a0:af:d1:dc:c8:43:28:74: 70:ee:8c:f8:14:a3:cc:6c:40:58:32:2b:97:02:c7: 30:72:2a:e9:51:a4:f9:fd:11:3f:a0:fd:94:24:0c: 0d:f0:97:59:f8:7f:9f:4c:62:8a:47:53:0e:6c:63: 1a:a4:cb:fc:5a:ba:e7:93:7b:17:61:21:46:41:bd: 72:91:09:de:4c:5b:a2:2a:c8:a2:c7:47:54:e9:30: b8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:03:91:E8:0F:4E:1F:06:B4:A7:60:EE:6A:7D:0A:B8:9C:A9:58:13 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/34332e3234302e3231362e302f32322d3332203d3e20313337363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.216.0/22 Signature Algorithm: sha256WithRSAEncryption b8:7e:2e:b9:50:8c:26:34:d2:79:62:f0:f7:30:19:46:83:87: 0b:de:88:06:cc:f4:40:4f:4b:29:11:79:6f:c1:3a:ee:89:fa: ee:7f:57:c7:80:20:76:14:65:b9:29:82:27:ca:55:3c:66:73: 26:cc:f3:4a:5d:08:e0:d7:c9:77:67:90:71:5a:cb:af:14:74: cd:e4:43:c7:39:05:dd:19:8f:c5:04:83:90:71:fd:1e:b9:36: 4c:12:d3:ac:a3:99:14:34:10:88:03:a1:37:f1:3f:68:c4:a0: 9e:26:54:13:30:7d:b1:59:ad:5c:b6:38:3f:23:3b:fe:ab:9e: db:87:f4:aa:f2:f1:df:48:49:71:20:4f:81:df:35:70:76:d1: 63:42:a8:c0:73:85:f1:71:76:5c:e5:43:62:af:9c:e0:cb:31: 9d:58:15:84:e2:3f:24:66:7a:86:a5:b9:58:7b:ef:e4:ba:6d: 35:5b:ad:5f:93:76:9d:64:f7:49:50:d1:16:95:a1:95:3b:1a: 94:c1:07:f4:7b:8e:f5:d3:53:57:c7:f1:b4:34:c4:89:e1:32: 72:e8:8f:e0:ef:6a:dc:50:a8:07:43:47:d5:f6:66:69:9a:02: fc:07:74:92:47:1c:59:c2:fc:59:66:cb:40:c4:7d:45:a8:20: 55:57:2f:89 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcZyEeuqZsopixJYUwP3nHuFOawQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjAxMjAwMjE1MTZaFw0yNzAxMTkwMjIwMTZaMDMxMTAvBgNV BAMTKDdBMDM5MUU4MEY0RTFGMDZCNEE3NjBFRTZBN0QwQUI4OUNBOTU4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdQsOinPfVj7Q5LXAyuJqsoLPU oj6BBnraVHDRbM4bqi7WCoP9eMtVO/aFYlhtRHcaRjW7uGa3PmSBITpDMT0G0S7J NYb4dyDfA/5UtBUcsY9rBK/3kVVc2UZgR0RkaapyBnPjGoFTfRRoduX5SOsr6nls xAc5j+JFLC1ti5tQb+tdrEobBzyLBqq3+proj219ioq9ZD2dr7r7UXLxGwKKW9eQ DeEUAj1Taxqgr9HcyEModHDujPgUo8xsQFgyK5cCxzByKulRpPn9ET+g/ZQkDA3w l1n4f59MYopHUw5sYxqky/xauueTexdhIUZBvXKRCd5MW6IqyKLHR1TpMLjdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUegOR6A9OHwa0p2Duan0KuJypWBMwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zNDMzMmUzMjM0 MzAyZTMyMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM2MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAivw2DANBgkqhkiG9w0BAQsFAAOCAQEAuH4uuVCMJjTSeWLw9zAZ RoOHC96IBsz0QE9LKRF5b8E67on67n9Xx4AgdhRluSmCJ8pVPGZzJszzSl0I4NfJ d2eQcVrLrxR0zeRDxzkF3RmPxQSDkHH9Hrk2TBLTrKOZFDQQiAOhN/E/aMSgniZU EzB9sVmtXLY4PyM7/que24f0qvLx30hJcSBPgd81cHbRY0KowHOF8XF2XOVDYq+c 4MsxnVgVhOI/JGZ6hqW5WHvv5LptNVutX5N2nWT3SVDRFpWhlTsalMEH9HuO9dNT V8fxtDTEieEycuiP4O9q3FCoB0NH1fZmaZoC/Ad0kkccWcL8WWbLQMR9RaggVVcv iQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:18 2026 by rpki-client