This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa File: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (raw, json) Hash identifier: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY= Subject key identifier: 54:C1:98:29:F0:0C:E1:6D:37:7A:65:AE:B3:3C:45:48:1C:F0:B2:15 Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F Certificate serial: 47F245BA7A4ABB18CC34A13C13B3672D64336B14 Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa Signing time: Tue 20 Jan 2026 02:18:03 +0000 ROA not before: Tue 20 Jan 2026 02:13:03 +0000 ROA not after: Tue 19 Jan 2027 02:18:03 +0000 asID: 151302 IP address blocks: 43.249.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f2:45:ba:7a:4a:bb:18:cc:34:a1:3c:13:b3:67:2d:64:33:6b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F Validity Not Before: Jan 20 02:13:03 2026 GMT Not After : Jan 19 02:18:03 2027 GMT Subject: CN=54C19829F00CE16D377A65AEB33C45481CF0B215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:3e:86:65:0b:8d:a1:50:12:a0:4e:b8:9f: 4e:e5:e7:d9:f0:56:20:1b:b5:df:7c:12:54:b6:79: 20:3a:99:49:0a:eb:a0:30:f3:07:79:53:69:d9:86: 81:8a:dc:d0:a6:31:c6:31:63:9f:41:b9:4d:9d:17: 3c:f5:54:85:f0:da:94:5c:03:34:63:9a:cd:51:14: 7b:66:a5:5e:fc:75:55:4f:e0:e7:37:d2:eb:65:81: af:69:dd:49:c8:f8:94:3e:03:c2:d1:6f:a2:b5:3f: 99:36:b7:44:7b:1a:d0:64:08:05:42:3c:af:38:49: 72:c2:e3:ec:8f:2f:b2:27:c8:cc:09:50:aa:d7:85: 89:33:46:ca:53:14:65:54:9d:09:e6:90:ab:dc:a6: 25:7a:5e:45:dc:af:86:c9:4a:d8:87:71:32:15:8d: ca:6e:42:54:c5:cc:bc:7b:62:cf:48:4b:22:72:cb: 66:5b:bb:a5:10:60:d1:e6:2a:dc:4c:86:a0:c7:f9: 7f:cd:95:5f:aa:8e:55:2f:cd:0b:bc:98:58:37:f6: 66:aa:81:da:31:62:9e:77:e1:16:63:87:57:10:f6: 8e:73:59:da:5e:ab:c6:0c:30:ac:16:8a:9e:39:c4: 70:e1:cd:9a:d6:e1:b5:3c:86:b8:48:a2:d7:5e:06: 6a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C1:98:29:F0:0C:E1:6D:37:7A:65:AE:B3:3C:45:48:1C:F0:B2:15 X509v3 Authority Key Identifier: keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.168.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:9b:1b:11:99:f9:d0:14:c0:09:ff:32:92:07:cd:d7:7c:b6: 5d:c5:2b:60:e9:41:4c:a6:34:1d:d6:a0:a4:a6:66:bd:70:0f: 49:12:65:2d:d9:f9:bc:d0:d2:af:8f:3d:86:4a:67:a0:eb:70: c1:0e:9c:1a:ea:c2:f9:19:0d:37:2d:ef:13:54:77:73:13:31: 5e:50:58:b0:fd:cd:af:10:d1:d6:4b:82:02:f1:3c:2e:0b:db: a9:df:ae:37:92:d1:af:10:09:e1:73:53:97:49:cf:69:2c:6f: 35:bf:19:bd:97:3f:5c:63:04:23:7e:82:11:48:b6:f6:03:43: f4:27:af:ad:1d:f5:0d:52:57:39:b0:aa:bb:20:1b:f9:6d:81: 54:cd:eb:84:85:bc:0e:50:f5:96:78:ec:d3:e8:94:a3:b2:da: 3c:1c:40:f3:d9:66:52:38:a3:13:e0:7f:60:d5:9f:c4:0e:9c: df:2a:aa:c1:51:31:35:ab:c2:63:21:bb:eb:09:52:9c:7f:1e: 95:dc:0f:9a:61:e1:fe:7c:f0:ba:6c:e4:3b:bb:51:e3:70:a9: 22:80:da:82:d5:2b:23:94:14:53:9f:ae:a8:45:ca:0a:1a:a6: b9:16:6c:c8:a7:19:77:9d:4f:03:5f:f6:83:85:cd:00:4f:39: b4:e9:d3:81 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUR/JFunpKuxjMNKE8E7NnLWQzaxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz MjI3NDM5RjAeFw0yNjAxMjAwMjEzMDNaFw0yNzAxMTkwMjE4MDNaMDMxMTAvBgNV BAMTKDU0QzE5ODI5RjAwQ0UxNkQzNzdBNjVBRUIzM0M0NTQ4MUNGMEIyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1T6GZQuNoVASoE64n07l59nw ViAbtd98ElS2eSA6mUkK66Aw8wd5U2nZhoGK3NCmMcYxY59BuU2dFzz1VIXw2pRc AzRjms1RFHtmpV78dVVP4Oc30utlga9p3UnI+JQ+A8LRb6K1P5k2t0R7GtBkCAVC PK84SXLC4+yPL7InyMwJUKrXhYkzRspTFGVUnQnmkKvcpiV6XkXcr4bJStiHcTIV jcpuQlTFzLx7Ys9ISyJyy2Zbu6UQYNHmKtxMhqDH+X/NlV+qjlUvzQu8mFg39maq gdoxYp534RZjh1cQ9o5zWdpeq8YMMKwWip45xHDhzZrW4bU8hrhIotdeBmqNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUVMGYKfAM4W03emWuszxFSBzwshUwHwYDVR0j BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5 RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5OTAxNDYvMC8zNDMzMmUzMjM0 MzkyZTMxMzYzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEASv5qDANBgkqhkiG9w0BAQsFAAOCAQEAj5sbEZn50BTACf8ykgfN 13y2XcUrYOlBTKY0HdagpKZmvXAPSRJlLdn5vNDSr489hkpnoOtwwQ6cGurC+RkN Ny3vE1R3cxMxXlBYsP3NrxDR1kuCAvE8Lgvbqd+uN5LRrxAJ4XNTl0nPaSxvNb8Z vZc/XGMEI36CEUi29gND9CevrR31DVJXObCquyAb+W2BVM3rhIW8DlD1lnjs0+iU o7LaPBxA89lmUjijE+B/YNWfxA6c3yqqwVExNavCYyG76wlSnH8eldwPmmHh/nzw umzkO7tR43CpIoDagtUrI5QUU5+uqEXKChqmuRZsyKcZd51PA1/2g4XNAE85tOnT gQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:33:53 2026 by rpki-client