This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa File: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (raw, json) Hash identifier: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA= Subject key identifier: C8:33:02:D8:1C:BB:83:E3:16:FC:C8:D4:76:AA:88:D9:94:9E:01:6B Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F Certificate serial: 3C9F7BCD6C3671879C94D794B2085DB005E6C30F Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa Signing time: Tue 20 Jan 2026 02:18:03 +0000 ROA not before: Tue 20 Jan 2026 02:13:03 +0000 ROA not after: Tue 19 Jan 2027 02:18:03 +0000 asID: 151302 IP address blocks: 43.249.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9f:7b:cd:6c:36:71:87:9c:94:d7:94:b2:08:5d:b0:05:e6:c3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F Validity Not Before: Jan 20 02:13:03 2026 GMT Not After : Jan 19 02:18:03 2027 GMT Subject: CN=C83302D81CBB83E316FCC8D476AA88D9949E016B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:b6:1a:59:4d:98:fc:3f:28:18:3d:98:d2: e6:4f:ea:69:d0:d0:6b:32:57:34:96:6e:fc:fb:64: 21:72:ff:e6:6f:2d:3f:3a:67:0d:58:7a:b9:59:36: 64:11:aa:1e:44:77:31:fb:0b:2d:11:6b:46:b7:9d: eb:19:15:e4:7c:b0:00:0d:b4:33:02:9a:12:96:a7: 87:de:10:38:1b:2e:11:78:22:b8:1f:f7:ba:5d:41: 80:4d:51:57:5a:10:71:4f:dd:41:8e:66:33:27:18: ee:0b:f9:ed:d1:7d:64:f3:44:1b:95:65:f0:98:e9: 6e:fc:77:c3:fb:9a:77:be:c9:27:30:4e:7b:d7:e5: f1:2f:cf:be:d5:70:7a:1b:7a:c3:5f:9f:20:16:53: 44:e9:31:6d:c9:51:63:4f:73:ee:30:f6:b9:7d:83: 35:43:6b:5b:16:db:b0:92:53:3c:ab:e6:18:ae:6f: 62:e2:a6:59:6c:44:75:38:c3:6d:c1:cd:d9:fb:4c: 15:c0:b0:bb:63:6e:5a:53:9e:93:93:44:71:e4:89: a6:4c:54:b4:3f:54:3b:50:20:ae:1c:9a:b7:b3:ef: 39:6e:7e:c5:29:1c:fe:4d:aa:8a:38:00:b2:a6:4b: 72:29:4c:ba:d4:f8:17:69:2d:cc:04:5b:2d:27:74: b9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:33:02:D8:1C:BB:83:E3:16:FC:C8:D4:76:AA:88:D9:94:9E:01:6B X509v3 Authority Key Identifier: keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.168.0/24 Signature Algorithm: sha256WithRSAEncryption a7:72:22:37:76:05:38:97:09:b4:02:0c:90:00:94:8b:ce:39: 0b:ec:3c:45:c7:2f:76:ee:b2:bd:7b:7c:c9:ec:0a:a4:25:d0: c3:10:7d:05:67:2b:3f:31:d8:1a:10:fe:15:44:3a:73:95:62: 6a:79:f4:b3:81:db:5c:2b:d8:9e:79:9a:36:a8:4f:09:66:f0: ba:d1:c7:22:cf:05:57:26:e6:72:17:31:8c:c1:4d:21:6b:2c: ed:9b:af:82:6e:58:d9:26:90:05:e9:7e:a5:12:4d:49:45:6b: 83:08:53:87:fa:4d:12:20:c5:67:e2:f8:a5:ef:9a:f5:9a:5c: 1c:2b:50:79:c0:58:14:fe:72:2f:f6:2a:2e:e1:df:81:0d:92: aa:03:0c:2b:4d:d9:2a:16:d4:4b:37:02:5b:d8:33:22:f3:56: 6b:49:1c:f8:31:75:33:d6:e4:65:cd:b1:5d:a7:05:8d:38:7b: 8e:7e:cb:f4:1c:5c:07:e6:84:c2:e8:e7:28:f6:2c:54:c7:ed: 8d:dc:0b:b4:26:19:bd:bc:b6:bb:fe:09:3c:c3:4b:f0:01:2c: c4:04:fe:22:5d:06:43:29:ca:18:6b:ca:3b:3b:bd:12:4e:0d: 16:b3:66:32:c7:7f:32:ab:22:90:34:79:a9:fc:1a:6c:3f:c4: 8f:04:1b:49 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPJ97zWw2cYeclNeUsghdsAXmww8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz MjI3NDM5RjAeFw0yNjAxMjAwMjEzMDNaFw0yNzAxMTkwMjE4MDNaMDMxMTAvBgNV BAMTKEM4MzMwMkQ4MUNCQjgzRTMxNkZDQzhENDc2QUE4OEQ5OTQ5RTAxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVq7YaWU2Y/D8oGD2Y0uZP6mnQ 0GsyVzSWbvz7ZCFy/+ZvLT86Zw1YerlZNmQRqh5EdzH7Cy0Ra0a3nesZFeR8sAAN tDMCmhKWp4feEDgbLhF4Irgf97pdQYBNUVdaEHFP3UGOZjMnGO4L+e3RfWTzRBuV ZfCY6W78d8P7mne+yScwTnvX5fEvz77VcHobesNfnyAWU0TpMW3JUWNPc+4w9rl9 gzVDa1sW27CSUzyr5hiub2LipllsRHU4w23Bzdn7TBXAsLtjblpTnpOTRHHkiaZM VLQ/VDtQIK4cmrez7zlufsUpHP5Nqoo4ALKmS3IpTLrU+BdpLcwEWy0ndLkPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUyDMC2By7g+MW/MjUdqqI2ZSeAWswHwYDVR0j BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5 RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5OTAxNDYvMC8zNDMzMmUzMjM0 MzkyZTMxMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACv5qDANBgkqhkiG9w0BAQsFAAOCAQEAp3IiN3YFOJcJtAIMkACU i845C+w8Rccvdu6yvXt8yewKpCXQwxB9BWcrPzHYGhD+FUQ6c5Viann0s4HbXCvY nnmaNqhPCWbwutHHIs8FVybmchcxjMFNIWss7Zuvgm5Y2SaQBel+pRJNSUVrgwhT h/pNEiDFZ+L4pe+a9ZpcHCtQecBYFP5yL/YqLuHfgQ2SqgMMK03ZKhbUSzcCW9gz IvNWa0kc+DF1M9bkZc2xXacFjTh7jn7L9BxcB+aEwujnKPYsVMftjdwLtCYZvby2 u/4JPMNL8AEsxAT+Il0GQynKGGvKOzu9Ek4NFrNmMsd/MqsikDR5qfwabD/EjwQb SQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:33:50 2026 by rpki-client