This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa File: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (raw, json) Hash identifier: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE= Subject key identifier: 6F:11:41:BB:04:B8:86:10:12:23:4C:DD:66:DC:9D:AF:6B:4B:63:19 Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F Certificate serial: 7C6F2B8D5F696905AB65EE24E7C8FF7D032E8B51 Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa Signing time: Tue 20 Jan 2026 02:18:03 +0000 ROA not before: Tue 20 Jan 2026 02:13:03 +0000 ROA not after: Tue 19 Jan 2027 02:18:03 +0000 asID: 151302 IP address blocks: 43.249.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6f:2b:8d:5f:69:69:05:ab:65:ee:24:e7:c8:ff:7d:03:2e:8b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F Validity Not Before: Jan 20 02:13:03 2026 GMT Not After : Jan 19 02:18:03 2027 GMT Subject: CN=6F1141BB04B8861012234CDD66DC9DAF6B4B6319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:2c:ba:70:3f:3c:3d:d5:f7:df:47:7d:57: ff:53:45:75:ee:cb:b5:a4:a6:a9:80:d8:a7:0f:dd: 8b:9d:6e:c0:24:2d:5d:99:0f:2d:2d:cd:fd:08:88: 43:b6:c9:6d:c7:8a:b9:2d:12:b6:64:a4:21:3b:a6: 87:c2:81:21:0e:6b:15:79:b6:a8:58:a1:10:b3:14: b2:7a:d9:75:d3:61:60:84:44:54:d4:c4:50:40:72: 1e:23:82:f0:98:e1:f8:bf:d3:86:5c:b5:53:ae:c9: db:87:9d:bc:36:1c:73:46:a3:dd:13:86:aa:44:a3: 81:99:44:26:69:aa:0c:0d:16:99:ba:be:d7:b3:6d: 7e:25:41:99:06:70:5c:1d:cb:e6:89:56:91:28:67: fe:f0:55:6b:cd:d7:66:b2:b4:c9:f9:e9:13:d6:ab: 05:ac:ab:ea:cf:df:7f:04:8e:9b:88:3b:b6:ad:f4: 3a:f8:27:d0:b4:13:d5:61:b2:cc:92:95:b0:fe:15: 74:f9:6f:84:fc:49:bb:e3:ad:0f:8b:a9:c5:3c:ec: 6c:ca:28:ed:33:eb:52:6f:4f:5e:95:ab:2c:e9:31: f7:49:7c:80:7e:64:66:d1:8d:09:75:25:bd:60:ed: 9e:9f:ba:c2:4c:c7:b0:4f:61:4d:9c:e8:0b:00:a8: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:11:41:BB:04:B8:86:10:12:23:4C:DD:66:DC:9D:AF:6B:4B:63:19 X509v3 Authority Key Identifier: keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.169.0/24 Signature Algorithm: sha256WithRSAEncryption 99:76:73:67:fb:35:ef:2b:59:4e:9c:47:63:01:54:77:b7:aa: 6b:1e:ce:69:7a:fe:39:3b:10:6a:1c:eb:27:ae:85:48:47:65: a2:9d:e2:ed:61:c7:c1:a6:e8:e1:ff:ba:fe:1e:fa:03:37:c5: de:ab:7a:c2:35:81:b4:23:0e:23:b8:a0:36:48:1c:8b:1c:4c: 04:d1:1f:bc:60:b3:18:02:70:5a:27:12:cf:92:b6:2b:42:3e: 50:a7:68:a0:27:e4:15:4f:4e:2f:04:34:35:66:df:52:bf:1b: 1e:2e:c9:41:68:72:b7:2c:11:65:8f:1c:5c:e6:da:af:88:cb: 50:9b:67:97:b6:19:e4:39:8a:43:f2:62:70:88:25:26:d6:c0: fa:99:12:d2:ee:ed:c3:a7:4c:d4:21:6b:71:0b:d5:21:c6:20: 33:df:99:62:9f:02:ea:44:b1:1d:49:ca:61:eb:10:fe:cd:cf: f8:19:62:08:2f:01:c3:b5:2a:cf:97:88:84:ef:01:73:19:ca: 51:d8:f0:60:8e:a2:8d:f9:36:e0:a9:6e:65:6d:10:58:c2:d7: e1:dc:96:af:02:95:d0:13:60:d2:7a:e9:af:41:1b:3e:a3:ea: ad:7e:1b:05:19:53:77:ad:02:75:fa:e1:8c:a7:97:65:97:dc: d1:7a:7c:e4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUfG8rjV9paQWrZe4k58j/fQMui1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz MjI3NDM5RjAeFw0yNjAxMjAwMjEzMDNaFw0yNzAxMTkwMjE4MDNaMDMxMTAvBgNV BAMTKDZGMTE0MUJCMDRCODg2MTAxMjIzNENERDY2REM5REFGNkI0QjYzMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jSy6cD88PdX330d9V/9TRXXu y7WkpqmA2KcP3YudbsAkLV2ZDy0tzf0IiEO2yW3HirktErZkpCE7pofCgSEOaxV5 tqhYoRCzFLJ62XXTYWCERFTUxFBAch4jgvCY4fi/04ZctVOuyduHnbw2HHNGo90T hqpEo4GZRCZpqgwNFpm6vtezbX4lQZkGcFwdy+aJVpEoZ/7wVWvN12aytMn56RPW qwWsq+rP338EjpuIO7at9Dr4J9C0E9VhssySlbD+FXT5b4T8SbvjrQ+LqcU87GzK KO0z61JvT16VqyzpMfdJfIB+ZGbRjQl1Jb1g7Z6fusJMx7BPYU2c6AsAqNS5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUbxFBuwS4hhASI0zdZtydr2tLYxkwHwYDVR0j BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5 RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5OTAxNDYvMC8zNDMzMmUzMjM0 MzkyZTMxMzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACv5qTANBgkqhkiG9w0BAQsFAAOCAQEAmXZzZ/s17ytZTpxHYwFU d7eqax7OaXr+OTsQahzrJ66FSEdlop3i7WHHwabo4f+6/h76AzfF3qt6wjWBtCMO I7igNkgcixxMBNEfvGCzGAJwWicSz5K2K0I+UKdooCfkFU9OLwQ0NWbfUr8bHi7J QWhytywRZY8cXObar4jLUJtnl7YZ5DmKQ/JicIglJtbA+pkS0u7tw6dM1CFrcQvV IcYgM9+ZYp8C6kSxHUnKYesQ/s3P+BliCC8Bw7Uqz5eIhO8BcxnKUdjwYI6ijfk2 4KluZW0QWMLX4dyWrwKV0BNg0nrpr0EbPqPqrX4bBRlTd60CdfrhjKeXZZfc0Xp8 5A== -----END CERTIFICATE-----Generated at Sun Jan 25 12:33:49 2026 by rpki-client