This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa File: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (raw, json) Hash identifier: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8= Subject key identifier: 9D:95:EB:93:22:37:3E:D5:A5:9F:61:DE:8E:69:A4:D7:B6:47:B3:C3 Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F Certificate serial: 7F8F8B1E01BF7B19B2D5AA00A28797B2A1450901 Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa Signing time: Tue 20 Jan 2026 02:18:03 +0000 ROA not before: Tue 20 Jan 2026 02:13:03 +0000 ROA not after: Tue 19 Jan 2027 02:18:03 +0000 asID: 131574 IP address blocks: 43.249.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8f:8b:1e:01:bf:7b:19:b2:d5:aa:00:a2:87:97:b2:a1:45:09:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F Validity Not Before: Jan 20 02:13:03 2026 GMT Not After : Jan 19 02:18:03 2027 GMT Subject: CN=9D95EB9322373ED5A59F61DE8E69A4D7B647B3C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:81:b3:a1:9b:66:e5:e0:7c:c8:f1:26:b6: f9:45:c3:bc:34:0e:0b:d5:30:fb:1e:f2:7b:c1:a3: 21:ff:ef:be:20:f2:9e:35:f9:13:58:88:89:db:c7: ef:23:1d:50:ae:3e:74:8e:c6:6a:82:e7:5c:77:5e: 80:d1:2c:64:c7:ee:9c:1e:3a:c5:76:b3:48:b3:e4: d1:4c:17:e1:3a:81:cc:5a:8f:08:af:e0:72:45:c8: 32:91:8e:17:99:7e:57:12:84:c4:2b:f8:4e:e8:e8: d3:06:8b:7a:ee:d3:6d:02:1b:ae:55:c2:71:65:08: 53:34:09:b2:86:5c:77:15:72:53:a9:92:bf:1a:2e: da:fe:b7:e9:c7:5e:b9:b1:cc:df:53:85:26:88:45: cd:83:7c:67:b1:49:c2:0b:fd:d3:33:49:5d:19:0e: 1d:40:38:af:bf:af:10:9c:d9:5b:c5:b7:5d:4e:17: 19:1f:ab:ab:fe:f3:dc:e7:68:3c:b8:05:f5:2f:d0: 47:39:13:b7:88:59:2c:79:0a:78:12:ea:4d:39:d8: 97:d3:60:50:d3:95:54:2b:f1:48:d5:92:2f:d2:b1: d2:c4:59:49:95:1b:49:0e:9e:cf:37:74:5a:5a:c1: b7:76:a3:1c:50:f1:cf:10:b6:43:32:68:83:66:93: 43:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:95:EB:93:22:37:3E:D5:A5:9F:61:DE:8E:69:A4:D7:B6:47:B3:C3 X509v3 Authority Key Identifier: keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.170.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:05:69:f5:60:25:8d:52:75:79:b8:53:59:ed:a2:83:6f:97: b3:d8:ee:cc:62:e1:d6:4b:ae:ef:bf:fb:f2:06:dd:98:ec:8e: 01:be:19:1a:b4:79:23:ab:ba:9c:53:01:ba:1c:18:1e:93:4a: ac:e7:2f:f5:ce:15:13:c1:3f:87:8f:05:68:ac:0a:83:24:39: 54:35:ed:9e:01:66:94:d5:94:fd:a1:0f:18:0f:ed:1e:72:6d: 5a:d9:29:9b:68:52:ca:35:35:2c:32:dd:f1:23:59:10:f4:bb: 81:9d:80:69:5c:8f:87:c8:d6:8f:b5:4c:75:01:8f:83:81:33: 35:14:5e:10:da:4e:52:3f:3a:37:c8:18:62:20:3b:9f:0d:bc: e5:8a:d6:96:25:00:bc:b0:48:86:72:cf:03:2d:3a:91:27:c3: 55:c9:62:d1:ed:8b:98:e2:80:a1:83:84:d7:10:d8:ce:3e:5f: 8a:b6:18:52:ae:d4:ed:9b:0b:be:a0:ef:d5:00:b6:18:68:65: ab:d1:f6:9e:61:e1:37:3c:6f:89:d0:e1:95:2a:79:82:7d:6a: ce:62:cb:98:76:2e:55:ae:5e:7d:f8:d7:30:62:fc:8a:16:ba: 00:37:e7:db:f6:9a:09:83:c5:9c:d8:e8:41:a4:fa:4b:ee:f7: c4:0f:1f:a7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUf4+LHgG/exmy1aoAooeXsqFFCQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz MjI3NDM5RjAeFw0yNjAxMjAwMjEzMDNaFw0yNzAxMTkwMjE4MDNaMDMxMTAvBgNV BAMTKDlEOTVFQjkzMjIzNzNFRDVBNTlGNjFERThFNjlBNEQ3QjY0N0IzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2YGzoZtm5eB8yPEmtvlFw7w0 DgvVMPse8nvBoyH/774g8p41+RNYiInbx+8jHVCuPnSOxmqC51x3XoDRLGTH7pwe OsV2s0iz5NFMF+E6gcxajwiv4HJFyDKRjheZflcShMQr+E7o6NMGi3ru020CG65V wnFlCFM0CbKGXHcVclOpkr8aLtr+t+nHXrmxzN9ThSaIRc2DfGexScIL/dMzSV0Z Dh1AOK+/rxCc2VvFt11OFxkfq6v+89znaDy4BfUv0Ec5E7eIWSx5CngS6k052JfT YFDTlVQr8UjVki/SsdLEWUmVG0kOns83dFpawbd2oxxQ8c8QtkMyaINmk0M5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUnZXrkyI3PtWln2Hejmmk17ZHs8MwHwYDVR0j BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5 RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5OTAxNDYvMC8zNDMzMmUzMjM0 MzkyZTMxMzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzczNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACv5qjANBgkqhkiG9w0BAQsFAAOCAQEAKwVp9WAljVJ1ebhTWe2i g2+Xs9juzGLh1kuu77/78gbdmOyOAb4ZGrR5I6u6nFMBuhwYHpNKrOcv9c4VE8E/ h48FaKwKgyQ5VDXtngFmlNWU/aEPGA/tHnJtWtkpm2hSyjU1LDLd8SNZEPS7gZ2A aVyPh8jWj7VMdQGPg4EzNRReENpOUj86N8gYYiA7nw285YrWliUAvLBIhnLPAy06 kSfDVcli0e2LmOKAoYOE1xDYzj5firYYUq7U7ZsLvqDv1QC2GGhlq9H2nmHhNzxv idDhlSp5gn1qzmLLmHYuVa5effjXMGL8iha6ADfn2/aaCYPFnNjoQaT6S+73xA8f pw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:33:54 2026 by rpki-client