This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/0/34322e3135392e302e302f31362d3234203d3e203538353933.roa File: 34322e3135392e302e302f31362d3234203d3e203538353933.roa (raw, json) Hash identifier: /H882uNfn0KsCeA345Pz+OD/bPVqJVxp9gY1ZVxCeWU= Subject key identifier: 70:E3:BC:51:24:2B:13:AD:48:F8:AF:19:4B:02:AE:1F:64:34:18:8E Certificate issuer: /CN=7505D5D0FC8DB66FC48DA4A64839077551466B62 Certificate serial: 41D2796E0FFEDE869FCAB0EEAF0B1AEE1E4B1BEA Authority key identifier: 75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/34322e3135392e302e302f31362d3234203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:22 +0000 ROA not before: Tue 20 Jan 2026 02:03:22 +0000 ROA not after: Tue 19 Jan 2027 02:08:22 +0000 asID: 58593 IP address blocks: 42.159.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d2:79:6e:0f:fe:de:86:9f:ca:b0:ee:af:0b:1a:ee:1e:4b:1b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7505D5D0FC8DB66FC48DA4A64839077551466B62 Validity Not Before: Jan 20 02:03:22 2026 GMT Not After : Jan 19 02:08:22 2027 GMT Subject: CN=70E3BC51242B13AD48F8AF194B02AE1F6434188E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:1b:29:6a:47:68:cb:06:58:fa:cd:ec:f0: 9f:ed:18:e9:cf:bd:5a:41:ab:d6:59:7b:25:4e:c8: 8b:47:ff:af:d5:b8:a5:f8:9c:bc:69:fb:53:dd:fd: 70:c7:58:98:d1:dd:d9:81:f0:cc:9e:68:cf:9a:47: b8:9b:8f:cb:62:9e:e7:08:7b:cf:1c:fa:01:e9:00: 50:d9:85:f7:fb:5e:0c:aa:db:aa:45:a6:cd:96:23: 38:16:f2:2b:48:8b:d9:f5:27:68:40:2b:e5:91:39: 90:41:0d:65:63:06:35:a2:a1:d6:b9:a2:41:6f:b0: 26:18:54:f8:24:e6:41:0e:e8:40:d1:20:21:da:92: 28:56:f9:c3:35:a0:17:d9:70:b3:42:7f:4b:ba:ae: 02:f3:7f:e7:22:fa:47:6d:04:5c:00:e4:63:25:67: 98:28:35:d9:1c:10:18:b7:ae:85:62:e0:22:4a:be: a8:94:27:9a:b9:e1:64:c2:df:c0:ce:52:6f:35:9a: f8:c0:80:92:be:f1:1a:fa:63:ef:64:20:5d:99:e3: 9a:78:c2:46:85:26:0a:af:ea:40:61:f7:de:14:be: 37:1a:4c:17:ee:de:1c:cb:72:e2:82:c9:30:62:c6: 0e:8f:47:2e:f5:96:e3:b9:94:61:3e:c7:70:3e:14: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E3:BC:51:24:2B:13:AD:48:F8:AF:19:4B:02:AE:1F:64:34:18:8E X509v3 Authority Key Identifier: keyid:75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/34322e3135392e302e302f31362d3234203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.159.0.0/16 Signature Algorithm: sha256WithRSAEncryption 90:61:9f:a4:77:f0:48:48:d6:43:ac:2e:d0:c6:f2:90:28:a4: 1b:41:f4:ec:de:c7:d6:63:bf:64:26:40:b7:9d:87:90:7d:47: 08:9c:fa:8a:3d:c3:32:d8:d1:7a:67:69:58:b5:34:f4:25:38: 77:f2:ff:96:06:9d:12:14:25:ec:c6:b8:e4:b6:60:11:bc:7c: 84:02:64:00:b6:3a:22:df:69:e7:02:a5:08:97:fa:a0:2b:36: 25:96:9b:34:80:4c:74:9e:a0:a8:2f:1e:fb:33:ed:71:12:40: 19:27:e9:c8:87:15:f8:d5:3e:a0:53:cc:d8:b6:85:1f:31:89: 4a:a1:c1:c8:cc:ad:30:1f:7f:f2:14:98:48:5d:27:85:45:fd: 46:d8:1f:fa:dc:66:b4:84:a7:31:87:21:91:57:55:41:37:e7: 0b:31:e8:3b:3c:e4:c7:58:7e:2c:f2:da:1e:a3:85:41:2a:82: 19:9d:56:5a:80:fc:39:4d:90:e3:98:b4:7d:76:f1:56:d2:15: ac:1d:d2:59:6b:c4:ca:ad:1a:ee:bf:38:7e:71:bb:0f:83:0c: b4:5d:ae:1b:26:3b:a6:eb:e0:1b:85:f2:f0:19:f4:b9:45:01: 75:14:e9:b4:ba:57:b1:53:aa:22:cc:3f:70:6b:80:5c:93:09: 44:85:de:bb -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUQdJ5bg/+3oafyrDurwsa7h5LG+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUwNUQ1RDBGQzhEQjY2RkM0OERBNEE2NDgzOTA3NzU1 MTQ2NkI2MjAeFw0yNjAxMjAwMjAzMjJaFw0yNzAxMTkwMjA4MjJaMDMxMTAvBgNV BAMTKDcwRTNCQzUxMjQyQjEzQUQ0OEY4QUYxOTRCMDJBRTFGNjQzNDE4OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjxspakdoywZY+s3s8J/tGOnP vVpBq9ZZeyVOyItH/6/VuKX4nLxp+1Pd/XDHWJjR3dmB8MyeaM+aR7ibj8tinucI e88c+gHpAFDZhff7Xgyq26pFps2WIzgW8itIi9n1J2hAK+WROZBBDWVjBjWioda5 okFvsCYYVPgk5kEO6EDRICHakihW+cM1oBfZcLNCf0u6rgLzf+ci+kdtBFwA5GMl Z5goNdkcEBi3roVi4CJKvqiUJ5q54WTC38DOUm81mvjAgJK+8Rr6Y+9kIF2Z45p4 wkaFJgqv6kBh994UvjcaTBfu3hzLcuKCyTBixg6PRy71luO5lGE+x3A+FF2NAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUcOO8USQrE61I+K8ZSwKuH2Q0GI4wHwYDVR0j BBgwFoAUdQXV0PyNtm/EjaSmSDkHdVFGa2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8wLzc1MDVENUQwRkM4REI2NkZDNDhEQTRBNjQ4Mzkw Nzc1NTE0NjZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzUwNUQ1RDBGQzhEQjY2RkM0OERBNEE2NDgzOTA3NzU1MTQ2NkI2Mi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzAvMzQzMjJlMzEzNTM5 MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDM1MzgzNTM5MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAqnzANBgkqhkiG9w0BAQsFAAOCAQEAkGGfpHfwSEjWQ6wu0MbykCikG0H07N7H 1mO/ZCZAt52HkH1HCJz6ij3DMtjRemdpWLU09CU4d/L/lgadEhQl7Ma45LZgEbx8 hAJkALY6It9p5wKlCJf6oCs2JZabNIBMdJ6gqC8e+zPtcRJAGSfpyIcV+NU+oFPM 2LaFHzGJSqHByMytMB9/8hSYSF0nhUX9Rtgf+txmtISnMYchkVdVQTfnCzHoOzzk x1h+LPLaHqOFQSqCGZ1WWoD8OU2Q45i0fXbxVtIVrB3SWWvEyq0a7r84fnG7D4MM tF2uGyY7puvgG4Xy8Bn0uUUBdRTptLpXsVOqIsw/cGuAXJMJRIXeuw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:12 2026 by rpki-client