This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/0/34322e3135392e302e302f31382d3234203d3e203538353933.roa File: 34322e3135392e302e302f31382d3234203d3e203538353933.roa (raw, json) Hash identifier: TxyfzAxCecGyfnCqb+wFlDcpT2oW+Out9zGTDP0R0gI= Subject key identifier: 08:A1:8C:D0:6A:D0:F0:7D:35:BF:23:23:41:0D:96:63:44:BD:4F:A0 Certificate issuer: /CN=7505D5D0FC8DB66FC48DA4A64839077551466B62 Certificate serial: 121B0E11C1E45CC80451CB17E800696F0C452414 Authority key identifier: 75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/34322e3135392e302e302f31382d3234203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:22 +0000 ROA not before: Tue 20 Jan 2026 02:03:22 +0000 ROA not after: Tue 19 Jan 2027 02:08:22 +0000 asID: 58593 IP address blocks: 42.159.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1b:0e:11:c1:e4:5c:c8:04:51:cb:17:e8:00:69:6f:0c:45:24:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7505D5D0FC8DB66FC48DA4A64839077551466B62 Validity Not Before: Jan 20 02:03:22 2026 GMT Not After : Jan 19 02:08:22 2027 GMT Subject: CN=08A18CD06AD0F07D35BF2323410D966344BD4FA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:be:2c:98:02:01:ef:d1:93:cb:8d:ff:8f:de: ce:24:0d:d6:c5:6d:b6:41:ba:33:1f:cc:29:6d:9b: 7d:ad:74:7e:f9:52:4f:c4:34:03:13:1d:7a:50:08: b8:1b:f8:fb:8d:6d:00:41:0d:32:64:0d:f3:b9:a0: 1e:d2:dc:e5:33:87:d8:d9:2d:15:3a:40:2b:7e:b9: 66:d9:ac:2f:fd:ec:08:f8:f4:59:8e:90:64:38:f9: 22:c8:e6:d5:5c:10:68:72:db:d0:ef:46:b2:40:44: 49:98:39:e3:65:cf:90:c7:61:17:37:47:9b:6a:f2: 4b:ad:42:09:21:2e:70:8a:69:9e:e5:9e:2d:f7:9b: a1:c6:96:19:d0:9f:09:88:25:8b:56:b4:0d:8e:1c: bd:e8:1d:f8:12:16:a0:85:d0:ca:1d:cc:bf:2a:ce: 10:5d:4f:f3:e8:d8:af:40:40:a4:51:4f:96:c6:60: 07:96:a3:c3:63:53:31:db:9b:f1:f2:fa:95:34:a4: cf:0a:3a:27:4d:b2:e2:a0:17:45:b4:1b:18:db:f8: 53:3a:99:d4:7e:77:80:41:55:4e:f0:5f:e2:89:14: a9:04:14:ef:5d:4a:78:c5:0b:f5:ab:2e:5d:c0:9b: 00:92:06:3a:e8:6c:4d:b8:a6:72:fe:48:f1:a4:5f: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A1:8C:D0:6A:D0:F0:7D:35:BF:23:23:41:0D:96:63:44:BD:4F:A0 X509v3 Authority Key Identifier: keyid:75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/34322e3135392e302e302f31382d3234203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.159.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5d:2b:2c:b9:b5:53:3c:d6:79:6a:43:d5:71:d0:19:0c:87:9f: c4:01:cf:f3:21:bf:ae:a2:6a:5a:b6:d5:89:19:d6:01:db:28: 6f:3b:80:b2:90:6a:46:ae:52:18:20:4a:79:31:18:17:ea:0a: 0e:5c:67:24:43:83:f7:06:3f:ea:42:ca:e0:d9:2c:cc:89:83: 19:8d:14:6a:31:36:e4:54:f9:17:05:e9:c4:d1:8c:2b:44:0e: 41:c8:18:1e:bf:25:57:32:d1:8c:b2:12:04:1e:b9:fa:4a:8b: 03:49:e5:f6:0d:64:75:b3:87:56:45:d4:1d:8e:91:8e:bb:0c: c4:32:29:23:4f:3f:d0:ad:ed:01:74:e0:d7:0e:22:06:e7:f1: e7:4c:d7:93:36:56:8a:c4:8e:62:cc:b0:71:1c:c9:14:b1:10: db:85:e2:a7:4f:2e:85:3f:87:51:e1:ed:8f:39:b3:18:03:47: 57:fe:e0:14:2d:f7:27:2c:ac:af:7a:f1:9e:1a:11:3c:88:c9: eb:03:18:04:03:d9:8e:f6:e7:f6:79:85:37:8b:5b:92:df:b7: 51:e7:73:49:0e:62:c5:8f:7d:9a:1f:ec:b7:45:38:c3:c6:1e: 2a:57:15:f2:d4:61:90:12:78:c4:52:a7:5d:83:24:08:0c:21: 69:50:f0:99 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUEhsOEcHkXMgEUcsX6ABpbwxFJBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUwNUQ1RDBGQzhEQjY2RkM0OERBNEE2NDgzOTA3NzU1 MTQ2NkI2MjAeFw0yNjAxMjAwMjAzMjJaFw0yNzAxMTkwMjA4MjJaMDMxMTAvBgNV BAMTKDA4QTE4Q0QwNkFEMEYwN0QzNUJGMjMyMzQxMEQ5NjYzNDRCRDRGQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXviyYAgHv0ZPLjf+P3s4kDdbF bbZBujMfzCltm32tdH75Uk/ENAMTHXpQCLgb+PuNbQBBDTJkDfO5oB7S3OUzh9jZ LRU6QCt+uWbZrC/97Aj49FmOkGQ4+SLI5tVcEGhy29DvRrJAREmYOeNlz5DHYRc3 R5tq8kutQgkhLnCKaZ7lni33m6HGlhnQnwmIJYtWtA2OHL3oHfgSFqCF0ModzL8q zhBdT/Po2K9AQKRRT5bGYAeWo8NjUzHbm/Hy+pU0pM8KOidNsuKgF0W0Gxjb+FM6 mdR+d4BBVU7wX+KJFKkEFO9dSnjFC/WrLl3AmwCSBjrobE24pnL+SPGkX9oTAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUCKGM0GrQ8H01vyMjQQ2WY0S9T6AwHwYDVR0j BBgwFoAUdQXV0PyNtm/EjaSmSDkHdVFGa2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8wLzc1MDVENUQwRkM4REI2NkZDNDhEQTRBNjQ4Mzkw Nzc1NTE0NjZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzUwNUQ1RDBGQzhEQjY2RkM0OERBNEE2NDgzOTA3NzU1MTQ2NkI2Mi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzAvMzQzMjJlMzEzNTM5 MmUzMDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDM1MzgzNTM5MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYqnwAwDQYJKoZIhvcNAQELBQADggEBAF0rLLm1UzzWeWpD1XHQGQyHn8QBz/Mh v66ialq21YkZ1gHbKG87gLKQakauUhggSnkxGBfqCg5cZyRDg/cGP+pCyuDZLMyJ gxmNFGoxNuRU+RcF6cTRjCtEDkHIGB6/JVcy0YyyEgQeufpKiwNJ5fYNZHWzh1ZF 1B2OkY67DMQyKSNPP9Ct7QF04NcOIgbn8edM15M2VorEjmLMsHEcyRSxENuF4qdP LoU/h1Hh7Y85sxgDR1f+4BQt9ycsrK968Z4aETyIyesDGAQD2Y725/Z5hTeLW5Lf t1Hnc0kOYsWPfZof7LdFOMPGHipXFfLUYZASeMRSp12DJAgMIWlQ8Jk= -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:22 2026 by rpki-client