This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e3132362e36342e302f31382d3332203d3e203538353933.roa File: 34302e3132362e36342e302f31382d3332203d3e203538353933.roa (raw, json) Hash identifier: Hub7TsuiHLAWEoiAunlBnvggqSEF/qF1dBxzvZVqGHk= Subject key identifier: CB:ED:42:B3:16:6F:8B:0C:56:3C:EF:63:58:BD:A4:47:85:12:18:3C Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 5AC33626A007263EDF54E9C7D4EB1B782161899A Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e3132362e36342e302f31382d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:24 +0000 ROA not before: Tue 20 Jan 2026 02:03:24 +0000 ROA not after: Tue 19 Jan 2027 02:08:24 +0000 asID: 58593 IP address blocks: 40.126.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c3:36:26:a0:07:26:3e:df:54:e9:c7:d4:eb:1b:78:21:61:89:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:24 2026 GMT Not After : Jan 19 02:08:24 2027 GMT Subject: CN=CBED42B3166F8B0C563CEF6358BDA4478512183C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:ad:01:06:d2:46:86:ee:32:87:43:d4:49: 1a:0c:fa:d5:39:8c:90:91:19:ef:5b:08:79:70:16: 19:85:19:bc:06:c4:1c:d1:b4:24:97:20:ca:8a:16: 51:27:10:48:fc:8b:3a:46:66:38:3e:4d:4b:7b:83: be:e5:66:a2:d7:1c:37:75:38:03:b5:d0:03:d1:c9: 64:98:ba:4a:8b:f9:b0:1c:cf:98:9b:b3:11:56:fb: 45:05:e7:95:70:01:fc:b0:1b:34:cd:cf:a8:67:ca: f1:11:7e:2d:dd:cc:3c:6b:71:44:cb:31:11:ad:f0: 4a:33:c8:60:ef:f8:71:02:e7:f9:3a:0d:c4:9d:ea: d9:e1:55:33:42:ec:36:bd:d5:51:2b:94:db:bd:07: 38:c4:af:d2:dc:86:d4:14:97:bd:ba:98:1b:a6:c5: 9e:c8:a6:a1:e9:5a:64:7c:fb:5a:94:69:0e:7b:bd: 35:53:20:84:43:38:8c:5c:f5:37:31:ff:0a:1f:8a: c7:c9:36:14:8e:fb:f7:db:c5:82:25:27:d1:a1:e0: 5e:84:50:ab:84:e8:c3:ec:2f:e0:b5:2e:35:16:f7: e4:08:39:c1:3a:4f:e5:dc:c8:25:0a:b8:e2:14:b9: 4b:48:9c:ae:56:f1:2f:f0:d7:c3:b5:59:99:c3:b6: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:ED:42:B3:16:6F:8B:0C:56:3C:EF:63:58:BD:A4:47:85:12:18:3C X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e3132362e36342e302f31382d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.126.64.0/18 Signature Algorithm: sha256WithRSAEncryption 42:d5:59:6a:bf:30:17:1a:52:60:67:8a:9c:86:9a:cd:86:3d: bd:83:35:26:a4:9c:3e:24:eb:f9:99:2d:61:df:5e:61:82:c3: db:9f:79:ba:be:a6:ea:c9:54:b1:5c:c6:d9:cf:60:b0:7d:05: ff:b3:18:f3:1a:9e:25:90:d7:31:97:d7:f7:69:6f:b8:d5:a8: be:53:42:3b:ff:ef:eb:e2:72:6f:56:16:66:9f:14:b6:ff:e1: 67:18:b2:90:f2:6f:4f:e0:7f:15:23:9b:fd:1a:59:63:ef:21: 87:03:f9:75:fe:62:81:87:04:d2:2e:dc:e8:7e:01:d6:1a:dc: b5:84:87:27:85:73:b1:d1:07:9a:0a:57:56:3d:14:87:3b:04: 71:fa:70:53:50:2c:28:ba:28:e9:80:ad:99:5e:c2:34:28:bd: 01:87:3a:40:dd:41:6d:16:78:d3:5a:dd:f3:b2:0c:0a:f0:74: 0e:57:3e:a5:44:81:4f:86:fc:8e:b8:a9:14:05:63:6e:7a:23: 7e:77:b7:dd:fb:53:75:ce:27:72:7a:9e:f0:c9:16:28:37:1c: c5:2d:55:73:3f:15:ff:aa:ed:fd:2f:f2:41:14:fd:dd:ab:7a: 49:23:05:de:de:60:a0:be:44:4f:96:cf:93:45:93:a8:76:03: cc:16:8a:70 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUWsM2JqAHJj7fVOnH1OsbeCFhiZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjRaFw0yNzAxMTkwMjA4MjRaMDMxMTAvBgNV BAMTKENCRUQ0MkIzMTY2RjhCMEM1NjNDRUY2MzU4QkRBNDQ3ODUxMjE4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7q0BBtJGhu4yh0PUSRoM+tU5 jJCRGe9bCHlwFhmFGbwGxBzRtCSXIMqKFlEnEEj8izpGZjg+TUt7g77lZqLXHDd1 OAO10APRyWSYukqL+bAcz5ibsxFW+0UF55VwAfywGzTNz6hnyvERfi3dzDxrcUTL MRGt8EozyGDv+HEC5/k6DcSd6tnhVTNC7Da91VErlNu9BzjEr9LchtQUl726mBum xZ7IpqHpWmR8+1qUaQ57vTVTIIRDOIxc9Tcx/wofisfJNhSO+/fbxYIlJ9Gh4F6E UKuE6MPsL+C1LjUW9+QIOcE6T+XcyCUKuOIUuUtInK5W8S/w18O1WZnDtrEfAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUy+1CsxZviwxWPO9jWL2kR4USGDwwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzQzMDJlMzEzMjM2 MmUzNjM0MmUzMDJmMzEzODJkMzMzMjIwM2QzZTIwMzUzODM1MzkzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBih+QDANBgkqhkiG9w0BAQsFAAOCAQEAQtVZar8wFxpSYGeKnIaazYY9vYM1 JqScPiTr+ZktYd9eYYLD2595ur6m6slUsVzG2c9gsH0F/7MY8xqeJZDXMZfX92lv uNWovlNCO//v6+Jyb1YWZp8Utv/hZxiykPJvT+B/FSOb/RpZY+8hhwP5df5igYcE 0i7c6H4B1hrctYSHJ4VzsdEHmgpXVj0UhzsEcfpwU1AsKLoo6YCtmV7CNCi9AYc6 QN1BbRZ401rd87IMCvB0Dlc+pUSBT4b8jripFAVjbnojfne33ftTdc4ncnqe8MkW KDccxS1Vcz8V/6rt/S/yQRT93at6SSMF3t5goL5ET5bPk0WTqHYDzBaKcA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:23:08 2026 by rpki-client