This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e3136322e302e302f31362d3332203d3e203538353933.roa File: 34302e3136322e302e302f31362d3332203d3e203538353933.roa (raw, json) Hash identifier: f8MfVshx5lGzRK+oYYL4bZpTGfVrnynfJo9OIWhBK3I= Subject key identifier: 6B:3B:B1:8E:0A:E9:7C:6B:68:71:56:B3:48:48:F7:70:A8:DD:26:91 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 3071EC81927D34C46B849AE04DCA63A780C37DD4 Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e3136322e302e302f31362d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:24 +0000 ROA not before: Tue 20 Jan 2026 02:03:24 +0000 ROA not after: Tue 19 Jan 2027 02:08:24 +0000 asID: 58593 IP address blocks: 40.162.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:71:ec:81:92:7d:34:c4:6b:84:9a:e0:4d:ca:63:a7:80:c3:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:24 2026 GMT Not After : Jan 19 02:08:24 2027 GMT Subject: CN=6B3BB18E0AE97C6B687156B34848F770A8DD2691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:c5:a9:58:63:b7:9b:a8:b1:9b:83:ff:a5: 48:69:4d:86:ea:28:e9:80:9f:1c:48:3e:71:d9:06: 02:f9:6a:9d:e2:71:d4:b2:ea:34:43:7f:1e:2d:1c: f4:74:76:3c:d4:0b:6b:a7:a7:15:d5:bb:48:8b:56: 4c:06:2f:4e:ea:9c:ca:23:42:6d:91:3e:50:89:76: 69:f2:b3:54:5b:2a:a0:26:00:92:1f:09:18:a8:e1: 5d:17:f1:95:87:0c:fd:a8:b2:75:8a:c7:58:3a:b1: 30:36:eb:b6:57:c4:0c:f0:03:35:2f:37:1c:5e:45: c5:b5:f3:0a:af:ae:d5:ec:80:04:af:7a:3b:2e:b0: a7:df:9b:a0:d6:4f:27:ec:3b:f5:6e:a0:60:d8:85: 38:96:af:54:6b:0c:b2:cf:1e:8d:ec:a3:6d:79:a9: 3b:04:66:2b:8f:60:33:e1:eb:b9:81:60:e0:1d:7d: 13:f2:19:df:81:fa:e6:99:c9:e8:a3:d6:1d:cc:82: 9f:be:57:e6:6c:bf:2b:70:a2:d4:20:b2:4a:d5:fb: ee:7a:4f:50:7e:0e:f5:bb:57:59:df:67:48:ff:8b: 71:1b:32:33:62:a0:49:2c:ed:23:89:72:f3:ee:42: 8f:95:24:7b:fc:c8:60:cc:61:b0:a5:25:27:08:f3: 62:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3B:B1:8E:0A:E9:7C:6B:68:71:56:B3:48:48:F7:70:A8:DD:26:91 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e3136322e302e302f31362d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.162.0.0/16 Signature Algorithm: sha256WithRSAEncryption a0:8d:1a:7c:78:13:21:ed:f7:4a:a7:31:bf:3c:6b:42:d6:97: b4:3f:ed:e1:66:29:cb:bf:ae:30:fb:6e:51:49:f6:e2:50:07: 4a:1c:e9:fe:63:a9:be:86:c2:91:f4:df:d4:8a:d6:28:bb:95: b5:ed:a7:e7:0b:1a:cc:f7:5a:ce:31:49:fb:d9:02:69:0a:dd: 5b:e6:74:00:bb:8e:d4:22:2b:d0:91:ec:58:aa:d0:f9:56:53: e0:9f:e0:1e:d2:2e:e1:38:90:b8:d1:d3:49:21:b1:d6:92:62: 2d:b3:d9:95:3e:87:49:97:2f:89:28:6d:02:95:38:7a:c8:5b: cc:ec:60:b2:78:03:56:ce:f4:1e:f3:48:cc:c3:a7:d1:3c:17: d0:56:27:46:7f:d7:c5:df:23:0d:06:bb:d6:0e:77:54:46:40: 1a:0e:80:1f:5b:43:80:20:2c:20:82:7d:da:f1:78:b8:e0:2f: 08:56:68:84:71:d6:cf:57:04:ea:25:09:e2:98:6e:53:1d:7e: 4f:ed:2d:cc:27:12:53:9c:db:02:0b:bf:e8:2b:a8:53:f2:d7: 05:08:ca:30:05:de:f9:41:78:ca:0c:4d:69:dd:e5:20:ea:5e: 87:cf:97:63:b3:71:75:2e:4e:83:d1:2b:d6:f2:ed:bb:c1:a3: 32:74:1a:28 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUMHHsgZJ9NMRrhJrgTcpjp4DDfdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjRaFw0yNzAxMTkwMjA4MjRaMDMxMTAvBgNV BAMTKDZCM0JCMThFMEFFOTdDNkI2ODcxNTZCMzQ4NDhGNzcwQThERDI2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10sWpWGO3m6ixm4P/pUhpTYbq KOmAnxxIPnHZBgL5ap3icdSy6jRDfx4tHPR0djzUC2unpxXVu0iLVkwGL07qnMoj Qm2RPlCJdmnys1RbKqAmAJIfCRio4V0X8ZWHDP2osnWKx1g6sTA267ZXxAzwAzUv NxxeRcW18wqvrtXsgASvejsusKffm6DWTyfsO/VuoGDYhTiWr1RrDLLPHo3so215 qTsEZiuPYDPh67mBYOAdfRPyGd+B+uaZyeij1h3Mgp++V+ZsvytwotQgskrV++56 T1B+DvW7V1nfZ0j/i3EbMjNioEks7SOJcvPuQo+VJHv8yGDMYbClJScI82JnAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUazuxjgrpfGtocVazSEj3cKjdJpEwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzQzMDJlMzEzNjMy MmUzMDJlMzAyZjMxMzYyZDMzMzIyMDNkM2UyMDM1MzgzNTM5MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAoojANBgkqhkiG9w0BAQsFAAOCAQEAoI0afHgTIe33SqcxvzxrQtaXtD/t4WYp y7+uMPtuUUn24lAHShzp/mOpvobCkfTf1IrWKLuVte2n5wsazPdazjFJ+9kCaQrd W+Z0ALuO1CIr0JHsWKrQ+VZT4J/gHtIu4TiQuNHTSSGx1pJiLbPZlT6HSZcviSht ApU4eshbzOxgsngDVs70HvNIzMOn0TwX0FYnRn/Xxd8jDQa71g53VEZAGg6AH1tD gCAsIIJ92vF4uOAvCFZohHHWz1cE6iUJ4phuUx1+T+0tzCcSU5zbAgu/6CuoU/LX BQjKMAXe+UF4ygxNad3lIOpeh8+XY7NxdS5Og9Er1vLtu8GjMnQaKA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:18 2026 by rpki-client