This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37322e302e302f31362d3332203d3e203538353933.roa File: 34302e37322e302e302f31362d3332203d3e203538353933.roa (raw, json) Hash identifier: bA5WI7/KpYNhKJN4cMgSEIprY/S1uA3j47J24s7t+5w= Subject key identifier: B0:09:00:10:AD:7B:52:94:DE:F0:E0:B6:60:2C:BF:37:0A:32:AA:0B Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 2EAEFF0C9902AB3BDDA02425E79FAB4A8DC575A7 Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37322e302e302f31362d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:24 +0000 ROA not before: Tue 20 Jan 2026 02:03:24 +0000 ROA not after: Tue 19 Jan 2027 02:08:24 +0000 asID: 58593 IP address blocks: 40.72.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ae:ff:0c:99:02:ab:3b:dd:a0:24:25:e7:9f:ab:4a:8d:c5:75:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:24 2026 GMT Not After : Jan 19 02:08:24 2027 GMT Subject: CN=B0090010AD7B5294DEF0E0B6602CBF370A32AA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:8f:dd:1a:15:2d:2a:6c:d7:1b:90:9a:50: 9c:7a:5d:4a:93:12:8a:cb:db:bf:71:2b:79:8f:0f: d1:05:86:25:34:bc:98:36:d9:ac:7b:dc:40:98:3a: 4e:a3:79:bc:7d:b2:6b:d4:40:e7:a6:19:5e:14:5c: 16:2a:f9:22:77:14:3a:d4:00:90:17:69:65:b8:d4: 31:9f:aa:68:36:a1:21:e9:9b:5a:20:28:ad:47:c3: 59:98:0a:f2:37:5c:9c:3c:9e:c9:0e:1b:f9:63:f1: 6b:a5:21:96:1d:98:f5:19:f0:f6:55:b0:8a:d2:7a: 60:dd:07:71:ff:c4:cd:93:30:d0:91:76:33:0b:2a: b0:c1:5a:2d:94:4e:3c:ce:4e:36:16:14:17:36:b0: fc:be:f8:02:e2:b3:31:53:06:2a:20:6e:9d:37:d5: 7a:2d:49:7d:4f:ce:4b:39:da:23:a0:ff:b7:44:d4: 29:12:dc:38:a1:d0:26:b4:64:fa:9d:26:ec:09:73: 6f:47:44:9a:d5:8e:ac:7d:d5:1a:e0:15:79:af:b5: ac:5b:62:ca:a6:49:2f:5f:54:4f:c0:6c:68:9f:bd: e1:9d:08:bd:06:af:d1:79:8b:93:7d:ff:4b:a8:53: 2a:e8:cc:50:c8:1a:97:5c:11:8c:3c:ca:2d:e1:3c: b2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:00:10:AD:7B:52:94:DE:F0:E0:B6:60:2C:BF:37:0A:32:AA:0B X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37322e302e302f31362d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:28:21:bd:ad:f1:e1:34:3b:30:d2:e1:a9:ed:c4:17:d4:5c: 08:28:c6:14:6d:91:44:e7:54:ac:d0:b8:97:0c:ab:bb:7c:45: 82:23:22:c6:08:38:73:c4:0a:a1:99:d5:b2:af:8e:a1:92:00: 35:6f:ac:40:1f:a1:ae:1a:87:ee:6b:9a:e1:8d:f0:21:4a:4b: 80:19:9a:9f:6a:84:eb:1e:e8:da:3e:cc:6d:68:cd:0c:d9:cf: 91:7c:fa:7b:4e:ea:56:00:04:5b:bc:ed:18:90:b6:34:7d:08: 2c:ad:65:d9:12:a0:cf:f4:f1:a6:a0:29:62:dc:79:55:46:76: 76:b7:11:3c:6b:d6:2d:42:73:d1:c3:fc:5b:99:1e:7b:ef:84: 18:9a:96:11:93:14:94:da:f5:23:1d:89:b0:00:3d:c4:54:90: 44:00:a7:d7:8c:fe:19:da:4e:12:38:8b:89:a2:ec:60:cb:e5: 6a:d6:c5:83:d8:11:74:65:3a:04:d3:ad:97:14:6d:4d:bb:07: bb:7d:f8:ba:29:43:44:58:2f:bb:c9:07:6a:93:a8:46:9b:55: cd:f8:45:a6:95:ed:d2:97:36:3d:63:6e:8f:de:19:5c:a9:9c: 44:11:0c:b5:c0:33:b7:ac:12:4a:69:9c:de:65:b3:e6:e9:11: 89:9f:19:08 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIULq7/DJkCqzvdoCQl55+rSo3FdacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjRaFw0yNzAxMTkwMjA4MjRaMDMxMTAvBgNV BAMTKEIwMDkwMDEwQUQ3QjUyOTRERUYwRTBCNjYwMkNCRjM3MEEzMkFBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wI/dGhUtKmzXG5CaUJx6XUqT EorL279xK3mPD9EFhiU0vJg22ax73ECYOk6jebx9smvUQOemGV4UXBYq+SJ3FDrU AJAXaWW41DGfqmg2oSHpm1ogKK1Hw1mYCvI3XJw8nskOG/lj8WulIZYdmPUZ8PZV sIrSemDdB3H/xM2TMNCRdjMLKrDBWi2UTjzOTjYWFBc2sPy++ALiszFTBiogbp03 1XotSX1Pzks52iOg/7dE1CkS3Dih0Ca0ZPqdJuwJc29HRJrVjqx91RrgFXmvtaxb YsqmSS9fVE/AbGifveGdCL0Gr9F5i5N9/0uoUyrozFDIGpdcEYw8yi3hPLKPAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUsAkAEK17UpTe8OC2YCy/NwoyqgswHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzQzMDJlMzczMjJl MzAyZTMwMmYzMTM2MmQzMzMyMjAzZDNlMjAzNTM4MzUzOTMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA KEgwDQYJKoZIhvcNAQELBQADggEBAHQoIb2t8eE0OzDS4antxBfUXAgoxhRtkUTn VKzQuJcMq7t8RYIjIsYIOHPECqGZ1bKvjqGSADVvrEAfoa4ah+5rmuGN8CFKS4AZ mp9qhOse6No+zG1ozQzZz5F8+ntO6lYABFu87RiQtjR9CCytZdkSoM/08aagKWLc eVVGdna3ETxr1i1Cc9HD/FuZHnvvhBialhGTFJTa9SMdibAAPcRUkEQAp9eM/hna ThI4i4mi7GDL5WrWxYPYEXRlOgTTrZcUbU27B7t9+LopQ0RYL7vJB2qTqEabVc34 RaaV7dKXNj1jbo/eGVypnEQRDLXAM7esEkppnN5ls+bpEYmfGQg= -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:30 2026 by rpki-client