This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37322e302e302f31372d3332203d3e203538353933.roa File: 34302e37322e302e302f31372d3332203d3e203538353933.roa (raw, json) Hash identifier: LYiQ73taquPSuSpTuy+vzJGoHi18mwv4asxbOTvv1Ho= Subject key identifier: 0E:4C:FE:5B:FB:1A:57:F0:AB:0A:51:6D:C4:61:7E:33:B3:0F:CC:73 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 013C59540A1FA17377B65876CD123EAA5A8F225D Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37322e302e302f31372d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:23 +0000 ROA not before: Tue 20 Jan 2026 02:03:23 +0000 ROA not after: Tue 19 Jan 2027 02:08:23 +0000 asID: 58593 IP address blocks: 40.72.0.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3c:59:54:0a:1f:a1:73:77:b6:58:76:cd:12:3e:aa:5a:8f:22:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:23 2026 GMT Not After : Jan 19 02:08:23 2027 GMT Subject: CN=0E4CFE5BFB1A57F0AB0A516DC4617E33B30FCC73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:d6:01:7d:7b:02:0c:06:5f:4d:1b:94:5d: 5b:5f:f4:86:f6:c3:4c:31:2e:b1:46:25:42:eb:06: 7f:0f:d0:05:11:a5:eb:48:f9:8f:e4:11:59:16:40: 5b:11:a3:06:58:64:7a:3d:2e:f6:05:b6:73:ec:b2: da:a8:9b:43:80:e3:0e:97:76:24:3f:03:8c:0a:48: 99:17:fc:73:47:d8:ea:77:64:19:79:71:a6:08:fc: 4e:02:ac:da:8c:ac:db:58:6a:07:f2:38:4e:08:ea: 60:51:fd:b7:90:ec:42:a5:06:a8:eb:91:f9:c7:b5: 79:26:d5:45:e1:8b:be:09:55:21:fb:58:2d:a3:53: b9:5d:59:08:c9:64:04:0c:8e:a9:cf:95:99:73:0a: 56:22:c6:6a:67:54:07:59:d9:d2:64:d7:9f:68:20: b2:d4:f4:0b:18:d2:00:48:e2:36:9a:7d:5c:84:03: 8f:87:9a:04:2d:02:54:d7:c5:24:4b:8c:76:77:1c: f4:2a:0b:f4:19:52:c9:96:f5:6d:cc:7f:6a:f2:fb: 20:20:46:7d:3d:09:e2:42:53:59:f4:53:1f:f7:6a: 6a:6d:a3:9d:6e:af:bc:e3:78:8c:1b:6d:e0:63:b6: 0a:2f:4e:96:2e:29:2d:5c:e5:f2:4a:32:f6:1d:b6: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4C:FE:5B:FB:1A:57:F0:AB:0A:51:6D:C4:61:7E:33:B3:0F:CC:73 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37322e302e302f31372d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.72.0.0/17 Signature Algorithm: sha256WithRSAEncryption 3b:4b:db:7a:f0:86:38:fa:59:ff:af:87:61:c5:f5:c5:2f:1f: 2c:04:5a:85:2c:bc:4d:d1:60:11:e3:89:1d:25:ff:6f:6f:3f: ae:b2:a3:f6:93:2f:69:17:45:91:8e:d6:0e:f5:95:47:0b:64: 2e:58:df:17:db:19:98:70:88:d2:d6:5e:5a:06:8b:b6:96:72: 71:24:a9:d2:dc:09:0e:bd:5a:01:47:9b:fe:d4:48:6a:de:09: b5:8f:e2:54:9a:5f:96:0a:f8:5c:10:cd:86:ea:c4:92:1f:0e: 30:15:e5:e3:25:cc:e6:fa:e3:29:46:65:fa:f8:9f:35:00:8c: da:40:42:4e:1f:cd:5d:88:53:bd:4d:39:96:a2:70:08:77:1b: 9a:ce:e7:62:ef:74:96:e1:59:74:ed:15:d1:b7:5a:5a:64:66: 0d:99:d7:cc:81:d4:e2:2f:f9:ad:ce:19:17:ad:7f:36:b5:13: 55:28:2d:e9:09:48:eb:de:6d:b3:06:99:b5:50:f8:35:21:3d: fa:c7:15:ae:ac:e9:13:98:0e:01:53:8b:cb:36:9c:3c:80:77: 52:8e:3d:32:40:af:64:f4:2f:0c:d0:7b:d0:4f:4c:58:99:2b: 6f:81:37:47:d1:e0:ce:ef:de:de:fb:45:b6:53:ac:63:07:e7: 87:70:b0:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUATxZVAofoXN3tlh2zRI+qlqPIl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjNaFw0yNzAxMTkwMjA4MjNaMDMxMTAvBgNV BAMTKDBFNENGRTVCRkIxQTU3RjBBQjBBNTE2REM0NjE3RTMzQjMwRkNDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgotYBfXsCDAZfTRuUXVtf9Ib2 w0wxLrFGJULrBn8P0AURpetI+Y/kEVkWQFsRowZYZHo9LvYFtnPsstqom0OA4w6X diQ/A4wKSJkX/HNH2Op3ZBl5caYI/E4CrNqMrNtYagfyOE4I6mBR/beQ7EKlBqjr kfnHtXkm1UXhi74JVSH7WC2jU7ldWQjJZAQMjqnPlZlzClYixmpnVAdZ2dJk159o ILLU9AsY0gBI4jaafVyEA4+HmgQtAlTXxSRLjHZ3HPQqC/QZUsmW9W3Mf2ry+yAg Rn09CeJCU1n0Ux/3ampto51ur7zjeIwbbeBjtgovTpYuKS1c5fJKMvYdtm8rAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUDkz+W/saV/CrClFtxGF+M7MPzHMwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzQzMDJlMzczMjJl MzAyZTMwMmYzMTM3MmQzMzMyMjAzZDNlMjAzNTM4MzUzOTMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH KEgAMA0GCSqGSIb3DQEBCwUAA4IBAQA7S9t68IY4+ln/r4dhxfXFLx8sBFqFLLxN 0WAR44kdJf9vbz+usqP2ky9pF0WRjtYO9ZVHC2QuWN8X2xmYcIjS1l5aBou2lnJx JKnS3AkOvVoBR5v+1Ehq3gm1j+JUml+WCvhcEM2G6sSSHw4wFeXjJczm+uMpRmX6 +J81AIzaQEJOH81diFO9TTmWonAIdxuazudi73SW4Vl07RXRt1paZGYNmdfMgdTi L/mtzhkXrX82tRNVKC3pCUjr3m2zBpm1UPg1IT36xxWurOkTmA4BU4vLNpw8gHdS jj0yQK9k9C8M0HvQT0xYmStvgTdH0eDO797e+0W2U6xjB+eHcLAF -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:36 2026 by rpki-client