This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37322e3235342e302f32342d3332203d3e203538353933.roa File: 34302e37322e3235342e302f32342d3332203d3e203538353933.roa (raw, json) Hash identifier: jVmLljqYigSR/3QuR32HfCR3CxY+RzXqqg+sV43pBR8= Subject key identifier: 8B:9C:5C:26:5F:D3:89:AB:C6:1F:F0:F5:B8:76:ED:6B:DB:D6:FE:23 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 66DFF7AF2EAEECA62C14F654D8FA5C38226FC61D Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37322e3235342e302f32342d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:25 +0000 ROA not before: Tue 20 Jan 2026 02:03:25 +0000 ROA not after: Tue 19 Jan 2027 02:08:25 +0000 asID: 58593 IP address blocks: 40.72.254.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:df:f7:af:2e:ae:ec:a6:2c:14:f6:54:d8:fa:5c:38:22:6f:c6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:25 2026 GMT Not After : Jan 19 02:08:25 2027 GMT Subject: CN=8B9C5C265FD389ABC61FF0F5B876ED6BDBD6FE23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:70:22:fc:70:77:b9:3a:9b:65:7c:ec:d7:c5: 87:91:ad:6c:32:8c:09:d5:e0:12:47:fe:05:ae:1d: c8:60:5c:dc:35:78:09:86:14:f3:f1:be:4e:ef:1f: 1b:5c:2a:59:67:5b:b8:29:ce:f4:9d:9a:da:fd:90: 6f:f7:b8:f2:a7:51:83:95:be:ba:c8:d1:87:97:fe: 24:d2:e1:0d:5c:c3:17:f9:07:bc:2a:1a:c8:26:77: 67:01:ae:8e:38:5a:17:55:a4:91:8e:2b:4b:81:da: d3:14:97:23:ad:50:7e:c6:0d:ec:75:24:b8:59:cd: d7:49:ab:87:42:fb:75:80:f5:3d:6c:22:8d:d2:7d: e3:ac:01:44:f4:bc:1a:db:29:33:22:1b:82:d8:70: eb:25:61:20:db:15:8e:1f:d4:fa:19:04:b4:2e:66: a4:c5:12:83:b5:dc:db:7f:9d:ed:7a:38:6c:33:43: 00:40:bc:33:63:8b:f6:bf:6b:90:47:a4:a2:70:3f: 94:99:6b:21:f8:bb:62:96:ae:db:c6:51:b1:59:16: d7:32:ed:8b:c8:a6:b1:a2:d2:42:c5:05:c4:6a:98: 9f:5b:fe:e5:d9:e3:55:4c:13:43:df:c6:6a:10:48: a1:54:d1:fd:59:eb:c0:97:dd:cd:36:56:b4:ab:98: 17:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9C:5C:26:5F:D3:89:AB:C6:1F:F0:F5:B8:76:ED:6B:DB:D6:FE:23 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37322e3235342e302f32342d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.72.254.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:17:ca:db:80:63:ea:39:62:bd:61:7a:bc:d8:65:94:64:ce: 2d:b4:2d:26:9a:c7:1a:d5:34:eb:6a:9e:bb:2b:de:ac:b6:ec: cb:ff:32:f3:1e:77:aa:2b:5f:e9:c0:b0:99:a1:9e:15:25:64: b5:ef:b5:c6:ac:ec:2f:1a:03:9f:e9:86:5b:0c:96:1b:17:b0: 2f:9f:c0:b6:9d:26:2a:3e:f8:ef:f1:e3:6c:2a:dc:f5:e4:ba: 29:63:2d:54:58:79:c7:fb:06:72:b3:f3:36:36:a3:b7:d9:dc: b1:3c:bb:43:eb:c3:58:57:df:d9:09:67:5d:db:e4:ac:ea:10: 45:ec:95:35:3d:fe:06:b5:11:14:fe:34:42:db:56:d2:1a:36: 46:dd:4b:91:27:a6:6a:60:a7:2e:43:17:ed:59:f2:8a:8b:db: 73:1c:3e:b8:ba:1d:58:12:02:89:f1:93:29:2b:3a:80:37:d6: 20:05:8c:42:a2:e3:94:10:8d:9d:2f:7c:57:ab:91:8f:ad:5f: e0:cd:1e:ca:79:1a:85:ab:d3:3b:1e:a3:a9:4c:d3:7b:7b:d2: e9:90:47:c5:00:3b:d2:b5:76:2a:9a:78:d5:ce:4c:ca:5f:9e: 8b:a0:98:b4:73:c0:e5:3b:ce:13:9c:0e:c5:f5:d6:d8:53:29: 3c:47:d1:54 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZt/3ry6u7KYsFPZU2PpcOCJvxh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjVaFw0yNzAxMTkwMjA4MjVaMDMxMTAvBgNV BAMTKDhCOUM1QzI2NUZEMzg5QUJDNjFGRjBGNUI4NzZFRDZCREJENkZFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClcCL8cHe5OptlfOzXxYeRrWwy jAnV4BJH/gWuHchgXNw1eAmGFPPxvk7vHxtcKllnW7gpzvSdmtr9kG/3uPKnUYOV vrrI0YeX/iTS4Q1cwxf5B7wqGsgmd2cBro44WhdVpJGOK0uB2tMUlyOtUH7GDex1 JLhZzddJq4dC+3WA9T1sIo3SfeOsAUT0vBrbKTMiG4LYcOslYSDbFY4f1PoZBLQu ZqTFEoO13Nt/ne16OGwzQwBAvDNji/a/a5BHpKJwP5SZayH4u2KWrtvGUbFZFtcy 7YvIprGi0kLFBcRqmJ9b/uXZ41VME0PfxmoQSKFU0f1Z68CX3c02VrSrmBeFAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUi5xcJl/TiavGH/D1uHbta9vW/iMwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzQzMDJlMzczMjJl MzIzNTM0MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzODM1MzkzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAChI/jANBgkqhkiG9w0BAQsFAAOCAQEAjBfK24Bj6jlivWF6vNhllGTOLbQt JprHGtU062qeuyverLbsy/8y8x53qitf6cCwmaGeFSVkte+1xqzsLxoDn+mGWwyW GxewL5/Atp0mKj747/HjbCrc9eS6KWMtVFh5x/sGcrPzNjajt9ncsTy7Q+vDWFff 2QlnXdvkrOoQReyVNT3+BrURFP40QttW0ho2Rt1LkSemamCnLkMX7Vnyiovbcxw+ uLodWBICifGTKSs6gDfWIAWMQqLjlBCNnS98V6uRj61f4M0eynkahavTOx6jqUzT e3vS6ZBHxQA70rV2Kpp41c5Myl+ei6CYtHPA5TvOE5wOxfXW2FMpPEfRVA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:31 2026 by rpki-client