This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37332e302e302f31372d3332203d3e203538353933.roa File: 34302e37332e302e302f31372d3332203d3e203538353933.roa (raw, json) Hash identifier: cadugSY+Rd6qeZvb4VDsR6/4DGyePb52mtwl/w4kXbs= Subject key identifier: 86:7A:B4:50:EF:E9:6B:87:C5:D5:0F:11:39:BC:9F:87:87:9B:2D:C3 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 5FA98D5C9C279C4323619D714F0BDB0FA9FB95FA Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37332e302e302f31372d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:23 +0000 ROA not before: Tue 20 Jan 2026 02:03:23 +0000 ROA not after: Tue 19 Jan 2027 02:08:23 +0000 asID: 58593 IP address blocks: 40.73.0.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a9:8d:5c:9c:27:9c:43:23:61:9d:71:4f:0b:db:0f:a9:fb:95:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:23 2026 GMT Not After : Jan 19 02:08:23 2027 GMT Subject: CN=867AB450EFE96B87C5D50F1139BC9F87879B2DC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:1a:72:71:e5:05:1f:e8:6d:5b:d8:37:93: 26:72:fc:4b:00:f7:16:f0:58:a6:f2:eb:26:78:f6: 43:b5:1b:72:14:77:17:64:d6:60:3c:0e:a5:91:db: d8:9c:3d:c6:66:1b:18:e3:ab:9c:7a:c1:e2:e2:a3: 0a:31:6b:cc:14:07:fd:b9:e6:04:27:d0:6f:7f:49: 4e:35:57:c0:9a:d9:f0:28:d5:8d:fb:d2:0b:27:a4: b0:77:9f:c5:6a:32:7d:98:34:2d:19:6b:9f:f2:ee: e0:5a:8d:33:71:74:d7:a2:d4:b2:ae:de:aa:f7:2b: 0e:c7:38:e1:14:db:67:d4:df:c3:df:a7:6f:88:b4: 47:ff:86:f2:fb:a4:68:85:b9:92:5a:67:80:c1:6d: 66:27:b8:15:a9:45:6d:63:bf:39:5e:9e:4a:0b:45: b2:f9:d0:50:fc:72:e9:c4:41:c8:cb:6d:1e:b6:6f: ba:45:fa:5b:7e:7d:a0:bf:6b:2e:ae:03:6c:fd:f1: e0:f8:97:9a:3d:e3:47:5a:c8:99:a8:52:d5:43:ca: 78:10:c1:09:6a:8c:83:37:d3:de:8a:be:03:4f:83: 6a:e0:6f:f4:84:84:fe:fe:e4:cd:99:c1:7f:11:97: 46:13:d0:ff:84:4c:37:97:79:69:eb:a6:07:dc:19: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7A:B4:50:EF:E9:6B:87:C5:D5:0F:11:39:BC:9F:87:87:9B:2D:C3 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e37332e302e302f31372d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.73.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0a:6b:a3:48:fa:3f:a1:38:2a:43:d9:03:d7:4d:8f:2c:17:b2: de:12:12:44:74:a6:36:bf:eb:d4:a2:2a:19:a7:25:56:0e:21: c5:45:be:9d:3c:45:bb:c1:c6:1b:4e:31:78:5c:ed:db:32:d8: d1:17:9a:70:b0:1b:fe:c0:84:d6:fc:0c:18:83:78:39:4c:69: a9:13:95:cc:e6:42:f4:9e:b1:da:08:2b:26:3e:d6:6a:7c:85: 34:2f:6c:fd:1b:24:7b:d1:75:9a:99:02:c2:80:be:bc:05:aa: 91:b1:e0:b4:e6:9d:09:07:2f:c1:c6:49:9f:4e:9c:69:d3:08: 90:2a:72:a8:f5:5a:c5:e4:37:57:79:be:56:56:23:63:ff:99: cd:1f:6b:64:13:d5:91:fc:c9:1f:b2:a6:70:86:95:a6:df:7a: b7:dd:5b:b2:0b:e7:64:0e:82:d0:98:5b:e6:2e:3c:21:8e:1d: ef:3a:4c:91:04:9b:a2:b5:d9:5d:b9:3c:96:a5:af:09:08:35: 42:c5:14:87:d7:21:72:21:c5:83:d2:ec:3d:bb:09:ec:2c:60: 6d:4f:d8:6c:18:70:07:29:2b:15:93:15:f6:ac:16:76:98:a9: 22:10:0d:f6:c8:7f:00:05:bb:38:6d:89:8f:19:b6:10:0f:83: 13:99:8a:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUX6mNXJwnnEMjYZ1xTwvbD6n7lfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjNaFw0yNzAxMTkwMjA4MjNaMDMxMTAvBgNV BAMTKDg2N0FCNDUwRUZFOTZCODdDNUQ1MEYxMTM5QkM5Rjg3ODc5QjJEQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEhpyceUFH+htW9g3kyZy/EsA 9xbwWKby6yZ49kO1G3IUdxdk1mA8DqWR29icPcZmGxjjq5x6weLiowoxa8wUB/25 5gQn0G9/SU41V8Ca2fAo1Y370gsnpLB3n8VqMn2YNC0Za5/y7uBajTNxdNei1LKu 3qr3Kw7HOOEU22fU38Pfp2+ItEf/hvL7pGiFuZJaZ4DBbWYnuBWpRW1jvzlenkoL RbL50FD8cunEQcjLbR62b7pF+lt+faC/ay6uA2z98eD4l5o940dayJmoUtVDyngQ wQlqjIM3096KvgNPg2rgb/SEhP7+5M2ZwX8Rl0YT0P+ETDeXeWnrpgfcGZWDAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUhnq0UO/pa4fF1Q8RObyfh4ebLcMwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzQzMDJlMzczMzJl MzAyZTMwMmYzMTM3MmQzMzMyMjAzZDNlMjAzNTM4MzUzOTMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH KEkAMA0GCSqGSIb3DQEBCwUAA4IBAQAKa6NI+j+hOCpD2QPXTY8sF7LeEhJEdKY2 v+vUoioZpyVWDiHFRb6dPEW7wcYbTjF4XO3bMtjRF5pwsBv+wITW/AwYg3g5TGmp E5XM5kL0nrHaCCsmPtZqfIU0L2z9GyR70XWamQLCgL68BaqRseC05p0JBy/Bxkmf Tpxp0wiQKnKo9VrF5DdXeb5WViNj/5nNH2tkE9WR/MkfsqZwhpWm33q33VuyC+dk DoLQmFvmLjwhjh3vOkyRBJuitdlduTyWpa8JCDVCxRSH1yFyIcWD0uw9uwnsLGBt T9hsGHAHKSsVkxX2rBZ2mKkiEA32yH8ABbs4bYmPGbYQD4MTmYri -----END CERTIFICATE-----Generated at Sun Jan 25 15:35:42 2026 by rpki-client