This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e31362e302f32302d3230203d3e20323039323432.roa File: 34322e3230312e31362e302f32302d3230203d3e20323039323432.roa (raw, json) Hash identifier: mSTL9S0V/YqeHBqTzG06SOIxEg65ScDxmfy566XsL7I= Subject key identifier: 1F:70:F1:7B:3C:2F:F5:EB:2B:62:DD:9C:86:AA:66:0D:91:08:A9:B5 Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 701C31B764542464A2315A1FD9C0566CB5C1299F Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e31362e302f32302d3230203d3e20323039323432.roa Signing time: Tue 20 Jan 2026 02:20:20 +0000 ROA not before: Tue 20 Jan 2026 02:15:20 +0000 ROA not after: Tue 19 Jan 2027 02:20:20 +0000 asID: 209242 IP address blocks: 42.201.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1c:31:b7:64:54:24:64:a2:31:5a:1f:d9:c0:56:6c:b5:c1:29:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:20 2026 GMT Not After : Jan 19 02:20:20 2027 GMT Subject: CN=1F70F17B3C2FF5EB2B62DD9C86AA660D9108A9B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:43:70:2e:06:e1:ea:6a:49:05:9a:ba:c8: ea:b4:0f:ed:97:98:7a:e6:a3:59:54:d8:fd:b3:f8: 62:6f:aa:a4:21:3d:8f:64:48:6c:ad:d8:10:7a:f0: 13:00:0d:7b:30:d8:f8:ab:fb:9c:e2:07:9e:26:23: 0d:90:14:67:d3:36:5c:82:c7:34:2b:ee:05:99:a1: a7:a7:27:1e:22:99:e2:36:d2:25:67:35:da:89:f9: 24:c7:b2:14:ff:d6:bc:81:4d:3c:8a:e2:2a:03:72: cb:38:fa:5d:13:36:e3:49:c9:ec:6c:bd:06:92:97: 40:50:59:d4:43:ec:9e:ba:6f:ca:45:84:99:95:6f: ce:e4:f2:aa:3a:ab:c3:ac:d5:e2:66:d8:1c:10:73: dd:ea:fb:93:44:c5:e7:da:8a:53:e2:be:a3:a4:de: 8a:ae:60:65:8e:b5:ff:fa:64:aa:be:8c:81:29:2a: 11:50:3c:25:e8:9e:e1:dd:13:96:dd:ad:5d:71:b4: ad:b7:89:72:b7:f8:10:d7:3b:a6:85:7e:8b:fd:b8: f1:28:6b:b3:60:0e:a0:43:54:a9:58:ed:71:5c:66: f3:94:f1:46:bf:19:03:40:f0:51:72:93:5a:c8:96: 94:7e:aa:2d:fd:da:18:9c:6b:3e:77:4d:67:d8:cf: 9e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:70:F1:7B:3C:2F:F5:EB:2B:62:DD:9C:86:AA:66:0D:91:08:A9:B5 X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e31362e302f32302d3230203d3e20323039323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.201.16.0/20 Signature Algorithm: sha256WithRSAEncryption c6:e9:e7:1f:24:51:2c:3f:09:13:78:8d:5f:6e:b6:59:25:24: 19:d9:93:44:1e:dd:99:cc:09:0a:89:3f:8d:71:48:8f:a3:f3: 55:69:0a:85:fd:0d:a1:a7:d3:08:5c:90:2d:dc:50:5a:04:6f: 42:14:2c:56:0f:c6:d4:eb:46:cf:e0:91:60:46:ca:24:e6:d1: 6f:32:09:52:1e:7a:2b:79:9c:56:f2:2f:47:5a:70:d6:3f:89: aa:d6:1c:53:9a:15:74:91:fc:2c:06:60:48:8a:08:2f:be:54: 55:bb:9c:c6:24:26:1b:96:c8:81:41:b8:95:a3:f4:06:7c:09: f2:b0:cb:86:95:20:1f:bb:fa:49:0a:bd:ab:63:40:d0:0e:e0: 32:85:52:8e:51:7f:33:09:5a:7f:85:77:ef:f2:e5:d9:ba:f2: 06:ca:df:f9:8d:d6:36:4a:ea:9b:08:42:d1:0c:3a:e1:83:2c: 9f:01:73:9d:0b:f5:56:68:15:eb:06:07:32:92:de:38:b2:00: 02:c5:10:c1:2e:e2:37:bc:53:bb:81:9b:40:a0:c0:a5:d4:05: 10:ff:d9:f9:bc:5f:58:7d:d2:e8:0e:78:c1:87:d9:c9:de:08: cf:f9:33:9a:68:9a:32:06:88:a1:3d:50:bf:23:ab:22:3a:c3: 96:1e:4c:76 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUcBwxt2RUJGSiMVof2cBWbLXBKZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjBaFw0yNzAxMTkwMjIwMjBaMDMxMTAvBgNV BAMTKDFGNzBGMTdCM0MyRkY1RUIyQjYyREQ5Qzg2QUE2NjBEOTEwOEE5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuUNwLgbh6mpJBZq6yOq0D+2X mHrmo1lU2P2z+GJvqqQhPY9kSGyt2BB68BMADXsw2Pir+5ziB54mIw2QFGfTNlyC xzQr7gWZoaenJx4imeI20iVnNdqJ+STHshT/1ryBTTyK4ioDcss4+l0TNuNJyexs vQaSl0BQWdRD7J66b8pFhJmVb87k8qo6q8Os1eJm2BwQc93q+5NExefailPivqOk 3oquYGWOtf/6ZKq+jIEpKhFQPCXonuHdE5bdrV1xtK23iXK3+BDXO6aFfov9uPEo a7NgDqBDVKlY7XFcZvOU8Ua/GQNA8FFyk1rIlpR+qi392hicaz53TWfYz56FAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUH3Dxezwv9esrYt2chqpmDZEIqbUwHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTM4OTI2NTQ4NTgyNS8wLzM0MzIyZTMyMzAz MTJlMzEzNjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMyMzAzOTMyMzQzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBCrJEDANBgkqhkiG9w0BAQsFAAOCAQEAxunnHyRRLD8JE3iNX262WSUk GdmTRB7dmcwJCok/jXFIj6PzVWkKhf0NoafTCFyQLdxQWgRvQhQsVg/G1OtGz+CR YEbKJObRbzIJUh56K3mcVvIvR1pw1j+JqtYcU5oVdJH8LAZgSIoIL75UVbucxiQm G5bIgUG4laP0BnwJ8rDLhpUgH7v6SQq9q2NA0A7gMoVSjlF/Mwlaf4V37/Ll2bry Bsrf+Y3WNkrqmwhC0Qw64YMsnwFznQv1VmgV6wYHMpLeOLIAAsUQwS7iN7xTu4Gb QKDApdQFEP/Z+bxfWH3S6A54wYfZyd4Iz/kzmmiaMgaIoT1QvyOrIjrDlh5Mdg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:35 2026 by rpki-client