This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e382e302f32312d3231203d3e203133333335.roa File: 34322e3230312e382e302f32312d3231203d3e203133333335.roa (raw, json) Hash identifier: yuxlY1iYCesOJLbnqzkwNH0nVyxTrG8cdUbgZ6M7208= Subject key identifier: 0B:C7:7E:AC:EF:38:6A:D0:BB:B9:7F:47:8D:12:A6:D6:F2:F2:37:C2 Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 4AD553A935BE93BF0215FAE28692727D5D713BBA Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e382e302f32312d3231203d3e203133333335.roa Signing time: Tue 20 Jan 2026 02:20:20 +0000 ROA not before: Tue 20 Jan 2026 02:15:20 +0000 ROA not after: Tue 19 Jan 2027 02:20:20 +0000 asID: 13335 IP address blocks: 42.201.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d5:53:a9:35:be:93:bf:02:15:fa:e2:86:92:72:7d:5d:71:3b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:20 2026 GMT Not After : Jan 19 02:20:20 2027 GMT Subject: CN=0BC77EACEF386AD0BBB97F478D12A6D6F2F237C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:12:fc:ec:85:fd:12:9b:27:c3:cd:5f:f2: 65:da:72:8d:46:26:5f:a8:e3:cf:af:c5:a3:e6:d1: c8:19:14:aa:4d:85:39:f2:f4:59:3c:6b:15:2c:01: f9:d9:b3:af:3f:ab:1f:c5:ea:3e:9d:b9:8e:e0:98: 32:6e:41:7d:44:a5:59:9c:ba:d4:bd:f6:ff:b7:38: 0d:45:6a:b6:73:7a:37:39:1b:53:61:92:3c:5d:8f: 0b:95:bd:c5:00:5e:c5:f6:a0:6d:6b:d7:e3:88:27: b0:68:4f:51:54:c4:ef:8c:57:50:ec:b4:de:39:6e: 77:60:19:2f:98:e5:89:87:fc:e5:51:91:15:ec:fa: 44:e0:3a:d3:21:35:f4:29:ed:0a:bf:1b:96:b4:4d: 98:7d:75:2e:8d:9c:d8:db:24:54:c0:b5:60:21:8d: 67:0e:b0:50:d7:1b:e1:ba:1b:c9:b0:11:96:56:e2: 0b:c1:0a:06:82:72:4b:26:21:72:46:4d:b3:ad:9b: 91:8b:59:97:2c:5d:13:05:d1:3f:00:0e:64:36:46: 01:1c:14:40:3e:f9:cd:65:59:67:8e:50:57:5d:be: 9b:e0:9b:4c:56:51:d2:12:b9:0c:6b:81:20:45:02: 8e:bd:18:df:d1:9e:e4:01:33:81:ec:75:b7:97:5b: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C7:7E:AC:EF:38:6A:D0:BB:B9:7F:47:8D:12:A6:D6:F2:F2:37:C2 X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e382e302f32312d3231203d3e203133333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.201.8.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:6e:84:6d:79:22:9e:27:2f:51:13:d3:70:9d:89:f5:ec:a2: 67:25:05:fb:a5:bf:5b:2d:30:1e:9f:9d:13:a6:8a:15:e4:b3: 32:a0:a6:82:7d:84:f8:25:1b:5e:b2:d0:74:c5:50:f9:85:55: 1e:70:42:8c:8a:9d:0e:04:e8:7c:81:18:74:ba:3a:5b:be:05: 0e:0c:31:80:f5:ec:e2:54:2e:c9:6c:6a:40:af:a0:4b:28:1a: cc:6a:e9:57:bf:6a:67:6f:ee:ab:20:3a:9e:db:3d:b1:c5:27: 78:97:68:66:f5:f4:d8:41:ed:ff:2c:fd:38:6b:be:72:90:f3: 5d:04:01:0d:9f:4d:8d:7a:bc:f3:69:6d:2b:4e:1c:74:86:a2: 23:2d:5c:7b:b6:99:37:08:33:ab:fc:ee:be:b7:ac:27:3f:7d: 76:88:61:6c:6b:44:38:1c:ab:30:b6:46:62:db:c1:a7:87:0c: c4:82:55:11:7b:33:04:b7:12:99:21:66:20:88:f4:c5:92:05: f1:55:46:10:4a:46:ce:96:13:97:e2:ad:28:f8:db:56:3f:8c: df:97:01:28:c6:12:09:b6:03:73:cd:7d:cf:20:9e:13:f5:83: 2b:15:36:1f:cc:3a:3f:bd:bf:7f:36:00:0b:1a:fc:58:04:1e: 29:88:7c:b4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUStVTqTW+k78CFfrihpJyfV1xO7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjBaFw0yNzAxMTkwMjIwMjBaMDMxMTAvBgNV BAMTKDBCQzc3RUFDRUYzODZBRDBCQkI5N0Y0NzhEMTJBNkQ2RjJGMjM3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5BL87IX9Epsnw81f8mXaco1G Jl+o48+vxaPm0cgZFKpNhTny9Fk8axUsAfnZs68/qx/F6j6duY7gmDJuQX1EpVmc utS99v+3OA1FarZzejc5G1NhkjxdjwuVvcUAXsX2oG1r1+OIJ7BoT1FUxO+MV1Ds tN45bndgGS+Y5YmH/OVRkRXs+kTgOtMhNfQp7Qq/G5a0TZh9dS6NnNjbJFTAtWAh jWcOsFDXG+G6G8mwEZZW4gvBCgaCcksmIXJGTbOtm5GLWZcsXRMF0T8ADmQ2RgEc FEA++c1lWWeOUFddvpvgm0xWUdISuQxrgSBFAo69GN/RnuQBM4HsdbeXW8SHAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUC8d+rO84atC7uX9HjRKm1vLyN8IwHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NDg1ODI1LzAvMzQzMjJlMzIzMDMx MmUzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzMzMzMzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAMqyQgwDQYJKoZIhvcNAQELBQADggEBAJ9uhG15Ip4nL1ET03CdifXsomclBful v1stMB6fnROmihXkszKgpoJ9hPglG16y0HTFUPmFVR5wQoyKnQ4E6HyBGHS6Olu+ BQ4MMYD17OJULslsakCvoEsoGsxq6Ve/amdv7qsgOp7bPbHFJ3iXaGb19NhB7f8s /ThrvnKQ810EAQ2fTY16vPNpbStOHHSGoiMtXHu2mTcIM6v87r63rCc/fXaIYWxr RDgcqzC2RmLbwaeHDMSCVRF7MwS3EpkhZiCI9MWSBfFVRhBKRs6WE5firSj421Y/ jN+XASjGEgm2A3PNfc8gnhP1gysVNh/MOj+9v382AAsa/FgEHimIfLQ= -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:45 2026 by rpki-client