This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e382e302f32312d3231203d3e20323039323432.roa File: 34322e3230312e382e302f32312d3231203d3e20323039323432.roa (raw, json) Hash identifier: W5k9qyIeLy4vnyt22o7+fwnvpENE0l7BxUJrsXyhjfE= Subject key identifier: 9F:81:CB:00:0A:C3:55:6F:10:7D:DA:A7:8E:1A:57:CD:1C:E1:79:62 Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 532B397990B8E9AEB02AF828152AAD1FBFD0B0E6 Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e382e302f32312d3231203d3e20323039323432.roa Signing time: Tue 20 Jan 2026 02:20:21 +0000 ROA not before: Tue 20 Jan 2026 02:15:21 +0000 ROA not after: Tue 19 Jan 2027 02:20:21 +0000 asID: 209242 IP address blocks: 42.201.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2b:39:79:90:b8:e9:ae:b0:2a:f8:28:15:2a:ad:1f:bf:d0:b0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:21 2026 GMT Not After : Jan 19 02:20:21 2027 GMT Subject: CN=9F81CB000AC3556F107DDAA78E1A57CD1CE17962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:f1:0a:18:f5:0b:ef:7b:f3:cd:98:4b:a2: 25:75:3b:3d:d3:17:50:1c:27:3b:16:a8:64:43:20: 84:0b:a7:1f:f7:1a:84:ee:ce:41:82:1d:79:45:06: b2:37:16:65:6b:21:2a:17:24:a7:b2:d7:5f:83:ff: 85:3a:ae:fb:c7:8f:56:8b:7f:df:cb:ee:92:fa:fd: 66:3a:3c:47:5b:d6:4d:3b:e5:44:72:18:45:ba:c4: ca:1d:fd:c6:62:4b:96:86:4d:11:0a:0c:5d:34:08: 3f:be:23:7d:ed:c8:41:d3:e7:7a:57:e7:5d:00:46: fa:4f:c9:a3:dd:0d:51:2f:f2:c4:ae:d3:46:cb:2f: d9:79:c5:fc:31:14:54:b3:45:29:d0:0d:6f:71:0e: f2:22:40:4e:ba:2e:01:7f:88:95:79:fb:ee:f9:8e: 41:cb:38:48:e8:9f:75:1f:36:2e:19:01:c1:e0:86: 79:4a:1f:25:cb:70:93:56:1b:4c:4f:4b:57:98:ca: 25:95:bd:ed:ee:74:e3:02:86:ed:32:b1:e1:54:fe: 1a:1c:34:d5:f6:5e:69:c3:9a:e2:98:9a:c7:7f:40: f7:fe:43:be:7f:5a:fb:99:e9:82:cc:3a:1c:97:76: c3:40:8a:e0:9a:a1:4e:ed:62:d8:90:7b:eb:fb:73: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:81:CB:00:0A:C3:55:6F:10:7D:DA:A7:8E:1A:57:CD:1C:E1:79:62 X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e382e302f32312d3231203d3e20323039323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.201.8.0/21 Signature Algorithm: sha256WithRSAEncryption c7:9f:58:cf:e1:ed:99:8b:de:fa:f9:69:96:df:a6:cc:a5:de: d8:ea:e2:f2:b7:75:c3:fc:aa:44:a2:f3:2d:80:15:af:95:c0: e5:10:f1:20:2a:5b:1a:56:e3:40:d0:39:41:17:96:c8:6a:96: 00:88:47:34:87:a5:29:b5:48:e5:05:d9:52:5d:35:7c:ed:c0: 3b:36:32:95:9e:a7:c5:3c:f2:d7:03:36:e5:18:05:42:1a:ad: 6e:3e:e2:d4:2d:40:f5:14:c9:fb:0c:86:7b:97:9e:bf:47:bd: b5:bc:aa:86:30:54:ae:1d:9f:70:03:90:a7:7c:3f:12:59:31: b3:99:35:a2:54:7e:db:00:a4:51:60:b1:a2:59:ac:70:97:bb: 13:e1:98:43:18:4c:e9:77:50:89:a6:9e:ba:40:b9:08:15:46: 1b:ec:c4:a1:e0:6b:65:ac:36:2c:60:56:28:10:49:ed:84:44: 43:36:e7:3c:09:19:39:20:13:7f:ac:a9:7e:96:f8:1d:5e:94: a0:d9:00:b9:49:41:88:08:8e:4f:7e:43:7a:74:81:c2:a6:8e: 38:11:b9:86:a8:84:4e:9b:90:6a:98:90:55:aa:db:98:9c:71: 1e:82:74:4d:42:87:4f:ca:62:a5:7a:06:ee:5c:98:8a:d8:6f: 0a:40:49:02 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUys5eZC46a6wKvgoFSqtH7/QsOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjFaFw0yNzAxMTkwMjIwMjFaMDMxMTAvBgNV BAMTKDlGODFDQjAwMEFDMzU1NkYxMDdEREFBNzhFMUE1N0NEMUNFMTc5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY1fEKGPUL73vzzZhLoiV1Oz3T F1AcJzsWqGRDIIQLpx/3GoTuzkGCHXlFBrI3FmVrISoXJKey11+D/4U6rvvHj1aL f9/L7pL6/WY6PEdb1k075URyGEW6xMod/cZiS5aGTREKDF00CD++I33tyEHT53pX 510ARvpPyaPdDVEv8sSu00bLL9l5xfwxFFSzRSnQDW9xDvIiQE66LgF/iJV5++75 jkHLOEjon3UfNi4ZAcHghnlKHyXLcJNWG0xPS1eYyiWVve3udOMChu0yseFU/hoc NNX2XmnDmuKYmsd/QPf+Q75/WvuZ6YLMOhyXdsNAiuCaoU7tYtiQe+v7cyKNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUn4HLAArDVW8QfdqnjhpXzRzheWIwHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NDg1ODI1LzAvMzQzMjJlMzIzMDMx MmUzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzAzOTMyMzQzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyrJCDANBgkqhkiG9w0BAQsFAAOCAQEAx59Yz+HtmYve+vlplt+mzKXe2Ori 8rd1w/yqRKLzLYAVr5XA5RDxICpbGlbjQNA5QReWyGqWAIhHNIelKbVI5QXZUl01 fO3AOzYylZ6nxTzy1wM25RgFQhqtbj7i1C1A9RTJ+wyGe5eev0e9tbyqhjBUrh2f cAOQp3w/Elkxs5k1olR+2wCkUWCxolmscJe7E+GYQxhM6XdQiaaeukC5CBVGG+zE oeBrZaw2LGBWKBBJ7YREQzbnPAkZOSATf6ypfpb4HV6UoNkAuUlBiAiOT35DenSB wqaOOBG5hqiETpuQapiQVarbmJxxHoJ0TUKHT8pipXoG7lyYithvCkBJAg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:33 2026 by rpki-client