This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32322d3232203d3e203133333335.roa File: 34352e3235302e3135322e302f32322d3232203d3e203133333335.roa (raw, json) Hash identifier: h5ft33EZRxb8GtP4+TwRp7mFsWDTZqtimQSX7O69ARY= Subject key identifier: B2:89:11:D7:44:2B:2D:2F:F9:0A:92:BB:61:3F:B4:82:E1:EE:AE:75 Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 2E2BAA76B121161A91A736B05D36CF82A7AFA39C Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32322d3232203d3e203133333335.roa Signing time: Tue 20 Jan 2026 02:20:21 +0000 ROA not before: Tue 20 Jan 2026 02:15:21 +0000 ROA not after: Tue 19 Jan 2027 02:20:21 +0000 asID: 13335 IP address blocks: 45.250.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2b:aa:76:b1:21:16:1a:91:a7:36:b0:5d:36:cf:82:a7:af:a3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:21 2026 GMT Not After : Jan 19 02:20:21 2027 GMT Subject: CN=B28911D7442B2D2FF90A92BB613FB482E1EEAE75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:10:68:9a:11:6e:d1:fb:04:c3:97:55:81:59: 4a:4d:ff:f6:22:8c:72:80:8a:a8:c3:18:c2:27:98: 47:58:52:a8:de:9f:a1:66:59:65:e6:84:19:7b:bb: db:a1:6d:0c:02:ae:d5:db:01:ce:fb:42:d9:a0:4a: c8:b1:a1:1a:73:32:4f:0f:df:f7:20:df:46:65:73: 53:22:79:49:75:10:d5:45:b1:5e:7f:50:36:b8:9e: d4:a8:18:66:fd:99:38:4d:46:c5:fc:09:57:90:49: ba:ad:de:e0:8c:13:88:b7:8f:8c:9f:01:f6:56:5c: c3:eb:6e:13:33:71:6a:89:95:3f:78:a9:5a:45:40: 6c:b2:f2:5e:1e:b4:b0:8b:6d:60:7b:3c:49:6b:b7: d6:2c:cc:c1:58:d6:bb:75:73:0c:1d:47:fa:83:3f: 43:83:df:c7:8b:d9:01:ab:64:99:d3:1b:ed:a0:52: a0:27:60:c6:b3:2c:b3:02:9e:41:11:ac:b2:0a:48: 0f:fa:1e:ba:e0:ac:ee:51:67:41:f1:80:8d:a2:23: f1:3a:90:89:9e:90:3b:b3:4a:a2:0b:bc:a7:0b:41: 2e:2d:15:c0:b7:2f:71:89:bf:e7:6c:ec:52:75:b2: 6e:3c:4d:0c:06:28:9f:47:d3:cd:a2:58:ca:a4:25: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:89:11:D7:44:2B:2D:2F:F9:0A:92:BB:61:3F:B4:82:E1:EE:AE:75 X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32322d3232203d3e203133333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/22 Signature Algorithm: sha256WithRSAEncryption af:6e:ad:e4:ca:bf:0c:5c:0a:ff:f8:cd:fa:d9:d1:f3:c0:5b: 64:1a:ee:68:8d:81:00:b6:76:ad:a4:e3:98:10:37:a9:cd:5d: 00:ae:19:e2:32:bc:a2:96:07:54:8c:6b:a7:7b:2a:ac:fd:57: 85:6a:a1:da:99:43:7e:ab:51:e1:c0:68:48:c9:5b:41:73:86: ab:86:72:81:17:a5:0b:82:8d:eb:37:ca:c1:92:18:5d:36:a0: 74:bd:9a:0b:04:e5:3d:47:72:89:d7:d2:5e:3b:4f:e2:a8:e3: 8c:0b:06:08:d6:f5:67:ce:32:9c:f2:73:4c:c5:7a:0f:50:49: ed:66:20:1d:e6:da:bb:4e:0d:ba:ff:53:fb:a4:5f:5a:0c:3f: 50:f3:58:64:80:9f:46:13:72:e4:9c:8d:29:b9:56:26:97:8b: 25:2e:e6:2c:d8:38:15:c9:bf:86:25:5f:71:45:b6:8b:76:a5: 28:5d:4c:14:5b:23:2b:93:41:f6:33:0c:0e:11:40:e3:37:f2: 64:9a:a3:ba:bc:f4:b1:a3:fd:cb:b1:70:1f:38:31:67:82:df: 89:40:4a:da:af:1f:26:1b:5c:42:26:80:e2:50:da:3d:37:47: 08:a6:8f:3c:52:4e:3c:be:4d:ff:ae:73:01:12:82:2c:31:e8: 1a:95:cd:84 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULiuqdrEhFhqRpzawXTbPgqevo5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjFaFw0yNzAxMTkwMjIwMjFaMDMxMTAvBgNV BAMTKEIyODkxMUQ3NDQyQjJEMkZGOTBBOTJCQjYxM0ZCNDgyRTFFRUFFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCREGiaEW7R+wTDl1WBWUpN//Yi jHKAiqjDGMInmEdYUqjen6FmWWXmhBl7u9uhbQwCrtXbAc77QtmgSsixoRpzMk8P 3/cg30Zlc1MieUl1ENVFsV5/UDa4ntSoGGb9mThNRsX8CVeQSbqt3uCME4i3j4yf AfZWXMPrbhMzcWqJlT94qVpFQGyy8l4etLCLbWB7PElrt9YszMFY1rt1cwwdR/qD P0OD38eL2QGrZJnTG+2gUqAnYMazLLMCnkERrLIKSA/6HrrgrO5RZ0HxgI2iI/E6 kImekDuzSqILvKcLQS4tFcC3L3GJv+ds7FJ1sm48TQwGKJ9H082iWMqkJX4bAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUsokR10QrLS/5CpK7YT+0guHurnUwHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTM4OTI2NTQ4NTgyNS8wLzM0MzUyZTMyMzUz MDJlMzEzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzMzMzMzMzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi36mDANBgkqhkiG9w0BAQsFAAOCAQEAr26t5Mq/DFwK//jN+tnR88Bb ZBruaI2BALZ2raTjmBA3qc1dAK4Z4jK8opYHVIxrp3sqrP1XhWqh2plDfqtR4cBo SMlbQXOGq4ZygRelC4KN6zfKwZIYXTagdL2aCwTlPUdyidfSXjtP4qjjjAsGCNb1 Z84ynPJzTMV6D1BJ7WYgHebau04Nuv9T+6RfWgw/UPNYZICfRhNy5JyNKblWJpeL JS7mLNg4Fcm/hiVfcUW2i3alKF1MFFsjK5NB9jMMDhFA4zfyZJqjurz0saP9y7Fw HzgxZ4LfiUBK2q8fJhtcQiaA4lDaPTdHCKaPPFJOPL5N/65zARKCLDHoGpXNhA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:04 2026 by rpki-client