This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32322d3232203d3e20323039323432.roa File: 34352e3235302e3135322e302f32322d3232203d3e20323039323432.roa (raw, json) Hash identifier: FpEGr6KkrpWb/DREiuFLVsfL0sEm9W8uzavZFSZrFag= Subject key identifier: 9E:AF:55:C3:4D:0C:43:E8:FF:13:C5:79:3D:08:A4:C9:14:F5:95:32 Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 7AD7604F2D54E33E75768F457085F01653E83726 Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32322d3232203d3e20323039323432.roa Signing time: Tue 20 Jan 2026 02:20:19 +0000 ROA not before: Tue 20 Jan 2026 02:15:19 +0000 ROA not after: Tue 19 Jan 2027 02:20:19 +0000 asID: 209242 IP address blocks: 45.250.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d7:60:4f:2d:54:e3:3e:75:76:8f:45:70:85:f0:16:53:e8:37:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:19 2026 GMT Not After : Jan 19 02:20:19 2027 GMT Subject: CN=9EAF55C34D0C43E8FF13C5793D08A4C914F59532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:32:2b:94:d1:78:07:a2:3a:f3:8f:51:dc: 45:d7:03:21:1e:be:b4:01:0d:81:3f:80:fb:78:86: 3c:7c:85:ad:d3:ae:44:aa:27:e5:b7:23:0e:40:dc: 1c:d0:30:04:ee:fd:92:8d:4a:34:c9:95:dc:23:49: 54:f2:f9:1a:18:90:be:75:1a:60:c8:42:48:ea:c8: 01:3d:44:38:2a:01:4d:06:6a:bc:f6:04:44:5f:36: 91:32:31:13:ba:6d:4f:04:1c:0e:7f:68:7b:44:2c: 8a:c0:69:38:a2:e1:11:d5:35:d4:d9:27:76:35:d8: 63:39:e6:1f:75:66:cc:ec:60:49:f3:7f:f1:1a:cd: f7:04:45:7f:22:f5:c9:0b:99:0c:5b:78:fe:81:49: 61:35:7e:92:90:01:94:d2:c8:c1:ac:1f:b7:a6:a5: 45:70:70:cd:60:d5:e5:79:d9:91:f2:03:15:33:af: f7:01:39:6b:1e:16:22:41:e4:06:4d:d9:19:16:b1: a2:75:19:7d:db:4b:bb:63:74:f0:0e:4c:0c:96:fe: 1b:72:4f:da:80:29:25:79:59:47:87:44:95:74:43: 94:cb:c4:f1:b2:a5:d8:32:93:0d:b5:43:15:7c:54: fe:9d:9d:8d:bd:bb:b4:cc:c1:7e:2b:5f:3d:2c:61: e3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AF:55:C3:4D:0C:43:E8:FF:13:C5:79:3D:08:A4:C9:14:F5:95:32 X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32322d3232203d3e20323039323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/22 Signature Algorithm: sha256WithRSAEncryption 18:a3:ff:a3:e3:4d:2e:02:33:8f:33:32:1d:9a:0a:48:38:ca: 98:9d:f1:bd:c2:84:3b:be:1d:33:04:13:73:6d:96:a2:0c:23: cd:42:c7:05:b3:48:a7:2d:60:66:a4:1f:2b:ee:01:af:bd:18: 51:3a:d6:4f:6f:3e:3c:5a:3e:0b:91:e8:f4:30:bf:7e:ad:cb: d7:b4:26:a9:3f:f9:c6:9b:b2:3c:4a:17:b8:5e:be:f7:af:f5: 4a:02:8c:d0:81:ac:c8:d9:6d:2e:20:65:17:8e:a7:dc:ab:d1: 23:54:e6:2c:d7:3b:95:cc:74:ed:8e:48:34:bb:04:f0:05:51: 2e:e7:5b:bf:31:c9:1b:21:21:65:1f:38:b9:32:e0:c1:71:38: 88:a3:4b:b2:ad:80:b1:ef:dd:5e:45:e3:0c:ad:01:9c:d1:59: 97:d6:bf:fd:a3:3a:1c:86:fb:bc:13:bb:6d:15:10:f4:94:3f: cd:bd:36:81:8c:f7:f6:0b:15:f0:12:03:db:7d:02:1d:e7:98: 2c:78:3f:4c:b7:6e:8a:a7:9b:b5:10:6a:b1:c4:ea:11:99:3d: c8:07:1b:3a:3e:7b:1e:7d:df:f7:05:02:c8:e3:eb:ce:13:20: cc:ac:5c:ef:b4:97:b7:b9:13:9a:dd:71:99:0b:0b:63:51:46: 1b:70:03:74 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUetdgTy1U4z51do9FcIXwFlPoNyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MTlaFw0yNzAxMTkwMjIwMTlaMDMxMTAvBgNV BAMTKDlFQUY1NUMzNEQwQzQzRThGRjEzQzU3OTNEMDhBNEM5MTRGNTk1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUzIrlNF4B6I6849R3EXXAyEe vrQBDYE/gPt4hjx8ha3TrkSqJ+W3Iw5A3BzQMATu/ZKNSjTJldwjSVTy+RoYkL51 GmDIQkjqyAE9RDgqAU0Garz2BERfNpEyMRO6bU8EHA5/aHtELIrAaTii4RHVNdTZ J3Y12GM55h91ZszsYEnzf/EazfcERX8i9ckLmQxbeP6BSWE1fpKQAZTSyMGsH7em pUVwcM1g1eV52ZHyAxUzr/cBOWseFiJB5AZN2RkWsaJ1GX3bS7tjdPAOTAyW/hty T9qAKSV5WUeHRJV0Q5TLxPGypdgykw21QxV8VP6dnY29u7TMwX4rXz0sYeOlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUnq9Vw00MQ+j/E8V5PQikyRT1lTIwHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zNDM1MmUzMjM1 MzAyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzAzOTMyMzQzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAi36mDANBgkqhkiG9w0BAQsFAAOCAQEAGKP/o+NNLgIzjzMyHZoK SDjKmJ3xvcKEO74dMwQTc22WogwjzULHBbNIpy1gZqQfK+4Br70YUTrWT28+PFo+ C5Ho9DC/fq3L17QmqT/5xpuyPEoXuF6+96/1SgKM0IGsyNltLiBlF46n3KvRI1Tm LNc7lcx07Y5INLsE8AVRLudbvzHJGyEhZR84uTLgwXE4iKNLsq2Ase/dXkXjDK0B nNFZl9a//aM6HIb7vBO7bRUQ9JQ/zb02gYz39gsV8BID230CHeeYLHg/TLduiqeb tRBqscTqEZk9yAcbOj57Hn3f9wUCyOPrzhMgzKxc77SXt7kTmt1xmQsLY1FGG3AD dA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:41 2026 by rpki-client