This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32322d3232203d3e20343031313630.roa File: 34352e3235302e3135322e302f32322d3232203d3e20343031313630.roa (raw, json) Hash identifier: I6cHKdsisNVfvX3uN+fPZID4Ko8fzxoQSx8A5EpzEaE= Subject key identifier: 03:B0:A1:8E:E6:BD:F4:AA:2B:4E:65:9C:68:BA:D1:C7:5B:B8:1E:09 Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 13D3C5DDC3004E0A493911C7A5DDF51C40CD1B7B Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32322d3232203d3e20343031313630.roa Signing time: Tue 20 Jan 2026 02:20:21 +0000 ROA not before: Tue 20 Jan 2026 02:15:21 +0000 ROA not after: Tue 19 Jan 2027 02:20:21 +0000 asID: 401160 IP address blocks: 45.250.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d3:c5:dd:c3:00:4e:0a:49:39:11:c7:a5:dd:f5:1c:40:cd:1b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:21 2026 GMT Not After : Jan 19 02:20:21 2027 GMT Subject: CN=03B0A18EE6BDF4AA2B4E659C68BAD1C75BB81E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:37:e4:e3:d0:d4:c7:72:6a:6e:dd:73:45: c5:d6:70:f9:17:e4:e9:8e:57:77:13:50:e2:70:0d: 4e:bb:26:94:e2:b6:d5:e5:f4:b9:f1:36:53:d4:d5: a8:75:26:a8:d9:da:d3:63:75:a4:61:b2:bd:b2:a2: 55:08:18:56:c0:e3:e2:c1:81:e6:d7:8c:06:b3:d8: 5a:cb:40:74:02:9f:7d:5f:d7:24:6b:77:07:13:9e: f9:7b:9b:c6:eb:23:8c:32:1e:24:fd:67:db:1a:23: a9:7e:b5:46:c3:80:a9:f4:93:ac:ea:72:55:b4:78: 92:7c:43:cd:a1:79:d3:80:d3:af:ce:3d:88:25:cd: d5:60:24:9c:02:2e:5d:ab:ed:28:e2:54:e2:55:9b: 72:c6:2c:13:46:03:6c:75:0b:2c:bb:10:6a:45:f3: 57:8d:cf:92:88:c7:33:23:fb:e4:f3:ce:90:0f:3d: 22:38:4c:75:93:c0:49:f0:42:88:35:93:6d:71:8e: 34:99:cd:a2:e7:5d:c0:b0:98:cc:c2:e8:31:5a:4f: 8a:25:50:b9:2e:52:20:a6:37:e1:ea:be:5f:4c:af: 4f:e3:7e:d1:68:c1:70:d2:92:d1:a0:64:43:f4:17: 3f:d7:9a:20:a9:b9:d8:16:f9:86:62:2b:df:df:5f: f3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B0:A1:8E:E6:BD:F4:AA:2B:4E:65:9C:68:BA:D1:C7:5B:B8:1E:09 X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32322d3232203d3e20343031313630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/22 Signature Algorithm: sha256WithRSAEncryption e5:3c:2f:29:13:17:dd:c5:c7:f8:c1:12:fb:a4:75:5f:9f:a4: a8:1e:ef:40:b0:85:08:0c:37:b0:ed:2b:b2:13:2f:28:f2:21: 1c:e7:1f:b6:9a:60:6d:dd:3f:84:4b:75:f6:f5:a6:e5:55:ad: 69:03:d4:40:e1:00:8d:37:08:8a:ea:d2:7d:f4:c2:b0:b0:6a: 67:6c:68:e4:af:33:3a:01:ac:97:47:83:47:d5:e9:b1:a2:40: 0b:57:d0:05:c8:d4:24:11:68:16:91:9d:b4:5c:92:1d:bd:18: 40:bd:60:d5:9e:74:e4:04:6e:ba:66:33:d8:34:35:07:d4:6c: ae:ee:50:21:c8:0a:8e:82:65:eb:05:b9:66:b4:8c:4e:a6:5c: d9:43:72:9b:c7:e5:44:9c:b0:6a:d0:d2:38:df:8d:b2:a7:09: 61:e8:01:6d:79:db:5d:09:bd:b5:7f:3e:5b:ad:fb:d4:dc:1b: 8c:70:2f:02:68:ae:48:22:61:89:6e:05:f0:98:b2:ec:a9:0d: db:a6:28:78:76:39:e6:0b:f1:b7:87:96:be:14:67:6a:c4:a7: c2:2a:f2:81:d2:31:3b:ac:41:20:cb:a4:cf:2f:d3:81:57:97: 3e:5f:77:a9:e8:a1:d5:81:d0:b8:eb:92:d6:5b:ef:75:f4:d0: dc:2e:ec:c6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUE9PF3cMATgpJORHHpd31HEDNG3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjFaFw0yNzAxMTkwMjIwMjFaMDMxMTAvBgNV BAMTKDAzQjBBMThFRTZCREY0QUEyQjRFNjU5QzY4QkFEMUM3NUJCODFFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMjfk49DUx3Jqbt1zRcXWcPkX 5OmOV3cTUOJwDU67JpTittXl9LnxNlPU1ah1JqjZ2tNjdaRhsr2yolUIGFbA4+LB gebXjAaz2FrLQHQCn31f1yRrdwcTnvl7m8brI4wyHiT9Z9saI6l+tUbDgKn0k6zq clW0eJJ8Q82hedOA06/OPYglzdVgJJwCLl2r7SjiVOJVm3LGLBNGA2x1Cyy7EGpF 81eNz5KIxzMj++TzzpAPPSI4THWTwEnwQog1k21xjjSZzaLnXcCwmMzC6DFaT4ol ULkuUiCmN+Hqvl9Mr0/jftFowXDSktGgZEP0Fz/XmiCpudgW+YZiK9/fX/NLAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUA7Chjua99KorTmWcaLrRx1u4HgkwHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zNDM1MmUzMjM1 MzAyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM0MzAzMTMxMzYzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAi36mDANBgkqhkiG9w0BAQsFAAOCAQEA5TwvKRMX3cXH+MES+6R1 X5+kqB7vQLCFCAw3sO0rshMvKPIhHOcftppgbd0/hEt19vWm5VWtaQPUQOEAjTcI iurSffTCsLBqZ2xo5K8zOgGsl0eDR9XpsaJAC1fQBcjUJBFoFpGdtFySHb0YQL1g 1Z505ARuumYz2DQ1B9Rsru5QIcgKjoJl6wW5ZrSMTqZc2UNym8flRJywatDSON+N sqcJYegBbXnbXQm9tX8+W6371NwbjHAvAmiuSCJhiW4F8Jiy7KkN26YoeHY55gvx t4eWvhRnasSnwirygdIxO6xBIMukzy/TgVeXPl93qeih1YHQuOuS1lvvdfTQ3C7s xg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:06 2026 by rpki-client