This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32332d3233203d3e20313436383036.roa File: 34352e3235302e3135322e302f32332d3233203d3e20313436383036.roa (raw, json) Hash identifier: w+7fQf9NfcFHgE2BjVQhm2CCIoxLVVZGmneJ4HaU6u8= Subject key identifier: C9:2F:42:E4:8F:80:80:F4:99:C5:17:60:12:BD:C5:A1:1B:60:F5:3C Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 5669C6CCE467252EC4AB0D9C5DF705DCA5497154 Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32332d3233203d3e20313436383036.roa Signing time: Tue 20 Jan 2026 02:20:21 +0000 ROA not before: Tue 20 Jan 2026 02:15:21 +0000 ROA not after: Tue 19 Jan 2027 02:20:21 +0000 asID: 146806 IP address blocks: 45.250.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:69:c6:cc:e4:67:25:2e:c4:ab:0d:9c:5d:f7:05:dc:a5:49:71:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:21 2026 GMT Not After : Jan 19 02:20:21 2027 GMT Subject: CN=C92F42E48F8080F499C5176012BDC5A11B60F53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:5d:8a:fd:a4:72:5e:72:47:fe:9a:25:52: 1a:e7:48:ad:9b:9e:ce:39:df:c8:bd:ae:fe:21:5e: 24:1b:b9:46:0e:06:99:7b:8d:fc:fc:e1:7d:2a:bb: f6:a0:71:ab:63:08:43:6d:b5:c8:3c:ac:83:5c:ca: 89:99:db:1d:59:d1:d0:91:bd:1a:49:aa:ce:b4:ec: 16:cd:fd:81:b3:92:a1:05:35:12:73:73:0b:fc:cf: fc:5b:5c:90:a6:44:32:1f:e8:f1:de:09:a0:06:38: 73:57:de:6b:0c:8a:56:c7:d1:2f:ea:e3:db:a5:7c: 00:ab:82:f0:39:69:57:39:9d:fb:99:97:a0:67:0f: 28:16:d0:4f:c6:82:e4:96:41:21:65:c5:c4:21:48: 85:aa:c2:d1:c7:e8:31:78:aa:db:ce:ae:d8:27:5a: a0:3e:92:f4:b6:94:88:c0:01:73:bc:26:2a:f7:5d: 08:5e:fb:00:1a:fc:59:b2:43:9a:68:b9:40:ba:69: 3c:93:e7:89:03:33:66:97:07:16:2a:5f:f8:b2:ba: 09:de:03:7b:49:c5:20:e4:86:ec:07:24:c4:22:23: d8:9d:49:eb:03:6a:4f:aa:3f:16:aa:22:db:88:6f: ed:4f:27:61:25:de:d8:ed:85:07:7b:4b:9f:38:37: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2F:42:E4:8F:80:80:F4:99:C5:17:60:12:BD:C5:A1:1B:60:F5:3C X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32332d3233203d3e20313436383036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/23 Signature Algorithm: sha256WithRSAEncryption 79:fa:11:62:d5:5e:19:b8:80:6c:02:7c:00:fb:dd:af:0d:75: 93:4d:f6:0f:de:b4:d5:be:84:08:f6:ba:ae:7d:cc:32:f9:ed: 61:2c:27:ec:ec:35:02:f2:e8:7e:c0:f1:c8:b3:29:17:c5:7d: d5:e9:e6:d0:d0:c9:68:9b:6c:a7:b9:b6:91:14:e0:df:2c:75: cd:82:8c:b3:e2:75:5b:c2:00:46:96:fc:56:56:f5:02:9c:64: c7:d9:78:1f:97:66:35:54:cb:47:cc:8a:7b:4e:ec:e8:11:d6: 20:fb:07:15:86:9f:5d:e1:9a:d7:80:07:bb:e7:b5:5a:a6:d9: 3a:8e:67:85:56:28:6f:73:2c:c6:ba:16:55:cf:0f:cb:55:7d: 6b:5f:ae:2e:9a:c2:1f:b6:31:91:0b:4e:25:47:e7:cb:ef:b8: ce:0e:0e:92:2a:57:2a:4a:e0:07:f0:06:59:62:98:07:70:8c: 2d:f6:82:d6:be:b0:14:10:7a:79:53:9e:1e:bd:57:7d:f1:c2: cb:f4:2c:5b:7b:45:53:f8:3a:66:5e:59:b0:ff:06:a5:7e:0a: c4:6f:ec:4b:d4:f7:ed:d1:da:ff:9e:23:94:cb:47:ef:ff:75: 75:52:1c:f6:b7:82:14:04:73:8e:e2:96:f6:e7:94:7c:ac:2e: fd:3f:11:2b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUVmnGzORnJS7Eqw2cXfcF3KVJcVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjFaFw0yNzAxMTkwMjIwMjFaMDMxMTAvBgNV BAMTKEM5MkY0MkU0OEY4MDgwRjQ5OUM1MTc2MDEyQkRDNUExMUI2MEY1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhV2K/aRyXnJH/polUhrnSK2b ns4538i9rv4hXiQbuUYOBpl7jfz84X0qu/agcatjCENttcg8rINcyomZ2x1Z0dCR vRpJqs607BbN/YGzkqEFNRJzcwv8z/xbXJCmRDIf6PHeCaAGOHNX3msMilbH0S/q 49ulfACrgvA5aVc5nfuZl6BnDygW0E/GguSWQSFlxcQhSIWqwtHH6DF4qtvOrtgn WqA+kvS2lIjAAXO8Jir3XQhe+wAa/FmyQ5pouUC6aTyT54kDM2aXBxYqX/iyugne A3tJxSDkhuwHJMQiI9idSesDak+qPxaqItuIb+1PJ2El3tjthQd7S584N1OtAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUyS9C5I+AgPSZxRdgEr3FoRtg9TwwHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zNDM1MmUzMjM1 MzAyZTMxMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzQzNjM4MzAzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAS36mDANBgkqhkiG9w0BAQsFAAOCAQEAefoRYtVeGbiAbAJ8APvd rw11k032D9601b6ECPa6rn3MMvntYSwn7Ow1AvLofsDxyLMpF8V91enm0NDJaJts p7m2kRTg3yx1zYKMs+J1W8IARpb8Vlb1Apxkx9l4H5dmNVTLR8yKe07s6BHWIPsH FYafXeGa14AHu+e1WqbZOo5nhVYob3MsxroWVc8Py1V9a1+uLprCH7YxkQtOJUfn y++4zg4OkipXKkrgB/AGWWKYB3CMLfaC1r6wFBB6eVOeHr1XffHCy/QsW3tFU/g6 Zl5ZsP8GpX4KxG/sS9T37dHa/54jlMtH7/91dVIc9reCFARzjuKW9ueUfKwu/T8R Kw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:24 2026 by rpki-client