This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32342d3234203d3e20313436383036.roa File: 34352e3235302e3135322e302f32342d3234203d3e20313436383036.roa (raw, json) Hash identifier: jU8srg1cPR6uoWJP99EV4Jnh4OQ0MJc/Clhh3Ha77yA= Subject key identifier: 56:7B:9D:65:DB:6C:CB:2F:09:B7:2D:2C:26:59:0B:05:2B:9E:E8:11 Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 65EF7920B0F8A3EED0E99EF5BCAEEE29AEB8E680 Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32342d3234203d3e20313436383036.roa Signing time: Tue 20 Jan 2026 02:20:20 +0000 ROA not before: Tue 20 Jan 2026 02:15:20 +0000 ROA not after: Tue 19 Jan 2027 02:20:20 +0000 asID: 146806 IP address blocks: 45.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ef:79:20:b0:f8:a3:ee:d0:e9:9e:f5:bc:ae:ee:29:ae:b8:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:20 2026 GMT Not After : Jan 19 02:20:20 2027 GMT Subject: CN=567B9D65DB6CCB2F09B72D2C26590B052B9EE811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:08:46:b3:60:d6:9e:2a:f9:63:63:be:c2: c6:27:9b:b0:b0:95:1d:20:c4:05:0e:fc:fb:5a:08: fd:ae:4f:a3:f3:bc:8c:e9:7d:5b:d8:37:7a:38:4f: 7f:da:7b:c6:c8:4e:35:fc:22:bc:70:1b:80:c8:a5: 86:9c:60:e9:04:2b:bc:d3:a1:2f:1f:85:a0:e6:68: 98:7b:6a:81:b8:92:d9:6a:e9:41:ba:5e:3c:12:11: 6c:e9:f1:12:4c:50:73:16:7a:97:8a:2a:2c:fb:28: 70:29:27:ee:91:17:74:0a:f2:7e:35:16:76:8a:d8: 82:f6:83:12:b8:85:99:0b:b6:5d:e7:40:4c:05:86: b1:23:34:0e:71:c2:9f:8c:c7:a7:ee:15:ce:35:89: 99:ad:ef:8a:9d:1c:4a:77:5f:f6:b1:b4:08:4e:da: c8:6d:af:64:39:1a:39:d0:09:91:95:cd:1b:bc:d3: 83:10:03:f3:7f:49:b2:68:ee:b5:52:9b:a3:80:90: 3d:2e:3c:6d:01:ce:26:58:d4:06:b6:a5:64:13:78: f0:f2:54:84:1c:a1:7d:6c:fb:a8:20:4f:49:03:8a: cb:40:42:e2:43:f2:88:ff:59:25:92:d5:b8:cd:e4: 2d:6a:d1:1c:06:34:fc:14:a5:eb:09:2b:72:f9:dc: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7B:9D:65:DB:6C:CB:2F:09:B7:2D:2C:26:59:0B:05:2B:9E:E8:11 X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32342d3234203d3e20313436383036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/24 Signature Algorithm: sha256WithRSAEncryption 72:85:b0:86:f1:2c:cc:e7:a2:90:01:3e:5a:f3:fd:99:f1:c7: bb:3a:3e:00:1d:87:64:87:d8:b9:c0:89:56:9c:31:e8:e8:d7: b5:6a:41:56:7d:4e:7b:7b:63:a8:f5:90:b6:f6:67:99:b3:af: a4:3c:96:0e:3c:27:89:72:54:30:b1:02:91:eb:05:0e:9f:09: 31:4e:e7:f4:37:24:58:0a:6f:e3:d9:59:83:24:f7:df:15:bc: 9b:44:d4:e8:c5:fc:25:b1:bd:6b:2d:e4:45:e3:31:2e:fd:33: 76:6c:72:c7:3b:3a:31:e9:9d:33:ab:85:82:a8:55:58:f7:10: 6e:00:be:59:08:6a:0c:e9:05:7f:ac:e2:3a:65:26:1b:fa:59: 0d:4d:39:2b:39:2a:49:19:50:fd:4c:bd:0c:be:b0:31:8d:00: c0:16:5d:a2:2f:4f:e7:9c:f5:92:69:93:38:39:15:26:e6:a0: 7c:80:e2:1a:d7:d4:cb:8b:c3:8e:59:d3:47:1a:89:18:d3:56: 15:7d:12:5f:9b:98:a5:33:9a:87:45:2d:5c:be:d3:cb:98:6a: da:20:f5:ca:52:93:54:76:07:f5:3c:6f:12:80:1d:30:5c:ae: 6b:4a:21:34:eb:15:05:09:63:3c:58:d6:b8:3f:44:9e:73:60: fb:d0:9f:a9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZe95ILD4o+7Q6Z71vK7uKa645oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjBaFw0yNzAxMTkwMjIwMjBaMDMxMTAvBgNV BAMTKDU2N0I5RDY1REI2Q0NCMkYwOUI3MkQyQzI2NTkwQjA1MkI5RUU4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdpAhGs2DWnir5Y2O+wsYnm7Cw lR0gxAUO/PtaCP2uT6PzvIzpfVvYN3o4T3/ae8bITjX8IrxwG4DIpYacYOkEK7zT oS8fhaDmaJh7aoG4ktlq6UG6XjwSEWzp8RJMUHMWepeKKiz7KHApJ+6RF3QK8n41 FnaK2IL2gxK4hZkLtl3nQEwFhrEjNA5xwp+Mx6fuFc41iZmt74qdHEp3X/axtAhO 2shtr2Q5GjnQCZGVzRu804MQA/N/SbJo7rVSm6OAkD0uPG0BziZY1Aa2pWQTePDy VIQcoX1s+6ggT0kDistAQuJD8oj/WSWS1bjN5C1q0RwGNPwUpesJK3L53BnjAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUVnudZdtsyy8Jty0sJlkLBSue6BEwHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zNDM1MmUzMjM1 MzAyZTMxMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzAzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC36mDANBgkqhkiG9w0BAQsFAAOCAQEAcoWwhvEszOeikAE+WvP9 mfHHuzo+AB2HZIfYucCJVpwx6OjXtWpBVn1Oe3tjqPWQtvZnmbOvpDyWDjwniXJU MLECkesFDp8JMU7n9DckWApv49lZgyT33xW8m0TU6MX8JbG9ay3kReMxLv0zdmxy xzs6MemdM6uFgqhVWPcQbgC+WQhqDOkFf6ziOmUmG/pZDU05KzkqSRlQ/Uy9DL6w MY0AwBZdoi9P55z1kmmTODkVJuagfIDiGtfUy4vDjlnTRxqJGNNWFX0SX5uYpTOa h0UtXL7Ty5hq2iD1ylKTVHYH9TxvEoAdMFyua0ohNOsVBQljPFjWuD9EnnNg+9Cf qQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:42 2026 by rpki-client