This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32342d3234203d3e20323131333932.roa File: 34352e3235302e3135322e302f32342d3234203d3e20323131333932.roa (raw, json) Hash identifier: 17bMO5cQGY5Nu5Jiw3BzF1QlqZVwncXEwnGXsck5mL8= Subject key identifier: 19:41:69:DD:AF:D3:E6:8C:67:0F:02:80:FA:1D:1C:C3:10:62:F3:FD Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 166165FA915F6608B295BF3B32104804AFC073AA Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32342d3234203d3e20323131333932.roa Signing time: Tue 20 Jan 2026 02:20:20 +0000 ROA not before: Tue 20 Jan 2026 02:15:20 +0000 ROA not after: Tue 19 Jan 2027 02:20:20 +0000 asID: 211392 IP address blocks: 45.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:61:65:fa:91:5f:66:08:b2:95:bf:3b:32:10:48:04:af:c0:73:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:20 2026 GMT Not After : Jan 19 02:20:20 2027 GMT Subject: CN=194169DDAFD3E68C670F0280FA1D1CC31062F3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dd:d1:61:75:72:f0:18:bd:f7:87:9f:68:48: 90:da:37:17:0b:34:d1:18:10:b0:8c:f4:e0:d9:6f: 45:7c:e3:d6:a8:c0:c1:8a:4e:8d:12:23:74:d7:2a: 60:40:01:22:f1:9c:a9:f5:75:c0:c0:d6:1d:81:64: 35:9c:9a:e6:ed:f9:56:8e:9a:a1:90:4c:31:cb:ba: e8:e0:a6:44:bc:9c:ce:76:8a:55:49:4f:9f:35:7b: 0e:e4:cd:1d:46:11:dd:d2:8c:ca:75:5a:ff:b0:b9: 1b:df:2a:0e:18:12:ac:b5:87:26:2f:3b:f4:99:54: 71:62:ad:24:cb:3d:43:e5:3e:b3:e3:85:0b:a5:ca: 03:f4:89:7a:cc:ff:d5:8f:0b:3f:9c:2f:9c:d6:11: 06:77:26:b1:b6:6f:5e:10:8d:87:02:59:ea:28:f5: ee:ca:86:49:98:12:a8:24:15:4e:ab:0f:2f:66:82: 68:f5:45:8b:6a:b5:3b:85:5f:22:6e:3b:b1:11:50: 1c:4d:dc:77:01:cf:b2:aa:6f:7b:7a:ff:a8:c5:7b: cb:95:e0:4b:8e:4f:2a:f8:f2:e4:18:ef:10:e0:84: a7:f9:be:95:04:9a:31:1c:de:50:ad:c0:0b:d0:b5: e6:05:d0:16:f7:e0:c8:0a:36:f8:20:60:7d:86:e8: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:41:69:DD:AF:D3:E6:8C:67:0F:02:80:FA:1D:1C:C3:10:62:F3:FD X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135322e302f32342d3234203d3e20323131333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:54:82:34:f1:36:c2:5a:47:0d:ed:e8:cc:93:60:76:a8:dd: 7c:c6:26:93:c5:a5:1c:dc:85:26:55:53:8c:11:66:eb:8b:29: 32:d6:3d:f0:65:28:18:cc:51:47:7b:fb:cb:a5:b6:2e:56:1a: 81:53:34:41:4e:b3:27:c4:79:df:6b:13:8f:8e:ac:66:4d:5c: 55:bb:8f:62:d6:95:8b:9e:1a:07:4b:0b:56:b1:d9:5a:1d:a7: 2b:89:83:90:af:ed:0e:cf:bf:83:8e:40:8c:1d:ab:33:5b:0a: 10:aa:39:60:05:66:6f:32:fb:77:e6:89:94:b6:7a:8b:bc:0d: b2:07:a2:63:a2:64:fd:7d:15:1d:21:9a:24:3c:b1:ef:90:7e: ec:59:46:4f:7e:7e:28:98:56:7f:61:fe:f6:be:8d:35:4f:95: 41:2c:8c:4a:ad:84:49:42:d7:24:46:13:c8:cd:bb:37:87:1a: de:59:22:ad:35:af:01:67:0a:a9:42:a8:ec:44:f2:7c:7f:1b: bd:f1:a5:f6:c2:61:53:c1:f7:3b:e9:d4:a7:fe:5d:cb:38:7b: 16:51:58:3d:9d:fb:2d:d3:41:6c:c3:0a:db:9e:26:0b:27:22: fe:a7:2c:c7:f6:78:c2:99:3f:0e:88:9e:82:67:56:e8:0b:a0: 8e:b6:08:f2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFmFl+pFfZgiylb87MhBIBK/Ac6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjBaFw0yNzAxMTkwMjIwMjBaMDMxMTAvBgNV BAMTKDE5NDE2OUREQUZEM0U2OEM2NzBGMDI4MEZBMUQxQ0MzMTA2MkYzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP3dFhdXLwGL33h59oSJDaNxcL NNEYELCM9ODZb0V849aowMGKTo0SI3TXKmBAASLxnKn1dcDA1h2BZDWcmubt+VaO mqGQTDHLuujgpkS8nM52ilVJT581ew7kzR1GEd3SjMp1Wv+wuRvfKg4YEqy1hyYv O/SZVHFirSTLPUPlPrPjhQulygP0iXrM/9WPCz+cL5zWEQZ3JrG2b14QjYcCWeoo 9e7KhkmYEqgkFU6rDy9mgmj1RYtqtTuFXyJuO7ERUBxN3HcBz7Kqb3t6/6jFe8uV 4EuOTyr48uQY7xDghKf5vpUEmjEc3lCtwAvQteYF0Bb34MgKNvggYH2G6CpPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUGUFp3a/T5oxnDwKA+h0cwxBi8/0wHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zNDM1MmUzMjM1 MzAyZTMxMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMzMzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC36mDANBgkqhkiG9w0BAQsFAAOCAQEAfFSCNPE2wlpHDe3ozJNg dqjdfMYmk8WlHNyFJlVTjBFm64spMtY98GUoGMxRR3v7y6W2LlYagVM0QU6zJ8R5 32sTj46sZk1cVbuPYtaVi54aB0sLVrHZWh2nK4mDkK/tDs+/g45AjB2rM1sKEKo5 YAVmbzL7d+aJlLZ6i7wNsgeiY6Jk/X0VHSGaJDyx75B+7FlGT35+KJhWf2H+9r6N NU+VQSyMSq2ESULXJEYTyM27N4ca3lkirTWvAWcKqUKo7ETyfH8bvfGl9sJhU8H3 O+nUp/5dyzh7FlFYPZ37LdNBbMMK254mCyci/qcsx/Z4wpk/DoiegmdW6AugjrYI 8g== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:06 2026 by rpki-client