This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135332e302f32342d3234203d3e20313436383036.roa File: 34352e3235302e3135332e302f32342d3234203d3e20313436383036.roa (raw, json) Hash identifier: CQBVIDc/SKUEFaei5BUyU+QjhxOUqfLVgk3gq7Lag74= Subject key identifier: 55:2F:59:73:F2:83:B5:B7:50:8E:C8:84:5C:6B:6E:8A:A6:B8:F7:F9 Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 40F7FAB7B84C18A3EDEFCBBC43A7154D0457F817 Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135332e302f32342d3234203d3e20313436383036.roa Signing time: Tue 20 Jan 2026 02:20:19 +0000 ROA not before: Tue 20 Jan 2026 02:15:19 +0000 ROA not after: Tue 19 Jan 2027 02:20:19 +0000 asID: 146806 IP address blocks: 45.250.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f7:fa:b7:b8:4c:18:a3:ed:ef:cb:bc:43:a7:15:4d:04:57:f8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:19 2026 GMT Not After : Jan 19 02:20:19 2027 GMT Subject: CN=552F5973F283B5B7508EC8845C6B6E8AA6B8F7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:37:4d:f4:09:57:e4:e1:2e:ae:41:08:ae: ba:e9:c3:65:03:21:b0:ed:2c:9d:a9:0f:2b:d8:71: b5:32:07:ff:e9:cf:0f:02:12:43:df:74:cc:db:bd: 21:c6:6b:96:a4:9d:f9:d7:13:52:96:64:8d:f4:ce: e4:47:5c:2e:c2:52:dd:67:1c:e9:c6:de:87:a1:b0: 36:6a:7b:54:1e:38:de:0f:b5:85:4f:a6:4a:07:a9: 79:55:0a:0c:ac:cd:cb:e2:1e:c5:2f:4f:42:bd:17: 61:a6:4a:44:fa:0b:c2:71:b6:00:44:cb:02:95:d6: 43:f1:2a:2e:1d:e0:f6:c0:98:79:7e:00:b7:0a:59: c1:03:a7:c9:9d:7d:6c:78:a5:99:17:6e:ad:e2:f6: 5e:90:0b:01:9e:a6:e7:76:66:86:00:b7:9a:0a:d0: 85:36:87:35:f6:41:9b:d7:b1:2c:6c:11:88:4f:20: c1:bb:05:97:41:a3:ae:eb:16:7c:e5:1b:d7:0a:88: f0:dd:5f:e2:77:78:26:f3:95:c8:b1:e6:e8:76:5a: f9:59:c5:2c:dc:e1:02:c5:0e:35:8a:29:82:23:c8: 6c:46:e7:66:cb:f4:c2:9c:eb:b8:84:15:c9:d2:b9: 45:77:36:a2:6d:d9:0e:95:af:f2:96:10:2e:cc:4b: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2F:59:73:F2:83:B5:B7:50:8E:C8:84:5C:6B:6E:8A:A6:B8:F7:F9 X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135332e302f32342d3234203d3e20313436383036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.153.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:e3:81:da:d3:5b:27:e7:0f:c2:14:f9:f5:bb:5f:e0:cc:23: f6:f1:e2:ab:2c:0e:ed:e4:8b:2c:91:f2:91:99:73:81:67:69: ee:5a:4e:e0:7e:86:38:f8:3f:56:13:dc:44:f4:31:58:0a:10: bb:9e:e6:17:08:af:51:46:24:fc:fd:86:99:94:e0:1a:98:4c: 5f:de:ce:0f:40:4c:45:9d:ef:a3:3e:04:66:29:1a:2a:e4:ee: fd:7f:2a:42:c1:a2:8c:8b:60:39:db:29:58:c2:a0:17:5e:f0: fd:6f:e5:15:39:b5:f7:1a:57:ae:b3:46:91:64:ef:46:76:b3: c3:0f:ed:ac:28:b4:45:3e:17:0e:07:b1:dd:1a:da:d4:0d:7f: 3f:d7:61:67:20:44:cf:a8:be:85:30:fc:39:80:b3:a5:a1:a7: 2b:0a:ee:7e:7b:8e:0f:4d:34:e2:ca:79:3d:18:1a:8f:47:c9: bf:aa:76:87:4d:f2:11:12:68:e9:3f:54:c4:f9:54:3d:6b:c6: e7:54:10:f8:fe:96:fc:52:58:a9:af:eb:ca:ea:d2:47:f7:2e: cb:a4:0b:66:3d:76:a2:16:05:6f:3c:e4:d7:5b:54:55:5b:af: cf:22:7b:2f:e2:ec:fd:9c:eb:89:03:b8:ae:f7:bc:5f:68:71: 5c:94:9b:14 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQPf6t7hMGKPt78u8Q6cVTQRX+BcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MTlaFw0yNzAxMTkwMjIwMTlaMDMxMTAvBgNV BAMTKDU1MkY1OTczRjI4M0I1Qjc1MDhFQzg4NDVDNkI2RThBQTZCOEY3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0jdN9AlX5OEurkEIrrrpw2UD IbDtLJ2pDyvYcbUyB//pzw8CEkPfdMzbvSHGa5aknfnXE1KWZI30zuRHXC7CUt1n HOnG3oehsDZqe1QeON4PtYVPpkoHqXlVCgyszcviHsUvT0K9F2GmSkT6C8JxtgBE ywKV1kPxKi4d4PbAmHl+ALcKWcEDp8mdfWx4pZkXbq3i9l6QCwGepud2ZoYAt5oK 0IU2hzX2QZvXsSxsEYhPIMG7BZdBo67rFnzlG9cKiPDdX+J3eCbzlcix5uh2WvlZ xSzc4QLFDjWKKYIjyGxG52bL9MKc67iEFcnSuUV3NqJt2Q6Vr/KWEC7MS0ixAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUVS9Zc/KDtbdQjsiEXGtuiqa49/kwHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zNDM1MmUzMjM1 MzAyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzAzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC36mTANBgkqhkiG9w0BAQsFAAOCAQEAf+OB2tNbJ+cPwhT59btf 4Mwj9vHiqywO7eSLLJHykZlzgWdp7lpO4H6GOPg/VhPcRPQxWAoQu57mFwivUUYk /P2GmZTgGphMX97OD0BMRZ3voz4EZikaKuTu/X8qQsGijItgOdspWMKgF17w/W/l FTm19xpXrrNGkWTvRnazww/trCi0RT4XDgex3Rra1A1/P9dhZyBEz6i+hTD8OYCz paGnKwrufnuOD0004sp5PRgaj0fJv6p2h03yERJo6T9UxPlUPWvG51QQ+P6W/FJY qa/ryurSR/cuy6QLZj12ohYFbzzk11tUVVuvzyJ7L+Ls/ZzriQO4rve8X2hxXJSb FA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:34 2026 by rpki-client