This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135342e302f32342d3234203d3e20323131333932.roa File: 34352e3235302e3135342e302f32342d3234203d3e20323131333932.roa (raw, json) Hash identifier: QtijTQkJDq04jSZR80fyzV76Srqhn/4inS9JNUffTH4= Subject key identifier: D8:5D:89:93:73:D1:AC:01:2A:9E:0F:B0:BB:74:B3:29:E0:0D:27:1A Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Certificate serial: 2D7297F381140BF4C5806BF80A3239B91AB9484E Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135342e302f32342d3234203d3e20323131333932.roa Signing time: Tue 20 Jan 2026 02:20:21 +0000 ROA not before: Tue 20 Jan 2026 02:15:21 +0000 ROA not after: Tue 19 Jan 2027 02:20:21 +0000 asID: 211392 IP address blocks: 45.250.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:72:97:f3:81:14:0b:f4:c5:80:6b:f8:0a:32:39:b9:1a:b9:48:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Validity Not Before: Jan 20 02:15:21 2026 GMT Not After : Jan 19 02:20:21 2027 GMT Subject: CN=D85D899373D1AC012A9E0FB0BB74B329E00D271A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:35:c8:aa:a9:59:9a:f0:66:68:7b:07:e5: 3b:3d:23:d9:ff:92:8b:e6:e0:4a:d9:ec:51:40:71: 30:07:68:c0:36:be:ab:7e:52:fc:a0:67:28:63:6b: d5:e9:13:88:d5:c7:0d:8b:14:7f:4d:32:e5:74:42: df:eb:01:b5:81:c3:7d:bd:3e:a9:91:45:13:9c:48: b0:f3:f1:d7:8e:ef:b0:16:9e:32:85:a4:25:65:3c: ff:14:c3:7c:ab:5a:f3:40:fa:c3:15:c3:19:09:ab: 78:ab:25:a5:f1:41:e4:2e:06:40:ec:f0:67:63:64: 52:51:ed:d4:b9:f1:73:e1:ff:7c:96:7e:96:cd:e7: ef:81:67:42:b0:41:13:4a:c3:ff:e1:28:03:0d:14: 46:3d:f3:e8:a3:fc:40:a3:02:7c:31:fc:54:11:cb: c3:29:3a:7b:dd:1f:06:7c:5d:60:60:07:62:0b:ea: a7:fd:bb:47:70:cf:f7:d8:a9:79:41:9e:a5:66:2b: 93:fd:81:34:62:22:9d:cb:91:0f:bb:50:57:74:8e: 7f:b9:c4:9b:c4:9e:48:d6:50:58:ef:69:fc:59:c9: ab:c4:52:cc:42:1b:30:3e:90:f4:da:34:5b:3e:de: 22:43:48:be:55:69:86:65:9e:52:d6:ef:3f:e8:aa: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5D:89:93:73:D1:AC:01:2A:9E:0F:B0:BB:74:B3:29:E0:0D:27:1A X509v3 Authority Key Identifier: keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135342e302f32342d3234203d3e20323131333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.154.0/24 Signature Algorithm: sha256WithRSAEncryption e8:2a:b6:34:b5:cd:b4:d5:9c:e7:58:7e:0c:a5:17:92:77:a4: 7d:57:b2:0d:3b:af:e2:22:d5:a5:6d:35:57:8b:c5:4a:4f:68: 4c:73:2b:69:73:fa:3f:bd:20:32:4d:bf:ff:4b:1a:fe:53:92: 0e:af:52:58:82:ee:9b:e6:c5:0b:b2:4c:63:3d:09:03:24:8c: 6a:ad:82:5f:5f:fd:cb:e9:78:45:d0:d1:03:19:dd:b7:89:68: 25:e3:cc:75:01:b8:ac:94:6f:5a:f6:8e:0d:17:1c:8b:54:f0: cb:16:71:72:fc:9e:50:66:51:e8:38:a2:b7:5c:39:10:99:0a: eb:0c:79:ed:6d:34:7f:3e:5d:1a:6d:28:b0:d2:5f:94:97:77: d4:4d:26:24:52:eb:5f:6a:d4:fb:e3:53:b4:46:b6:c4:de:f6: 98:78:fc:a6:66:e7:62:83:f5:52:54:15:f6:2c:e9:47:02:3f: 8a:bc:f3:d9:c5:f7:20:8b:c7:69:de:ca:b8:29:fe:41:be:54: ec:30:0b:d1:d8:fe:fc:65:a4:43:97:99:b2:e3:1b:7b:21:ac: 6f:fa:ff:e6:d3:af:2f:70:94:c4:e7:f7:2c:cc:15:6b:56:30: 35:42:3a:7b:67:0e:e3:70:bd:73:43:fd:0d:1d:52:9e:4a:c0: fc:ee:4a:30 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULXKX84EUC/TFgGv4CjI5uRq5SE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjFaFw0yNzAxMTkwMjIwMjFaMDMxMTAvBgNV BAMTKEQ4NUQ4OTkzNzNEMUFDMDEyQTlFMEZCMEJCNzRCMzI5RTAwRDI3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLTXIqqlZmvBmaHsH5Ts9I9n/ kovm4ErZ7FFAcTAHaMA2vqt+UvygZyhja9XpE4jVxw2LFH9NMuV0Qt/rAbWBw329 PqmRRROcSLDz8deO77AWnjKFpCVlPP8Uw3yrWvNA+sMVwxkJq3irJaXxQeQuBkDs 8GdjZFJR7dS58XPh/3yWfpbN5++BZ0KwQRNKw//hKAMNFEY98+ij/ECjAnwx/FQR y8MpOnvdHwZ8XWBgB2IL6qf9u0dwz/fYqXlBnqVmK5P9gTRiIp3LkQ+7UFd0jn+5 xJvEnkjWUFjvafxZyavEUsxCGzA+kPTaNFs+3iJDSL5VaYZlnlLW7z/oqpvHAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU2F2Jk3PRrAEqng+wu3SzKeANJxowHwYDVR0j BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0 Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zNDM1MmUzMjM1 MzAyZTMxMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMzMzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC36mjANBgkqhkiG9w0BAQsFAAOCAQEA6Cq2NLXNtNWc51h+DKUX knekfVeyDTuv4iLVpW01V4vFSk9oTHMraXP6P70gMk2//0sa/lOSDq9SWILum+bF C7JMYz0JAySMaq2CX1/9y+l4RdDRAxndt4loJePMdQG4rJRvWvaODRcci1TwyxZx cvyeUGZR6Diit1w5EJkK6wx57W00fz5dGm0osNJflJd31E0mJFLrX2rU++NTtEa2 xN72mHj8pmbnYoP1UlQV9izpRwI/irzz2cX3IIvHad7KuCn+Qb5U7DAL0dj+/GWk Q5eZsuMbeyGsb/r/5tOvL3CUxOf3LMwVa1YwNUI6e2cO43C9c0P9DR1SnkrA/O5K MA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:04 2026 by rpki-client