This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/3135372e31302e33342e302f32332d3332203d3e203633353338.roa File: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (raw, json) Hash identifier: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U= Subject key identifier: 66:7F:31:58:CE:07:F6:C6:06:6C:EA:94:A9:5D:09:17:2C:37:82:66 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 1C91ECF212482593D388A152F7A09B0B1E815962 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/3135372e31302e33342e302f32332d3332203d3e203633353338.roa Signing time: Tue 20 Jan 2026 02:16:42 +0000 ROA not before: Tue 20 Jan 2026 02:11:42 +0000 ROA not after: Tue 19 Jan 2027 02:16:42 +0000 asID: 63538 IP address blocks: 157.10.34.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:91:ec:f2:12:48:25:93:d3:88:a1:52:f7:a0:9b:0b:1e:81:59:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Jan 20 02:11:42 2026 GMT Not After : Jan 19 02:16:42 2027 GMT Subject: CN=667F3158CE07F6C6066CEA94A95D09172C378266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:ee:69:29:b4:4b:f6:2c:6e:58:df:55:75: 85:9c:b9:21:69:03:c0:e5:fd:b7:e1:f3:a5:2d:54: 10:35:75:e4:85:b5:93:45:69:38:58:20:0f:36:3f: 8b:4d:02:d4:9a:90:48:b9:4d:3a:ca:a8:35:d9:87: ab:a4:0c:e4:7e:e6:a0:8a:4a:7d:d0:36:68:23:3f: dc:5a:4e:42:58:e8:42:62:fe:10:ff:0f:00:49:b2: 7b:ac:de:45:d1:af:f2:0b:ae:8d:70:a0:c5:6d:99: 77:fa:56:b6:13:cb:60:36:b5:d9:29:ef:b7:9f:c6: c3:26:45:37:60:db:67:ff:66:b0:a6:81:95:ce:fb: 06:f2:ae:05:03:25:e7:e0:9d:96:9b:00:80:fd:bf: 86:08:b9:f6:eb:77:83:ad:ea:11:81:09:44:c9:c9: 01:96:cb:e0:f1:5e:ca:e4:13:96:14:07:bf:79:00: a9:55:7a:69:0d:b3:a2:aa:4b:8a:98:fa:93:bd:20: 11:5c:f6:de:44:83:57:ba:b6:97:1d:e1:ac:f9:71: 28:96:5a:e6:cf:b9:ab:5a:31:76:03:ce:77:0e:e1: b1:51:00:55:a9:0a:51:78:09:40:df:60:08:59:7a: ab:04:dc:d4:40:55:41:ec:cc:c7:79:d8:fd:09:b4: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7F:31:58:CE:07:F6:C6:06:6C:EA:94:A9:5D:09:17:2C:37:82:66 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/3135372e31302e33342e302f32332d3332203d3e203633353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.34.0/23 Signature Algorithm: sha256WithRSAEncryption c2:5f:29:2d:12:58:a4:3c:b7:0f:2d:32:dd:6b:63:34:41:dd: ce:6c:c0:c2:8a:bb:23:b5:19:be:ed:c7:23:02:46:5e:eb:c1: 41:b6:a4:63:94:1a:07:a1:50:e8:25:50:8b:4e:cb:2c:e6:e8: 36:13:92:6a:b4:63:ef:43:ee:4e:5e:9b:b9:f7:ca:ea:af:e2: 05:2f:23:54:ae:ce:36:d9:25:1b:15:7e:45:90:ce:aa:71:7d: 1e:f8:e6:f6:b8:c0:63:40:ee:3a:e5:85:88:91:7c:d5:a6:ee: 7f:a7:dc:ea:04:6d:14:d9:ef:23:55:31:5f:b8:12:09:52:c4: 44:11:51:56:49:7e:ef:a2:69:04:1e:0c:67:98:cb:ef:9a:12: af:a1:5c:db:7c:55:f1:c2:6c:99:40:3b:22:30:10:57:8f:e5: 4b:fd:fc:4e:e5:23:9d:40:4d:d9:48:b8:bd:e2:06:60:45:44: d0:ca:37:2c:18:2a:7c:6e:fe:cc:26:d7:93:5c:14:1e:6a:e7: 36:05:23:a5:15:4d:69:1c:c0:38:ed:ce:63:64:e0:c8:c8:29: c5:ff:a0:8c:1c:21:6f:0a:cd:8c:03:53:66:0d:60:51:e5:c5: a7:08:1a:a5:4d:64:1c:f8:05:94:53:59:81:d2:75:ea:92:5c: ff:df:33:94 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHJHs8hJIJZPTiKFS96CbCx6BWWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjAxMjAwMjExNDJaFw0yNzAxMTkwMjE2NDJaMDMxMTAvBgNV BAMTKDY2N0YzMTU4Q0UwN0Y2QzYwNjZDRUE5NEE5NUQwOTE3MkMzNzgyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3L+5pKbRL9ixuWN9VdYWcuSFp A8Dl/bfh86UtVBA1deSFtZNFaThYIA82P4tNAtSakEi5TTrKqDXZh6ukDOR+5qCK Sn3QNmgjP9xaTkJY6EJi/hD/DwBJsnus3kXRr/ILro1woMVtmXf6VrYTy2A2tdkp 77efxsMmRTdg22f/ZrCmgZXO+wbyrgUDJefgnZabAID9v4YIufbrd4Ot6hGBCUTJ yQGWy+DxXsrkE5YUB795AKlVemkNs6KqS4qY+pO9IBFc9t5Eg1e6tpcd4az5cSiW WubPuataMXYDzncO4bFRAFWpClF4CUDfYAhZeqsE3NRAVUHszMd52P0JtIT/AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUZn8xWM4H9sYGbOqUqV0JFyw3gmYwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NjE2ODk3LzEvMzEzNTM3MmUzMTMw MmUzMzM0MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzYzMzM1MzMzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAZ0KIjANBgkqhkiG9w0BAQsFAAOCAQEAwl8pLRJYpDy3Dy0y3WtjNEHdzmzA woq7I7UZvu3HIwJGXuvBQbakY5QaB6FQ6CVQi07LLOboNhOSarRj70PuTl6buffK 6q/iBS8jVK7ONtklGxV+RZDOqnF9Hvjm9rjAY0DuOuWFiJF81abuf6fc6gRtFNnv I1UxX7gSCVLERBFRVkl+76JpBB4MZ5jL75oSr6Fc23xV8cJsmUA7IjAQV4/lS/38 TuUjnUBN2Ui4veIGYEVE0Mo3LBgqfG7+zCbXk1wUHmrnNgUjpRVNaRzAOO3OY2Tg yMgpxf+gjBwhbwrNjANTZg1gUeXFpwgapU1kHPgFlFNZgdJ16pJc/98zlA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:36 2026 by rpki-client