This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217717251/0/34352e3131352e31382e302f32332d3234203d3e20313531323330.roa File: 34352e3131352e31382e302f32332d3234203d3e20313531323330.roa (raw, json) Hash identifier: KFwVFV9XIdASmiH55Vrp/a+LAUtb9TpqJV9SvrwxSRc= Subject key identifier: AC:3E:10:AB:76:F8:66:3F:DF:CA:C3:89:7F:C5:3F:0A:30:13:E0:87 Certificate issuer: /CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Certificate serial: 58757F3BD28BE5A074620B2852E6E8479FB62AEC Authority key identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/34352e3131352e31382e302f32332d3234203d3e20313531323330.roa Signing time: Tue 20 Jan 2026 02:08:18 +0000 ROA not before: Tue 20 Jan 2026 02:03:18 +0000 ROA not after: Tue 19 Jan 2027 02:08:18 +0000 asID: 151230 IP address blocks: 45.115.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:75:7f:3b:d2:8b:e5:a0:74:62:0b:28:52:e6:e8:47:9f:b6:2a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Validity Not Before: Jan 20 02:03:18 2026 GMT Not After : Jan 19 02:08:18 2027 GMT Subject: CN=AC3E10AB76F8663FDFCAC3897FC53F0A3013E087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:b0:b3:29:46:1e:62:64:d6:e4:2c:9d:5c: 5a:a8:05:9f:69:8b:50:0b:11:ee:87:15:1c:60:34: d0:fb:97:25:09:10:33:8f:99:39:05:b4:4c:3b:25: 7b:4e:b3:e2:c1:45:d1:1a:b4:d0:ba:fe:f6:91:44: 18:40:19:da:c5:58:d9:55:9b:01:ba:07:22:4f:ec: 40:e9:47:e9:b8:4e:ea:e1:42:80:14:6e:ec:69:5b: 51:e9:f4:ce:eb:2b:41:42:b9:f3:bb:b2:6d:18:d8: c1:f6:b6:ac:95:ed:08:d9:26:67:3f:58:0d:5c:8f: a8:61:c7:34:f5:74:43:4d:4b:04:7a:e5:92:dc:55: 4a:9f:a2:11:6e:fc:59:96:e4:ed:05:05:37:69:de: b2:80:75:a1:63:0e:73:f2:b2:9a:b1:fd:82:d3:39: cf:df:e4:19:3a:4b:c4:c3:b9:7d:b2:c0:4a:6c:48: 9b:76:9b:1c:48:10:f4:ed:95:6f:a0:07:b6:18:80: e3:a4:5e:68:94:76:ad:39:2d:b7:e2:9e:d4:71:a6: a2:2a:fe:5b:0e:8c:a0:f1:b3:cd:f1:ea:53:62:01: f9:f8:fd:ba:74:62:25:84:cd:3c:21:ed:28:e9:59: 3a:0d:57:3e:33:05:4b:55:b0:6c:d0:40:75:5d:9f: 90:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3E:10:AB:76:F8:66:3F:DF:CA:C3:89:7F:C5:3F:0A:30:13:E0:87 X509v3 Authority Key Identifier: keyid:8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/34352e3131352e31382e302f32332d3234203d3e20313531323330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.115.18.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:0c:5b:2c:6e:5e:b5:54:46:9a:d5:ed:0e:bb:6a:98:cb:b6: 1d:28:54:86:a8:74:1a:19:1a:1a:bf:6f:92:20:c9:bd:86:ee: ce:a7:4c:33:74:82:d2:18:e4:fa:60:ef:d5:d2:ca:6f:c0:3b: 30:ff:1a:14:75:3b:c4:43:cc:43:4e:d7:b2:ed:dc:40:8c:1c: 67:34:0b:5f:4f:52:c9:bc:de:29:1a:fc:15:2b:dc:e4:ca:74: c6:9e:35:29:4d:a5:bf:93:cd:45:3a:be:d0:80:70:0b:6e:8f: 8d:7c:93:52:38:26:fa:8c:45:e4:64:01:de:05:c8:30:36:c9: d4:b0:97:7a:d1:52:5c:cd:21:d7:7f:1c:fc:51:ae:cc:8e:d6: 57:ce:e3:2a:1d:27:7c:f7:22:51:f6:c7:03:9a:0d:db:d1:5f: 5e:84:16:a2:eb:ef:02:42:02:0d:cc:a0:53:ca:e9:5f:dc:7d: d5:e8:2c:3b:88:55:51:29:2f:00:6f:79:7e:f8:e8:50:09:82: aa:9b:6c:6a:4c:f6:95:08:17:58:1e:9d:c4:a1:58:88:01:48: e8:7e:19:6c:d2:e0:46:6b:c5:df:dc:f1:34:43:21:90:79:85: 25:e9:af:cd:14:b4:c4:55:93:fe:92:2e:4a:7e:62:19:65:a5: ae:d3:8a:a9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWHV/O9KL5aB0YgsoUuboR5+2KuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0 NDVEQzNBMTAeFw0yNjAxMjAwMjAzMThaFw0yNzAxMTkwMjA4MThaMDMxMTAvBgNV BAMTKEFDM0UxMEFCNzZGODY2M0ZERkNBQzM4OTdGQzUzRjBBMzAxM0UwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh/LCzKUYeYmTW5CydXFqoBZ9p i1ALEe6HFRxgNND7lyUJEDOPmTkFtEw7JXtOs+LBRdEatNC6/vaRRBhAGdrFWNlV mwG6ByJP7EDpR+m4TurhQoAUbuxpW1Hp9M7rK0FCufO7sm0Y2MH2tqyV7QjZJmc/ WA1cj6hhxzT1dENNSwR65ZLcVUqfohFu/FmW5O0FBTdp3rKAdaFjDnPyspqx/YLT Oc/f5Bk6S8TDuX2ywEpsSJt2mxxIEPTtlW+gB7YYgOOkXmiUdq05LbfintRxpqIq /lsOjKDxs83x6lNiAfn4/bp0YiWEzTwh7SjpWToNVz4zBUtVsGzQQHVdn5CxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUrD4Qq3b4Zj/fysOJf8U/CjAT4IcwHwYDVR0j BBgwFoAUjUBr7EUssHTWMKvb1idbxURdw6EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzcxNzI1MS8wLzhENDA2QkVDNDUyQ0IwNzRENjMwQUJEQkQ2Mjc1 QkM1NDQ1REMzQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0NDVEQzNBMS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzcxNzI1MS8wLzM0MzUyZTMxMzEz NTJlMzEzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzMzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAS1zEjANBgkqhkiG9w0BAQsFAAOCAQEAbQxbLG5etVRGmtXtDrtqmMu2 HShUhqh0GhkaGr9vkiDJvYbuzqdMM3SC0hjk+mDv1dLKb8A7MP8aFHU7xEPMQ07X su3cQIwcZzQLX09SybzeKRr8FSvc5Mp0xp41KU2lv5PNRTq+0IBwC26PjXyTUjgm +oxF5GQB3gXIMDbJ1LCXetFSXM0h138c/FGuzI7WV87jKh0nfPciUfbHA5oN29Ff XoQWouvvAkICDcygU8rpX9x91egsO4hVUSkvAG95fvjoUAmCqptsakz2lQgXWB6d xKFYiAFI6H4ZbNLgRmvF39zxNEMhkHmFJemvzRS0xFWT/pIuSn5iGWWlrtOKqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:32:47 2026 by rpki-client