This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/34332e3232372e3138382e302f32322d3234203d3e203337393633.roa File: 34332e3232372e3138382e302f32322d3234203d3e203337393633.roa (raw, json) Hash identifier: GthCqUEvhOKCNWGGqKmg3IQs74n77l+6rL7RHOIf5Tc= Subject key identifier: 5B:80:90:EA:E6:A2:DC:57:9D:5C:79:7E:F1:BC:BA:16:30:90:3E:B6 Certificate issuer: /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD Certificate serial: 13FD1B2F0A422D51DF92935FE3261E3B32C55BFA Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/34332e3232372e3138382e302f32322d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 02:19:10 +0000 ROA not before: Tue 20 Jan 2026 02:14:10 +0000 ROA not after: Tue 19 Jan 2027 02:19:10 +0000 asID: 37963 IP address blocks: 43.227.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fd:1b:2f:0a:42:2d:51:df:92:93:5f:e3:26:1e:3b:32:c5:5b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD Validity Not Before: Jan 20 02:14:10 2026 GMT Not After : Jan 19 02:19:10 2027 GMT Subject: CN=5B8090EAE6A2DC579D5C797EF1BCBA1630903EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:06:36:e3:64:be:7d:bb:7d:d6:66:1b:44: a2:1f:73:74:70:5c:6b:14:4d:fe:3b:a9:bd:10:40: 6e:56:e4:2d:86:f5:46:cb:4d:22:95:40:e8:14:2e: 96:c9:32:11:a6:07:69:24:77:59:8e:3f:53:85:53: 10:89:fd:6b:23:9a:29:08:7d:b4:d5:54:f7:24:05: ea:c8:52:72:a1:17:cf:79:55:bc:de:61:d7:1a:01: 48:ad:87:38:64:4f:db:a8:fb:61:c7:c1:c9:2d:d8: 8e:2c:be:9d:b1:c2:bd:66:79:17:8b:22:0d:44:aa: ed:86:48:9b:8e:8d:b0:18:ed:ac:f4:74:6c:af:24: 61:94:3a:6c:93:00:0a:62:97:da:70:ed:f0:eb:b5: 69:e3:7c:57:e3:12:a3:b6:d4:89:11:21:57:40:8f: 98:b8:08:4d:63:5a:43:49:e4:17:af:a6:ab:c2:af: d8:da:ad:a4:59:3a:e0:e7:a1:10:42:46:a3:1d:94: 93:45:75:c1:f1:f6:c0:c7:8c:71:72:87:dd:54:41: e5:66:8a:3e:14:1b:eb:55:2d:29:9f:5f:22:90:0c: f1:5e:13:93:48:a9:f4:05:6f:87:e9:7c:bf:2d:7d: c8:a3:74:9b:58:58:d6:70:50:5c:33:17:35:2a:cf: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:80:90:EA:E6:A2:DC:57:9D:5C:79:7E:F1:BC:BA:16:30:90:3E:B6 X509v3 Authority Key Identifier: keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/34332e3232372e3138382e302f32322d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.188.0/22 Signature Algorithm: sha256WithRSAEncryption b8:25:4a:29:15:fe:2f:06:a5:3a:1f:4e:e6:a8:28:aa:00:4f: 36:33:2a:5a:cc:66:e2:48:f7:2d:59:7e:f7:6b:64:2a:e2:42: d9:65:51:c5:f6:3e:a4:5b:4b:c0:f3:1a:12:29:82:d3:86:67: 8e:b9:04:61:a5:37:46:6a:cb:05:bf:b0:d6:e0:ce:e8:ca:21: f4:47:82:5b:8f:39:e3:d2:b5:c2:b1:91:1e:85:66:11:2c:2a: 7b:b7:a7:3a:74:db:f9:34:7b:11:9d:f9:5d:00:69:3d:7e:09: 6a:18:1a:98:d8:ca:dd:84:93:bc:02:2f:7b:67:9b:39:10:4e: 1f:42:17:cf:15:eb:72:b9:5a:e4:c5:45:7c:17:60:cd:27:02: a1:04:b6:37:7c:2a:5e:d8:72:21:a0:b8:78:77:5b:c3:04:d2: 92:f7:6f:b2:fb:3f:e4:ce:96:93:a1:3c:4e:ae:c4:2d:f3:e5: e3:da:e7:90:85:f5:8f:20:27:a5:45:77:d5:a2:05:72:3f:e5: 75:fe:6d:0d:da:bf:62:57:eb:f7:27:06:99:e7:f3:72:92:72: 3b:f3:45:44:79:d1:8a:b7:a2:d6:db:7f:e7:03:8e:b5:97:5b: 9a:fb:f0:8d:3f:cc:ba:79:9e:d6:90:51:5b:0a:84:c7:fe:f5: b9:e7:5d:a2 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUE/0bLwpCLVHfkpNf4yYeOzLFW/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkw NTIxRDVERDAeFw0yNjAxMjAwMjE0MTBaFw0yNzAxMTkwMjE5MTBaMDMxMTAvBgNV BAMTKDVCODA5MEVBRTZBMkRDNTc5RDVDNzk3RUYxQkNCQTE2MzA5MDNFQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8wY242S+fbt91mYbRKIfc3Rw XGsUTf47qb0QQG5W5C2G9UbLTSKVQOgULpbJMhGmB2kkd1mOP1OFUxCJ/WsjmikI fbTVVPckBerIUnKhF895VbzeYdcaAUithzhkT9uo+2HHwckt2I4svp2xwr1meReL Ig1Equ2GSJuOjbAY7az0dGyvJGGUOmyTAApil9pw7fDrtWnjfFfjEqO21IkRIVdA j5i4CE1jWkNJ5BevpqvCr9jaraRZOuDnoRBCRqMdlJNFdcHx9sDHjHFyh91UQeVm ij4UG+tVLSmfXyKQDPFeE5NIqfQFb4fpfL8tfcijdJtYWNZwUFwzFzUqz3c7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUW4CQ6uai3FedXHl+8by6FjCQPrYwHwYDVR0j BBgwFoAUyCZnwry7U33rej5BVXeyaQUh1d0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTQ1OTcxNS8wL0M4MjY2N0MyQkNCQjUzN0RFQjdBM0U0MTU1NzdC MjY5MDUyMUQ1REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkwNTIxRDVERC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTQ1OTcxNS8wLzM0MzMyZTMyMzIz NzJlMzEzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivjvDANBgkqhkiG9w0BAQsFAAOCAQEAuCVKKRX+LwalOh9O5qgoqgBP NjMqWsxm4kj3LVl+92tkKuJC2WVRxfY+pFtLwPMaEimC04ZnjrkEYaU3RmrLBb+w 1uDO6Moh9EeCW48549K1wrGRHoVmESwqe7enOnTb+TR7EZ35XQBpPX4JahgamNjK 3YSTvAIve2ebORBOH0IXzxXrcrla5MVFfBdgzScCoQS2N3wqXthyIaC4eHdbwwTS kvdvsvs/5M6Wk6E8Tq7ELfPl49rnkIX1jyAnpUV31aIFcj/ldf5tDdq/Ylfr9ycG mefzcpJyO/NFRHnRirei1tt/5wOOtZdbmvvwjT/Munme1pBRWwqEx/71ueddog== -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:43 2026 by rpki-client