This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e33322e302f32302d3232203d3e20313334373632.roa File: 34332e3232362e33322e302f32302d3232203d3e20313334373632.roa (raw, json) Hash identifier: dM3P2p7AfzRew8633W3o7eYGech11Mz4FsyXX+v5aI8= Subject key identifier: 86:03:0E:1C:9E:40:38:2A:8F:5B:68:FC:3F:10:DA:8D:D8:A4:1A:17 Certificate issuer: /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929 Certificate serial: 613501C24FA4E582CBB2E3C6C029B70A590F55BF Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e33322e302f32302d3232203d3e20313334373632.roa Signing time: Tue 20 Jan 2026 02:07:15 +0000 ROA not before: Tue 20 Jan 2026 02:02:15 +0000 ROA not after: Tue 19 Jan 2027 02:07:15 +0000 asID: 134762 IP address blocks: 43.226.32.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:35:01:c2:4f:a4:e5:82:cb:b2:e3:c6:c0:29:b7:0a:59:0f:55:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929 Validity Not Before: Jan 20 02:02:15 2026 GMT Not After : Jan 19 02:07:15 2027 GMT Subject: CN=86030E1C9E40382A8F5B68FC3F10DA8DD8A41A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d3:12:76:1f:dd:73:52:38:66:17:b1:cf:b0: 6f:b3:7c:4c:1f:dd:7b:95:5f:0e:0a:86:76:c9:83: 65:88:12:92:39:83:6e:74:d3:01:15:6e:b6:0e:90: 74:bd:69:6e:56:ef:84:82:c5:4b:64:4c:d5:38:f4: a4:55:19:63:75:fb:ff:94:bd:c2:d0:bb:7f:86:f8: a3:91:36:99:9e:a8:b6:90:da:a1:34:9c:52:22:5c: 3e:59:fe:3d:d2:a8:44:e1:19:f1:fd:b6:cd:e8:1a: dc:1b:90:6d:8a:2c:04:18:b1:65:da:4b:24:a6:ec: 1f:8f:23:3a:2d:76:67:8f:6d:74:83:52:df:ef:cd: 99:c9:09:b3:75:c5:c6:29:4a:55:d7:08:89:6b:a3: 08:b6:b2:a8:76:98:bc:37:bf:e8:c2:54:2f:06:ce: 1b:d5:cc:b7:fb:0a:24:1e:79:6e:f3:f8:34:5c:12: 9c:1a:76:6d:02:66:31:8e:b1:da:3e:16:64:50:58: 7c:fe:8d:83:32:dc:47:b9:5b:58:3d:2b:e5:a7:50: f1:5a:89:c1:eb:eb:d8:a4:f5:c7:60:8a:bb:d0:fa: f5:0d:59:62:46:9f:56:01:93:6d:62:96:ed:72:a7: e4:2e:5a:2a:c4:35:46:b7:ac:72:85:ff:01:07:69: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:03:0E:1C:9E:40:38:2A:8F:5B:68:FC:3F:10:DA:8D:D8:A4:1A:17 X509v3 Authority Key Identifier: keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e33322e302f32302d3232203d3e20313334373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.32.0/20 Signature Algorithm: sha256WithRSAEncryption 49:67:fa:ce:47:d4:97:e4:ff:cf:ae:9c:36:43:eb:07:a5:46: d6:f6:2d:2e:c2:c9:c5:81:2b:fb:92:c9:ca:cb:48:dd:a6:13: b2:2d:b4:63:82:23:b2:21:a3:49:f7:4a:af:68:7c:41:99:c0: e6:58:c2:be:b1:46:8a:c5:b0:c6:88:81:9b:8e:91:b7:0e:90: d1:ec:c6:e7:cc:ec:be:34:6f:c4:a6:1a:4f:6b:9c:e2:6c:b4: 7d:ee:76:93:d9:8f:14:34:63:2a:ae:dd:30:c5:93:a7:4f:96: a5:c0:5f:53:05:c6:33:95:2d:4b:2f:88:45:23:59:3b:25:ee: 62:73:f4:17:e7:31:5f:22:cd:4e:17:21:6a:5d:15:a9:24:10: dd:35:38:76:8e:67:82:28:7b:1d:df:90:9d:3f:05:ee:09:8b: a3:4d:45:93:67:78:5d:a6:f7:0a:2e:58:09:26:c7:62:ad:4c: a2:b6:42:f3:f0:bd:88:3e:22:75:52:92:24:88:af:5f:b1:7c: 6b:a6:71:d9:c6:e2:c9:66:6f:70:b1:5d:fc:ad:7a:12:e7:24: a5:a0:4d:94:9f:f4:f5:c7:7f:f1:7f:1d:23:1a:5f:f3:26:ba: 9b:e1:88:72:ef:c7:26:85:fd:2c:99:e0:35:36:5b:a5:cf:15: dd:8d:46:b6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUYTUBwk+k5YLLsuPGwCm3ClkPVb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlGMTUxMTY5RUQ3RTVGMUI5MEQxMEREQzU5OTNGRUUx QjYyMTkyOTAeFw0yNjAxMjAwMjAyMTVaFw0yNzAxMTkwMjA3MTVaMDMxMTAvBgNV BAMTKDg2MDMwRTFDOUU0MDM4MkE4RjVCNjhGQzNGMTBEQThERDhBNDFBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf0xJ2H91zUjhmF7HPsG+zfEwf 3XuVXw4KhnbJg2WIEpI5g2500wEVbrYOkHS9aW5W74SCxUtkTNU49KRVGWN1+/+U vcLQu3+G+KORNpmeqLaQ2qE0nFIiXD5Z/j3SqEThGfH9ts3oGtwbkG2KLAQYsWXa SySm7B+PIzotdmePbXSDUt/vzZnJCbN1xcYpSlXXCIlrowi2sqh2mLw3v+jCVC8G zhvVzLf7CiQeeW7z+DRcEpwadm0CZjGOsdo+FmRQWHz+jYMy3Ee5W1g9K+WnUPFa icHr69ik9cdgirvQ+vUNWWJGn1YBk21ilu1yp+QuWirENUa3rHKF/wEHaeMxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUhgMOHJ5AOCqPW2j8PxDajdikGhcwHwYDVR0j BBgwFoAUefFRFp7X5fG5DRDdxZk/7htiGSkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTc4NzM5NS8wLzc5RjE1MTE2OUVEN0U1RjFCOTBEMTBEREM1OTkz RkVFMUI2MjE5MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzlGMTUxMTY5RUQ3RTVGMUI5MEQxMEREQzU5OTNGRUUxQjYyMTkyOS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTc4NzM5NS8wLzM0MzMyZTMyMzIz NjJlMzMzMjJlMzAyZjMyMzAyZDMyMzIyMDNkM2UyMDMxMzMzNDM3MzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBCviIDANBgkqhkiG9w0BAQsFAAOCAQEASWf6zkfUl+T/z66cNkPrB6VG 1vYtLsLJxYEr+5LJystI3aYTsi20Y4IjsiGjSfdKr2h8QZnA5ljCvrFGisWwxoiB m46Rtw6Q0ezG58zsvjRvxKYaT2uc4my0fe52k9mPFDRjKq7dMMWTp0+WpcBfUwXG M5UtSy+IRSNZOyXuYnP0F+cxXyLNThchal0VqSQQ3TU4do5ngih7Hd+QnT8F7gmL o01Fk2d4Xab3Ci5YCSbHYq1MorZC8/C9iD4idVKSJIivX7F8a6Zx2cbiyWZvcLFd /K16EuckpaBNlJ/09cd/8X8dIxpf8ya6m+GIcu/HJoX9LJngNTZbpc8V3Y1Gtg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:35 2026 by rpki-client