This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e35302e302f32332d3233203d3e20313334373632.roa File: 34332e3232362e35302e302f32332d3233203d3e20313334373632.roa (raw, json) Hash identifier: 4G1uX+M843NXLbM/JrsXemgrWu2m9ERtexHrTXnsTOg= Subject key identifier: D9:02:5D:C3:80:49:01:D7:F3:34:00:99:A7:C9:F1:DB:54:02:26:0D Certificate issuer: /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929 Certificate serial: 382EF61930672ED1ED125F951AD492EB8BCABF51 Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e35302e302f32332d3233203d3e20313334373632.roa Signing time: Tue 20 Jan 2026 02:07:15 +0000 ROA not before: Tue 20 Jan 2026 02:02:15 +0000 ROA not after: Tue 19 Jan 2027 02:07:15 +0000 asID: 134762 IP address blocks: 43.226.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2e:f6:19:30:67:2e:d1:ed:12:5f:95:1a:d4:92:eb:8b:ca:bf:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929 Validity Not Before: Jan 20 02:02:15 2026 GMT Not After : Jan 19 02:07:15 2027 GMT Subject: CN=D9025DC3804901D7F3340099A7C9F1DB5402260D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:30:3f:38:fe:59:8b:f8:70:3d:fb:2c:7e: ea:af:c1:c3:71:55:8f:b2:09:62:dc:b0:5a:99:90: 0e:fc:e3:c4:b0:99:3b:a5:b9:6a:e5:8d:d7:ae:ac: 9d:6e:63:92:95:42:90:4a:d1:b3:34:26:ff:61:a2: 57:9f:e6:2a:e7:43:1e:b8:11:95:31:46:80:62:0e: 2d:ae:0b:3f:25:85:5a:47:f8:4b:c3:8d:d2:e5:6e: 5c:db:c1:2c:5c:bb:87:04:bc:38:d7:b1:3f:39:70: ff:dc:7a:28:7f:30:2c:e3:4d:59:11:e0:e1:1e:ac: 72:15:e3:5e:57:9c:b4:02:e1:c2:06:11:c3:26:aa: 5d:71:40:ca:e2:56:7c:70:ad:a7:10:48:da:72:40: 88:cb:05:00:0f:4b:84:da:15:c2:a5:91:13:c7:34: a7:d0:61:26:d3:b8:09:aa:64:37:d8:4d:ad:ce:c9: bc:03:7f:b6:5c:bd:92:c1:3d:6e:f0:c9:87:70:e6: fe:dd:e5:a4:bd:3b:31:45:41:ed:1a:21:0b:f3:45: f0:2c:09:dd:82:d2:9f:d0:ff:08:4f:c4:1a:3d:e3: 76:d2:9f:ea:1a:3d:f5:98:84:75:c7:9e:09:9b:5e: 35:5e:a5:50:ac:a7:8e:69:39:4e:d7:37:74:58:23: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:02:5D:C3:80:49:01:D7:F3:34:00:99:A7:C9:F1:DB:54:02:26:0D X509v3 Authority Key Identifier: keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e35302e302f32332d3233203d3e20313334373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.50.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:6f:47:df:8d:01:52:40:46:14:22:1f:03:d0:35:10:61:5f: f0:4c:2a:52:32:67:10:f0:a8:34:94:88:0e:03:03:e3:a6:ab: 6a:6e:04:b3:bb:78:d4:e0:16:29:6b:87:b2:97:c1:99:09:a3: 93:4e:19:29:50:07:cc:60:aa:a3:32:de:83:63:82:72:ba:64: 0c:49:51:c4:3b:67:e8:43:12:10:cd:29:d7:15:a8:6b:2a:19: 8d:93:fa:55:ba:c8:d2:85:c6:61:d2:da:3f:b5:47:b6:7b:c8: 40:6b:3f:99:d8:54:bf:dd:d4:c6:46:f1:35:61:1e:f9:66:41: 2e:a2:40:00:a6:e3:9a:f2:2c:f6:b6:bb:1a:82:99:a7:ef:82: 45:30:fa:3a:f2:9d:55:5c:e8:7c:d9:b5:c9:65:99:b2:8f:c3: 67:68:a8:57:46:9a:b5:4c:61:44:b9:57:64:50:9d:83:ff:75: a7:99:15:51:20:dc:cc:d4:8e:f8:0a:8b:73:9d:3c:58:72:af: e7:dd:7e:21:eb:96:28:c7:bc:e8:89:d2:0f:ab:7b:86:c9:b0: 8e:10:24:d1:cf:e8:de:f8:e8:17:e3:c9:81:e7:f1:51:f2:1d: b1:1d:da:b9:c3:62:5e:c6:24:61:3a:56:32:ee:ba:99:9d:c8: 74:8c:82:5c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOC72GTBnLtHtEl+VGtSS64vKv1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlGMTUxMTY5RUQ3RTVGMUI5MEQxMEREQzU5OTNGRUUx QjYyMTkyOTAeFw0yNjAxMjAwMjAyMTVaFw0yNzAxMTkwMjA3MTVaMDMxMTAvBgNV BAMTKEQ5MDI1REMzODA0OTAxRDdGMzM0MDA5OUE3QzlGMURCNTQwMjI2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FzA/OP5Zi/hwPfssfuqvwcNx VY+yCWLcsFqZkA7848SwmTuluWrljdeurJ1uY5KVQpBK0bM0Jv9holef5irnQx64 EZUxRoBiDi2uCz8lhVpH+EvDjdLlblzbwSxcu4cEvDjXsT85cP/ceih/MCzjTVkR 4OEerHIV415XnLQC4cIGEcMmql1xQMriVnxwracQSNpyQIjLBQAPS4TaFcKlkRPH NKfQYSbTuAmqZDfYTa3OybwDf7ZcvZLBPW7wyYdw5v7d5aS9OzFFQe0aIQvzRfAs Cd2C0p/Q/whPxBo943bSn+oaPfWYhHXHngmbXjVepVCsp45pOU7XN3RYI0NzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU2QJdw4BJAdfzNACZp8nx21QCJg0wHwYDVR0j BBgwFoAUefFRFp7X5fG5DRDdxZk/7htiGSkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTc4NzM5NS8wLzc5RjE1MTE2OUVEN0U1RjFCOTBEMTBEREM1OTkz RkVFMUI2MjE5MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzlGMTUxMTY5RUQ3RTVGMUI5MEQxMEREQzU5OTNGRUUxQjYyMTkyOS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTc4NzM5NS8wLzM0MzMyZTMyMzIz NjJlMzUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNDM3MzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASviMjANBgkqhkiG9w0BAQsFAAOCAQEALG9H340BUkBGFCIfA9A1EGFf 8EwqUjJnEPCoNJSIDgMD46aram4Es7t41OAWKWuHspfBmQmjk04ZKVAHzGCqozLe g2OCcrpkDElRxDtn6EMSEM0p1xWoayoZjZP6VbrI0oXGYdLaP7VHtnvIQGs/mdhU v93UxkbxNWEe+WZBLqJAAKbjmvIs9ra7GoKZp++CRTD6OvKdVVzofNm1yWWZso/D Z2ioV0aatUxhRLlXZFCdg/91p5kVUSDczNSO+AqLc508WHKv591+IeuWKMe86InS D6t7hsmwjhAk0c/o3vjoF+PJgefxUfIdsR3aucNiXsYkYTpWMu66mZ3IdIyCXA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:42 2026 by rpki-client