This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e35332e302f32342d3234203d3e20313334373632.roa
File: 34332e3232362e35332e302f32342d3234203d3e20313334373632.roa (raw, json)
Hash identifier: /H/QELj8D79Edjy+iwlVUXEOh5NMYm9O9vM8ysBQN6w=
Subject key identifier: 0B:03:92:9E:14:4B:68:F6:9A:F4:8D:17:17:21:B0:10:E5:EE:89:DB
Certificate issuer: /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial: 7E2C659614F4B04C3FD5572202B7752BBF41CF1F
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e35332e302f32342d3234203d3e20313334373632.roa
Signing time: Tue 20 Jan 2026 02:07:14 +0000
ROA not before: Tue 20 Jan 2026 02:02:14 +0000
ROA not after: Tue 19 Jan 2027 02:07:14 +0000
asID: 134762
IP address blocks: 43.226.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 18:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2c:65:96:14:f4:b0:4c:3f:d5:57:22:02:b7:75:2b:bf:41:cf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Validity
Not Before: Jan 20 02:02:14 2026 GMT
Not After : Jan 19 02:07:14 2027 GMT
Subject: CN=0B03929E144B68F69AF48D171721B010E5EE89DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:fd:6c:9c:b9:06:17:80:1a:4a:93:a4:6a:
f3:d0:74:65:b4:e7:51:7a:eb:90:ca:0b:54:8a:da:
82:04:53:2b:69:66:8b:5b:c2:0f:22:22:b2:be:50:
fb:54:15:ad:0a:3d:c1:22:47:0d:be:c2:ed:c0:fc:
56:43:58:5e:77:e0:62:d3:5c:39:74:92:f4:34:8a:
b4:53:7f:19:f7:bb:f4:1d:db:af:5f:ff:89:26:ed:
6a:e0:1e:33:cd:38:1e:90:cc:a0:f7:a5:63:7f:7e:
fa:70:34:21:c7:63:20:dc:79:54:bf:4d:65:21:22:
be:f7:11:fe:6a:94:c2:c9:0c:28:72:09:f3:21:08:
ce:c0:e9:99:31:83:be:76:4e:29:2a:39:c6:1e:ca:
17:39:2f:19:18:ad:36:f8:73:d1:0c:56:20:d3:10:
ba:58:21:42:a8:b7:46:ca:4f:d9:6c:44:8c:f3:83:
b7:29:6a:fd:11:ba:b9:3b:de:de:9c:e1:74:c6:46:
87:53:05:60:3b:3e:bf:40:51:c7:e3:45:29:2e:41:
d3:ef:89:4f:28:23:99:61:f6:cf:a5:97:af:4c:6a:
e3:b2:1b:b2:c3:23:27:c5:f7:d8:ab:9f:3c:ae:c6:
18:44:11:be:6f:91:ec:2a:ac:9a:ba:55:89:2b:d8:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:92:9E:14:4B:68:F6:9A:F4:8D:17:17:21:B0:10:E5:EE:89:DB
X509v3 Authority Key Identifier:
keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e35332e302f32342d3234203d3e20313334373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.53.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f2:3b:ea:c3:62:98:aa:ce:3d:3f:11:ff:63:d3:84:23:92:
f7:2a:e6:90:cc:68:cf:0d:d3:97:ed:a4:94:ed:4e:58:da:2e:
4c:6e:a9:65:d8:16:dd:0f:2f:43:aa:ad:77:fc:cd:57:3a:ff:
fa:d4:d4:3a:2a:29:5d:d6:f0:db:6d:10:6c:b5:1b:16:88:17:
3c:17:7d:09:fa:37:5c:7b:c7:fb:6d:ef:6e:b0:4f:b5:4c:1b:
7f:67:a4:26:3f:1d:41:75:ce:2e:a0:e4:f3:8d:22:c9:c1:74:
6d:13:f3:ad:4e:5a:90:61:8e:99:84:c3:cc:c5:a7:9f:cf:86:
8d:4d:9a:b1:5c:43:bc:71:f4:90:34:fa:1b:ce:99:30:e8:27:
7a:f6:b8:0a:5b:c9:06:7d:ec:4b:22:15:65:1e:5f:da:d3:8c:
98:59:ed:ab:58:06:b0:6c:ef:9f:c7:40:68:70:52:d3:7a:fd:
d9:37:64:bf:cb:1e:29:ea:46:10:fa:e1:ee:0c:10:f9:e5:47:
5f:2e:e7:c0:2e:89:bc:c5:54:89:43:2c:23:61:db:05:67:9f:
c9:78:34:6f:50:60:d3:7c:3f:d2:c4:9b:93:15:05:47:65:39:
6b:cb:d0:0e:73:81:29:e5:c5:9a:35:17:51:9f:60:2c:46:c8:
82:d8:ae:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:54 2026 by rpki-client