This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e36342e302f32312d3231203d3e20313334373632.roa
File: 34332e3232362e36342e302f32312d3231203d3e20313334373632.roa (raw, json)
Hash identifier: iMzWbwt9Lr6XyLIT0lsExIC6EGZ8AQPrSNPsn36V+Bs=
Subject key identifier: DD:EC:D4:15:65:32:7C:BE:7C:09:5B:3F:38:81:F2:07:BF:DC:55:9F
Certificate issuer: /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial: 0B52A6C7A50069B1D1810259235DCF2C0405FDCA
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e36342e302f32312d3231203d3e20313334373632.roa
Signing time: Tue 20 Jan 2026 02:07:15 +0000
ROA not before: Tue 20 Jan 2026 02:02:15 +0000
ROA not after: Tue 19 Jan 2027 02:07:15 +0000
asID: 134762
IP address blocks: 43.226.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 18:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:52:a6:c7:a5:00:69:b1:d1:81:02:59:23:5d:cf:2c:04:05:fd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Validity
Not Before: Jan 20 02:02:15 2026 GMT
Not After : Jan 19 02:07:15 2027 GMT
Subject: CN=DDECD41565327CBE7C095B3F3881F207BFDC559F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:b4:24:7f:4e:60:71:3f:86:f6:ee:c7:b4:
8b:d3:52:ab:b3:d9:e0:18:72:f5:44:ba:47:bb:f5:
34:50:a7:c5:01:51:1a:14:ab:4f:0c:22:3b:35:38:
c6:9d:d8:08:8b:ff:c4:48:b4:13:56:bc:1b:84:a9:
9d:2e:df:f4:de:2b:d1:1e:f0:d8:ae:a7:2d:19:db:
51:c5:a8:fb:9b:c1:fa:f6:22:c2:57:c6:d6:5d:ad:
cd:01:02:99:cf:bd:f9:b4:68:7c:63:7c:ca:3c:07:
49:3e:6c:a7:c8:3c:b7:2a:3f:8c:83:62:81:68:77:
2b:21:f0:87:40:3d:61:d0:a9:98:69:60:84:4b:79:
57:cd:97:88:49:b7:a9:c4:d2:21:fb:9f:8a:c5:fc:
e1:1b:c7:de:53:44:70:1a:94:c7:f5:eb:f8:c1:f8:
67:11:9d:4d:36:71:8f:75:04:1a:19:f6:b6:d4:0e:
42:26:97:af:12:03:8b:f8:76:a4:52:99:47:01:17:
aa:c6:f8:88:da:b7:f6:86:ae:1d:c5:f4:db:b4:00:
05:e8:e9:9b:23:2e:72:65:4a:97:71:1a:0b:22:5a:
1a:23:ac:55:18:bb:3e:cb:dc:10:37:8d:f2:21:cb:
53:de:24:68:e1:bb:4d:08:6d:ff:c8:5f:30:dd:f3:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EC:D4:15:65:32:7C:BE:7C:09:5B:3F:38:81:F2:07:BF:DC:55:9F
X509v3 Authority Key Identifier:
keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e36342e302f32312d3231203d3e20313334373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.64.0/21
Signature Algorithm: sha256WithRSAEncryption
66:bb:19:27:8c:c7:54:9f:6d:de:18:ad:f5:b3:0c:48:26:71:
bc:a2:a5:67:2d:45:92:6d:c6:aa:f4:0e:ca:e9:14:e6:e9:a8:
8d:a3:2e:4c:64:ea:ae:c1:e0:40:bf:89:51:6c:e9:3e:eb:b0:
e6:1f:01:82:86:03:42:73:c5:eb:91:90:bc:ee:36:4b:96:c8:
29:75:21:c4:c9:49:1c:29:8d:ce:74:db:74:f9:77:1f:21:37:
6d:dc:4d:08:55:24:db:73:8a:35:d4:ef:20:78:59:63:32:e2:
47:38:1d:9e:89:02:db:cd:19:94:34:c9:21:dd:d6:7d:f0:c1:
31:32:61:51:a3:2f:ec:8a:58:33:dc:df:24:63:40:0f:b3:b0:
f6:c5:4f:28:1e:11:19:2a:02:31:fa:70:a3:0a:53:dc:85:fd:
dd:8b:80:d1:2d:3e:4a:ff:87:22:0c:f1:26:c0:16:0d:21:b6:
1a:39:66:d1:1d:0a:93:68:06:eb:54:5d:9f:d6:5d:fc:2d:fa:
69:0c:f3:45:9a:c0:b6:06:c9:fb:b3:8d:21:60:01:ff:99:92:
72:92:8c:40:81:07:1b:fd:86:70:b5:39:37:74:97:7c:85:b7:
be:34:5f:7b:96:fa:ac:d1:46:26:dd:ee:20:d3:2c:04:3f:a8:
77:aa:00:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:14:09 2026 by rpki-client