This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232372e37322e302f32312d3231203d3e203633363132.roa File: 34332e3232372e37322e302f32312d3231203d3e203633363132.roa (raw, json) Hash identifier: dMuT5PpwBbfSl93cOvmsvC1CQZBpiyj5XQ8Po/35ow4= Subject key identifier: 0E:C9:DE:D7:11:CF:EB:D7:6D:E2:75:FE:81:37:3F:0B:9D:07:04:CA Certificate issuer: /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929 Certificate serial: 665FC588F88979CD00286E360B0AD97733D977 Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232372e37322e302f32312d3231203d3e203633363132.roa Signing time: Tue 20 Jan 2026 02:07:14 +0000 ROA not before: Tue 20 Jan 2026 02:02:14 +0000 ROA not after: Tue 19 Jan 2027 02:07:14 +0000 asID: 63612 IP address blocks: 43.227.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5f:c5:88:f8:89:79:cd:00:28:6e:36:0b:0a:d9:77:33:d9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929 Validity Not Before: Jan 20 02:02:14 2026 GMT Not After : Jan 19 02:07:14 2027 GMT Subject: CN=0EC9DED711CFEBD76DE275FE81373F0B9D0704CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:82:35:c1:c7:e1:05:51:e0:e6:d4:94:ad: 09:33:b9:d7:38:50:70:e9:58:80:a1:20:ac:be:3a: f3:eb:1f:f7:7b:1a:87:de:6d:fc:b0:55:e2:a0:e3: 7e:5d:8b:b6:9f:11:a1:06:94:8b:de:a6:c5:e0:87: f2:30:61:cf:24:20:4d:19:32:01:d9:2e:c7:ab:19: c2:b8:63:31:ea:19:51:ce:97:ef:52:d8:0a:b8:29: 70:3a:f9:46:88:4f:ae:38:a3:38:39:6a:d3:f2:58: 1a:b5:ec:8b:f3:5f:1d:80:3a:9e:7c:e2:2c:57:17: 86:b5:67:0a:99:25:4d:f7:72:22:62:b0:f3:22:bb: bc:5a:b1:b2:50:12:4a:5a:d5:04:50:29:f0:bf:cb: a7:63:ed:33:93:13:cd:ba:2f:87:4c:68:5a:dd:0a: 66:b9:43:26:0c:ab:ec:ea:a9:c5:49:6a:94:bf:99: 40:65:24:fb:b3:42:63:68:07:cb:06:65:48:7e:9f: c4:b4:c5:26:8c:6d:40:bc:8f:07:b8:d6:30:e1:4d: 38:09:52:e4:9c:ef:26:7a:e7:69:37:dc:18:e3:4c: 79:19:42:81:d4:f2:8e:3f:d6:a2:ff:97:18:7a:8d: 4a:3a:98:96:91:a7:09:e5:7f:ff:a4:2e:b5:fe:bc: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C9:DE:D7:11:CF:EB:D7:6D:E2:75:FE:81:37:3F:0B:9D:07:04:CA X509v3 Authority Key Identifier: keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232372e37322e302f32312d3231203d3e203633363132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.72.0/21 Signature Algorithm: sha256WithRSAEncryption 22:87:e7:f9:5c:08:01:ea:66:a5:99:2d:ff:ee:7b:40:2d:7a: 17:3a:2b:07:ce:25:ba:31:bf:f0:57:ab:9b:49:57:9c:b4:1c: c3:8f:03:ab:59:d4:55:b3:3b:7b:30:e0:06:e9:2c:65:92:b0: 1a:b0:4e:0c:7e:bb:61:6b:af:37:e9:0d:9f:3c:06:30:30:84: c0:b6:a8:03:8c:88:ae:7e:70:e7:79:51:d3:fd:3c:6c:30:86: 43:31:51:eb:49:fa:ef:f2:43:86:8c:74:39:c6:2f:79:36:f3: e1:78:6a:bc:d6:26:ec:d3:79:cf:ec:e6:5f:fe:c8:80:57:08: 28:f6:5c:5a:81:0d:f7:71:79:2a:a6:55:68:cd:1a:8e:58:b3: d3:78:74:14:ff:e7:a8:e9:18:39:6d:f2:50:2f:32:27:a5:3d: ab:f0:db:72:8c:cf:a5:03:44:1c:10:50:6d:ff:49:32:9d:20: c3:72:5f:17:a1:d9:72:17:b5:86:8b:f2:1b:a4:61:05:a7:90: eb:e3:5c:ba:7a:20:d9:b8:1b:fa:6a:3c:52:7e:01:cc:ff:4e: 54:d1:2d:e8:9e:4a:e2:2f:d0:59:cd:a7:74:c7:45:62:4f:90: 0c:03:1e:98:b7:96:f8:52:e8:59:b7:a5:cf:69:4d:a7:9c:64: 7b:1f:e0:54 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgITZl/FiPiJec0AKG42CwrZdzPZdzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg3OUYxNTExNjlFRDdFNUYxQjkwRDEwRERDNTk5M0ZFRTFC NjIxOTI5MB4XDTI2MDEyMDAyMDIxNFoXDTI3MDExOTAyMDcxNFowMzExMC8GA1UE AxMoMEVDOURFRDcxMUNGRUJENzZERTI3NUZFODEzNzNGMEI5RDA3MDRDQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKrCgjXBx+EFUeDm1JStCTO51zhQ cOlYgKEgrL468+sf93sah95t/LBV4qDjfl2Ltp8RoQaUi96mxeCH8jBhzyQgTRky Adkux6sZwrhjMeoZUc6X71LYCrgpcDr5RohPrjijODlq0/JYGrXsi/NfHYA6nnzi LFcXhrVnCpklTfdyImKw8yK7vFqxslASSlrVBFAp8L/Lp2PtM5MTzbovh0xoWt0K ZrlDJgyr7OqpxUlqlL+ZQGUk+7NCY2gHywZlSH6fxLTFJoxtQLyPB7jWMOFNOAlS 5JzvJnrnaTfcGONMeRlCgdTyjj/Wov+XGHqNSjqYlpGnCeV//6Qutf68jgMCAwEA AaOCAhEwggINMB0GA1UdDgQWBBQOyd7XEc/r123idf6BNz8LnQcEyjAfBgNVHSME GDAWgBR58VEWntfl8bkNEN3FmT/uG2IZKTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 NTg4NTUzMTI5Nzg3Mzk1LzAvNzlGMTUxMTY5RUQ3RTVGMUI5MEQxMEREQzU5OTNG RUUxQjYyMTkyOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS83OUYxNTExNjlFRDdFNUYxQjkwRDEwRERDNTk5M0ZFRTFCNjIxOTI5LmNlcjCB igYIKwYBBQUHAQsEfjB8MHoGCCsGAQUFBzALhm5yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk3ODczOTUvMC8zNDMzMmUzMjMyMzcy ZTM3MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNjMzMzYzMTMyLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDK+NIMA0GCSqGSIb3DQEBCwUAA4IBAQAih+f5XAgB6malmS3/7ntALXoXOisH ziW6Mb/wV6ubSVectBzDjwOrWdRVszt7MOAG6SxlkrAasE4Mfrtha6836Q2fPAYw MITAtqgDjIiufnDneVHT/TxsMIZDMVHrSfrv8kOGjHQ5xi95NvPheGq81ibs03nP 7OZf/siAVwgo9lxagQ33cXkqplVozRqOWLPTeHQU/+eo6Rg5bfJQLzInpT2r8Nty jM+lA0QcEFBt/0kynSDDcl8XodlyF7WGi/IbpGEFp5Dr41y6eiDZuBv6ajxSfgHM /05U0S3onkriL9BZzad0x0ViT5AMAx6Yt5b4UuhZt6XPaU2nnGR7H+BU -----END CERTIFICATE-----Generated at Sun Jan 25 11:14:05 2026 by rpki-client