This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32342e302f32322d3234203d3e20313532333230.roa File: 34352e3235342e32342e302f32322d3234203d3e20313532333230.roa (raw, json) Hash identifier: /jlOtfFFIhy/vioYOPrruZVnaBj+JGwUse/ni91LtIM= Subject key identifier: A5:CB:56:83:48:77:4B:A0:29:B4:C0:52:B7:9E:22:B3:CE:82:ED:DF Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 112805B2B36E5CECCC80E874FE2D3E7AC607B52C Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32342e302f32322d3234203d3e20313532333230.roa Signing time: Tue 20 Jan 2026 02:16:50 +0000 ROA not before: Tue 20 Jan 2026 02:11:50 +0000 ROA not after: Tue 19 Jan 2027 02:16:50 +0000 asID: 152320 IP address blocks: 45.254.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:28:05:b2:b3:6e:5c:ec:cc:80:e8:74:fe:2d:3e:7a:c6:07:b5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Jan 20 02:11:50 2026 GMT Not After : Jan 19 02:16:50 2027 GMT Subject: CN=A5CB568348774BA029B4C052B79E22B3CE82EDDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:a1:91:8d:96:78:0a:e6:16:2d:30:06:37: 80:89:5f:2f:7e:f1:ae:a7:c9:c8:d2:32:e0:3a:29: c3:65:f1:21:a7:a6:12:bf:ab:35:61:6d:2f:85:37: e2:f7:bb:53:4c:9c:63:d6:19:66:d9:34:bc:b1:77: 95:d8:da:de:c0:fa:30:d8:42:87:90:aa:12:34:5c: 29:99:87:60:de:7a:6e:1a:69:08:29:52:7b:2c:36: fd:f0:ef:6d:74:69:70:dd:22:3c:81:4b:a2:fb:29: e1:27:70:de:11:5a:ac:6f:ce:8b:43:ee:1b:d7:cd: 53:0e:73:b5:cf:3f:d8:31:2a:cd:ea:86:af:40:18: da:45:27:ca:23:75:5b:69:b1:ab:05:21:d7:aa:7d: 46:b6:49:29:6b:e6:79:36:bd:79:6c:92:4c:e6:05: b4:8b:5c:80:b2:d6:69:e8:71:9c:c6:8e:10:26:e9: 55:f7:9f:eb:8f:93:d7:96:20:d3:22:2b:43:42:1a: 27:3d:7d:27:e1:18:0e:d1:f7:53:2c:fd:0e:b1:3c: ab:ed:df:d0:33:17:ca:be:cd:7b:3c:81:7f:2d:0b: a0:87:bb:8a:25:e1:93:ec:f4:f4:cc:1f:a0:4a:04: 01:9f:c0:a3:37:ce:f7:b1:cc:9f:c8:e9:64:7b:e9: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CB:56:83:48:77:4B:A0:29:B4:C0:52:B7:9E:22:B3:CE:82:ED:DF X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32342e302f32322d3234203d3e20313532333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.24.0/22 Signature Algorithm: sha256WithRSAEncryption 04:78:cf:a0:78:f9:96:34:c9:7d:7f:f6:9c:2f:4e:55:10:31: db:35:1b:95:85:e4:68:ba:44:05:d1:07:8b:9c:8a:5a:93:8b: 79:7f:82:fb:83:6f:2f:d6:c7:b7:8c:81:04:78:30:23:45:c9: 3e:f6:fe:c7:17:e8:7c:03:07:16:d3:ac:bc:0c:dc:09:04:3e: 16:93:bb:a8:9d:3a:d6:30:26:d1:a0:40:cc:6e:5b:28:96:9e: 99:0d:01:21:13:46:b1:45:0d:c9:9f:97:21:be:69:1c:2c:74: af:9b:69:f6:92:f4:31:c8:16:4d:da:6c:52:8f:55:55:f8:a5: a2:4d:bc:c8:6b:a3:e3:de:37:ee:ef:84:86:8a:d6:fd:9b:bd: 1c:37:ac:1d:9f:d0:ca:f5:93:96:1f:9d:5d:ff:15:bf:15:49: bb:36:c1:ac:c1:24:23:67:4b:d0:8c:0a:96:6d:f4:b0:82:2e: 04:ca:7f:ce:f5:9e:4b:34:86:ad:25:fa:df:3e:50:41:5d:ce: da:e6:14:cd:4e:18:84:34:0b:cd:7b:71:2c:18:3c:35:8a:2a: 04:50:88:9e:be:2c:e2:89:7b:9c:c5:b2:6b:de:24:47:81:20: 52:80:62:10:ef:be:58:d1:8c:c7:55:bc:6c:db:2f:0f:65:f7: 23:ae:30:0c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUESgFsrNuXOzMgOh0/i0+esYHtSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjAxMjAwMjExNTBaFw0yNzAxMTkwMjE2NTBaMDMxMTAvBgNV BAMTKEE1Q0I1NjgzNDg3NzRCQTAyOUI0QzA1MkI3OUUyMkIzQ0U4MkVEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9KGRjZZ4CuYWLTAGN4CJXy9+ 8a6nycjSMuA6KcNl8SGnphK/qzVhbS+FN+L3u1NMnGPWGWbZNLyxd5XY2t7A+jDY QoeQqhI0XCmZh2Deem4aaQgpUnssNv3w7210aXDdIjyBS6L7KeEncN4RWqxvzotD 7hvXzVMOc7XPP9gxKs3qhq9AGNpFJ8ojdVtpsasFIdeqfUa2SSlr5nk2vXlskkzm BbSLXICy1mnocZzGjhAm6VX3n+uPk9eWINMiK0NCGic9fSfhGA7R91Ms/Q6xPKvt 39AzF8q+zXs8gX8tC6CHu4ol4ZPs9PTMH6BKBAGfwKM3zvexzJ/I6WR76XNJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUpctWg0h3S6AptMBSt54is86C7d8wHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTg1MjkzMS8wLzM0MzUyZTMyMzUz NDJlMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzIzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi3+GDANBgkqhkiG9w0BAQsFAAOCAQEABHjPoHj5ljTJfX/2nC9OVRAx 2zUblYXkaLpEBdEHi5yKWpOLeX+C+4NvL9bHt4yBBHgwI0XJPvb+xxfofAMHFtOs vAzcCQQ+FpO7qJ061jAm0aBAzG5bKJaemQ0BIRNGsUUNyZ+XIb5pHCx0r5tp9pL0 McgWTdpsUo9VVfilok28yGuj49437u+EhorW/Zu9HDesHZ/QyvWTlh+dXf8VvxVJ uzbBrMEkI2dL0IwKlm30sIIuBMp/zvWeSzSGrSX63z5QQV3O2uYUzU4YhDQLzXtx LBg8NYoqBFCInr4s4ol7nMWya94kR4EgUoBiEO++WNGMx1W8bNsvD2X3I64wDA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:50 2026 by rpki-client