This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32342e302f32342d3234203d3e20313532333230.roa File: 34352e3235342e32342e302f32342d3234203d3e20313532333230.roa (raw, json) Hash identifier: HRYgKbtmr+OMYx/1qW6f1p5CaBZOf7Km54MLi7qIJYQ= Subject key identifier: 4A:25:C0:65:DE:80:61:1F:DA:3E:91:FD:4D:B2:05:04:11:A3:6A:89 Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 7DC8AC2C43C81B9BE393AA867648B3D7B6160BFA Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32342e302f32342d3234203d3e20313532333230.roa Signing time: Tue 20 Jan 2026 02:16:50 +0000 ROA not before: Tue 20 Jan 2026 02:11:50 +0000 ROA not after: Tue 19 Jan 2027 02:16:50 +0000 asID: 152320 IP address blocks: 45.254.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c8:ac:2c:43:c8:1b:9b:e3:93:aa:86:76:48:b3:d7:b6:16:0b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Jan 20 02:11:50 2026 GMT Not After : Jan 19 02:16:50 2027 GMT Subject: CN=4A25C065DE80611FDA3E91FD4DB2050411A36A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:d7:86:12:63:28:ea:64:50:eb:30:2b:5a: e3:5e:ce:b5:b5:b9:f3:d2:ba:ba:14:d7:be:3b:a5: cd:48:5a:48:1e:1c:1c:34:fc:bc:20:9d:a4:6f:99: c4:67:56:e6:4d:a5:60:41:16:36:22:42:8d:f8:1c: 93:02:cc:b0:c7:2d:78:a5:ff:f6:9e:9a:7c:f2:b0: 9f:44:ef:7c:f8:aa:12:f7:4b:eb:73:22:5b:ea:9c: bb:fd:87:5e:01:7e:c5:6a:17:e6:3b:dc:27:4a:73: 1b:cc:d7:70:f7:6a:9c:71:ac:f5:09:b6:f4:45:96: 1d:7c:bd:11:a2:b7:3d:64:df:e8:b0:72:6d:e9:eb: 65:fe:d4:21:83:0b:db:9d:4a:5b:36:53:20:f6:c0: 0f:5e:c8:2c:64:38:cc:dc:35:73:3c:fe:10:fb:32: f8:ff:31:ac:5c:91:72:e6:c0:31:5c:09:49:ec:e7: 1e:2e:ee:16:91:91:f7:96:59:fc:24:70:95:2b:b9: f2:e6:e9:7d:5e:e0:88:38:f4:d4:39:0c:45:81:17: 58:7c:b5:76:6b:f1:71:34:dd:6c:99:ec:10:e0:7c: 38:29:01:d9:e0:9f:1b:e1:e2:37:8e:e6:dd:3a:bb: 2a:01:8e:33:20:99:ea:3f:16:a0:40:67:38:28:ff: 35:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:25:C0:65:DE:80:61:1F:DA:3E:91:FD:4D:B2:05:04:11:A3:6A:89 X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32342e302f32342d3234203d3e20313532333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.24.0/24 Signature Algorithm: sha256WithRSAEncryption 29:61:b7:50:d5:b9:c2:cf:1a:15:66:c3:ea:62:90:ba:69:f7: 3b:e9:ea:e0:89:9e:5a:81:0c:26:76:78:7c:4f:f4:54:32:bc: c2:98:10:24:ad:87:94:c4:07:c0:a4:2d:1a:29:8e:f2:2e:72: a7:24:9f:65:9e:0e:f5:e3:e2:23:17:0e:a9:42:a6:ac:92:ce: fa:f2:07:ee:4d:bc:f2:a6:a4:f4:4a:dc:68:bc:de:d8:e0:6b: 51:86:ee:7a:2e:07:c1:9e:82:dc:c9:8c:66:c7:d2:c1:dc:01: fc:0b:7d:1e:77:a9:65:60:dc:e2:89:a3:7b:10:ec:45:41:ad: f9:09:a1:c8:48:ef:47:b5:b5:b1:ef:53:d5:bc:a7:b1:90:6a: 5b:40:89:8c:e2:7c:60:b8:dd:e2:a2:6b:05:5d:d3:73:7f:d3: 65:42:7a:ed:07:29:40:2d:4e:13:1f:11:2d:ad:46:3b:3e:89: d2:ff:01:07:d6:33:cb:af:25:c2:a0:39:33:33:7e:3f:61:c5: 46:97:80:32:b0:0d:2b:6d:f9:2d:2b:14:33:fa:67:b6:68:40: bd:76:4a:71:d0:ae:76:ee:e8:8a:c9:03:3a:f2:29:1d:25:fc: 7a:a7:d1:30:89:80:91:d3:05:70:d8:43:11:11:ce:e9:52:0f: f4:ad:21:c4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfcisLEPIG5vjk6qGdkiz17YWC/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjAxMjAwMjExNTBaFw0yNzAxMTkwMjE2NTBaMDMxMTAvBgNV BAMTKDRBMjVDMDY1REU4MDYxMUZEQTNFOTFGRDREQjIwNTA0MTFBMzZBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVo9eGEmMo6mRQ6zArWuNezrW1 ufPSuroU1747pc1IWkgeHBw0/LwgnaRvmcRnVuZNpWBBFjYiQo34HJMCzLDHLXil //aemnzysJ9E73z4qhL3S+tzIlvqnLv9h14BfsVqF+Y73CdKcxvM13D3apxxrPUJ tvRFlh18vRGitz1k3+iwcm3p62X+1CGDC9udSls2UyD2wA9eyCxkOMzcNXM8/hD7 Mvj/MaxckXLmwDFcCUns5x4u7haRkfeWWfwkcJUrufLm6X1e4Ig49NQ5DEWBF1h8 tXZr8XE03WyZ7BDgfDgpAdngnxvh4jeO5t06uyoBjjMgmeo/FqBAZzgo/zVtAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUSiXAZd6AYR/aPpH9TbIFBBGjaokwHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTg1MjkzMS8wLzM0MzUyZTMyMzUz NDJlMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzIzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC3+GDANBgkqhkiG9w0BAQsFAAOCAQEAKWG3UNW5ws8aFWbD6mKQumn3 O+nq4ImeWoEMJnZ4fE/0VDK8wpgQJK2HlMQHwKQtGimO8i5ypySfZZ4O9ePiIxcO qUKmrJLO+vIH7k288qak9ErcaLze2OBrUYbuei4HwZ6C3MmMZsfSwdwB/At9Hnep ZWDc4omjexDsRUGt+QmhyEjvR7W1se9T1bynsZBqW0CJjOJ8YLjd4qJrBV3Tc3/T ZUJ67QcpQC1OEx8RLa1GOz6J0v8BB9Yzy68lwqA5MzN+P2HFRpeAMrANK235LSsU M/pntmhAvXZKcdCudu7oiskDOvIpHSX8eqfRMImAkdMFcNhDERHO6VIP9K0hxA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:51 2026 by rpki-client