This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32362e302f32342d3234203d3e20313532333230.roa File: 34352e3235342e32362e302f32342d3234203d3e20313532333230.roa (raw, json) Hash identifier: zQnT6ObBiJ3XRQBU4LCMwXOfUmhlF2FqQYNCv6Fc46M= Subject key identifier: 06:C0:73:65:A3:A6:3F:69:9A:31:E7:E5:5B:A4:13:FD:74:70:B5:3E Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 11B67757F3D0FEB8FDB2E292E35F476623F427 Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32362e302f32342d3234203d3e20313532333230.roa Signing time: Tue 20 Jan 2026 02:16:50 +0000 ROA not before: Tue 20 Jan 2026 02:11:50 +0000 ROA not after: Tue 19 Jan 2027 02:16:50 +0000 asID: 152320 IP address blocks: 45.254.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b6:77:57:f3:d0:fe:b8:fd:b2:e2:92:e3:5f:47:66:23:f4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Jan 20 02:11:50 2026 GMT Not After : Jan 19 02:16:50 2027 GMT Subject: CN=06C07365A3A63F699A31E7E55BA413FD7470B53E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:de:83:34:82:03:bf:f5:55:69:09:55:90: fd:de:23:a3:17:fb:e0:cc:76:67:53:77:e0:5c:e2: 91:49:f7:c7:a4:d3:92:09:27:71:18:95:a1:7f:a4: 7a:ca:0f:bc:cd:9c:49:17:71:1f:13:e5:67:e0:f4: db:dd:49:f8:41:bd:81:ae:70:2b:71:32:61:4f:50: 4e:0c:65:90:eb:49:f5:da:c7:56:97:08:30:ec:fc: 64:6c:d1:5b:94:a9:52:6e:f3:05:de:d7:4f:9d:42: 73:d5:2c:e0:0d:33:89:49:1b:fd:29:eb:ee:83:3a: 17:e4:cf:2b:13:83:23:b2:42:88:06:e1:81:ad:4d: ee:fa:da:7b:f6:82:21:0a:10:e6:d6:7d:06:84:61: 65:cd:6c:f6:35:93:a7:16:47:61:8c:a9:de:7f:99: 2e:22:64:80:90:90:55:c8:c6:c5:2b:bd:16:c6:44: 53:7e:0a:50:10:ab:b8:ff:fc:38:8b:fe:4d:44:b3: 93:67:98:82:56:4d:8f:8c:16:cd:60:31:2f:d2:6f: 32:17:46:19:72:06:96:c8:77:dc:56:d8:39:ef:64: 55:05:87:b9:b0:05:16:d9:9a:7e:83:bf:63:63:14: b7:ae:2e:13:8a:80:8a:fc:86:c9:56:15:8d:cb:e6: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C0:73:65:A3:A6:3F:69:9A:31:E7:E5:5B:A4:13:FD:74:70:B5:3E X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32362e302f32342d3234203d3e20313532333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.26.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:f6:8b:48:a9:c7:86:6f:bd:3d:7d:b9:e1:2f:36:ce:ed:1c: 74:32:22:a2:7c:1e:fa:69:37:69:69:e3:ab:68:ab:d7:5b:23: cb:14:db:c0:22:e8:c3:ca:a2:11:2d:70:c7:57:ae:2b:c5:d6: 0b:ea:5b:4e:93:4e:99:06:11:41:be:eb:bd:51:7e:32:7d:90: c3:dc:80:3c:6c:0f:55:8e:8c:1b:57:56:36:f0:e6:6a:3b:bb: 3e:d9:0f:17:63:a0:17:3f:4b:ec:6c:85:83:3c:6f:19:fb:95: bb:c2:b9:e7:01:42:f8:3a:64:f5:f2:30:ba:de:05:2a:91:64: 2f:ff:a1:13:e6:e2:1c:66:0d:e8:7e:59:97:b0:58:f9:57:b8: 4e:e8:eb:c1:50:6e:5f:99:bd:3e:6f:90:a0:97:74:eb:2c:7c: 2b:b2:c7:7d:dd:84:7c:84:08:20:0b:2b:e7:3e:36:b9:09:c6: e9:98:02:0f:6d:62:69:7c:9e:59:ec:d1:e0:60:46:54:01:5b: c6:74:88:c5:b1:77:5b:26:c8:ab:73:b0:f0:36:d7:59:fc:94: e1:9f:15:6d:72:46:6b:d1:cb:9a:15:07:b9:7e:d8:34:e9:89: 6f:43:6c:b0:27:b0:a3:3b:29:93:b5:10:a7:e3:a2:21:af:0c: 30:76:47:5e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgITEbZ3V/PQ/rj9suKS419HZiP0JzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzREMzMjM4OUQ4RUIwMEJCMzFDNkE5NUIzNEFGQzg1NzZB ODA3QTBBMB4XDTI2MDEyMDAyMTE1MFoXDTI3MDExOTAyMTY1MFowMzExMC8GA1UE AxMoMDZDMDczNjVBM0E2M0Y2OTlBMzFFN0U1NUJBNDEzRkQ3NDcwQjUzRTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOB3oM0ggO/9VVpCVWQ/d4joxf7 4Mx2Z1N34FzikUn3x6TTkgkncRiVoX+kesoPvM2cSRdxHxPlZ+D0291J+EG9ga5w K3EyYU9QTgxlkOtJ9drHVpcIMOz8ZGzRW5SpUm7zBd7XT51Cc9Us4A0ziUkb/Snr 7oM6F+TPKxODI7JCiAbhga1N7vrae/aCIQoQ5tZ9BoRhZc1s9jWTpxZHYYyp3n+Z LiJkgJCQVcjGxSu9FsZEU34KUBCruP/8OIv+TUSzk2eYglZNj4wWzWAxL9JvMhdG GXIGlsh33FbYOe9kVQWHubAFFtmafoO/Y2MUt64uE4qAivyGyVYVjcvm2jkCAwEA AaOCAhQwggIQMB0GA1UdDgQWBBQGwHNlo6Y/aZox5+VbpBP9dHC1PjAfBgNVHSME GDAWgBQ9wyOJ2OsAuzHGqVs0r8hXaoB6CjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 NTg4NTUzMTI5ODUyOTMxLzAvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4 NTc2QTgwN0EwQS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS8zREMzMjM4OUQ4RUIwMEJCMzFDNkE5NUIzNEFGQzg1NzZBODA3QTBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5ODUyOTMxLzAvMzQzNTJlMzIzNTM0 MmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzMjMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQALf4aMA0GCSqGSIb3DQEBCwUAA4IBAQBc9otIqceGb709fbnhLzbO7Rx0 MiKifB76aTdpaeOraKvXWyPLFNvAIujDyqIRLXDHV64rxdYL6ltOk06ZBhFBvuu9 UX4yfZDD3IA8bA9VjowbV1Y28OZqO7s+2Q8XY6AXP0vsbIWDPG8Z+5W7wrnnAUL4 OmT18jC63gUqkWQv/6ET5uIcZg3oflmXsFj5V7hO6OvBUG5fmb0+b5Cgl3TrLHwr ssd93YR8hAggCyvnPja5CcbpmAIPbWJpfJ5Z7NHgYEZUAVvGdIjFsXdbJsirc7Dw NtdZ/JThnxVtckZr0cuaFQe5ftg06YlvQ2ywJ7CjOymTtRCn46Ihrwwwdkde -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:16 2026 by rpki-client