This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32372e302f32342d3234203d3e20313532333230.roa File: 34352e3235342e32372e302f32342d3234203d3e20313532333230.roa (raw, json) Hash identifier: 8ey7xc7GrXn7mmv3ISFSPmAtts9JOcGCGnrt0IYw5NA= Subject key identifier: E5:8C:10:6C:83:DA:C6:07:32:EA:CF:3D:0E:E1:C4:80:C8:57:3F:61 Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 7C41D87D410207FC6050F6BA231A4890385B1DFF Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32372e302f32342d3234203d3e20313532333230.roa Signing time: Tue 20 Jan 2026 02:16:50 +0000 ROA not before: Tue 20 Jan 2026 02:11:50 +0000 ROA not after: Tue 19 Jan 2027 02:16:50 +0000 asID: 152320 IP address blocks: 45.254.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:41:d8:7d:41:02:07:fc:60:50:f6:ba:23:1a:48:90:38:5b:1d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Jan 20 02:11:50 2026 GMT Not After : Jan 19 02:16:50 2027 GMT Subject: CN=E58C106C83DAC60732EACF3D0EE1C480C8573F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:89:ae:08:b5:04:07:a5:31:f9:f0:0a:33: 56:46:ef:3f:cb:29:b0:39:39:08:c3:ba:f6:4a:a6: 52:f6:0b:1f:3f:f9:a5:f3:e4:2a:b1:02:09:9b:7f: e5:8b:d2:f7:da:b7:80:6c:1e:ee:c5:03:49:19:67: 3a:23:b5:77:dd:73:0f:9f:db:0f:d4:e5:39:45:40: 76:e0:02:08:05:e7:20:d6:fb:91:01:4b:7f:24:e9: 6b:12:9b:e3:59:c0:a9:78:25:e3:3b:f4:52:06:97: ec:3f:15:bb:b4:d4:f9:c1:d9:aa:00:ad:bf:f2:00: 8b:60:d8:72:d4:c7:73:4d:ad:62:77:d9:06:f2:e4: 16:e0:08:e7:74:6c:0b:80:26:61:22:27:88:bb:c1: 60:ed:52:86:0e:72:4c:66:63:5f:32:3d:06:ee:87: 15:f3:64:f1:37:80:9d:91:c6:ed:f5:10:5d:4e:4a: a7:32:24:4b:3c:15:b2:b1:a9:ee:61:58:69:d5:87: 68:3d:2e:af:0f:ed:8b:22:56:1e:52:74:18:69:1e: 32:f8:9f:44:fe:fe:09:36:f6:76:56:f0:a7:98:72: 85:4a:74:ea:6d:aa:6a:ad:6d:7a:32:a5:d0:1f:f8: 6c:c6:ce:c9:bb:09:a6:e8:ca:d7:03:ef:88:3f:27: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8C:10:6C:83:DA:C6:07:32:EA:CF:3D:0E:E1:C4:80:C8:57:3F:61 X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/34352e3235342e32372e302f32342d3234203d3e20313532333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.27.0/24 Signature Algorithm: sha256WithRSAEncryption 54:34:f6:b6:28:c1:70:19:da:5f:1c:c1:53:d8:e3:f5:05:ce: cd:03:7f:df:94:ba:d2:52:47:81:ac:1d:6a:48:d6:f6:31:fd: 87:54:e7:af:e2:be:eb:9e:0b:92:0e:b9:38:21:3e:c0:cc:34: 6e:df:1e:22:a7:21:7b:08:bb:4d:d4:e3:d6:e1:a3:fa:d2:f8: b9:46:10:2e:16:69:dd:dc:44:7d:1d:70:12:b9:9e:d8:6d:94: ff:49:56:7d:8b:b0:37:03:a4:b9:27:37:a7:02:0f:96:00:98: 80:e9:25:4a:ea:62:0f:e0:45:1d:92:e7:e0:de:af:99:9f:c1: fc:ae:9e:cc:3d:82:64:ee:83:2c:45:33:fe:ef:60:27:ec:68: a8:18:75:2f:b8:f4:dc:4b:e0:34:1d:ed:ae:0a:06:75:3c:16: 8e:64:bd:ac:d5:c8:e9:f2:43:30:c3:c7:32:45:7a:e6:ed:31: a7:a0:01:9e:a1:bf:e7:0b:1e:ed:1b:cb:71:6b:af:0b:31:87: 20:47:96:c1:74:a4:ed:b6:40:9f:0a:07:8e:ab:37:d0:d5:9a: f5:e2:ab:e1:92:40:66:5f:22:17:be:35:db:81:17:42:e2:fa: ad:33:7b:ef:0d:fc:26:fc:f6:2f:25:5b:b1:a3:37:f5:2b:c0: 75:f4:19:88 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfEHYfUECB/xgUPa6IxpIkDhbHf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjAxMjAwMjExNTBaFw0yNzAxMTkwMjE2NTBaMDMxMTAvBgNV BAMTKEU1OEMxMDZDODNEQUM2MDczMkVBQ0YzRDBFRTFDNDgwQzg1NzNGNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCYmuCLUEB6Ux+fAKM1ZG7z/L KbA5OQjDuvZKplL2Cx8/+aXz5CqxAgmbf+WL0vfat4BsHu7FA0kZZzojtXfdcw+f 2w/U5TlFQHbgAggF5yDW+5EBS38k6WsSm+NZwKl4JeM79FIGl+w/Fbu01PnB2aoA rb/yAItg2HLUx3NNrWJ32Qby5BbgCOd0bAuAJmEiJ4i7wWDtUoYOckxmY18yPQbu hxXzZPE3gJ2Rxu31EF1OSqcyJEs8FbKxqe5hWGnVh2g9Lq8P7YsiVh5SdBhpHjL4 n0T+/gk29nZW8KeYcoVKdOptqmqtbXoypdAf+GzGzsm7CaboytcD74g/J/s/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU5YwQbIPaxgcy6s89DuHEgMhXP2EwHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTg1MjkzMS8wLzM0MzUyZTMyMzUz NDJlMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzIzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC3+GzANBgkqhkiG9w0BAQsFAAOCAQEAVDT2tijBcBnaXxzBU9jj9QXO zQN/35S60lJHgawdakjW9jH9h1Tnr+K+654Lkg65OCE+wMw0bt8eIqchewi7TdTj 1uGj+tL4uUYQLhZp3dxEfR1wErme2G2U/0lWfYuwNwOkuSc3pwIPlgCYgOklSupi D+BFHZLn4N6vmZ/B/K6ezD2CZO6DLEUz/u9gJ+xoqBh1L7j03EvgNB3trgoGdTwW jmS9rNXI6fJDMMPHMkV65u0xp6ABnqG/5wse7RvLcWuvCzGHIEeWwXSk7bZAnwoH jqs30NWa9eKr4ZJAZl8iF74124EXQuL6rTN77w38Jvz2LyVbsaM39SvAdfQZiA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:19 2026 by rpki-client