This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548091394/0/34332e3235342e3132382e302f32322d3234203d3e2034313334.roa File: 34332e3235342e3132382e302f32322d3234203d3e2034313334.roa (raw, json) Hash identifier: T+tYjflQu7fNyXi/wmKdnHlkBUY+zEoMf2cSABAmW/0= Subject key identifier: DA:5C:23:5C:0A:0A:04:4D:C3:64:23:1F:52:DD:8C:FC:14:C4:7F:E1 Certificate issuer: /CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710 Certificate serial: 7DFAE5E4CD004718CC20414D1C88E2C731BEE63C Authority key identifier: 76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/34332e3235342e3132382e302f32322d3234203d3e2034313334.roa Signing time: Tue 20 Jan 2026 02:13:05 +0000 ROA not before: Tue 20 Jan 2026 02:08:05 +0000 ROA not after: Tue 19 Jan 2027 02:13:05 +0000 asID: 4134 IP address blocks: 43.254.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fa:e5:e4:cd:00:47:18:cc:20:41:4d:1c:88:e2:c7:31:be:e6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710 Validity Not Before: Jan 20 02:08:05 2026 GMT Not After : Jan 19 02:13:05 2027 GMT Subject: CN=DA5C235C0A0A044DC364231F52DD8CFC14C47FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2d:89:e1:7d:9d:c5:bf:47:4e:d3:fd:e9:a1: c4:c2:7e:08:a3:33:a7:c5:73:45:66:6e:1a:4d:f5: 0e:d3:b1:a6:53:fe:4c:7b:18:70:84:52:aa:2a:f5: e1:da:f3:6d:2d:cb:45:81:5a:72:4c:4a:5c:dd:2e: 16:42:86:6f:2b:7a:73:1e:50:8d:bc:49:d0:cc:e6: b4:a9:d5:25:7c:77:4f:bd:9c:b5:ca:d5:d0:ca:8b: bc:3f:f5:b5:db:15:16:1a:1b:d5:ec:95:bf:ce:29: 58:57:11:22:01:c9:4c:84:9c:9d:70:cb:84:99:96: c7:7a:95:1a:a9:4f:91:cf:79:d7:46:be:21:db:db: 98:dd:6b:8f:31:a3:2d:88:89:d0:9b:0c:90:ee:28: f5:42:9b:4a:aa:fe:c5:b5:a9:b4:d6:9e:b5:4b:10: 9c:6a:85:69:6f:98:ec:9b:6a:3d:43:75:ce:28:c4: f2:65:ff:91:07:e0:79:a7:d3:64:0f:cd:21:e4:18: 07:28:84:a0:5f:3c:ca:f8:72:8f:2c:32:47:2c:dd: 42:f0:56:6f:a5:2b:96:d8:dc:8d:6e:97:e8:e4:42: ad:7d:62:f1:41:37:b6:91:41:54:e2:44:60:41:5e: 87:62:35:ea:7c:b2:93:12:50:d8:e2:cb:67:f8:16: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5C:23:5C:0A:0A:04:4D:C3:64:23:1F:52:DD:8C:FC:14:C4:7F:E1 X509v3 Authority Key Identifier: keyid:76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/34332e3235342e3132382e302f32322d3234203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.128.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:c1:8c:75:f0:8a:99:43:71:4d:a4:5b:5d:85:2a:39:d0:7e: 16:97:18:df:49:fa:a2:99:9c:66:0d:8a:7c:e9:21:bd:21:0f: 3f:57:89:8c:f2:b9:d1:c6:96:81:ad:59:30:e2:b3:0d:e3:b9: 96:87:49:64:47:74:99:84:e1:52:b9:eb:c9:ff:e4:b6:7b:cf: 1a:e8:4e:ed:7b:02:c5:46:e3:24:15:18:8b:7a:f2:0b:14:4d: ee:4d:7c:c9:38:9b:2d:81:6b:24:23:b4:36:1c:9f:6c:b1:10: 9c:2e:31:80:42:df:19:70:21:37:68:79:32:8a:8b:6a:cd:66: f8:cb:16:a6:c6:0b:a8:a2:44:e4:ab:80:a7:0b:2f:8b:b5:f6: ce:ae:91:9a:4c:47:ac:c2:1f:81:fe:e4:68:83:6e:05:60:3c: 64:8f:0e:1d:8b:45:a5:12:d9:b5:fe:aa:fb:0a:69:a5:7d:42: 0f:06:30:8a:85:19:31:34:26:51:e7:bd:9b:cd:de:e6:96:4c: b9:77:75:9a:ec:9c:e2:d5:cf:09:f9:e7:b6:1c:bf:83:ac:cd: 02:63:d8:9c:2e:94:3d:a7:6e:70:27:18:0c:8f:6f:7c:a9:61: e1:f8:b1:23:90:f3:95:18:1d:c5:bd:5c:3a:06:e5:d0:69:a1: c2:2c:0f:b2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUffrl5M0ARxjMIEFNHIjixzG+5jwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzZBMzdGRTgxQkFERjRCNEJGOTBCNEM4MUE4NUU1NkFD QjM2NjcxMDAeFw0yNjAxMjAwMjA4MDVaFw0yNzAxMTkwMjEzMDVaMDMxMTAvBgNV BAMTKERBNUMyMzVDMEEwQTA0NERDMzY0MjMxRjUyREQ4Q0ZDMTRDNDdGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXLYnhfZ3Fv0dO0/3pocTCfgij M6fFc0VmbhpN9Q7TsaZT/kx7GHCEUqoq9eHa820ty0WBWnJMSlzdLhZChm8renMe UI28SdDM5rSp1SV8d0+9nLXK1dDKi7w/9bXbFRYaG9Xslb/OKVhXESIByUyEnJ1w y4SZlsd6lRqpT5HPeddGviHb25jda48xoy2IidCbDJDuKPVCm0qq/sW1qbTWnrVL EJxqhWlvmOybaj1Ddc4oxPJl/5EH4Hmn02QPzSHkGAcohKBfPMr4co8sMkcs3ULw Vm+lK5bY3I1ul+jkQq19YvFBN7aRQVTiRGBBXodiNep8spMSUNjiy2f4FsRpAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU2lwjXAoKBE3DZCMfUt2M/BTEf+EwHwYDVR0j BBgwFoAUdqN/6But9LS/kLTIGoXlass2ZxAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODA5MTM5NC8wLzc2QTM3RkU4MUJBREY0QjRCRjkwQjRDODFBODVF NTZBQ0IzNjY3MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzZBMzdGRTgxQkFERjRCNEJGOTBCNEM4MUE4NUU1NkFDQjM2NjcxMC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MDkxMzk0LzAvMzQzMzJlMzIzNTM0 MmUzMTMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDMxMzMzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv+gDANBgkqhkiG9w0BAQsFAAOCAQEAPMGMdfCKmUNxTaRbXYUqOdB+FpcY 30n6opmcZg2KfOkhvSEPP1eJjPK50caWga1ZMOKzDeO5lodJZEd0mYThUrnryf/k tnvPGuhO7XsCxUbjJBUYi3ryCxRN7k18yTibLYFrJCO0NhyfbLEQnC4xgELfGXAh N2h5MoqLas1m+MsWpsYLqKJE5KuApwsvi7X2zq6RmkxHrMIfgf7kaINuBWA8ZI8O HYtFpRLZtf6q+wpppX1CDwYwioUZMTQmUee9m83e5pZMuXd1muyc4tXPCfnnthy/ g6zNAmPYnC6UPaducCcYDI9vfKlh4fixI5DzlRgdxb1cOgbl0GmhwiwPsg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:14:14 2026 by rpki-client