This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa File: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (raw, json) Hash identifier: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik= Subject key identifier: FF:79:B4:78:B7:8B:1C:3F:18:6A:BE:E8:EA:EC:0F:3E:05:B0:E2:30 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 777995C6D8DD05992B4A023E6163BE871131BA81 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa Signing time: Tue 20 Jan 2026 02:21:32 +0000 ROA not before: Tue 20 Jan 2026 02:16:32 +0000 ROA not after: Tue 19 Jan 2027 02:21:32 +0000 asID: 139021 IP address blocks: 43.250.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:79:95:c6:d8:dd:05:99:2b:4a:02:3e:61:63:be:87:11:31:ba:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Jan 20 02:16:32 2026 GMT Not After : Jan 19 02:21:32 2027 GMT Subject: CN=FF79B478B78B1C3F186ABEE8EAEC0F3E05B0E230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:9e:c3:01:5a:81:9f:25:28:c4:7e:00:8e: dd:2a:af:c8:4a:35:df:4a:73:a1:31:8d:84:11:1e: fd:9f:5c:d8:74:32:a7:c1:59:58:9f:70:3b:bd:9c: 64:ce:e1:44:52:32:3f:52:71:ab:7b:37:4a:d6:c6: b3:3b:20:b4:91:18:89:61:de:8e:75:27:eb:2c:a3: fb:19:b4:92:64:18:b6:3b:51:17:d0:2c:7e:c8:a1: b0:db:e5:05:47:bd:57:43:17:d7:b5:c6:91:cc:3b: 91:ee:0a:ad:02:5d:fb:f4:16:51:f9:c7:67:b2:3c: 07:3d:af:0c:73:03:b1:1b:6a:3c:db:23:74:fc:d5: af:1c:3e:4a:88:4e:64:9b:cb:2f:99:70:c4:b3:46: be:0c:83:3e:0b:24:5a:7d:2d:2d:cb:f4:b3:57:48: d9:cd:83:c3:bc:f4:bf:12:88:ce:bb:86:13:34:51: 35:6a:b5:b2:35:91:8c:65:3c:32:b8:70:b7:e8:be: 63:ba:62:2c:c2:30:e1:61:cf:b9:36:7f:e6:b6:60: 1f:11:5d:70:5c:b9:b0:7d:0c:40:e6:ee:7f:f3:48: a6:7a:b4:f4:80:25:66:1a:4c:80:0c:e6:37:0f:58: 26:83:cb:74:ab:8b:93:47:ac:c1:70:6d:32:af:5a: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:79:B4:78:B7:8B:1C:3F:18:6A:BE:E8:EA:EC:0F:3E:05:B0:E2:30 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.250.116.0/22 Signature Algorithm: sha256WithRSAEncryption 90:e6:5a:39:2e:d8:cc:74:e1:9c:ec:80:77:b1:58:b7:84:e6: b1:8b:86:0f:34:94:a8:92:dd:d5:0a:04:b0:2a:db:e5:92:b9: fe:92:3d:d4:68:22:fe:06:39:69:8d:4c:be:91:ce:f0:c6:15: 6a:ee:cd:69:b9:05:a9:00:86:e3:97:2c:04:15:7f:41:31:f9: 1b:12:5c:c7:5c:d0:f0:66:53:c4:d2:8e:a1:3f:a5:32:57:09: 1e:99:36:7a:e6:c1:2b:82:93:23:d6:ff:48:e3:5e:b0:8b:6a: 86:45:a8:1e:52:f6:93:dd:87:d1:b9:db:99:5a:09:b8:62:03: 9b:c7:06:8b:71:1e:15:c0:34:16:d9:09:83:38:55:fb:33:e3: ce:86:9f:a3:02:48:f3:30:d1:a8:45:7d:e5:d4:fa:da:30:60: b0:87:cf:f5:20:00:32:db:4c:6d:7d:ba:04:e3:57:42:0e:5a: cb:6d:d5:6d:01:1c:df:36:28:b1:9f:6b:f1:42:26:13:47:e0: bf:99:da:44:b3:04:03:a3:1b:02:51:1b:28:6f:30:6d:cc:3f: 52:a7:22:88:2a:2d:34:f8:6d:01:16:41:a1:ea:95:48:a6:ed: f4:75:28:d1:e5:3d:9f:5d:3b:4c:e7:63:1c:6f:57:fb:fa:ae: 0f:88:a7:f7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUd3mVxtjdBZkrSgI+YWO+hxExuoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAxMjAwMjE2MzJaFw0yNzAxMTkwMjIxMzJaMDMxMTAvBgNV BAMTKEZGNzlCNDc4Qjc4QjFDM0YxODZBQkVFOEVBRUMwRjNFMDVCMEUyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuZ7DAVqBnyUoxH4Ajt0qr8hK Nd9Kc6ExjYQRHv2fXNh0MqfBWVifcDu9nGTO4URSMj9Scat7N0rWxrM7ILSRGIlh 3o51J+sso/sZtJJkGLY7URfQLH7IobDb5QVHvVdDF9e1xpHMO5HuCq0CXfv0FlH5 x2eyPAc9rwxzA7EbajzbI3T81a8cPkqITmSbyy+ZcMSzRr4Mgz4LJFp9LS3L9LNX SNnNg8O89L8SiM67hhM0UTVqtbI1kYxlPDK4cLfovmO6YizCMOFhz7k2f+a2YB8R XXBcubB9DEDm7n/zSKZ6tPSAJWYaTIAM5jcPWCaDy3Sri5NHrMFwbTKvWnEBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU/3m0eLeLHD8Yar7o6uwPPgWw4jAwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC8zNDMzMmUzMjM1 MzAyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzOTMwMzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAkOZaOS7YzHThnOyAd7FY t4TmsYuGDzSUqJLd1QoEsCrb5ZK5/pI91Ggi/gY5aY1MvpHO8MYVau7NabkFqQCG 45csBBV/QTH5GxJcx1zQ8GZTxNKOoT+lMlcJHpk2eubBK4KTI9b/SONesItqhkWo HlL2k92H0bnbmVoJuGIDm8cGi3EeFcA0FtkJgzhV+zPjzoafowJI8zDRqEV95dT6 2jBgsIfP9SAAMttMbX26BONXQg5ay23VbQEc3zYosZ9r8UImE0fgv5naRLMEA6Mb AlEbKG8wbcw/UqciiCotNPhtARZBoeqVSKbt9HUo0eU9n107TOdjHG9X+/quD4in 9w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:36 2026 by rpki-client