This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS132525.roa File: AS132525.roa (raw, json) Hash identifier: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw= Subject key identifier: D5:7B:8A:20:14:BB:15:0B:33:6E:C3:4F:2C:6B:4B:F7:5B:3A:3F:42 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 5BB29E123EC286EF4CED79E38976BEB85240D1AC Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS132525.roa Signing time: Tue 20 Jan 2026 02:17:00 +0000 ROA not before: Tue 20 Jan 2026 02:12:00 +0000 ROA not after: Tue 19 Jan 2027 02:17:00 +0000 asID: 132525 IP address blocks: 240a:40c1:6000::/44 maxlen: 48 240a:40c1:6010::/44 maxlen: 48 240a:429a::/31 maxlen: 31 240a:42a0::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b2:9e:12:3e:c2:86:ef:4c:ed:79:e3:89:76:be:b8:52:40:d1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:12:00 2026 GMT Not After : Jan 19 02:17:00 2027 GMT Subject: CN=D57B8A2014BB150B336EC34F2C6B4BF75B3A3F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:95:fc:be:93:d9:b1:2d:43:ba:61:aa:eb:ad: 70:76:ec:e7:87:d3:a5:73:d0:da:6d:61:94:f3:f3: 46:d5:a1:e6:73:01:9b:3c:e0:a6:3d:2b:ef:b1:6b: 1f:8f:83:4f:ed:1f:38:82:bc:82:07:6f:96:b0:7b: d0:f9:53:95:cf:ea:e3:d4:15:aa:e3:6a:a4:87:c3: 2c:53:3d:02:c7:81:17:a6:07:33:e3:bf:33:f1:e6: 5e:80:7f:21:d5:71:7b:29:5c:05:a6:a6:45:85:3d: 47:a5:35:41:41:5c:9e:c5:f5:97:03:dd:69:d1:5f: 4f:53:af:e4:38:19:e8:e9:1e:15:70:3b:f9:6f:c3: a7:89:db:c2:50:de:9a:a5:20:e6:bd:a4:dd:73:04: 4a:42:00:10:3b:e2:a9:d1:0c:76:cd:80:b3:39:49: f3:84:86:d0:13:91:da:ec:0d:f5:76:a5:e9:e6:3b: b0:c6:e7:ce:d5:16:43:13:43:83:13:63:d2:bd:37: f8:d2:90:40:8a:8b:10:44:c1:75:d9:a7:07:51:28: ba:ec:d0:6b:14:2d:73:a2:cc:f4:c4:f9:2a:d4:b0: 68:a3:47:6e:89:a3:3c:1b:c3:83:b7:1a:45:e7:df: 41:36:f9:9a:22:f8:65:ab:f6:85:ba:e8:ae:c9:51: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7B:8A:20:14:BB:15:0B:33:6E:C3:4F:2C:6B:4B:F7:5B:3A:3F:42 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS132525.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:40c1:6000::/43 240a:429a::/31 240a:42a0::/31 Signature Algorithm: sha256WithRSAEncryption 57:86:49:41:53:e0:c8:fa:7c:2f:77:22:e6:65:10:57:9c:d5: cf:73:14:1f:49:d6:be:17:cd:e4:55:b2:95:1b:63:a3:bb:cc: 35:b3:5c:7f:01:72:0f:67:18:ff:e4:d9:91:fd:33:99:c6:66: cd:14:5f:9d:62:2f:c6:5b:01:4e:ed:49:9a:70:d0:2e:7f:84: f5:b6:f3:0a:f4:ef:b3:b4:32:cf:2d:e1:5a:9f:12:be:a6:a2: 4a:74:5e:37:4b:88:a3:a7:92:b2:ca:a0:bd:09:30:2f:b2:af: 5b:af:09:58:21:8b:60:5a:63:a3:6e:b2:37:7f:b2:57:c8:3a: 8d:54:42:7a:56:af:a7:b9:67:0b:d1:de:69:8c:b5:40:d5:0a: c5:9f:8b:3a:17:0b:c1:49:07:8a:04:3b:bc:70:2d:42:44:fb: 24:bb:a2:71:ca:9f:50:fb:34:f5:d9:51:32:2b:c3:ed:cb:95: 63:f1:87:40:cc:42:66:7f:ad:0a:af:f6:de:2a:11:fd:b3:45: 8b:9f:bd:d9:bd:26:04:97:be:c7:21:4d:1d:77:0e:bf:34:81: f1:59:73:37:d3:d2:90:04:91:7c:d6:65:7d:82:a1:be:af:69: 04:3b:8f:c8:10:83:87:f8:b0:bd:aa:e1:28:e4:8f:eb:2b:51: b4:7a:61:7d -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUW7KeEj7Chu9M7XnjiXa+uFJA0awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjEyMDBaFw0yNzAxMTkwMjE3MDBaMDMxMTAvBgNV BAMTKEQ1N0I4QTIwMTRCQjE1MEIzMzZFQzM0RjJDNkI0QkY3NUIzQTNGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDilfy+k9mxLUO6YarrrXB27OeH 06Vz0NptYZTz80bVoeZzAZs84KY9K++xax+Pg0/tHziCvIIHb5awe9D5U5XP6uPU FarjaqSHwyxTPQLHgRemBzPjvzPx5l6AfyHVcXspXAWmpkWFPUelNUFBXJ7F9ZcD 3WnRX09Tr+Q4GejpHhVwO/lvw6eJ28JQ3pqlIOa9pN1zBEpCABA74qnRDHbNgLM5 SfOEhtATkdrsDfV2penmO7DG587VFkMTQ4MTY9K9N/jSkECKixBEwXXZpwdRKLrs 0GsULXOizPTE+SrUsGijR26Jozwbw4O3GkXn30E2+Zoi+GWr9oW66K7JUdptAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQU1XuKIBS7FQszbsNPLGtL91s6P0IwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzEzMjUyNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wHQQC AAIwFwMHBSQKQMFgAAMFASQKQpoDBQEkCkKgMA0GCSqGSIb3DQEBCwUAA4IBAQBX hklBU+DI+nwvdyLmZRBXnNXPcxQfSda+F83kVbKVG2Oju8w1s1x/AXIPZxj/5NmR /TOZxmbNFF+dYi/GWwFO7UmacNAuf4T1tvMK9O+ztDLPLeFanxK+pqJKdF43S4ij p5KyyqC9CTAvsq9brwlYIYtgWmOjbrI3f7JXyDqNVEJ6Vq+nuWcL0d5pjLVA1QrF n4s6FwvBSQeKBDu8cC1CRPsku6Jxyp9Q+zT12VEyK8Pty5Vj8YdAzEJmf60Kr/be KhH9s0WLn73ZvSYEl77HIU0ddw6/NIHxWXM309KQBJF81mV9gqG+r2kEO4/IEIOH +LC9quEo5I/rK1G0emF9 -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:30 2026 by rpki-client