This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131322e302e302f31352d3135203d3e203337393633.roa File: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (raw, json) Hash identifier: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY= Subject key identifier: AF:DA:67:3B:40:7E:CC:28:8E:6A:E8:1A:D2:38:AB:13:5C:EA:C9:D6 Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Certificate serial: 4BD59D27FC1D4C1BA59EF5F6910719F49B6CCCF4 Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131322e302e302f31352d3135203d3e203337393633.roa Signing time: Tue 20 Jan 2026 07:00:30 +0000 ROA not before: Tue 20 Jan 2026 06:55:30 +0000 ROA not after: Tue 19 Jan 2027 07:00:30 +0000 asID: 37963 IP address blocks: 47.112.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d5:9d:27:fc:1d:4c:1b:a5:9e:f5:f6:91:07:19:f4:9b:6c:cc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Validity Not Before: Jan 20 06:55:30 2026 GMT Not After : Jan 19 07:00:30 2027 GMT Subject: CN=AFDA673B407ECC288E6AE81AD238AB135CEAC9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:d6:8d:f6:04:91:3e:82:63:e1:d6:2a:49: 9e:43:4b:21:be:6a:3b:10:c9:56:93:ce:a2:4b:57: 21:aa:f5:93:e1:a7:02:ce:5e:9c:6e:97:29:76:35: 86:19:bd:b1:d4:33:9c:b4:d1:f0:d6:4d:86:6e:03: bf:56:78:18:df:a5:3b:85:5b:35:09:f5:2e:59:f0: dd:e0:36:67:14:f3:c3:5c:24:91:75:ae:f6:d8:bd: 4f:ba:73:8f:c5:ee:9c:45:18:03:e2:e2:96:88:0a: 31:71:d3:25:b8:43:2e:03:15:8b:4c:fa:ca:d2:a9: 8d:65:2a:ea:ab:47:18:c4:f5:d2:03:ee:85:87:cf: 0f:0e:42:c1:b2:f0:66:cd:57:03:a0:27:94:1f:fc: 53:d4:44:d5:12:e2:e8:c7:1c:b1:dd:db:c3:33:00: 31:c1:14:a7:66:bd:e8:2e:c5:ee:86:22:18:39:b0: f9:8d:e4:ef:eb:3b:56:d0:80:db:6a:ff:5b:24:12: 30:73:c3:cd:6b:55:d9:00:7a:47:73:0e:45:b1:08: 4b:bb:42:8f:fb:5d:f2:eb:5b:a8:6e:82:3f:9c:f7: 00:25:af:03:e3:88:d7:1a:7a:fd:1d:bb:3a:a4:44: 8b:bc:21:31:48:59:56:85:1e:bd:14:c7:33:08:cb: e0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DA:67:3B:40:7E:CC:28:8E:6A:E8:1A:D2:38:AB:13:5C:EA:C9:D6 X509v3 Authority Key Identifier: keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131322e302e302f31352d3135203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 47.112.0.0/15 Signature Algorithm: sha256WithRSAEncryption d1:6f:17:fa:40:3c:dc:4c:50:bf:09:37:ad:0d:2f:e8:d9:fb: ec:e1:56:f9:df:f5:85:3e:62:33:9d:14:e0:3a:b6:12:c5:21: 52:69:e8:9d:41:76:ef:26:a2:ed:f0:49:64:07:59:41:dc:97: 77:a0:76:98:05:dc:f5:4e:04:9a:bd:19:c4:4a:a7:38:a6:16: 21:08:50:96:95:0e:36:8f:85:70:4c:d7:2e:a2:fe:d5:8d:b0: fb:29:52:a7:d4:8c:c4:66:97:04:44:2b:3b:9b:19:5d:3d:be: f9:02:10:f7:63:71:9c:6c:ff:c3:e4:05:f4:4a:da:7d:f0:ac: 09:97:4c:5b:82:0e:7d:1b:66:b6:7a:5c:40:be:59:69:bb:63: da:dc:7d:e2:87:df:b9:41:46:07:5e:2d:b6:0b:82:1e:44:c2: 79:fb:80:5e:6c:4e:24:6f:6f:2f:7a:49:2b:0d:f8:44:67:d5: 8f:6c:39:69:05:70:03:cb:dd:48:af:d8:fe:49:75:8c:66:da: 63:c2:c2:3d:0d:63:f0:14:71:63:7d:ae:64:85:18:22:bb:3d: 7c:5f:f6:03:76:83:8d:c8:4c:0b:ec:4a:13:e4:4b:51:2a:23: f4:b7:3f:fd:0a:45:30:f9:84:86:fa:6d:45:67:9d:14:74:e6: b8:ce:29:8f -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUS9WdJ/wdTBulnvX2kQcZ9JtszPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkx MkRGRDIyOTAeFw0yNjAxMjAwNjU1MzBaFw0yNzAxMTkwNzAwMzBaMDMxMTAvBgNV BAMTKEFGREE2NzNCNDA3RUNDMjg4RTZBRTgxQUQyMzhBQjEzNUNFQUM5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICdaN9gSRPoJj4dYqSZ5DSyG+ ajsQyVaTzqJLVyGq9ZPhpwLOXpxulyl2NYYZvbHUM5y00fDWTYZuA79WeBjfpTuF WzUJ9S5Z8N3gNmcU88NcJJF1rvbYvU+6c4/F7pxFGAPi4paICjFx0yW4Qy4DFYtM +srSqY1lKuqrRxjE9dID7oWHzw8OQsGy8GbNVwOgJ5Qf/FPURNUS4ujHHLHd28Mz ADHBFKdmveguxe6GIhg5sPmN5O/rO1bQgNtq/1skEjBzw81rVdkAekdzDkWxCEu7 Qo/7XfLrW6hugj+c9wAlrwPjiNcaev0duzqkRIu8ITFIWVaFHr0UxzMIy+DdAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUr9pnO0B+zCiOauga0jirE1zqydYwHwYDVR0j BBgwFoAUpbKxTZdRO2wMgrHlQHA+uRLf0ikwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8xL0E1QjJCMTREOTc1MTNCNkMwQzgyQjFFNTQwNzAz RUI5MTJERkQyMjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzEvMzQzNzJlMzEzMTMy MmUzMDJlMzAyZjMxMzUyZDMxMzUyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwEvcDANBgkqhkiG9w0BAQsFAAOCAQEA0W8X+kA83ExQvwk3rQ0v6Nn77OFW+d/1 hT5iM50U4Dq2EsUhUmnonUF27yai7fBJZAdZQdyXd6B2mAXc9U4Emr0ZxEqnOKYW IQhQlpUONo+FcEzXLqL+1Y2w+ylSp9SMxGaXBEQrO5sZXT2++QIQ92NxnGz/w+QF 9EraffCsCZdMW4IOfRtmtnpcQL5Zabtj2tx94offuUFGB14ttguCHkTCefuAXmxO JG9vL3pJKw34RGfVj2w5aQVwA8vdSK/Y/kl1jGbaY8LCPQ1j8BRxY32uZIUYIrs9 fF/2A3aDjchMC+xKE+RLUSoj9Lc//QpFMPmEhvptRWedFHTmuM4pjw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:31 2026 by rpki-client