This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131322e302e302f31362d3234203d3e203337393633.roa File: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (raw, json) Hash identifier: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M= Subject key identifier: 60:DD:F7:03:1E:AF:00:06:53:B2:B6:01:AF:3E:96:7C:EB:75:8F:03 Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Certificate serial: 7881D07BBA636FCEF403F9F549BD2E3751937184 Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131322e302e302f31362d3234203d3e203337393633.roa Signing time: Tue 20 Jan 2026 07:00:30 +0000 ROA not before: Tue 20 Jan 2026 06:55:30 +0000 ROA not after: Tue 19 Jan 2027 07:00:30 +0000 asID: 37963 IP address blocks: 47.112.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:81:d0:7b:ba:63:6f:ce:f4:03:f9:f5:49:bd:2e:37:51:93:71:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Validity Not Before: Jan 20 06:55:30 2026 GMT Not After : Jan 19 07:00:30 2027 GMT Subject: CN=60DDF7031EAF000653B2B601AF3E967CEB758F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:35:cf:d3:e6:a0:a3:28:29:03:04:9e:aa: 93:27:8a:a7:80:3b:87:39:65:4b:34:ea:72:3c:c0: 6d:f7:9f:70:73:05:11:3b:bf:51:a6:34:57:55:3f: e3:7e:16:49:95:59:78:c7:c3:16:a6:f6:fe:34:cc: a2:25:74:d5:dc:54:3f:6b:fe:b0:4b:1d:3a:55:f6: aa:5c:92:47:c9:0e:f6:2a:0a:3a:56:a5:a2:40:a3: 17:6e:d8:e1:34:a5:51:4f:ea:74:36:92:6f:93:d4: 6c:a9:42:b2:ad:d7:05:2d:98:0e:58:fb:b2:30:2c: b1:a3:df:46:f9:ea:4e:41:10:6a:f5:1d:1e:eb:0e: 6c:60:bc:cd:2a:31:76:72:f7:1f:55:41:8d:a8:a7: fb:81:9a:cf:60:ee:53:dc:3b:d0:28:b5:b5:00:46: 02:c0:e3:b8:3c:75:a2:73:10:6d:10:ff:5b:66:b1: a3:de:24:fe:36:83:f5:17:a8:64:73:a5:5f:49:80: 45:4d:58:4c:62:67:1a:71:da:dd:3d:43:13:24:04: fb:7e:2b:1d:f9:dd:90:27:c0:4b:84:8b:c7:15:08: 65:88:af:48:ee:b4:a5:36:eb:4f:31:94:9e:7b:91: af:04:7a:8f:05:13:1a:d5:52:b1:de:82:da:48:ae: 5c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DD:F7:03:1E:AF:00:06:53:B2:B6:01:AF:3E:96:7C:EB:75:8F:03 X509v3 Authority Key Identifier: keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131322e302e302f31362d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 47.112.0.0/16 Signature Algorithm: sha256WithRSAEncryption c6:4d:0c:fb:12:74:28:f4:46:74:26:2d:69:83:cf:b8:1a:13: 5b:e6:55:33:b0:e0:a2:b5:26:50:af:6e:6b:df:79:fc:ad:d8: 49:cf:c8:72:b9:cf:0f:09:cc:57:e7:e8:40:6e:0a:b3:ff:e7: e6:41:50:be:80:36:78:e8:e8:d4:1e:0e:21:ea:16:82:b8:49: 18:bf:64:37:99:2f:b4:81:3e:5a:91:46:a6:27:40:e9:d0:88: 37:91:0f:05:d3:17:c0:1b:c7:c5:bc:38:1e:f6:6b:4e:17:66: a4:e0:ed:d3:80:1f:2d:0c:59:31:e2:1c:15:8a:9a:4a:31:df: 01:06:e9:df:c5:12:f3:19:71:03:93:db:26:7f:c0:a6:9d:78: 04:db:b3:e4:44:4c:53:9a:52:c1:b8:bd:fa:b3:86:5a:9b:10: d4:2c:61:45:36:f6:85:40:3b:ea:4f:41:2c:15:6a:a4:21:ae: c2:58:a7:6e:28:e7:f9:12:10:33:e1:4e:94:41:2f:b9:e6:20: 9c:7d:80:52:16:1b:ca:94:56:35:8d:41:bb:b4:2d:e4:82:7d: 56:0f:6e:74:68:d7:b9:d0:34:a5:2c:c1:36:26:34:b3:d9:d1: 79:53:ef:5a:c5:93:9f:1f:cc:f9:3f:83:57:c7:67:9c:d8:81: 8b:1f:9d:9a -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUeIHQe7pjb870A/n1Sb0uN1GTcYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkx MkRGRDIyOTAeFw0yNjAxMjAwNjU1MzBaFw0yNzAxMTkwNzAwMzBaMDMxMTAvBgNV BAMTKDYwRERGNzAzMUVBRjAwMDY1M0IyQjYwMUFGM0U5NjdDRUI3NThGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVzXP0+agoygpAwSeqpMniqeA O4c5ZUs06nI8wG33n3BzBRE7v1GmNFdVP+N+FkmVWXjHwxam9v40zKIldNXcVD9r /rBLHTpV9qpckkfJDvYqCjpWpaJAoxdu2OE0pVFP6nQ2km+T1GypQrKt1wUtmA5Y +7IwLLGj30b56k5BEGr1HR7rDmxgvM0qMXZy9x9VQY2op/uBms9g7lPcO9AotbUA RgLA47g8daJzEG0Q/1tmsaPeJP42g/UXqGRzpV9JgEVNWExiZxpx2t09QxMkBPt+ Kx353ZAnwEuEi8cVCGWIr0jutKU2608xlJ57ka8Eeo8FExrVUrHegtpIrlwhAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUYN33Ax6vAAZTsrYBrz6WfOt1jwMwHwYDVR0j BBgwFoAUpbKxTZdRO2wMgrHlQHA+uRLf0ikwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8xL0E1QjJCMTREOTc1MTNCNkMwQzgyQjFFNTQwNzAz RUI5MTJERkQyMjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzEvMzQzNzJlMzEzMTMy MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAvcDANBgkqhkiG9w0BAQsFAAOCAQEAxk0M+xJ0KPRGdCYtaYPPuBoTW+ZVM7Dg orUmUK9ua995/K3YSc/IcrnPDwnMV+foQG4Ks//n5kFQvoA2eOjo1B4OIeoWgrhJ GL9kN5kvtIE+WpFGpidA6dCIN5EPBdMXwBvHxbw4HvZrThdmpODt04AfLQxZMeIc FYqaSjHfAQbp38US8xlxA5PbJn/App14BNuz5ERMU5pSwbi9+rOGWpsQ1CxhRTb2 hUA76k9BLBVqpCGuwlinbijn+RIQM+FOlEEvueYgnH2AUhYbypRWNY1Bu7Qt5IJ9 Vg9udGjXudA0pSzBNiY0s9nReVPvWsWTnx/M+T+DV8dnnNiBix+dmg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:37 2026 by rpki-client