This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3132382e302f32302d3230203d3e203538343636.roa File: 34322e3234302e3132382e302f32302d3230203d3e203538343636.roa (raw, json) Hash identifier: +uoTL4VmTyvECaMZrQtIuz0LKfEvHMMbdhoB86Ck8kI= Subject key identifier: 61:37:B8:55:3D:FE:BF:42:16:3E:C8:E3:54:4D:DF:25:FB:15:55:4E Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 6050F41A676BE3F92B047BAC085CC3A1F1100645 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3132382e302f32302d3230203d3e203538343636.roa Signing time: Tue 20 Jan 2026 02:10:51 +0000 ROA not before: Tue 20 Jan 2026 02:05:51 +0000 ROA not after: Tue 19 Jan 2027 02:10:51 +0000 asID: 58466 IP address blocks: 42.240.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:50:f4:1a:67:6b:e3:f9:2b:04:7b:ac:08:5c:c3:a1:f1:10:06:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:51 2026 GMT Not After : Jan 19 02:10:51 2027 GMT Subject: CN=6137B8553DFEBF42163EC8E3544DDF25FB15554E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:af:1d:e9:5c:26:dd:cf:9e:5b:e4:14:a9: db:64:ad:af:b4:69:53:d9:a6:84:7c:15:63:ec:f4: 8e:35:37:23:23:ba:d7:1f:19:ed:4f:b2:36:b8:72: 08:9c:73:31:e9:93:03:73:41:50:14:4d:97:a9:a8: 99:80:91:3d:24:3b:11:15:74:d9:16:85:66:40:c2: 18:6b:b3:86:67:aa:f3:8b:da:bc:f7:30:da:82:48: 1c:47:47:ee:4e:1d:b5:62:fd:7c:52:f2:4a:f6:73: 31:04:cf:56:54:b0:3d:70:1d:2a:23:c8:94:24:b6: 84:85:39:54:0c:96:f3:e7:9c:9e:c9:35:e4:fa:68: 04:72:f5:77:ca:c6:52:5d:d5:2c:be:3d:36:7c:b9: 88:af:d8:71:4d:04:cd:17:73:18:de:0b:5f:74:65: 26:e9:8c:c6:11:47:fe:26:2a:ec:f0:90:15:42:2b: d9:f2:27:d9:c6:9e:90:97:d1:f4:be:12:5f:81:01: 93:38:c8:99:cd:2f:f3:2c:d7:56:89:5f:6a:a8:46: 53:d3:f6:76:02:62:97:50:eb:33:2b:0c:18:b5:85: 2f:3b:b0:20:c1:98:7b:44:b3:a1:10:44:ce:be:e4: 17:c4:ea:0e:e7:e1:b4:98:09:76:34:9a:88:55:1b: 80:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:37:B8:55:3D:FE:BF:42:16:3E:C8:E3:54:4D:DF:25:FB:15:55:4E X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3132382e302f32302d3230203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.128.0/20 Signature Algorithm: sha256WithRSAEncryption 6d:2f:2a:53:16:26:78:c9:67:0e:f1:ba:23:a8:1a:c3:17:cf: c3:98:12:a2:ec:47:3e:21:ac:26:fd:76:b7:79:fb:7f:13:a4: 7f:41:b6:24:19:a5:31:ce:34:26:95:a5:83:b3:f0:30:f2:96: 0f:18:68:5d:44:89:82:79:76:28:89:9d:af:77:f0:da:de:ed: 8c:d0:06:b6:d5:47:c0:b7:72:4f:9b:6c:ba:70:b5:97:bf:bf: d3:1f:80:ac:52:fe:72:a9:69:73:85:66:95:f2:c0:1f:cc:6b: a9:3d:22:be:7e:af:0d:42:d2:b8:0d:da:58:59:fe:5d:83:64: d5:e3:61:c3:0b:b7:cd:4a:bb:36:b4:31:21:5b:2e:78:c7:07: 21:38:c1:54:bb:ba:a5:83:b4:16:1c:54:85:cd:27:36:a0:76: c8:da:8c:6f:4d:ac:84:69:17:1b:14:1b:22:d5:f3:45:9a:82: a5:3c:94:6f:d4:40:a0:1c:27:93:1b:4a:7b:f6:2e:20:24:9e: 5c:fc:09:f2:43:f4:4f:84:fd:13:71:cf:f7:ca:69:25:e4:a2: f3:55:a0:52:8c:42:1e:f9:db:5a:e5:14:69:fb:47:9d:8d:83: 86:7b:9d:ba:f8:3f:7a:a1:81:c0:1b:62:7c:cb:6a:fd:aa:ba: 82:25:91:8f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUYFD0Gmdr4/krBHusCFzDofEQBkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTFaFw0yNzAxMTkwMjEwNTFaMDMxMTAvBgNV BAMTKDYxMzdCODU1M0RGRUJGNDIxNjNFQzhFMzU0NERERjI1RkIxNTU1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCplK8d6Vwm3c+eW+QUqdtkra+0 aVPZpoR8FWPs9I41NyMjutcfGe1Psja4cgicczHpkwNzQVAUTZepqJmAkT0kOxEV dNkWhWZAwhhrs4ZnqvOL2rz3MNqCSBxHR+5OHbVi/XxS8kr2czEEz1ZUsD1wHSoj yJQktoSFOVQMlvPnnJ7JNeT6aARy9XfKxlJd1Sy+PTZ8uYiv2HFNBM0XcxjeC190 ZSbpjMYRR/4mKuzwkBVCK9nyJ9nGnpCX0fS+El+BAZM4yJnNL/Ms11aJX2qoRlPT 9nYCYpdQ6zMrDBi1hS87sCDBmHtEs6EQRM6+5BfE6g7n4bSYCXY0mohVG4BJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUYTe4VT3+v0IWPsjjVE3fJfsVVU4wHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDU4OTE4Ny8wLzM0MzIyZTMyMzQz MDJlMzEzMjM4MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM0MzYzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBCrwgDANBgkqhkiG9w0BAQsFAAOCAQEAbS8qUxYmeMlnDvG6I6gawxfP w5gSouxHPiGsJv12t3n7fxOkf0G2JBmlMc40JpWlg7PwMPKWDxhoXUSJgnl2KImd r3fw2t7tjNAGttVHwLdyT5tsunC1l7+/0x+ArFL+cqlpc4VmlfLAH8xrqT0ivn6v DULSuA3aWFn+XYNk1eNhwwu3zUq7NrQxIVsueMcHITjBVLu6pYO0FhxUhc0nNqB2 yNqMb02shGkXGxQbItXzRZqCpTyUb9RAoBwnkxtKe/YuICSeXPwJ8kP0T4T9E3HP 98ppJeSi81WgUoxCHvnbWuUUaftHnY2Dhnuduvg/eqGBwBtifMtq/aq6giWRjw== -----END CERTIFICATE-----Generated at Wed Jan 21 04:23:26 2026 by rpki-client