This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3134342e302f32302d3230203d3e20313336393538.roa File: 34322e3234302e3134342e302f32302d3230203d3e20313336393538.roa (raw, json) Hash identifier: +NQtvQMjQLGnN2XnpKeHiLjVVTQWWvd4r7wFkO2+1FM= Subject key identifier: E0:B6:DE:B2:23:2E:EE:1D:FF:D7:53:89:79:FD:4A:01:E3:1E:17:9A Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 4AD53F7010CF98D604D2E928BA9824E5F692495F Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3134342e302f32302d3230203d3e20313336393538.roa Signing time: Tue 20 Jan 2026 02:10:50 +0000 ROA not before: Tue 20 Jan 2026 02:05:50 +0000 ROA not after: Tue 19 Jan 2027 02:10:50 +0000 asID: 136958 IP address blocks: 42.240.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d5:3f:70:10:cf:98:d6:04:d2:e9:28:ba:98:24:e5:f6:92:49:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:50 2026 GMT Not After : Jan 19 02:10:50 2027 GMT Subject: CN=E0B6DEB2232EEE1DFFD7538979FD4A01E31E179A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:0c:b8:84:35:24:0a:72:d3:38:4d:3a:30: d4:c2:ad:a6:f8:bf:64:8a:c6:83:e1:ea:11:5d:59: 24:5a:93:60:95:c9:a9:29:4e:b1:4e:2a:0c:c6:42: 4e:2a:58:d3:f1:8a:70:d2:2f:36:51:62:93:a6:db: 14:f0:1d:54:97:67:2b:a5:d7:86:d9:d6:1e:4b:d3: 8f:37:d5:3f:51:a9:f1:09:3b:8b:32:05:7c:90:e1: 62:ca:cc:78:87:c8:fc:5d:dc:84:c4:ed:00:56:4f: 0c:4c:c8:69:c9:f4:69:74:62:5d:45:b2:c7:ea:fb: 1c:c0:09:52:2c:6a:4f:b8:2f:a2:f2:92:c4:55:46: 4d:c1:c4:1a:4d:2e:6c:7c:ab:36:07:f6:f4:28:74: f3:db:19:22:bd:81:31:f0:a2:41:9a:a0:f7:23:f2: 8c:8b:89:66:2f:87:74:30:9f:26:6d:be:bd:9a:89: d7:c2:cb:0a:91:9d:a7:7f:3e:78:a2:46:a8:7d:59: 84:b7:14:65:f5:50:11:76:e0:d6:6c:ef:79:90:d0: 0f:7e:a2:93:c1:74:39:17:03:31:fb:db:b4:3a:93: 59:58:be:2a:3e:09:68:74:b3:67:2e:f7:1e:ff:ee: 64:46:89:df:2d:dc:e6:05:f1:6e:ec:1c:6e:92:6a: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B6:DE:B2:23:2E:EE:1D:FF:D7:53:89:79:FD:4A:01:E3:1E:17:9A X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3134342e302f32302d3230203d3e20313336393538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.144.0/20 Signature Algorithm: sha256WithRSAEncryption 80:b4:6d:14:aa:af:b7:18:55:e2:f3:ac:e6:89:b4:dd:b8:76: 46:80:39:7e:97:d1:99:d3:1c:be:e7:2e:6f:93:c5:31:b4:df: b1:43:51:ba:e3:c2:ea:57:5e:23:93:33:6b:21:78:47:b8:59: a9:a9:62:b4:d4:05:f2:79:63:86:eb:68:90:ee:f2:7b:47:d9: cd:df:11:4b:dc:4d:ed:9b:d8:0c:ad:d8:3f:54:4b:de:3a:9c: 8a:62:fc:7f:59:1b:a3:da:07:d3:94:e8:e8:de:eb:43:08:34: c6:61:1a:1b:ac:67:69:ef:ff:22:28:f2:d0:4b:cc:71:d3:8e: 09:6d:53:c5:04:fc:e0:9c:d7:00:64:92:9b:b9:88:9f:23:47: 21:4f:fb:64:07:4d:4d:36:88:32:51:2f:cd:48:19:4d:25:c1: e5:fd:d7:da:17:cd:55:78:68:6a:0b:60:b2:14:0b:77:26:e6: 08:67:0f:b8:a8:37:63:47:9f:dd:95:9a:86:10:70:f7:f0:1b: 04:ba:5b:f1:f9:bc:07:84:07:18:e7:e7:09:b6:a6:ae:79:6b: 37:e6:a2:90:c5:32:5a:67:53:ba:2d:5e:db:bd:5a:a9:c0:90: c2:1b:ef:31:cd:9d:13:ac:32:ee:0f:cb:ba:b4:b4:2f:fb:cd: 29:59:a6:2b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUStU/cBDPmNYE0ukoupgk5faSSV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTBaFw0yNzAxMTkwMjEwNTBaMDMxMTAvBgNV BAMTKEUwQjZERUIyMjMyRUVFMURGRkQ3NTM4OTc5RkQ0QTAxRTMxRTE3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cgy4hDUkCnLTOE06MNTCrab4 v2SKxoPh6hFdWSRak2CVyakpTrFOKgzGQk4qWNPxinDSLzZRYpOm2xTwHVSXZyul 14bZ1h5L04831T9RqfEJO4syBXyQ4WLKzHiHyPxd3ITE7QBWTwxMyGnJ9Gl0Yl1F ssfq+xzACVIsak+4L6LyksRVRk3BxBpNLmx8qzYH9vQodPPbGSK9gTHwokGaoPcj 8oyLiWYvh3QwnyZtvr2aidfCywqRnad/PniiRqh9WYS3FGX1UBF24NZs73mQ0A9+ opPBdDkXAzH727Q6k1lYvio+CWh0s2cu9x7/7mRGid8t3OYF8W7sHG6SarF/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU4LbesiMu7h3/11OJef1KAeMeF5owHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC8zNDMyMmUzMjM0 MzAyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzNjM5MzUzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBCrwkDANBgkqhkiG9w0BAQsFAAOCAQEAgLRtFKqvtxhV4vOs5om0 3bh2RoA5fpfRmdMcvucub5PFMbTfsUNRuuPC6ldeI5MzayF4R7hZqalitNQF8nlj hutokO7ye0fZzd8RS9xN7ZvYDK3YP1RL3jqcimL8f1kbo9oH05To6N7rQwg0xmEa G6xnae//Iijy0EvMcdOOCW1TxQT84JzXAGSSm7mInyNHIU/7ZAdNTTaIMlEvzUgZ TSXB5f3X2hfNVXhoagtgshQLdybmCGcPuKg3Y0ef3ZWahhBw9/AbBLpb8fm8B4QH GOfnCbamrnlrN+aikMUyWmdTui1e271aqcCQwhvvMc2dE6wy7g/LurS0L/vNKVmm Kw== -----END CERTIFICATE-----Generated at Wed Jan 21 04:24:27 2026 by rpki-client