This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3136302e302f32302d3230203d3e20313336393538.roa File: 34322e3234302e3136302e302f32302d3230203d3e20313336393538.roa (raw, json) Hash identifier: N5l8l+7zK3EU0QKQI58zNYAOjy9cCcwkqX+S48mLVyQ= Subject key identifier: 58:DF:BE:BA:46:E1:63:B5:5E:8B:72:9A:8C:5F:43:F4:F1:F1:0D:9D Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 1F99CC63FE7AD95738AB3A1996F7338DDCAC79E0 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3136302e302f32302d3230203d3e20313336393538.roa Signing time: Tue 20 Jan 2026 02:10:50 +0000 ROA not before: Tue 20 Jan 2026 02:05:50 +0000 ROA not after: Tue 19 Jan 2027 02:10:50 +0000 asID: 136958 IP address blocks: 42.240.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:99:cc:63:fe:7a:d9:57:38:ab:3a:19:96:f7:33:8d:dc:ac:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:50 2026 GMT Not After : Jan 19 02:10:50 2027 GMT Subject: CN=58DFBEBA46E163B55E8B729A8C5F43F4F1F10D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:ce:93:ac:26:03:a4:fd:81:49:8c:d8:d7: 25:9e:a4:8b:c9:91:3d:f9:d2:a0:e0:34:dd:7d:c4: b7:54:e0:c4:33:06:88:0f:d9:23:7a:d4:28:b0:22: 41:37:1d:53:98:43:85:02:92:c5:ed:b5:16:20:91: 99:00:86:03:51:15:ba:b2:8d:0c:f9:da:5b:51:f6: 6b:29:47:8a:56:9b:cc:ca:4a:c8:e3:73:a3:a9:1c: 91:e8:cc:2f:63:02:7e:f7:73:4b:e9:a2:bc:9d:dc: f4:6f:e4:48:17:72:5e:db:26:68:46:a6:95:0d:93: 87:09:cc:89:98:0c:6d:91:8c:d3:13:dc:b4:f6:60: 9a:3c:29:0f:07:ff:e3:69:20:c9:07:b8:40:7f:18: 5e:35:22:9f:dc:b5:f9:46:25:0c:cf:d4:88:94:9a: 18:ba:94:de:41:72:fd:7b:5d:5a:83:4b:69:62:f4: 8a:e0:8d:6e:66:34:ad:cc:f6:88:64:58:f6:48:e8: 28:c2:92:0c:c9:81:dc:99:3e:30:9c:65:c8:62:c8: e4:90:3a:41:9a:87:95:4e:d2:6b:24:c8:ed:ba:04: f6:b3:4b:d8:83:54:cf:38:0c:b4:6e:c8:76:7f:c4: c0:ca:39:87:6a:c7:e7:82:c6:d0:e6:98:bc:26:b9: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DF:BE:BA:46:E1:63:B5:5E:8B:72:9A:8C:5F:43:F4:F1:F1:0D:9D X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3136302e302f32302d3230203d3e20313336393538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.160.0/20 Signature Algorithm: sha256WithRSAEncryption dc:39:cc:0b:3f:8e:ac:13:2f:bc:36:47:a8:47:48:59:e2:1a: 1c:ed:3c:90:c1:51:a6:38:b6:b6:77:b6:1d:e2:ea:a8:f9:d4: 99:6b:f0:93:7c:ee:27:e5:7c:8c:d6:88:11:9b:cd:52:3b:e9: 02:02:b1:ab:30:3d:da:30:6e:c1:87:50:84:ef:a9:fc:f2:e0: 8f:fd:4c:8d:ec:22:63:be:6a:99:86:e2:41:7c:70:ec:ee:6f: 8a:f8:0b:ac:3c:54:47:bc:2d:ae:a5:1b:86:ec:a1:b7:48:da: 03:cb:1c:83:15:38:0c:3b:3d:8c:fa:06:dd:8d:56:66:4a:e0: c8:1c:83:f5:fb:a9:44:c3:9f:ef:5c:25:d6:65:c6:06:80:5b: 2c:3a:2c:34:91:ae:81:fc:69:e0:35:fe:57:30:6b:8c:24:36: de:a5:8b:fb:ff:4b:a6:4d:d1:e0:19:b5:a4:c9:23:3e:63:6f: a1:d0:bd:0f:5a:b6:5a:db:ec:3e:75:18:b0:25:e9:b6:8c:e5: 0d:15:e7:d6:b5:50:7a:30:ea:0a:9e:f9:72:30:bb:5b:42:3a: f0:67:ea:e9:2a:4a:85:b7:33:85:58:ec:9c:27:30:b0:20:76: f5:e4:02:89:39:43:b1:38:92:38:5b:ed:0e:a5:0a:78:6a:a1: c8:2f:33:2e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUH5nMY/562Vc4qzoZlvczjdyseeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTBaFw0yNzAxMTkwMjEwNTBaMDMxMTAvBgNV BAMTKDU4REZCRUJBNDZFMTYzQjU1RThCNzI5QThDNUY0M0Y0RjFGMTBEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjvM6TrCYDpP2BSYzY1yWepIvJ kT350qDgNN19xLdU4MQzBogP2SN61CiwIkE3HVOYQ4UCksXttRYgkZkAhgNRFbqy jQz52ltR9mspR4pWm8zKSsjjc6OpHJHozC9jAn73c0vporyd3PRv5EgXcl7bJmhG ppUNk4cJzImYDG2RjNMT3LT2YJo8KQ8H/+NpIMkHuEB/GF41Ip/ctflGJQzP1IiU mhi6lN5Bcv17XVqDS2li9IrgjW5mNK3M9ohkWPZI6CjCkgzJgdyZPjCcZchiyOSQ OkGah5VO0mskyO26BPazS9iDVM84DLRuyHZ/xMDKOYdqx+eCxtDmmLwmuak1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUWN++ukbhY7Vei3KajF9D9PHxDZ0wHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC8zNDMyMmUzMjM0 MzAyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzNjM5MzUzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBCrwoDANBgkqhkiG9w0BAQsFAAOCAQEA3DnMCz+OrBMvvDZHqEdI WeIaHO08kMFRpji2tne2HeLqqPnUmWvwk3zuJ+V8jNaIEZvNUjvpAgKxqzA92jBu wYdQhO+p/PLgj/1MjewiY75qmYbiQXxw7O5vivgLrDxUR7wtrqUbhuyht0jaA8sc gxU4DDs9jPoG3Y1WZkrgyByD9fupRMOf71wl1mXGBoBbLDosNJGugfxp4DX+VzBr jCQ23qWL+/9Lpk3R4Bm1pMkjPmNvodC9D1q2WtvsPnUYsCXptozlDRXn1rVQejDq Cp75cjC7W0I68Gfq6SpKhbczhVjsnCcwsCB29eQCiTlDsTiSOFvtDqUKeGqhyC8z Lg== -----END CERTIFICATE-----Generated at Wed Jan 21 04:24:27 2026 by rpki-client