This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235302e302f32342d3234203d3e20313335333737.roa File: 34322e3234302e3235302e302f32342d3234203d3e20313335333737.roa (raw, json) Hash identifier: wU+uth9n34SGtF2LHW1tzOsGZKVh07rAbZdN6gCe1TQ= Subject key identifier: A0:F1:C7:3B:E4:F4:4A:C8:5A:07:6A:46:CA:7D:A4:F7:20:26:DB:3B Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 6EBA83EFD45E4E8F796DE2182F2189BD7A546C41 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235302e302f32342d3234203d3e20313335333737.roa Signing time: Tue 20 Jan 2026 02:10:48 +0000 ROA not before: Tue 20 Jan 2026 02:05:48 +0000 ROA not after: Tue 19 Jan 2027 02:10:48 +0000 asID: 135377 IP address blocks: 42.240.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ba:83:ef:d4:5e:4e:8f:79:6d:e2:18:2f:21:89:bd:7a:54:6c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:48 2026 GMT Not After : Jan 19 02:10:48 2027 GMT Subject: CN=A0F1C73BE4F44AC85A076A46CA7DA4F72026DB3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:db:af:ef:bc:69:ba:a6:9b:85:f4:88:70:3f: c9:4d:27:16:0d:b0:6b:b6:6e:aa:07:a4:de:2e:2b: 25:7f:72:98:85:6b:d3:0c:00:53:c8:84:d2:7c:b2: 39:ec:0a:0b:ce:96:3b:94:4d:1c:ac:1b:70:4b:d9: f2:2b:4a:1a:fc:fc:0c:cb:44:7e:4c:3f:10:b4:25: 55:ba:f2:4d:30:90:4d:ef:4f:92:1f:7f:1d:e2:ba: 0a:21:f2:f0:0a:17:86:ec:92:c8:1d:81:05:e5:e1: 0c:36:62:a9:90:25:97:ac:0d:d2:22:00:af:ec:c6: 27:a2:39:b2:7a:07:bd:b8:9e:fc:2f:7c:d6:5c:f1: fd:93:1c:d8:79:82:98:52:4b:35:75:69:fc:ec:2c: 3e:a4:6f:e3:98:2f:8d:26:d3:b8:ac:ff:32:6f:4d: be:f3:60:8a:83:55:22:80:8b:8f:30:cb:08:24:b8: ad:db:39:c7:fb:41:1c:6b:47:52:c0:da:81:cd:bd: 5e:0f:12:02:69:0e:a4:fa:81:fb:c8:fd:85:2b:e3: 96:70:1e:0e:98:ff:fc:16:84:2d:8e:b1:e3:da:4c: ee:57:da:c1:f0:73:fe:ed:49:75:55:af:43:de:ae: c4:0b:0b:0c:42:35:6c:c2:db:bb:67:d9:2b:aa:7b: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F1:C7:3B:E4:F4:4A:C8:5A:07:6A:46:CA:7D:A4:F7:20:26:DB:3B X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235302e302f32342d3234203d3e20313335333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.250.0/24 Signature Algorithm: sha256WithRSAEncryption 15:44:48:38:5c:14:ee:c0:4d:ec:e7:a7:54:ce:0d:9a:07:0f: d3:f2:ce:b9:82:ed:9f:9d:9d:40:54:33:18:46:b1:91:ba:df: ce:57:9f:74:cb:e1:be:45:86:53:60:e1:0c:18:13:b9:ce:32: 61:c9:25:f3:52:68:b2:61:13:aa:ac:bb:4e:76:de:7a:b2:4f: 4c:19:c4:e0:d5:56:47:77:71:fa:e5:4b:5c:7c:23:04:29:b2: ea:a7:49:14:79:e6:76:d6:24:f6:7c:fa:ff:7a:7a:9d:f2:2f: c7:06:ec:12:66:dc:27:dd:25:df:0b:03:35:f4:ec:6e:b4:42: 12:ce:e4:2a:2e:2a:ed:b0:75:41:54:c3:d1:8d:38:37:98:81: 30:a4:18:56:ff:ea:aa:ff:f5:2f:69:6d:42:0f:41:df:df:76: e1:19:e4:6a:4f:1d:b4:c8:64:b9:d0:52:13:08:b7:74:95:dc: f5:76:cf:db:6e:63:49:15:f7:3b:19:74:84:2f:c4:4e:7e:bc: 49:ff:75:36:de:96:c2:d4:e1:e9:9b:7e:8f:44:4b:fe:c2:c8: 6a:3b:a5:be:47:c3:8a:09:cf:1b:b2:5c:b7:d1:5b:e1:e3:5b: 9b:4f:6e:a1:76:95:6c:66:07:61:0d:cd:49:bf:6b:4e:fc:0f: 4e:f8:d5:dc -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUbrqD79ReTo95beIYLyGJvXpUbEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDhaFw0yNzAxMTkwMjEwNDhaMDMxMTAvBgNV BAMTKEEwRjFDNzNCRTRGNDRBQzg1QTA3NkE0NkNBN0RBNEY3MjAyNkRCM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW26/vvGm6ppuF9IhwP8lNJxYN sGu2bqoHpN4uKyV/cpiFa9MMAFPIhNJ8sjnsCgvOljuUTRysG3BL2fIrShr8/AzL RH5MPxC0JVW68k0wkE3vT5Iffx3iugoh8vAKF4bsksgdgQXl4Qw2YqmQJZesDdIi AK/sxieiObJ6B724nvwvfNZc8f2THNh5gphSSzV1afzsLD6kb+OYL40m07is/zJv Tb7zYIqDVSKAi48wywgkuK3bOcf7QRxrR1LA2oHNvV4PEgJpDqT6gfvI/YUr45Zw Hg6Y//wWhC2OsePaTO5X2sHwc/7tSXVVr0PersQLCwxCNWzC27tn2SuqezOfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUoPHHO+T0SshaB2pGyn2k9yAm2zswHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC8zNDMyMmUzMjM0 MzAyZTMyMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzczNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACrw+jANBgkqhkiG9w0BAQsFAAOCAQEAFURIOFwU7sBN7OenVM4N mgcP0/LOuYLtn52dQFQzGEaxkbrfzlefdMvhvkWGU2DhDBgTuc4yYckl81JosmET qqy7TnbeerJPTBnE4NVWR3dx+uVLXHwjBCmy6qdJFHnmdtYk9nz6/3p6nfIvxwbs EmbcJ90l3wsDNfTsbrRCEs7kKi4q7bB1QVTD0Y04N5iBMKQYVv/qqv/1L2ltQg9B 39924Rnkak8dtMhkudBSEwi3dJXc9XbP225jSRX3Oxl0hC/ETn68Sf91Nt6WwtTh 6Zt+j0RL/sLIajulvkfDignPG7Jct9Fb4eNbm09uoXaVbGYHYQ3NSb9rTvwPTvjV 3A== -----END CERTIFICATE-----Generated at Wed Jan 21 01:31:58 2026 by rpki-client