This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235342e302f32342d3234203d3e20313335333737.roa File: 34322e3234302e3235342e302f32342d3234203d3e20313335333737.roa (raw, json) Hash identifier: v504NjZN+mXeEjd/OTYHaii7gA08xF1J3NnNrvM4idk= Subject key identifier: 46:2C:A4:00:E4:1F:08:21:DB:6E:A2:DF:DB:81:06:98:C7:2D:35:AB Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 5E569ADD1AB5D797216DD88FA68B1608DF00D9A3 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235342e302f32342d3234203d3e20313335333737.roa Signing time: Tue 20 Jan 2026 02:10:52 +0000 ROA not before: Tue 20 Jan 2026 02:05:52 +0000 ROA not after: Tue 19 Jan 2027 02:10:52 +0000 asID: 135377 IP address blocks: 42.240.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:56:9a:dd:1a:b5:d7:97:21:6d:d8:8f:a6:8b:16:08:df:00:d9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:52 2026 GMT Not After : Jan 19 02:10:52 2027 GMT Subject: CN=462CA400E41F0821DB6EA2DFDB810698C72D35AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:77:b7:43:87:3e:fc:2c:d5:da:1a:91:bd: f0:cd:a7:f9:63:3c:ca:d2:ae:a4:d4:c0:c5:c5:61: 51:e2:db:23:ce:1a:c8:95:d1:07:c8:44:95:07:d6: b0:78:27:2b:3d:8f:1e:29:60:de:81:cb:f8:fe:59: 39:c4:99:4d:ff:a2:76:92:41:75:2d:c9:0b:00:dc: b9:45:0b:b9:c3:fd:ed:db:e0:36:a9:a3:b7:56:87: f1:e1:a8:bb:07:cf:24:aa:35:ed:86:65:3f:f8:57: b8:6e:8e:79:82:cc:6f:6b:83:3f:16:21:53:b0:9c: 77:00:7f:69:5a:dc:b6:45:cb:2c:35:95:0f:00:e9: 6d:5c:d4:3f:35:1e:d3:f1:73:7e:c9:34:30:11:79: cc:73:8d:d0:b5:15:b9:35:02:d7:e9:a5:4b:16:3c: 2e:0a:a0:68:72:97:dc:07:a5:26:2f:2d:ea:fd:30: e3:29:52:a3:07:00:31:30:10:b6:51:1b:fb:0d:4b: 16:d5:26:06:6e:7f:bc:ba:48:04:c1:b8:12:9c:ad: 62:18:48:f5:d9:75:b7:53:15:34:cf:5b:10:e8:68: d2:2b:2d:e1:7c:3d:f9:e7:a3:7b:5a:18:a8:8d:dd: 7c:bf:2a:af:d7:f5:9e:06:a8:31:16:d4:23:f8:0d: f6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2C:A4:00:E4:1F:08:21:DB:6E:A2:DF:DB:81:06:98:C7:2D:35:AB X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235342e302f32342d3234203d3e20313335333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.254.0/24 Signature Algorithm: sha256WithRSAEncryption d1:61:d5:95:d1:7d:45:6b:ac:db:78:96:b0:70:50:aa:31:18: 3c:f5:8e:78:6f:a8:51:72:b6:d5:4b:29:4a:cc:79:fc:e7:59: 17:72:7c:d8:e1:eb:a9:5c:cf:f9:a7:42:54:21:0e:40:43:f0: 1b:b5:69:82:10:f7:84:56:4f:a4:24:08:24:d1:38:5a:84:55: 0b:27:88:84:35:73:b6:ac:02:67:42:37:72:14:66:7d:3e:26: 0f:a1:e9:03:c7:cd:21:57:ee:d9:2e:6f:30:3e:d3:a2:c6:52: 58:c6:87:d0:d4:2d:25:3c:1e:37:f4:44:10:ce:f1:68:4f:f4: 14:00:c9:e9:cf:6b:27:5c:4f:20:b2:8f:b5:8e:75:12:d2:32: 1a:26:06:f1:b4:82:cd:21:5c:c5:af:1a:fc:f3:8e:fa:db:14: 31:81:a4:42:fb:1d:fb:72:fa:d9:b4:31:cf:e2:56:a3:de:76: 34:0c:12:da:37:7f:1c:2e:18:49:77:fa:e5:d8:02:a8:b6:b3: 39:99:28:03:08:89:25:e1:43:0d:9f:4e:01:ef:13:2a:ce:95: 5c:94:eb:41:c5:1e:77:8c:f9:c4:91:25:4a:b8:e6:de:73:2c: 9d:40:57:13:cc:07:83:04:5e:52:8a:ed:09:21:f3:15:7f:24: 7c:01:ae:15 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUXlaa3Rq115chbdiPposWCN8A2aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTJaFw0yNzAxMTkwMjEwNTJaMDMxMTAvBgNV BAMTKDQ2MkNBNDAwRTQxRjA4MjFEQjZFQTJERkRCODEwNjk4QzcyRDM1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBv3e3Q4c+/CzV2hqRvfDNp/lj PMrSrqTUwMXFYVHi2yPOGsiV0QfIRJUH1rB4Jys9jx4pYN6By/j+WTnEmU3/onaS QXUtyQsA3LlFC7nD/e3b4Dapo7dWh/HhqLsHzySqNe2GZT/4V7hujnmCzG9rgz8W IVOwnHcAf2la3LZFyyw1lQ8A6W1c1D81HtPxc37JNDARecxzjdC1Fbk1AtfppUsW PC4KoGhyl9wHpSYvLer9MOMpUqMHADEwELZRG/sNSxbVJgZuf7y6SATBuBKcrWIY SPXZdbdTFTTPWxDoaNIrLeF8Pfnno3taGKiN3Xy/Kq/X9Z4GqDEW1CP4DfbTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQURiykAOQfCCHbbqLf24EGmMctNaswHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC8zNDMyMmUzMjM0 MzAyZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzczNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACrw/jANBgkqhkiG9w0BAQsFAAOCAQEA0WHVldF9RWus23iWsHBQ qjEYPPWOeG+oUXK21UspSsx5/OdZF3J82OHrqVzP+adCVCEOQEPwG7VpghD3hFZP pCQIJNE4WoRVCyeIhDVztqwCZ0I3chRmfT4mD6HpA8fNIVfu2S5vMD7TosZSWMaH 0NQtJTweN/REEM7xaE/0FADJ6c9rJ1xPILKPtY51EtIyGiYG8bSCzSFcxa8a/POO +tsUMYGkQvsd+3L62bQxz+JWo952NAwS2jd/HC4YSXf65dgCqLazOZkoAwiJJeFD DZ9OAe8TKs6VXJTrQcUed4z5xJElSrjm3nMsnUBXE8wHgwReUortCSHzFX8kfAGu FQ== -----END CERTIFICATE-----Generated at Wed Jan 21 01:32:04 2026 by rpki-client