This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235352e302f32342d3234203d3e20313335333737.roa File: 34322e3234302e3235352e302f32342d3234203d3e20313335333737.roa (raw, json) Hash identifier: esP5hA++77Dv24y5ENRDSATa2o9/UFpy7fd3EVaF5yY= Subject key identifier: 0D:B8:46:5A:62:20:B4:06:A6:26:DA:96:3D:AB:9B:54:87:C2:36:85 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 61F539F93EA872B0A9E1359E750D6C5B3DBEA56D Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235352e302f32342d3234203d3e20313335333737.roa Signing time: Tue 20 Jan 2026 02:10:47 +0000 ROA not before: Tue 20 Jan 2026 02:05:47 +0000 ROA not after: Tue 19 Jan 2027 02:10:47 +0000 asID: 135377 IP address blocks: 42.240.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f5:39:f9:3e:a8:72:b0:a9:e1:35:9e:75:0d:6c:5b:3d:be:a5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:47 2026 GMT Not After : Jan 19 02:10:47 2027 GMT Subject: CN=0DB8465A6220B406A626DA963DAB9B5487C23685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:0b:a0:15:79:e8:c8:1c:47:0d:41:c6:38: df:bf:a3:34:b2:d6:2d:62:d9:a9:70:43:0c:8c:9d: 43:47:5b:48:2d:d4:af:5c:df:ce:9e:49:11:e7:4d: 65:4a:8a:5b:63:c0:eb:22:cf:03:ad:eb:d6:65:00: 40:d0:ac:f6:c4:54:de:32:ec:52:e8:19:c0:de:df: d6:85:c8:9a:9a:ce:1c:21:d6:9b:5c:6b:f7:81:0f: 8d:9e:b8:ef:4f:1b:e9:41:39:5e:80:e7:13:3b:ec: 2c:22:21:06:04:7b:b5:86:cd:2b:fe:fc:a3:97:09: fd:27:e8:48:f2:5f:42:d5:fd:aa:68:db:9d:71:a7: 1e:55:2e:ba:c9:3c:e6:ef:01:2f:3d:77:ee:74:a8: 51:ea:68:86:31:a2:53:69:23:53:20:7e:0e:a1:9f: c1:a0:e3:56:be:a2:e2:7c:c5:61:dc:58:51:54:ee: 34:fe:cc:1f:ba:1f:2c:26:4b:cb:0a:3e:73:2e:1c: 59:84:2e:f2:07:c2:79:72:eb:85:31:15:e8:8f:f8: 8a:ff:b8:92:a3:70:f0:4e:48:6b:34:00:3e:a2:a7: 61:42:b7:e3:ab:3a:8c:a0:3f:21:bc:35:ae:27:1e: 4a:ac:c8:d6:54:4a:84:8c:fe:c7:43:e8:0c:d6:88: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B8:46:5A:62:20:B4:06:A6:26:DA:96:3D:AB:9B:54:87:C2:36:85 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235352e302f32342d3234203d3e20313335333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.255.0/24 Signature Algorithm: sha256WithRSAEncryption 87:4b:86:ce:15:4e:7d:7a:7c:92:46:a0:7e:af:50:f3:d6:9e: d4:24:1f:b2:7c:8c:18:77:0a:32:b0:c6:c8:f8:be:2b:5b:1d: 0d:db:86:4a:3c:37:3b:0e:05:98:b4:8d:3c:f3:7d:07:2e:80: 86:a2:3a:f5:11:16:14:df:0d:e6:2d:85:8a:46:87:b0:9c:e3: 1c:b1:1e:e0:b8:82:74:ba:b6:46:a9:08:41:7e:a3:34:79:95: 86:47:6d:a6:0a:c3:0b:eb:d3:16:55:20:71:7c:52:63:27:fd: c9:ce:f8:87:ce:6a:ba:8d:72:c2:0e:73:b0:a4:f1:93:6b:53: e4:f6:aa:b9:07:f5:f5:f6:55:ee:8a:bf:4e:c7:cf:df:ee:77: 01:c3:52:de:39:64:75:6e:b2:a8:b7:b8:86:b7:84:98:04:81: d3:52:5f:ed:b5:d7:3d:e1:97:db:25:b2:a4:31:16:21:06:b2: 95:86:79:8d:c2:c8:8e:a4:e4:9b:34:4f:4d:f4:2f:8c:be:a5: 60:7e:92:94:2f:c3:36:5a:c9:a1:06:e7:40:33:bc:42:65:e6: 2a:83:eb:70:eb:c6:39:a4:7e:9a:59:02:69:4e:c7:21:c2:1b: 32:40:1e:60:ff:f2:6b:34:59:aa:66:4d:c2:da:4e:3d:3b:23: 62:10:92:a5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYfU5+T6ocrCp4TWedQ1sWz2+pW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDdaFw0yNzAxMTkwMjEwNDdaMDMxMTAvBgNV BAMTKDBEQjg0NjVBNjIyMEI0MDZBNjI2REE5NjNEQUI5QjU0ODdDMjM2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX9wugFXnoyBxHDUHGON+/ozSy 1i1i2alwQwyMnUNHW0gt1K9c386eSRHnTWVKiltjwOsizwOt69ZlAEDQrPbEVN4y 7FLoGcDe39aFyJqazhwh1ptca/eBD42euO9PG+lBOV6A5xM77CwiIQYEe7WGzSv+ /KOXCf0n6EjyX0LV/apo251xpx5VLrrJPObvAS89d+50qFHqaIYxolNpI1Mgfg6h n8Gg41a+ouJ8xWHcWFFU7jT+zB+6HywmS8sKPnMuHFmELvIHwnly64UxFeiP+Ir/ uJKjcPBOSGs0AD6ip2FCt+OrOoygPyG8Na4nHkqsyNZUSoSM/sdD6AzWiP3DAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUDbhGWmIgtAamJtqWPaubVIfCNoUwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC8zNDMyMmUzMjM0 MzAyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzczNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACrw/zANBgkqhkiG9w0BAQsFAAOCAQEAh0uGzhVOfXp8kkagfq9Q 89ae1CQfsnyMGHcKMrDGyPi+K1sdDduGSjw3Ow4FmLSNPPN9By6AhqI69REWFN8N 5i2FikaHsJzjHLEe4LiCdLq2RqkIQX6jNHmVhkdtpgrDC+vTFlUgcXxSYyf9yc74 h85quo1ywg5zsKTxk2tT5PaquQf19fZV7oq/TsfP3+53AcNS3jlkdW6yqLe4hreE mASB01Jf7bXXPeGX2yWypDEWIQaylYZ5jcLIjqTkmzRPTfQvjL6lYH6SlC/DNlrJ oQbnQDO8QmXmKoPrcOvGOaR+mlkCaU7HIcIbMkAeYP/yazRZqmZNwtpOPTsjYhCS pQ== -----END CERTIFICATE-----Generated at Wed Jan 21 01:32:04 2026 by rpki-client