This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235352e302f32342d3234203d3e20313339333237.roa File: 34322e3234302e3235352e302f32342d3234203d3e20313339333237.roa (raw, json) Hash identifier: C1571JRg/KD/10nDIC3UgLf7giFCmKnkXWwUXPkHNjw= Subject key identifier: E9:AB:2B:BC:9B:52:0F:5F:9D:AD:27:A5:EA:D8:1D:82:11:25:07:6E Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 30BF738F52E7CEA4EA8495AE5D7E3949ABFA909C Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235352e302f32342d3234203d3e20313339333237.roa Signing time: Tue 20 Jan 2026 02:10:50 +0000 ROA not before: Tue 20 Jan 2026 02:05:50 +0000 ROA not after: Tue 19 Jan 2027 02:10:50 +0000 asID: 139327 IP address blocks: 42.240.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bf:73:8f:52:e7:ce:a4:ea:84:95:ae:5d:7e:39:49:ab:fa:90:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:50 2026 GMT Not After : Jan 19 02:10:50 2027 GMT Subject: CN=E9AB2BBC9B520F5F9DAD27A5EAD81D821125076E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4d:0e:92:a9:4d:81:ef:43:98:46:71:f2:e4: 44:1c:3b:3f:98:e2:b1:04:59:46:ff:66:15:82:fd: d1:47:72:93:8d:79:ea:15:1d:ed:41:96:8c:28:7f: af:81:96:10:94:f1:8b:09:35:75:61:1b:9b:b6:07: 94:07:97:1c:a9:7c:d6:6f:9f:6d:c2:e3:9c:3f:f2: da:3b:7f:40:08:ef:82:51:0d:87:b0:0e:8f:9c:7d: e8:aa:b8:93:e3:fe:f4:80:46:21:6f:45:fc:95:18: 2c:86:1d:9f:48:e9:d6:28:fb:ea:34:02:03:f3:e5: 29:3e:79:a6:56:d8:14:11:de:f4:61:e0:78:39:fd: 6b:dc:52:14:8f:e0:60:5d:a1:09:2a:d4:dc:a4:64: f5:d3:b3:ea:4b:84:87:88:88:b5:41:48:a3:ad:d3: 29:69:b7:41:82:2a:e1:21:d0:6d:b7:a6:76:0f:ba: 7a:c0:14:ef:93:b9:e9:c7:eb:cc:e1:d4:97:70:2a: 15:1d:f2:ed:7c:f7:54:34:3e:3a:62:f3:d5:3c:23: ca:48:71:1e:6a:2f:93:1d:16:db:7b:5f:5f:e2:68: 52:5b:0b:d8:f4:6b:07:57:72:f1:20:02:d7:52:e7: e0:57:21:03:7f:6e:83:f2:9c:5c:c9:e7:fc:5e:0d: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AB:2B:BC:9B:52:0F:5F:9D:AD:27:A5:EA:D8:1D:82:11:25:07:6E X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235352e302f32342d3234203d3e20313339333237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.255.0/24 Signature Algorithm: sha256WithRSAEncryption 30:4f:66:31:b8:9e:da:5c:86:12:3b:c3:7c:53:7d:eb:22:dc: 47:87:b6:06:0c:78:73:92:46:c4:8b:df:aa:61:7f:0f:61:e6: e6:7d:54:d4:03:0e:49:9a:b8:c2:db:2a:61:4f:f3:0b:ef:89: 33:9e:02:c2:52:d6:b1:92:dd:3d:34:ba:46:c5:55:14:00:49: a6:2d:d2:1e:30:84:00:41:fd:5e:8a:19:6f:a1:b3:d1:9c:4d: 2e:38:6a:84:a1:bb:03:85:3b:27:6b:22:ec:92:d6:95:3a:d9: 08:10:a4:f0:fd:bd:9c:0a:7e:e9:7c:a6:85:04:9c:6b:05:62: af:d5:c6:cf:55:a4:9b:02:9d:81:c3:dc:eb:46:07:9f:25:1e: e2:13:4c:a2:74:5f:09:4f:24:e4:56:38:fc:4c:d7:2c:a1:45: c2:3a:f0:47:be:2d:97:1d:01:d8:35:05:5b:60:45:32:20:cd: 03:51:5b:24:95:5e:ee:46:f0:7d:ab:ed:b7:a5:57:e1:e1:09: f9:76:0d:19:a4:14:ed:0b:33:ac:94:a3:33:3a:93:0b:79:a5: e6:84:8a:9f:ef:f2:94:86:42:09:47:23:3e:a7:76:7f:a9:12: 32:cb:56:50:ec:43:f7:8c:06:9d:b6:c3:b2:18:26:07:58:f7: a9:dd:21:39 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUML9zj1LnzqTqhJWuXX45Sav6kJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTBaFw0yNzAxMTkwMjEwNTBaMDMxMTAvBgNV BAMTKEU5QUIyQkJDOUI1MjBGNUY5REFEMjdBNUVBRDgxRDgyMTEyNTA3NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlTQ6SqU2B70OYRnHy5EQcOz+Y 4rEEWUb/ZhWC/dFHcpONeeoVHe1Blowof6+BlhCU8YsJNXVhG5u2B5QHlxypfNZv n23C45w/8to7f0AI74JRDYewDo+cfeiquJPj/vSARiFvRfyVGCyGHZ9I6dYo++o0 AgPz5Sk+eaZW2BQR3vRh4Hg5/WvcUhSP4GBdoQkq1NykZPXTs+pLhIeIiLVBSKOt 0ylpt0GCKuEh0G23pnYPunrAFO+TuenH68zh1JdwKhUd8u1891Q0Pjpi89U8I8pI cR5qL5MdFtt7X1/iaFJbC9j0awdXcvEgAtdS5+BXIQN/boPynFzJ5/xeDSkZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU6asrvJtSD1+drSel6tgdghElB24wHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC8zNDMyMmUzMjM0 MzAyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMzMzIzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACrw/zANBgkqhkiG9w0BAQsFAAOCAQEAME9mMbie2lyGEjvDfFN9 6yLcR4e2Bgx4c5JGxIvfqmF/D2Hm5n1U1AMOSZq4wtsqYU/zC++JM54CwlLWsZLd PTS6RsVVFABJpi3SHjCEAEH9XooZb6Gz0ZxNLjhqhKG7A4U7J2si7JLWlTrZCBCk 8P29nAp+6XymhQScawVir9XGz1WkmwKdgcPc60YHnyUe4hNMonRfCU8k5FY4/EzX LKFFwjrwR74tlx0B2DUFW2BFMiDNA1FbJJVe7kbwfavtt6VX4eEJ+XYNGaQU7Qsz rJSjMzqTC3ml5oSKn+/ylIZCCUcjPqd2f6kSMstWUOxD94wGnbbDshgmB1j3qd0h OQ== -----END CERTIFICATE-----Generated at Wed Jan 21 04:24:32 2026 by rpki-client