This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e20313333303333.roa File: 34332e3235342e3139322e302f32322d3332203d3e20313333303333.roa (raw, json) Hash identifier: r3XpPj1FYm8r25RMxCEfXoeyc9BUGQNJDYDBp+PrjQI= Subject key identifier: A4:98:7E:38:CE:88:C4:09:D9:6A:23:A9:84:91:21:CA:20:68:7C:FA Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Certificate serial: 2D82A1F98B890EFF107371CF839E1B38B333C7A7 Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e20313333303333.roa Signing time: Tue 20 Jan 2026 02:20:22 +0000 ROA not before: Tue 20 Jan 2026 02:15:22 +0000 ROA not after: Tue 19 Jan 2027 02:20:22 +0000 asID: 133033 IP address blocks: 43.254.192.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:82:a1:f9:8b:89:0e:ff:10:73:71:cf:83:9e:1b:38:b3:33:c7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Validity Not Before: Jan 20 02:15:22 2026 GMT Not After : Jan 19 02:20:22 2027 GMT Subject: CN=A4987E38CE88C409D96A23A9849121CA20687CFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:79:54:f2:e6:b4:53:55:fa:0c:ad:52:67: 84:bc:a0:07:a7:17:e4:5f:a2:98:ce:2a:e5:93:08: a5:2e:9e:29:02:76:47:e6:9d:6c:99:16:f8:59:fb: ca:14:8c:f9:e1:ea:d5:f9:04:2d:0d:bc:ef:37:cb: a4:de:ae:e7:b4:8c:ef:06:de:fd:08:79:41:ab:ad: c0:cb:82:b5:94:64:8b:19:15:f9:eb:ae:19:b4:e2: 0d:dc:52:78:4b:c8:5f:af:64:b0:23:f7:e7:75:8e: d8:4e:37:dd:c7:a7:a7:bf:3c:21:06:35:bf:c9:1b: 24:d1:c4:56:92:c3:51:ab:59:12:9f:69:80:57:01: 2c:cf:16:88:04:05:7f:2c:91:7c:39:2e:33:f4:9b: 69:09:06:b4:63:5e:5d:99:b0:98:49:af:a1:9d:c1: 15:74:75:99:b7:12:73:75:7c:ae:fa:8b:65:77:ae: bc:86:ba:c0:58:01:68:1b:cb:79:2c:59:a2:ac:5f: d4:a4:74:1d:e5:5f:a1:13:a6:c1:20:77:43:17:48: 8c:53:fb:68:70:f5:ea:33:f2:c7:ca:ed:36:ec:30: 1f:cf:4c:9b:ae:f5:e6:95:c2:95:31:87:00:de:98: d4:6b:71:3e:8d:ab:16:c3:1f:99:a9:f8:3d:a5:8b: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:98:7E:38:CE:88:C4:09:D9:6A:23:A9:84:91:21:CA:20:68:7C:FA X509v3 Authority Key Identifier: keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e20313333303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.192.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:6f:8e:d8:06:19:74:98:95:eb:fd:5c:12:ea:94:4f:83:60: 80:fe:41:17:bd:01:c3:b3:93:4b:79:0d:a5:c4:43:4a:dc:00: aa:5a:bf:e1:aa:81:7f:c7:aa:42:2c:4a:8e:8e:30:a2:ea:7d: 2c:c8:5a:b9:d1:1a:6b:42:4c:63:88:fa:4b:f0:03:4c:66:7e: 1e:dd:89:27:b5:b0:c7:31:57:de:c1:7c:83:80:38:1c:5e:2a: 5d:44:e1:d3:f9:ea:24:90:af:01:4c:84:e6:97:bb:a7:b4:c5: ed:fe:ff:c8:28:05:03:a4:0b:f2:5b:0a:8e:ee:33:92:50:77: a1:18:45:1d:c3:78:7e:24:c3:47:e0:f5:b4:1e:cc:84:39:0c: ae:99:9b:26:dd:35:4f:76:67:41:3e:50:2d:8d:96:e3:87:0b: 0f:45:3f:92:38:81:12:81:b8:cb:21:48:f2:c3:e2:cd:d6:b7: 7e:c3:82:0b:64:cc:35:41:4d:f2:c9:df:52:73:8a:10:c6:0c: 0d:b4:91:d8:fa:70:15:43:a6:26:0c:d3:0b:6e:6f:bf:d6:09: ce:46:31:6b:58:8a:fb:db:34:d0:e7:4e:3b:16:d0:17:fc:a8: dd:2d:f2:02:82:d7:84:47:f3:82:13:5c:3a:f3:c9:ba:b0:33: a0:db:8f:26 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULYKh+YuJDv8Qc3HPg54bOLMzx6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD RERCNDRGMDAeFw0yNjAxMjAwMjE1MjJaFw0yNzAxMTkwMjIwMjJaMDMxMTAvBgNV BAMTKEE0OTg3RTM4Q0U4OEM0MDlEOTZBMjNBOTg0OTEyMUNBMjA2ODdDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFh3lU8ua0U1X6DK1SZ4S8oAen F+RfopjOKuWTCKUunikCdkfmnWyZFvhZ+8oUjPnh6tX5BC0NvO83y6Terue0jO8G 3v0IeUGrrcDLgrWUZIsZFfnrrhm04g3cUnhLyF+vZLAj9+d1jthON93Hp6e/PCEG Nb/JGyTRxFaSw1GrWRKfaYBXASzPFogEBX8skXw5LjP0m2kJBrRjXl2ZsJhJr6Gd wRV0dZm3EnN1fK76i2V3rryGusBYAWgby3ksWaKsX9SkdB3lX6ETpsEgd0MXSIxT +2hw9eoz8sfK7TbsMB/PTJuu9eaVwpUxhwDemNRrcT6NqxbDH5mp+D2li5AtAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUpJh+OM6IxAnZaiOphJEhyiBofPowHwYDVR0j BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3 ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMC8zNDMzMmUzMjM1 MzQyZTMxMzkzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzMzMwMzMzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAiv+wDANBgkqhkiG9w0BAQsFAAOCAQEATm+O2AYZdJiV6/1cEuqU T4NggP5BF70Bw7OTS3kNpcRDStwAqlq/4aqBf8eqQixKjo4woup9LMhaudEaa0JM Y4j6S/ADTGZ+Ht2JJ7WwxzFX3sF8g4A4HF4qXUTh0/nqJJCvAUyE5pe7p7TF7f7/ yCgFA6QL8lsKju4zklB3oRhFHcN4fiTDR+D1tB7MhDkMrpmbJt01T3ZnQT5QLY2W 44cLD0U/kjiBEoG4yyFI8sPizda3fsOCC2TMNUFN8snfUnOKEMYMDbSR2PpwFUOm JgzTC25vv9YJzkYxa1iK+9s00OdOOxbQF/yo3S3yAoLXhEfzghNcOvPJurAzoNuP Jg== -----END CERTIFICATE-----Generated at Tue Jan 20 20:58:15 2026 by rpki-client