This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e203632343638.roa
File: 34332e3235342e3139322e302f32322d3332203d3e203632343638.roa (raw, json)
Hash identifier: bobpjRftY4EVuVK7RVubsSzMLbBd0b7awOTlrxaV/28=
Subject key identifier: 4F:ED:6F:53:4F:42:3C:36:31:AA:D1:78:6E:AC:3E:72:20:96:10:BD
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 17DCEDF4680104552221D9F7406CC16248F097A0
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e203632343638.roa
Signing time: Tue 20 Jan 2026 02:20:23 +0000
ROA not before: Tue 20 Jan 2026 02:15:23 +0000
ROA not after: Tue 19 Jan 2027 02:20:23 +0000
asID: 62468
IP address blocks: 43.254.192.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:dc:ed:f4:68:01:04:55:22:21:d9:f7:40:6c:c1:62:48:f0:97:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Jan 20 02:15:23 2026 GMT
Not After : Jan 19 02:20:23 2027 GMT
Subject: CN=4FED6F534F423C3631AAD1786EAC3E72209610BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:d1:79:10:d6:f3:e0:a2:52:f1:3f:4b:a9:
c0:16:be:b0:08:82:1a:c1:17:0c:f1:85:9a:27:88:
0e:06:6d:2a:82:a6:5b:d0:f5:26:95:18:37:05:0c:
46:8d:70:6b:93:1e:a9:8d:93:7c:b1:47:d3:2f:24:
d3:dd:38:eb:ef:fd:61:23:26:d8:b4:45:9a:5f:cd:
87:fa:19:41:1e:0c:50:76:20:b7:df:11:f5:32:8f:
ca:57:68:f3:f3:31:6f:cd:f8:9b:fa:94:6d:cf:f1:
b4:2d:6c:c8:a5:52:2e:5c:97:c3:84:f6:b9:62:37:
2f:4d:9a:cc:36:35:8f:02:8f:d2:3e:74:33:41:f9:
70:0d:a2:ad:59:95:96:c7:7c:be:d2:fb:ae:89:61:
7c:4f:21:48:fd:81:3a:29:bf:f1:fe:9c:69:6f:2e:
41:eb:a9:db:21:a8:5e:99:28:42:d3:6d:fe:25:61:
d2:b5:12:a2:d3:4c:93:c2:9e:5a:29:35:66:b7:c6:
a3:c5:12:de:9a:94:e4:e8:e1:c7:01:ce:7b:69:36:
f5:15:47:bf:6f:23:67:97:29:aa:90:9b:10:e6:84:
c9:92:b5:92:90:3b:f0:9a:f5:24:23:f9:a2:38:92:
3b:99:d2:7f:60:34:ab:01:8d:a8:23:12:a0:91:06:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:6F:53:4F:42:3C:36:31:AA:D1:78:6E:AC:3E:72:20:96:10:BD
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e203632343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.254.192.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:d0:22:f1:da:e5:20:37:d2:bc:1f:13:34:e9:47:95:c4:fb:
0c:34:5e:cd:c5:40:d6:eb:11:02:04:00:95:d1:a8:33:5f:df:
5e:a2:4a:c1:00:f7:2b:2a:b7:6d:5e:62:f9:b9:77:14:79:84:
39:c4:d8:14:6d:42:ec:dd:19:d8:4a:36:d3:ae:6b:a3:81:1e:
93:35:0f:66:3c:54:73:8f:0c:5e:52:55:61:fd:b8:69:bb:20:
d0:69:58:77:18:77:1b:67:df:51:c7:48:d0:e9:7a:72:66:de:
3b:2d:55:f8:a0:76:71:cf:40:9e:cf:6f:ef:20:e4:f9:7a:14:
2e:8e:74:00:b0:3c:c1:c0:9d:77:46:62:de:96:64:d6:77:fd:
11:67:26:61:6c:93:0f:b3:d9:b1:d5:b4:95:b3:46:4f:f8:e9:
46:fa:b5:10:5b:dd:f9:2d:22:e1:66:1f:2b:3e:d3:82:c0:1c:
94:fe:58:3a:bd:e1:7d:e3:04:75:d4:b4:c9:1b:53:44:d8:7d:
e5:af:c1:de:b9:c5:60:b8:78:a0:d8:f5:b5:34:74:c4:ec:b3:
85:93:1d:78:2c:e1:72:6e:3d:51:76:4d:1b:fd:24:55:6b:65:
56:36:d2:db:a5:52:49:bc:cc:7c:6e:fb:aa:40:5a:92:ec:de:
92:46:13:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 18:04:44 2026 by rpki-client