This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313333303333.roa File: 34352e3234382e382e302f32322d3232203d3e20313333303333.roa (raw, json) Hash identifier: qsctuPBSfA+Dx7b6pLOln9nnloiMUANcbyygIqgY4OQ= Subject key identifier: 2E:37:54:34:EB:A9:5D:3F:51:BE:DD:C2:08:82:E9:06:6A:B9:D6:4B Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Certificate serial: 641AF25C637828FF2CA4A1824813DED390FC46C6 Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313333303333.roa Signing time: Tue 20 Jan 2026 02:20:23 +0000 ROA not before: Tue 20 Jan 2026 02:15:23 +0000 ROA not after: Tue 19 Jan 2027 02:20:23 +0000 asID: 133033 IP address blocks: 45.248.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1a:f2:5c:63:78:28:ff:2c:a4:a1:82:48:13:de:d3:90:fc:46:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Validity Not Before: Jan 20 02:15:23 2026 GMT Not After : Jan 19 02:20:23 2027 GMT Subject: CN=2E375434EBA95D3F51BEDDC20882E9066AB9D64B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:b1:73:1c:79:43:36:63:f2:27:45:40:fe: 2e:d2:07:59:8b:35:ad:08:a0:88:3b:5c:1d:e0:c6: 6a:a3:ab:0e:d3:3c:aa:80:76:87:3d:53:0d:6a:57: c6:52:e0:b1:7d:df:7d:fe:19:ff:bf:64:9e:d7:82: 2e:b8:9d:e7:18:dd:80:2c:20:48:e1:10:3d:63:7d: 87:ec:d6:52:c8:5d:85:7e:b5:ca:09:19:35:a2:e3: 92:ff:bc:59:28:88:93:75:51:81:bb:20:bd:8d:1d: 32:e1:d9:43:6d:92:99:ae:eb:ea:77:b9:ce:d6:f3: d7:20:36:75:95:0f:e1:05:4e:a5:c8:53:bb:10:5b: 5d:30:19:b3:1c:c0:0a:43:4d:3b:5b:df:ed:44:93: 00:e5:3b:a5:34:ae:8f:58:51:d1:0a:27:c2:97:32: 16:5c:b1:83:54:d9:00:f1:07:e9:5e:b2:bf:21:52: 0e:fc:1a:49:0b:fc:87:64:50:22:f9:73:e7:4c:4f: 5d:9d:14:73:69:d7:f5:89:3e:c8:2f:5a:f3:8e:25: c4:60:12:4c:69:6d:b9:69:74:76:2a:33:9c:7d:26: 0d:e9:2e:81:1c:66:1a:a4:aa:15:88:bc:c2:2e:cc: ba:50:16:97:b7:27:4a:ff:52:d1:71:6d:b0:7e:85: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:37:54:34:EB:A9:5D:3F:51:BE:DD:C2:08:82:E9:06:6A:B9:D6:4B X509v3 Authority Key Identifier: keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313333303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.8.0/22 Signature Algorithm: sha256WithRSAEncryption b8:13:50:e9:50:30:fc:5d:2d:90:bd:01:71:45:76:ae:29:5d: 8c:da:b4:70:92:cd:08:ed:18:80:80:f6:27:7a:c5:4f:42:95: 8c:98:a6:df:79:0e:f9:d6:31:3a:6a:6b:23:9c:c4:56:e5:1b: ab:a7:2e:6b:85:4b:8f:5b:c5:74:57:4f:2d:9b:fc:e8:55:e9: ea:24:27:f4:65:0b:62:b5:97:2c:b5:b4:76:cd:19:ea:0e:3b: e2:4e:5d:c8:54:6a:13:63:72:9c:63:cc:ad:8c:92:2d:dc:46: ad:0f:88:84:a4:87:a2:4c:0d:b5:c4:c5:0e:c4:52:e9:87:1a: 54:79:af:1c:11:46:b9:c9:9b:ed:99:12:47:c8:51:1c:ce:f4: a6:40:21:59:5e:61:b7:81:40:ee:44:26:a2:01:aa:7d:15:83: 6d:4b:99:34:74:9d:10:1e:e1:1a:28:55:41:5f:41:bd:c8:59: 66:2c:b6:86:6f:a7:31:f1:93:65:f2:be:14:9f:40:15:18:74: 1f:b4:5b:4b:bb:56:6f:1a:5f:bb:b0:34:6e:18:6f:dd:61:50: 70:c0:c2:ee:97:00:7c:41:17:03:f1:36:92:93:d4:81:bd:a1: 51:9f:c5:42:88:e0:9b:8e:ac:29:d0:ea:96:d4:21:7c:98:4b: ba:2a:f4:ab -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZBryXGN4KP8spKGCSBPe05D8RsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD RERCNDRGMDAeFw0yNjAxMjAwMjE1MjNaFw0yNzAxMTkwMjIwMjNaMDMxMTAvBgNV BAMTKDJFMzc1NDM0RUJBOTVEM0Y1MUJFRERDMjA4ODJFOTA2NkFCOUQ2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICrFzHHlDNmPyJ0VA/i7SB1mL Na0IoIg7XB3gxmqjqw7TPKqAdoc9Uw1qV8ZS4LF9333+Gf+/ZJ7Xgi64necY3YAs IEjhED1jfYfs1lLIXYV+tcoJGTWi45L/vFkoiJN1UYG7IL2NHTLh2UNtkpmu6+p3 uc7W89cgNnWVD+EFTqXIU7sQW10wGbMcwApDTTtb3+1EkwDlO6U0ro9YUdEKJ8KX MhZcsYNU2QDxB+lesr8hUg78GkkL/IdkUCL5c+dMT12dFHNp1/WJPsgvWvOOJcRg EkxpbblpdHYqM5x9Jg3pLoEcZhqkqhWIvMIuzLpQFpe3J0r/UtFxbbB+hUB9AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQULjdUNOupXT9Rvt3CCILpBmq51kswHwYDVR0j BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3 ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODE1NDg5LzAvMzQzNTJlMzIzNDM4 MmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzMwMzMzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi34CDANBgkqhkiG9w0BAQsFAAOCAQEAuBNQ6VAw/F0tkL0BcUV2rildjNq0 cJLNCO0YgID2J3rFT0KVjJim33kO+dYxOmprI5zEVuUbq6cua4VLj1vFdFdPLZv8 6FXp6iQn9GULYrWXLLW0ds0Z6g474k5dyFRqE2NynGPMrYySLdxGrQ+IhKSHokwN tcTFDsRS6YcaVHmvHBFGucmb7ZkSR8hRHM70pkAhWV5ht4FA7kQmogGqfRWDbUuZ NHSdEB7hGihVQV9BvchZZiy2hm+nMfGTZfK+FJ9AFRh0H7RbS7tWbxpfu7A0bhhv 3WFQcMDC7pcAfEEXA/E2kpPUgb2hUZ/FQojgm46sKdDqltQhfJhLuir0qw== -----END CERTIFICATE-----Generated at Tue Jan 20 20:57:25 2026 by rpki-client