This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e203632343638.roa File: 34352e3234382e382e302f32322d3232203d3e203632343638.roa (raw, json) Hash identifier: PRQJYfAdJbDuylQLPpP0OmrWCtfzAtohw68L22CpuFQ= Subject key identifier: D0:BC:D3:32:97:22:87:F1:A0:58:18:36:A6:41:FD:E9:62:17:60:16 Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Certificate serial: 3FFB8BDDB1ABCD8ECC568E1635FAE8A0809E8B0C Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e203632343638.roa Signing time: Tue 20 Jan 2026 02:20:23 +0000 ROA not before: Tue 20 Jan 2026 02:15:23 +0000 ROA not after: Tue 19 Jan 2027 02:20:23 +0000 asID: 62468 IP address blocks: 45.248.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 03:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fb:8b:dd:b1:ab:cd:8e:cc:56:8e:16:35:fa:e8:a0:80:9e:8b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Validity Not Before: Jan 20 02:15:23 2026 GMT Not After : Jan 19 02:20:23 2027 GMT Subject: CN=D0BCD332972287F1A0581836A641FDE962176016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:f6:97:bc:f8:35:e0:60:2b:c2:d1:2e:a9: 29:1c:52:8a:37:f8:d3:57:28:b9:d8:ea:72:ae:2b: a7:f7:5f:62:15:16:a4:69:87:e7:72:40:bb:53:03: 09:b0:4c:c8:e2:27:f5:a4:8e:20:20:e0:10:dc:10: 04:5d:73:17:35:56:12:aa:03:6c:00:7e:ae:c2:f2: bf:b0:e1:98:ae:e0:a2:b2:8e:41:f6:f6:2e:fb:2b: 84:6d:12:15:a9:e3:df:bf:d7:82:81:e5:a8:9b:b7: 8d:2e:d4:76:02:e6:b0:d5:38:d2:75:72:0b:93:f2: f4:f0:be:e5:4e:62:22:69:17:0d:7d:1b:ab:e0:aa: 0b:09:93:b6:73:d8:1f:c4:ad:25:f6:6d:0c:92:19: 89:c1:e2:0d:fe:83:74:37:4a:54:f2:9b:cb:ac:37: 40:8d:e3:68:28:76:72:5c:34:cf:88:c0:2c:12:88: 23:da:36:44:c7:19:4a:f6:c4:cc:f9:c8:8d:08:ea: 84:b9:f2:8c:64:ef:c4:91:8b:84:78:a8:6a:e4:ab: 76:e6:cc:69:70:cf:f0:53:fe:d0:5d:aa:6e:56:58: cd:9a:1d:cc:e4:be:b1:1e:0c:25:9d:6f:db:f2:37: 56:4a:8b:92:32:e0:32:df:46:b3:2f:3a:04:10:4e: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BC:D3:32:97:22:87:F1:A0:58:18:36:A6:41:FD:E9:62:17:60:16 X509v3 Authority Key Identifier: keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e203632343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.8.0/22 Signature Algorithm: sha256WithRSAEncryption 83:18:ea:b0:b3:b3:88:12:43:ac:45:87:b3:6d:b5:3b:5b:33: 5d:95:c7:7f:c3:dd:c2:e2:9e:1c:c7:3f:f6:d7:34:dd:9b:7b: 49:9c:93:59:af:cd:7b:26:41:80:9c:0a:1a:2e:0f:ea:06:99: 40:e8:7b:34:63:c2:c8:9c:58:58:67:c5:f0:3b:08:76:be:05: 3a:a0:29:f0:03:a3:e3:9b:9a:70:f5:a3:9a:52:ef:09:f9:55: 2b:0b:5e:0c:f5:3c:e3:20:18:20:37:db:69:5a:4b:df:c4:29: 27:38:7b:4b:6b:a3:de:a8:53:98:0b:1c:ea:f6:90:55:f3:27: 01:b7:a7:96:73:b9:b9:05:cf:6f:0d:ac:70:75:97:93:ca:04: 60:29:b5:e6:0d:f4:1e:fe:9f:7d:e8:e4:22:28:fe:a9:86:55: 1c:eb:46:a6:f7:20:e3:f0:a4:33:f8:30:53:d0:c3:92:0d:d9: 04:d2:4e:13:1b:fd:7b:55:a4:14:66:24:18:0f:23:42:28:c7: 45:db:b1:c7:81:e3:b1:8e:8b:e4:ae:83:80:c0:35:1d:89:b4: 47:9d:97:19:2e:d8:1f:a6:e3:f4:93:98:19:86:7d:37:13:a5: 46:f6:12:d2:0d:a7:e0:1f:1c:aa:0d:87:6a:3d:40:ad:4f:43: be:6a:3e:3e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUP/uL3bGrzY7MVo4WNfrooICeiwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD RERCNDRGMDAeFw0yNjAxMjAwMjE1MjNaFw0yNzAxMTkwMjIwMjNaMDMxMTAvBgNV BAMTKEQwQkNEMzMyOTcyMjg3RjFBMDU4MTgzNkE2NDFGREU5NjIxNzYwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTv/aXvPg14GArwtEuqSkcUoo3 +NNXKLnY6nKuK6f3X2IVFqRph+dyQLtTAwmwTMjiJ/WkjiAg4BDcEARdcxc1VhKq A2wAfq7C8r+w4Ziu4KKyjkH29i77K4RtEhWp49+/14KB5aibt40u1HYC5rDVONJ1 cguT8vTwvuVOYiJpFw19G6vgqgsJk7Zz2B/ErSX2bQySGYnB4g3+g3Q3SlTym8us N0CN42godnJcNM+IwCwSiCPaNkTHGUr2xMz5yI0I6oS58oxk78SRi4R4qGrkq3bm zGlwz/BT/tBdqm5WWM2aHczkvrEeDCWdb9vyN1ZKi5Iy4DLfRrMvOgQQTgRHAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU0LzTMpcih/GgWBg2pkH96WIXYBYwHwYDVR0j BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3 ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODE1NDg5LzAvMzQzNTJlMzIzNDM4 MmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2MzIzNDM2Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt+AgwDQYJKoZIhvcNAQELBQADggEBAIMY6rCzs4gSQ6xFh7NttTtbM12Vx3/D 3cLinhzHP/bXNN2be0mck1mvzXsmQYCcChouD+oGmUDoezRjwsicWFhnxfA7CHa+ BTqgKfADo+ObmnD1o5pS7wn5VSsLXgz1POMgGCA322laS9/EKSc4e0tro96oU5gL HOr2kFXzJwG3p5ZzubkFz28NrHB1l5PKBGApteYN9B7+n33o5CIo/qmGVRzrRqb3 IOPwpDP4MFPQw5IN2QTSThMb/XtVpBRmJBgPI0Iox0XbsceB47GOi+Sug4DANR2J tEedlxku2B+m4/STmBmGfTcTpUb2EtINp+AfHKoNh2o9QK1PQ75qPj4= -----END CERTIFICATE-----Generated at Tue Jan 20 18:02:37 2026 by rpki-client