This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3132382e302f31392d3234203d3e20313332323033.roa File: 34392e35312e3132382e302f31392d3234203d3e20313332323033.roa (raw, json) Hash identifier: zKOA0n66BU+SoiPBnug1At88IlANvpPXbu8zTTSrK+E= Subject key identifier: BE:B8:3F:24:4D:7B:8D:FF:82:84:9D:53:63:00:B1:72:E2:29:7B:F2 Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62 Certificate serial: 6B8208F66B7CC0486AC23CD0CEEC133D8CE93E0C Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3132382e302f31392d3234203d3e20313332323033.roa Signing time: Tue 20 Jan 2026 02:26:07 +0000 ROA not before: Tue 20 Jan 2026 02:21:07 +0000 ROA not after: Tue 19 Jan 2027 02:26:07 +0000 asID: 132203 IP address blocks: 49.51.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 05:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:82:08:f6:6b:7c:c0:48:6a:c2:3c:d0:ce:ec:13:3d:8c:e9:3e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62 Validity Not Before: Jan 20 02:21:07 2026 GMT Not After : Jan 19 02:26:07 2027 GMT Subject: CN=BEB83F244D7B8DFF82849D536300B172E2297BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:23:e4:32:07:4a:10:5e:c8:fa:45:5f:04: 51:ff:c6:e0:f6:46:a2:53:78:3b:ac:68:00:c3:aa: b4:7b:5b:0a:62:24:fe:a0:5f:44:6f:21:9b:18:cd: b3:0d:72:84:cc:f3:22:b9:04:0f:45:cd:11:2a:e6: 89:de:b4:35:0a:0d:1e:93:5b:fb:f0:6b:45:d7:d4: 29:5c:51:48:48:74:34:c8:27:e3:5a:82:21:e5:41: 69:5f:f5:bd:08:4f:11:5c:77:ad:a4:60:ed:5c:2e: 16:b6:71:36:81:a6:91:95:02:b2:16:7c:ff:9d:c7: 69:c7:7b:24:47:cc:cb:f1:75:95:b4:43:c2:5f:b6: ab:9d:1c:31:17:40:a0:b7:d4:00:6d:bf:d7:31:1f: 4c:b8:07:48:9d:a4:ea:79:ec:40:b7:77:21:32:de: 8e:d5:f0:58:3d:f0:7c:04:52:d1:f4:6d:97:b6:7a: 08:61:b6:e1:71:d9:27:35:de:b8:7e:11:7c:ee:e3: dd:8c:ec:27:d7:86:c6:20:98:9f:57:56:79:c1:64: 37:a7:2f:63:81:de:ca:c1:6f:ec:5a:53:3d:48:2d: 3e:ac:b8:f9:47:61:c9:9c:8e:d2:52:54:ae:7f:9c: 9e:2b:cf:d2:54:1b:63:0c:57:4b:20:97:33:d0:37: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B8:3F:24:4D:7B:8D:FF:82:84:9D:53:63:00:B1:72:E2:29:7B:F2 X509v3 Authority Key Identifier: keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3132382e302f31392d3234203d3e20313332323033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.51.128.0/19 Signature Algorithm: sha256WithRSAEncryption 51:28:df:0a:63:32:cb:78:fd:a4:ae:ec:ac:94:97:5c:7a:ac: 05:f1:a9:c4:16:d8:00:a3:f1:9f:5a:95:1a:3f:d0:73:3a:fc: 91:2e:41:b3:3b:11:ea:25:f2:6f:b9:1a:87:9a:6e:b1:3a:e8: 9f:50:86:8b:ec:b9:e7:d9:28:44:c3:78:7d:34:26:27:98:9e: 97:fa:09:51:9d:fe:39:c0:74:c8:17:80:09:0f:03:5d:c8:d9: c7:b0:0c:72:bf:21:a9:68:21:d3:58:fb:d4:43:66:3f:55:a6: f3:4e:be:fe:73:5c:0c:fd:62:a3:1a:c0:cc:cc:61:02:0a:82: 10:5f:12:32:37:46:ad:d0:36:d6:62:11:55:66:a5:f6:d4:2c: 57:21:07:e4:e6:5b:56:7f:5e:fd:d8:1f:ad:57:d4:e3:81:bb: 5e:c8:02:26:6c:b7:81:03:64:ba:90:46:de:95:87:9b:02:1a: ce:ca:05:c6:b5:1f:b2:32:a1:b3:71:c7:44:b4:1d:36:97:05: 9c:85:c9:63:60:44:5e:56:71:90:af:d4:cb:54:98:e3:b5:9a: a6:3d:7e:a5:0c:5c:a1:f7:a8:be:a4:e9:cd:e0:a4:8e:47:5a: 76:0c:bb:74:7d:9b:bd:17:de:9d:06:a6:5b:98:65:e7:f6:72: 7a:e1:f5:10 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUa4II9mt8wEhqwjzQzuwTPYzpPgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkw Rjk1NkI2MjAeFw0yNjAxMjAwMjIxMDdaFw0yNzAxMTkwMjI2MDdaMDMxMTAvBgNV BAMTKEJFQjgzRjI0NEQ3QjhERkY4Mjg0OUQ1MzYzMDBCMTcyRTIyOTdCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7yPkMgdKEF7I+kVfBFH/xuD2 RqJTeDusaADDqrR7WwpiJP6gX0RvIZsYzbMNcoTM8yK5BA9FzREq5onetDUKDR6T W/vwa0XX1ClcUUhIdDTIJ+NagiHlQWlf9b0ITxFcd62kYO1cLha2cTaBppGVArIW fP+dx2nHeyRHzMvxdZW0Q8JftqudHDEXQKC31ABtv9cxH0y4B0idpOp57EC3dyEy 3o7V8Fg98HwEUtH0bZe2eghhtuFx2Sc13rh+EXzu492M7CfXhsYgmJ9XVnnBZDen L2OB3srBb+xaUz1ILT6suPlHYcmcjtJSVK5/nJ4rz9JUG2MMV0sglzPQN+8ZAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvrg/JE17jf+ChJ1TYwCxcuIpe/IwHwYDVR0j BBgwFoAUT5Sl82+GbyEYB3Xf/zgnmQ+Va2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8wLzRGOTRBNUYzNkY4NjZGMjExODA3NzVERkZGMzgy Nzk5MEY5NTZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkwRjk1NkI2Mi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTM2Mjk0Ni8wLzM0MzkyZTM1MzEy ZTMxMzIzODJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzMzMjMyMzAzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBTEzgDANBgkqhkiG9w0BAQsFAAOCAQEAUSjfCmMyy3j9pK7srJSXXHqs BfGpxBbYAKPxn1qVGj/Qczr8kS5BszsR6iXyb7kah5pusTron1CGi+y559koRMN4 fTQmJ5iel/oJUZ3+OcB0yBeACQ8DXcjZx7AMcr8hqWgh01j71ENmP1Wm806+/nNc DP1ioxrAzMxhAgqCEF8SMjdGrdA21mIRVWal9tQsVyEH5OZbVn9e/dgfrVfU44G7 XsgCJmy3gQNkupBG3pWHmwIazsoFxrUfsjKhs3HHRLQdNpcFnIXJY2BEXlZxkK/U y1SY47Wapj1+pQxcofeovqTpzeCkjkdadgy7dH2bvRfenQamW5hl5/ZyeuH1EA== -----END CERTIFICATE-----Generated at Tue Jan 20 14:52:31 2026 by rpki-client