This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3136302e302f32302d3234203d3e20313332323033.roa File: 34392e35312e3136302e302f32302d3234203d3e20313332323033.roa (raw, json) Hash identifier: PB0JB14Q+SPXSqFDSxMJHnR1t3Bc1PbzBDzUhbGN6og= Subject key identifier: BE:0A:7D:C3:E0:AE:10:4F:3C:7B:64:7F:BC:78:4E:4C:4E:74:64:E5 Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62 Certificate serial: 7502DAE557E43B0D425FD9357FB7229F232F505D Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3136302e302f32302d3234203d3e20313332323033.roa Signing time: Tue 20 Jan 2026 02:26:07 +0000 ROA not before: Tue 20 Jan 2026 02:21:07 +0000 ROA not after: Tue 19 Jan 2027 02:26:07 +0000 asID: 132203 IP address blocks: 49.51.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 05:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:02:da:e5:57:e4:3b:0d:42:5f:d9:35:7f:b7:22:9f:23:2f:50:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62 Validity Not Before: Jan 20 02:21:07 2026 GMT Not After : Jan 19 02:26:07 2027 GMT Subject: CN=BE0A7DC3E0AE104F3C7B647FBC784E4C4E7464E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2d:19:7a:f4:26:43:d8:be:21:28:4a:b0:19: 44:95:ca:12:68:ee:bc:63:8c:c6:be:33:74:b8:02: b0:30:31:f3:82:5c:4d:93:a2:f9:b4:e1:97:6d:1e: 24:2c:58:59:a5:8f:a8:31:9c:4c:11:da:2f:b2:78: 48:a2:de:82:ae:f6:d4:9f:a0:e6:85:d5:ad:80:6f: dc:ad:ca:64:89:45:ba:4d:79:9f:06:26:cc:f9:08: 8d:42:13:22:7e:63:04:f5:6a:e9:e4:44:a9:a3:8e: 35:66:ad:26:28:c4:76:42:83:ae:61:49:6e:ca:20: 49:f7:47:58:81:9b:26:29:b9:5c:72:f9:60:b6:32: 19:64:4f:76:03:84:60:c4:d5:25:81:d8:7f:90:30: c9:9b:ca:e0:08:c6:47:fa:79:d1:14:5a:4f:53:16: 6f:bf:e5:44:65:95:14:0e:57:bb:50:00:49:d0:9b: 69:b1:7c:8b:4f:32:c6:84:93:98:98:7e:63:ff:3d: 2b:9c:06:75:4f:17:51:29:86:9d:3b:e5:a9:13:b3: d0:90:45:82:b2:56:ea:50:e7:db:d3:3e:e3:c3:47: a7:2a:a5:9b:2e:6e:43:14:c6:ae:02:be:88:81:57: a1:83:eb:d2:92:32:6f:bd:db:f6:98:44:b3:11:e0: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0A:7D:C3:E0:AE:10:4F:3C:7B:64:7F:BC:78:4E:4C:4E:74:64:E5 X509v3 Authority Key Identifier: keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3136302e302f32302d3234203d3e20313332323033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.51.160.0/20 Signature Algorithm: sha256WithRSAEncryption a3:fc:87:33:ff:52:c4:45:10:cb:8e:88:c7:7d:31:93:aa:19: b2:ce:e7:2d:d2:aa:f9:6e:fd:c4:8b:38:fa:32:4e:7e:95:ae: 99:d1:e9:84:fa:c6:b3:c7:da:47:a5:00:29:5c:dc:85:e5:c2: 37:b8:8e:42:d8:12:ca:40:ef:24:65:73:3d:89:8b:eb:04:06: 3a:69:8b:54:25:b9:6a:aa:07:ca:78:da:a0:4c:c2:cf:d1:47: a7:76:ed:23:e5:1f:7f:28:b4:b2:c8:0d:2a:6c:9c:dc:44:23: 46:10:23:09:02:06:20:3f:f8:cf:76:59:bf:6c:f3:00:5b:bd: 62:c3:d5:18:6e:dc:64:1a:fb:c9:44:9a:77:ff:7f:50:35:e7: be:09:06:36:53:66:9e:b1:0a:c4:82:3a:d2:5f:71:28:37:d2: f2:5a:ae:42:3e:2a:5e:ef:96:fe:b3:a1:7f:aa:4c:d7:fc:2f: eb:12:00:5c:b0:a6:31:ad:51:2a:1e:1b:0e:b1:32:6a:7b:11: b4:86:79:c6:ed:91:b0:58:d0:a6:ee:b0:7e:37:ea:21:74:89: f7:19:17:d1:b5:68:fd:5a:37:cb:b1:0f:c8:71:f4:65:c2:b0: 25:5f:3c:4d:e8:be:43:ea:12:ff:6b:84:8a:31:b9:f7:26:31: 29:06:6a:cd -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUdQLa5VfkOw1CX9k1f7cinyMvUF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkw Rjk1NkI2MjAeFw0yNjAxMjAwMjIxMDdaFw0yNzAxMTkwMjI2MDdaMDMxMTAvBgNV BAMTKEJFMEE3REMzRTBBRTEwNEYzQzdCNjQ3RkJDNzg0RTRDNEU3NDY0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkLRl69CZD2L4hKEqwGUSVyhJo 7rxjjMa+M3S4ArAwMfOCXE2Tovm04ZdtHiQsWFmlj6gxnEwR2i+yeEii3oKu9tSf oOaF1a2Ab9ytymSJRbpNeZ8GJsz5CI1CEyJ+YwT1aunkRKmjjjVmrSYoxHZCg65h SW7KIEn3R1iBmyYpuVxy+WC2MhlkT3YDhGDE1SWB2H+QMMmbyuAIxkf6edEUWk9T Fm+/5URllRQOV7tQAEnQm2mxfItPMsaEk5iYfmP/PSucBnVPF1Ephp075akTs9CQ RYKyVupQ59vTPuPDR6cqpZsubkMUxq4CvoiBV6GD69KSMm+92/aYRLMR4C4PAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvgp9w+CuEE88e2R/vHhOTE50ZOUwHwYDVR0j BBgwFoAUT5Sl82+GbyEYB3Xf/zgnmQ+Va2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8wLzRGOTRBNUYzNkY4NjZGMjExODA3NzVERkZGMzgy Nzk5MEY5NTZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkwRjk1NkI2Mi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTM2Mjk0Ni8wLzM0MzkyZTM1MzEy ZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzMzMjMyMzAzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBDEzoDANBgkqhkiG9w0BAQsFAAOCAQEAo/yHM/9SxEUQy46Ix30xk6oZ ss7nLdKq+W79xIs4+jJOfpWumdHphPrGs8faR6UAKVzcheXCN7iOQtgSykDvJGVz PYmL6wQGOmmLVCW5aqoHynjaoEzCz9FHp3btI+Uffyi0ssgNKmyc3EQjRhAjCQIG ID/4z3ZZv2zzAFu9YsPVGG7cZBr7yUSad/9/UDXnvgkGNlNmnrEKxII60l9xKDfS 8lquQj4qXu+W/rOhf6pM1/wv6xIAXLCmMa1RKh4bDrEyansRtIZ5xu2RsFjQpu6w fjfqIXSJ9xkX0bVo/Vo3y7EPyHH0ZcKwJV88Tei+Q+oS/2uEijG59yYxKQZqzQ== -----END CERTIFICATE-----Generated at Tue Jan 20 14:52:27 2026 by rpki-client