This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38382e302f32322d3234203d3e20323136303437.roa File: 34352e3234382e38382e302f32322d3234203d3e20323136303437.roa (raw, json) Hash identifier: byOKszGHVCFzmPE++H0QmW3vFYkfUXCbszG2NZTzc3g= Subject key identifier: 0A:E6:4C:72:6D:65:E7:AA:40:D8:3F:EF:90:87:5B:40:49:FA:79:40 Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 3ADB784E4B4C67193200E1376A5EBBBCC17CAD68 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38382e302f32322d3234203d3e20323136303437.roa Signing time: Tue 20 Jan 2026 02:09:39 +0000 ROA not before: Tue 20 Jan 2026 02:04:39 +0000 ROA not after: Tue 19 Jan 2027 02:09:39 +0000 asID: 216047 IP address blocks: 45.248.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:db:78:4e:4b:4c:67:19:32:00:e1:37:6a:5e:bb:bc:c1:7c:ad:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: Jan 20 02:04:39 2026 GMT Not After : Jan 19 02:09:39 2027 GMT Subject: CN=0AE64C726D65E7AA40D83FEF90875B4049FA7940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:34:b0:71:8e:95:9d:c3:fa:27:bb:4d:3c: dc:10:50:78:97:a6:9a:d1:d0:41:f4:a4:b8:b4:0d: 6c:5c:22:97:19:21:2d:c5:17:58:b8:e3:32:59:e2: 35:da:5b:b4:f1:18:ce:d0:5f:97:7a:8d:6f:61:86: bf:0e:f5:ff:b8:3d:e1:4c:54:a1:d5:fb:20:84:2e: 05:41:a0:87:55:e1:58:6d:41:c7:03:55:82:95:66: a1:f2:3f:08:d5:9c:a7:c8:2e:f6:8a:61:98:70:29: b2:d9:de:02:67:d1:de:9e:64:f9:f4:90:54:d5:74: f4:09:bb:27:88:fa:8b:4c:2e:3c:35:a7:39:a9:ba: 23:d0:4d:8c:65:d7:79:98:c7:46:c3:f1:f6:8f:34: d9:08:62:68:8e:06:74:c3:ab:00:5d:b5:36:a7:2d: a5:db:13:37:80:ae:64:15:75:cd:68:a5:12:20:bd: bd:69:fb:6d:85:82:13:dd:10:f5:8a:73:a8:f9:61: 4a:9b:14:bd:17:4f:04:62:e2:b7:ef:9b:f5:27:6f: dd:3b:7e:0c:d2:28:8c:fa:5e:ec:70:3d:3b:09:8d: 19:39:de:e7:97:c7:33:82:e2:4e:6e:a4:8a:b7:6a: cc:f2:87:3b:7d:0c:5e:6a:3e:e0:a6:02:79:9f:cc: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E6:4C:72:6D:65:E7:AA:40:D8:3F:EF:90:87:5B:40:49:FA:79:40 X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38382e302f32322d3234203d3e20323136303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/22 Signature Algorithm: sha256WithRSAEncryption 86:ad:9b:1a:e3:4c:4a:73:11:2b:bc:f3:b0:4e:90:38:89:80: 8b:b7:bf:f0:c0:30:21:4e:a0:55:2c:23:f6:5d:3a:ed:30:95: 84:13:a9:d9:a8:ce:07:64:96:13:8b:e8:9e:d0:c8:1b:38:e3: db:55:99:4a:79:5e:27:54:73:72:5e:d1:ca:47:af:9b:8f:77: 82:75:f8:7e:70:48:b1:63:d7:07:7c:10:31:8b:c0:45:82:29: 1e:8f:d2:a8:49:bf:3c:09:90:6a:f8:3e:78:7c:6d:2c:88:f2: ce:9e:5a:fb:59:6f:cd:7b:73:f3:25:6a:98:9d:a9:b7:ec:c7: 5f:c1:78:58:dd:29:4d:e4:55:79:ef:9d:5a:69:e3:d6:61:e5: 0b:03:9d:9e:31:c3:a6:09:9e:0a:06:54:51:7e:27:8d:d1:28: 33:fa:d8:84:45:68:4e:2e:52:36:ee:58:74:e9:81:90:1c:8a: a9:f1:f7:86:18:88:a3:fd:8e:4a:b7:13:64:3f:90:51:fc:72: ce:51:1c:59:80:87:7d:43:31:df:23:b0:df:4d:d0:36:e9:42: d5:eb:b6:bb:4c:ab:21:5a:63:ae:65:c4:d5:8d:5b:11:98:eb: 4f:55:3a:5b:62:87:7a:be:61:11:83:a0:29:82:04:e8:6d:d4: 66:ac:ad:7f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOtt4TktMZxkyAOE3al67vMF8rWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzlaFw0yNzAxMTkwMjA5MzlaMDMxMTAvBgNV BAMTKDBBRTY0QzcyNkQ2NUU3QUE0MEQ4M0ZFRjkwODc1QjQwNDlGQTc5NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9DSwcY6VncP6J7tNPNwQUHiX pprR0EH0pLi0DWxcIpcZIS3FF1i44zJZ4jXaW7TxGM7QX5d6jW9hhr8O9f+4PeFM VKHV+yCELgVBoIdV4VhtQccDVYKVZqHyPwjVnKfILvaKYZhwKbLZ3gJn0d6eZPn0 kFTVdPQJuyeI+otMLjw1pzmpuiPQTYxl13mYx0bD8faPNNkIYmiOBnTDqwBdtTan LaXbEzeArmQVdc1opRIgvb1p+22FghPdEPWKc6j5YUqbFL0XTwRi4rfvm/Unb907 fgzSKIz6XuxwPTsJjRk53ueXxzOC4k5upIq3aszyhzt9DF5qPuCmAnmfzLnPAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUCuZMcm1l56pA2D/vkIdbQEn6eUAwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODYxNTY4Mi8wLzM0MzUyZTMyMzQz ODJlMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzEzNjMwMzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi34WDANBgkqhkiG9w0BAQsFAAOCAQEAhq2bGuNMSnMRK7zzsE6QOImA i7e/8MAwIU6gVSwj9l067TCVhBOp2ajOB2SWE4vontDIGzjj21WZSnleJ1Rzcl7R ykevm493gnX4fnBIsWPXB3wQMYvARYIpHo/SqEm/PAmQavg+eHxtLIjyzp5a+1lv zXtz8yVqmJ2pt+zHX8F4WN0pTeRVee+dWmnj1mHlCwOdnjHDpgmeCgZUUX4njdEo M/rYhEVoTi5SNu5YdOmBkByKqfH3hhiIo/2OSrcTZD+QUfxyzlEcWYCHfUMx3yOw 303QNulC1eu2u0yrIVpjrmXE1Y1bEZjrT1U6W2KHer5hEYOgKYIE6G3UZqytfw== -----END CERTIFICATE-----Generated at Tue Jan 20 09:08:54 2026 by rpki-client