This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38382e302f32322d3234203d3e20333935383836.roa File: 34352e3234382e38382e302f32322d3234203d3e20333935383836.roa (raw, json) Hash identifier: Jxan8MiugleqIvulcSI1kmCC9qNhGtKXEs8mMiCjcZA= Subject key identifier: F6:47:A9:80:7F:38:B8:81:76:7D:13:83:9C:C7:E6:03:EC:E3:54:0B Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 43AC9BF62D0B4E6483448C7D8954D8514F488C70 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38382e302f32322d3234203d3e20333935383836.roa Signing time: Tue 20 Jan 2026 02:09:37 +0000 ROA not before: Tue 20 Jan 2026 02:04:37 +0000 ROA not after: Tue 19 Jan 2027 02:09:37 +0000 asID: 395886 IP address blocks: 45.248.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ac:9b:f6:2d:0b:4e:64:83:44:8c:7d:89:54:d8:51:4f:48:8c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: Jan 20 02:04:37 2026 GMT Not After : Jan 19 02:09:37 2027 GMT Subject: CN=F647A9807F38B881767D13839CC7E603ECE3540B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:09:58:1c:a2:b4:d3:91:1a:d8:d6:a1:94:cc: f9:d9:c3:68:5b:eb:9e:19:07:62:23:5d:4f:c7:3f: 07:ca:a0:96:51:c6:83:b5:90:7f:26:05:75:6d:9c: ce:f3:05:3d:75:e0:3b:9b:62:e0:c3:37:96:95:22: ce:b1:dd:98:a8:a5:48:7b:ca:86:db:16:d0:bd:93: bd:c9:89:c6:a6:f7:a7:1d:49:48:e2:cb:1f:c4:63: 6d:cf:19:6b:02:68:5f:8c:43:e4:f0:4a:62:d1:62: 5f:dc:de:68:7c:1f:0d:69:be:b1:ce:e4:bf:66:15: a2:bc:81:c5:36:24:7d:de:a5:d9:ca:06:73:3f:41: 82:d6:ae:a7:29:e5:a1:e9:99:00:a8:b6:72:38:b0: 15:df:d4:f3:75:6e:dc:5f:fb:d2:22:4c:3f:d1:c7: ea:9a:48:cc:7d:19:3d:3f:fc:c4:fc:94:1b:a7:0d: 11:da:4c:52:3e:e1:ae:3f:d1:87:fd:0f:eb:38:39: eb:64:57:68:29:6d:d2:dc:e9:04:69:35:76:39:49: 5e:4d:26:82:ab:86:be:90:07:be:08:a4:42:3a:07: 5c:89:d9:53:2a:79:fc:fc:72:5e:ee:3b:be:da:a8: 0c:e7:3e:86:d1:a1:23:14:5a:94:ff:da:49:71:a6: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:47:A9:80:7F:38:B8:81:76:7D:13:83:9C:C7:E6:03:EC:E3:54:0B X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38382e302f32322d3234203d3e20333935383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/22 Signature Algorithm: sha256WithRSAEncryption 90:9e:30:29:6b:53:d2:bc:3c:e2:0e:f6:b2:1b:40:30:4e:4c: f4:07:f7:f1:d4:cf:4b:dc:37:07:80:ca:b4:c8:83:48:0a:f1: e0:5a:a0:76:24:01:82:0c:be:cf:85:62:b5:f7:45:41:4a:7c: ce:4e:1c:2d:0d:1d:86:88:53:b8:3c:54:e4:53:84:a3:9b:9f: 14:01:55:da:32:6a:36:b2:31:82:fe:25:94:f6:ec:13:b0:81: 51:d0:15:17:10:b7:ee:78:48:91:d1:e2:0c:fc:2c:2a:1e:cd: db:59:ae:69:76:7b:18:85:bd:34:08:80:84:50:99:a9:0c:91: ba:79:94:fd:11:d1:8d:44:a6:5e:3a:6b:2d:ea:8f:a9:cc:ed: 24:5a:ce:64:21:a1:84:25:8c:d0:9b:96:09:2e:de:a7:d8:e3: 89:74:39:e3:90:b9:47:57:67:93:f9:20:57:ad:32:5e:90:10: 56:e7:c1:89:03:71:c7:d9:ab:89:8d:02:a7:7a:92:2c:bc:12: 19:5e:3b:5e:b4:1c:35:62:d3:a9:50:f3:3d:d1:e4:df:2d:4f: 4a:8b:a2:a0:39:29:94:cf:e1:7b:e7:59:22:49:8d:f4:da:e0: 18:9e:7c:40:65:59:c8:13:0c:35:8c:03:d5:61:df:ce:16:c3: 5c:3f:b3:82 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQ6yb9i0LTmSDRIx9iVTYUU9IjHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzdaFw0yNzAxMTkwMjA5MzdaMDMxMTAvBgNV BAMTKEY2NDdBOTgwN0YzOEI4ODE3NjdEMTM4MzlDQzdFNjAzRUNFMzU0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyCVgcorTTkRrY1qGUzPnZw2hb 654ZB2IjXU/HPwfKoJZRxoO1kH8mBXVtnM7zBT114DubYuDDN5aVIs6x3ZiopUh7 yobbFtC9k73Jicam96cdSUjiyx/EY23PGWsCaF+MQ+TwSmLRYl/c3mh8Hw1pvrHO 5L9mFaK8gcU2JH3epdnKBnM/QYLWrqcp5aHpmQCotnI4sBXf1PN1btxf+9IiTD/R x+qaSMx9GT0//MT8lBunDRHaTFI+4a4/0Yf9D+s4OetkV2gpbdLc6QRpNXY5SV5N JoKrhr6QB74IpEI6B1yJ2VMqefz8cl7uO77aqAznPobRoSMUWpT/2klxpqxXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU9kepgH84uIF2fRODnMfmA+zjVAswHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODYxNTY4Mi8wLzM0MzUyZTMyMzQz ODJlMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzNTM4MzgzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi34WDANBgkqhkiG9w0BAQsFAAOCAQEAkJ4wKWtT0rw84g72shtAME5M 9Af38dTPS9w3B4DKtMiDSArx4FqgdiQBggy+z4VitfdFQUp8zk4cLQ0dhohTuDxU 5FOEo5ufFAFV2jJqNrIxgv4llPbsE7CBUdAVFxC37nhIkdHiDPwsKh7N21muaXZ7 GIW9NAiAhFCZqQyRunmU/RHRjUSmXjprLeqPqcztJFrOZCGhhCWM0JuWCS7ep9jj iXQ545C5R1dnk/kgV60yXpAQVufBiQNxx9mriY0Cp3qSLLwSGV47XrQcNWLTqVDz PdHk3y1PSouioDkplM/he+dZIkmN9NrgGJ58QGVZyBMMNYwD1WHfzhbDXD+zgg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:08:20 2026 by rpki-client