This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38382e302f32322d3234203d3e2038373936.roa File: 34352e3234382e38382e302f32322d3234203d3e2038373936.roa (raw, json) Hash identifier: G0Ar8Hkub7PIfnBfaIsj7k3yRQ0bt7mVnMTlF37YuZQ= Subject key identifier: 52:D5:00:13:0B:7A:88:F4:A1:38:46:18:CA:8A:BB:AB:04:DD:C7:16 Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 015E130CE14A83BAE5AE7BEDEB493DDB3FD14B48 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38382e302f32322d3234203d3e2038373936.roa Signing time: Tue 20 Jan 2026 02:09:36 +0000 ROA not before: Tue 20 Jan 2026 02:04:36 +0000 ROA not after: Tue 19 Jan 2027 02:09:36 +0000 asID: 8796 IP address blocks: 45.248.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5e:13:0c:e1:4a:83:ba:e5:ae:7b:ed:eb:49:3d:db:3f:d1:4b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: Jan 20 02:04:36 2026 GMT Not After : Jan 19 02:09:36 2027 GMT Subject: CN=52D500130B7A88F4A1384618CA8ABBAB04DDC716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:52:dd:de:ee:da:ad:ef:d8:eb:16:db:70: e5:6e:0b:68:00:5a:48:55:27:26:64:91:86:64:88: 98:f5:8f:3f:75:4a:26:7a:a9:a3:85:e4:97:af:c7: f6:4f:4f:3d:27:98:c7:b5:78:ef:c5:97:5d:12:a2: ad:35:5d:bd:52:16:bd:99:61:90:f0:71:83:60:29: 86:26:00:2f:b1:44:74:52:06:f4:91:56:6f:54:18: a2:89:e0:d9:f8:30:6e:93:7d:63:b5:88:1a:84:ad: 92:23:ff:c6:57:69:dd:e1:a3:3d:86:91:e8:24:e0: e1:0e:8e:c0:90:75:91:fc:ba:af:6a:6c:88:22:b8: 23:f8:70:47:76:8e:45:c9:f6:c3:44:a0:ce:b4:2b: e0:98:c4:9e:fe:4a:94:97:9e:e5:a4:54:d6:91:19: 49:53:e3:ca:4c:46:a3:d4:0d:ea:97:56:59:06:59: 14:8d:47:63:76:54:4a:e8:d2:eb:73:1b:82:5c:2a: 6c:80:e1:d8:94:c6:df:6f:1e:76:d9:e8:8b:13:72: f8:f9:8a:44:3a:34:28:3a:cd:42:df:e0:42:84:80: 26:a4:1c:e1:fa:b0:83:fb:7a:24:d8:c2:32:01:08: a6:bc:2c:cc:0e:5e:00:4d:93:a4:e7:5f:80:75:45: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D5:00:13:0B:7A:88:F4:A1:38:46:18:CA:8A:BB:AB:04:DD:C7:16 X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38382e302f32322d3234203d3e2038373936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/22 Signature Algorithm: sha256WithRSAEncryption 55:7f:af:dd:c9:66:a9:d5:5e:13:cb:c1:cc:9a:2c:0c:a6:df: 6e:88:fb:61:3c:fd:4e:74:b6:b9:cd:10:82:43:0e:aa:72:86: 9f:ec:4b:e1:42:64:bb:26:2c:f3:a5:13:cc:d1:40:51:2a:a7: 2d:3e:ac:c2:aa:8f:82:bc:80:1d:53:6e:56:aa:d2:be:bf:70: 36:cd:e3:d9:f2:b1:fa:6c:f0:19:bb:0b:61:3c:70:c4:52:8b: 9a:a5:08:51:e3:42:0d:7d:41:b6:73:86:66:35:5f:cc:a1:76: 63:bf:d0:33:af:ac:de:86:a8:d1:f5:ce:d4:19:6e:a2:c4:03: 1a:7a:1b:52:b1:c7:43:d3:24:8d:e7:cd:13:ce:4b:bd:71:cb: cd:09:92:e1:d0:59:ba:b1:3e:4f:5b:b8:49:61:a0:96:13:a5: ce:ee:ea:5a:ca:53:32:2a:a1:3c:7a:1d:74:81:a6:aa:f6:e2: ac:e4:cc:0b:b0:9c:31:5b:1e:cc:4e:3a:68:a0:6e:5e:a4:ef: 34:dd:d3:eb:e3:a9:3e:13:ba:59:46:d8:80:73:14:78:b4:d0: 09:b1:a4:a0:06:c5:d3:0a:3d:42:af:b4:58:42:03:b3:ce:0c: 81:92:8c:4e:ba:40:7c:b9:ad:90:45:71:68:db:97:0c:5f:7a: a7:d6:e7:ff -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUAV4TDOFKg7rlrnvt60k92z/RS0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzZaFw0yNzAxMTkwMjA5MzZaMDMxMTAvBgNV BAMTKDUyRDUwMDEzMEI3QTg4RjRBMTM4NDYxOENBOEFCQkFCMDREREM3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGX1Ld3u7are/Y6xbbcOVuC2gA WkhVJyZkkYZkiJj1jz91SiZ6qaOF5Jevx/ZPTz0nmMe1eO/Fl10Soq01Xb1SFr2Z YZDwcYNgKYYmAC+xRHRSBvSRVm9UGKKJ4Nn4MG6TfWO1iBqErZIj/8ZXad3hoz2G kegk4OEOjsCQdZH8uq9qbIgiuCP4cEd2jkXJ9sNEoM60K+CYxJ7+SpSXnuWkVNaR GUlT48pMRqPUDeqXVlkGWRSNR2N2VEro0utzG4JcKmyA4diUxt9vHnbZ6IsTcvj5 ikQ6NCg6zULf4EKEgCakHOH6sIP7eiTYwjIBCKa8LMwOXgBNk6TnX4B1RUJXAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUUtUAEwt6iPShOEYYyoq7qwTdxxYwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1NjgyLzAvMzQzNTJlMzIzNDM4 MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzgzNzM5MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt+FgwDQYJKoZIhvcNAQELBQADggEBAFV/r93JZqnVXhPLwcyaLAym326I+2E8 /U50trnNEIJDDqpyhp/sS+FCZLsmLPOlE8zRQFEqpy0+rMKqj4K8gB1Tblaq0r6/ cDbN49nysfps8Bm7C2E8cMRSi5qlCFHjQg19QbZzhmY1X8yhdmO/0DOvrN6GqNH1 ztQZbqLEAxp6G1Kxx0PTJI3nzRPOS71xy80JkuHQWbqxPk9buElhoJYTpc7u6lrK UzIqoTx6HXSBpqr24qzkzAuwnDFbHsxOOmigbl6k7zTd0+vjqT4TullG2IBzFHi0 0AmxpKAGxdMKPUKvtFhCA7PODIGSjE66QHy5rZBFcWjblwxfeqfW5/8= -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:45 2026 by rpki-client