This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e302e302f32322d3232203d3e203234343236.roa File: 34332e3234362e302e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: KpNq36Nr+oIXDWQAYbQSnsW55jW2QEwYjxmk0eFITds= Subject key identifier: 28:7C:58:84:39:59:62:9E:7E:B4:B1:64:59:63:8E:17:2B:B7:01:53 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 79E1633E8DDC40FAE60AE673276FE94EA091082F Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e302e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:06 +0000 ROA not before: Tue 20 Jan 2026 01:14:06 +0000 ROA not after: Tue 19 Jan 2027 01:19:06 +0000 asID: 24426 IP address blocks: 43.246.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e1:63:3e:8d:dc:40:fa:e6:0a:e6:73:27:6f:e9:4e:a0:91:08:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:06 2026 GMT Not After : Jan 19 01:19:06 2027 GMT Subject: CN=287C58843959629E7EB4B16459638E172BB70153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8a:6d:d9:f3:d5:8c:55:8e:49:5e:c7:0e:77: 51:c4:ca:82:e3:e9:69:cb:eb:ec:ff:e6:7d:b0:9e: d3:cd:b9:59:64:0b:e6:70:72:7a:df:25:d4:3d:22: 23:b8:cb:68:fc:96:dd:6d:97:b1:03:1b:aa:cb:c6: 8b:8b:a7:ff:d8:58:cd:0a:2e:c5:c1:16:ef:6c:a5: 55:50:89:a2:ab:f0:39:6c:23:e5:8a:7e:3c:16:ac: 1c:aa:7f:6d:a6:11:8b:d0:44:82:b7:a6:9a:60:38: ce:26:19:7d:b1:49:23:04:f7:fc:39:c2:cd:eb:44: c3:e0:6e:2f:49:1b:cb:c7:f9:5c:fe:0f:8f:3f:08: 4b:80:6d:89:c3:e0:51:df:e7:97:63:60:02:ed:4a: 83:99:bc:42:61:42:a0:bb:c5:09:37:81:0a:2e:30: e0:58:f1:ca:5b:ef:18:df:35:56:b4:26:e0:c7:6b: 03:be:46:bf:de:a5:0e:29:75:18:f9:0f:a2:8c:61: 12:0e:64:d9:b0:d3:47:be:86:4f:31:8f:58:a7:a0: 10:6e:fc:57:07:c7:c0:0b:47:21:57:a4:ce:44:fb: 3e:fe:b6:eb:69:e3:a6:24:59:45:a6:43:28:59:10: bc:45:1c:c8:20:c6:89:e2:9c:57:3d:08:e4:1e:50: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7C:58:84:39:59:62:9E:7E:B4:B1:64:59:63:8E:17:2B:B7:01:53 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e302e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.0.0/22 Signature Algorithm: sha256WithRSAEncryption b1:fd:42:0c:82:6c:ed:8e:f4:40:ad:d7:5c:0e:1e:71:5b:5b: cb:61:c0:55:cb:99:4c:b7:6e:08:a9:d5:82:aa:05:ba:ea:55: f7:41:23:c7:dd:e9:e4:49:6a:3d:63:99:36:81:de:02:fa:c9: a5:7d:73:ae:ed:bb:ae:30:1d:2d:e0:e1:f5:04:e6:83:b4:b9: 26:d1:17:9c:c9:42:b6:36:cb:f0:72:85:29:a9:04:95:83:89: d2:55:b9:82:1e:c5:a9:e5:a3:75:24:1c:15:27:31:73:f5:35: e2:dc:15:dd:52:97:1d:12:7b:87:59:84:0e:91:3a:cb:f4:6f: 56:e0:37:88:f1:dd:c5:cb:dd:fe:be:67:a5:6d:d3:ec:08:af: d6:8a:c2:6c:7b:55:1d:56:7b:6d:c9:1d:0c:bf:20:b4:2c:34: 1b:70:e4:2f:92:54:b9:49:9e:c7:41:10:a7:c2:7d:cc:4e:85: 98:e2:32:3d:c4:1a:37:89:af:08:66:10:a9:11:56:4d:6f:c2: 32:c6:9f:9e:f2:e9:9d:bc:b0:88:03:43:48:28:0a:e6:b4:5c: 56:a6:33:b7:bc:02:4c:09:ec:76:5f:50:ba:c9:f5:dc:fc:94: e9:f7:26:e1:88:d0:04:f4:1c:d5:92:f8:04:e4:f4:63:0e:4f: c4:5f:e1:94 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUeeFjPo3cQPrmCuZzJ2/pTqCRCC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDZaFw0yNzAxMTkwMTE5MDZaMDMxMTAvBgNV BAMTKDI4N0M1ODg0Mzk1OTYyOUU3RUI0QjE2NDU5NjM4RTE3MkJCNzAxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZim3Z89WMVY5JXscOd1HEyoLj 6WnL6+z/5n2wntPNuVlkC+ZwcnrfJdQ9IiO4y2j8lt1tl7EDG6rLxouLp//YWM0K LsXBFu9spVVQiaKr8DlsI+WKfjwWrByqf22mEYvQRIK3pppgOM4mGX2xSSME9/w5 ws3rRMPgbi9JG8vH+Vz+D48/CEuAbYnD4FHf55djYALtSoOZvEJhQqC7xQk3gQou MOBY8cpb7xjfNVa0JuDHawO+Rr/epQ4pdRj5D6KMYRIOZNmw00e+hk8xj1inoBBu /FcHx8ALRyFXpM5E+z7+tutp46YkWUWmQyhZELxFHMggxoninFc9COQeUJcRAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUKHxYhDlZYp5+tLFkWWOOFyu3AVMwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzQzNDMyMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr9gAwDQYJKoZIhvcNAQELBQADggEBALH9QgyCbO2O9ECt11wOHnFbW8thwFXL mUy3bgip1YKqBbrqVfdBI8fd6eRJaj1jmTaB3gL6yaV9c67tu64wHS3g4fUE5oO0 uSbRF5zJQrY2y/ByhSmpBJWDidJVuYIexanlo3UkHBUnMXP1NeLcFd1Slx0Se4dZ hA6ROsv0b1bgN4jx3cXL3f6+Z6Vt0+wIr9aKwmx7VR1We23JHQy/ILQsNBtw5C+S VLlJnsdBEKfCfcxOhZjiMj3EGjeJrwhmEKkRVk1vwjLGn57y6Z28sIgDQ0goCua0 XFamM7e8AkwJ7HZfULrJ9dz8lOn3JuGI0AT0HNWS+ATk9GMOT8Rf4ZQ= -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:41 2026 by rpki-client