This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31322e302f32322d3232203d3e203234343236.roa File: 34332e3234362e31322e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: pFRny+IRhCwTWzedzLW4s2w+8AZ/doeh3KuGtJ1Fs8w= Subject key identifier: 30:24:9C:87:65:25:22:A2:C6:84:64:47:8B:73:E5:17:20:C7:A2:8D Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 4CA1307961F272E6051DDEC0E7FA864470DC986C Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31322e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:05 +0000 ROA not before: Tue 20 Jan 2026 01:14:05 +0000 ROA not after: Tue 19 Jan 2027 01:19:05 +0000 asID: 24426 IP address blocks: 43.246.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a1:30:79:61:f2:72:e6:05:1d:de:c0:e7:fa:86:44:70:dc:98:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:05 2026 GMT Not After : Jan 19 01:19:05 2027 GMT Subject: CN=30249C87652522A2C68464478B73E51720C7A28D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:89:8e:7a:0a:e6:3a:37:27:79:e8:37:56: 24:5b:bb:18:97:b6:f4:5c:71:f5:0e:44:d2:22:cc: de:57:12:a5:46:c0:75:fc:4d:5a:18:b9:84:68:6e: ac:c7:49:70:d6:7a:16:e2:32:04:c6:87:3c:0c:dd: 6b:42:d5:b0:41:0e:e5:53:92:9c:9e:42:2c:b1:5e: f7:43:70:a5:11:77:e6:30:a4:85:f7:9e:cf:1e:55: 3a:cd:c2:6a:1c:00:fc:ee:53:05:e2:52:4b:4e:7f: 37:51:95:e6:da:9a:37:9b:0c:dc:78:37:45:82:33: a2:cd:bc:a1:85:8e:77:8d:7e:4c:fb:05:d8:68:fb: 01:95:e2:5f:95:89:a3:cc:a2:61:4a:51:f4:bb:18: 61:1c:9c:23:bc:93:59:ee:36:a0:48:04:77:0e:29: 73:bc:57:c1:a6:1e:c5:13:39:a6:a4:8e:ea:de:0e: 18:60:50:da:68:0c:95:4d:d1:26:f2:a7:c1:a8:1c: 77:9c:27:db:1c:3d:96:57:3c:32:4e:dc:c4:7a:86: d8:73:42:33:f7:da:d5:ce:8e:d4:34:a1:a8:39:b0: ac:41:b0:20:0d:fd:e1:ab:da:68:66:ac:5a:85:4b: 55:22:17:01:ba:50:5e:39:dd:a5:90:a7:01:82:52: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:24:9C:87:65:25:22:A2:C6:84:64:47:8B:73:E5:17:20:C7:A2:8D X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31322e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.12.0/22 Signature Algorithm: sha256WithRSAEncryption 31:d6:fc:18:7b:6e:e9:7e:56:ad:d3:93:d2:f8:56:03:bb:ca: de:5b:93:a7:e1:4f:8f:3a:f3:e7:00:46:5e:cc:e8:66:48:ed: c7:61:ab:88:c7:6c:60:c2:bd:92:2d:8c:21:34:b4:f4:75:92: 0c:2c:b8:ae:0c:eb:aa:e4:e9:c3:6c:2d:71:9c:92:93:5b:3f: 2f:d4:4e:01:5b:98:bc:48:d8:4c:6e:a7:f4:c6:c2:a6:49:44: b7:ab:ce:7a:49:43:71:26:b3:fd:9d:6e:dd:73:70:fd:44:68: 0e:10:7f:e9:f1:0a:de:14:89:14:83:b9:7e:3d:15:37:ad:a4: a8:07:97:f9:29:06:76:0f:14:11:fc:74:63:05:ff:9a:c3:b1: 52:c5:37:e7:1f:39:77:ed:3c:d3:36:f4:32:98:3a:d6:b2:35: 0b:ad:6e:36:e8:b6:7a:3c:16:79:63:bc:91:b3:e4:e6:bd:6e: 17:f6:a8:4a:33:2e:29:08:04:a1:cc:a2:66:9e:32:0d:50:c5: be:af:7f:00:ff:75:05:35:d1:fe:c2:02:54:4b:ff:7d:db:b2: eb:44:22:b7:f4:52:6e:e8:1f:e5:a7:1c:95:2f:7a:a3:5b:d7: 4f:74:59:39:19:f6:0f:28:84:6d:4a:73:db:5e:ec:81:bc:e1: 00:a8:0d:8b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUTKEweWHycuYFHd7A5/qGRHDcmGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDVaFw0yNzAxMTkwMTE5MDVaMDMxMTAvBgNV BAMTKDMwMjQ5Qzg3NjUyNTIyQTJDNjg0NjQ0NzhCNzNFNTE3MjBDN0EyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0omOegrmOjcneeg3ViRbuxiX tvRccfUORNIizN5XEqVGwHX8TVoYuYRobqzHSXDWehbiMgTGhzwM3WtC1bBBDuVT kpyeQiyxXvdDcKURd+YwpIX3ns8eVTrNwmocAPzuUwXiUktOfzdRlebamjebDNx4 N0WCM6LNvKGFjneNfkz7Bdho+wGV4l+ViaPMomFKUfS7GGEcnCO8k1nuNqBIBHcO KXO8V8GmHsUTOaakjureDhhgUNpoDJVN0Sbyp8GoHHecJ9scPZZXPDJO3MR6hthz QjP32tXOjtQ0oag5sKxBsCAN/eGr2mhmrFqFS1UiFwG6UF453aWQpwGCUt05AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUMCSch2UlIqLGhGRHi3PlFyDHoo0wHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2DDANBgkqhkiG9w0BAQsFAAOCAQEAMdb8GHtu6X5WrdOT0vhWA7vK3luT p+FPjzrz5wBGXszoZkjtx2GriMdsYMK9ki2MITS09HWSDCy4rgzrquTpw2wtcZyS k1s/L9ROAVuYvEjYTG6n9MbCpklEt6vOeklDcSaz/Z1u3XNw/URoDhB/6fEK3hSJ FIO5fj0VN62kqAeX+SkGdg8UEfx0YwX/msOxUsU35x85d+080zb0Mpg61rI1C61u Nui2ejwWeWO8kbPk5r1uF/aoSjMuKQgEocyiZp4yDVDFvq9/AP91BTXR/sICVEv/ fduy60Qit/RSbugf5acclS96o1vXT3RZORn2DyiEbUpz217sgbzhAKgNiw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:22 2026 by rpki-client