This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e31362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: YlVIAjd7Cl4Fc1w8m5UV0hpV6kh5CF0DAT4U4r+Dsl0=
Subject key identifier: F8:28:C3:DB:AD:17:58:02:DE:19:62:41:6A:8F:0F:18:09:39:63:97
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 5FC32C0FA756F94840E70F4F90FF57BBE34F4CBE
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa
Signing time: Tue 20 Jan 2026 01:19:07 +0000
ROA not before: Tue 20 Jan 2026 01:14:07 +0000
ROA not after: Tue 19 Jan 2027 01:19:07 +0000
asID: 24426
IP address blocks: 43.246.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c3:2c:0f:a7:56:f9:48:40:e7:0f:4f:90:ff:57:bb:e3:4f:4c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jan 20 01:14:07 2026 GMT
Not After : Jan 19 01:19:07 2027 GMT
Subject: CN=F828C3DBAD175802DE1962416A8F0F1809396397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:ab:5b:0e:89:3d:5c:85:4c:48:f5:26:43:
ca:2a:a5:d3:8e:a3:4c:a6:9a:e2:35:4f:bd:e7:16:
4c:c7:c1:ca:04:07:ff:bd:ac:35:91:66:58:db:7f:
11:f3:79:6e:96:d3:84:1f:b5:b8:c1:fa:af:4c:4b:
90:3b:b9:ff:db:aa:54:ad:10:f2:86:1c:36:8d:34:
14:ab:32:83:e3:5d:1f:30:d2:cd:2e:08:b0:dc:5d:
04:5e:53:a3:70:9d:2a:dd:0f:26:9b:f8:fd:d1:9b:
f3:d8:8b:91:10:c4:7a:0e:0a:3c:53:24:09:ef:0a:
a0:02:24:1f:fc:dc:78:39:6a:51:57:30:8b:ab:62:
02:6b:60:46:48:fc:e5:ac:04:e3:11:11:e4:d5:a8:
5e:a8:6d:84:7e:b5:2a:49:49:46:89:26:65:d7:14:
50:a0:1c:f2:7f:12:b4:5a:66:3c:73:14:15:5d:60:
c1:8c:6a:a4:d8:91:4a:64:32:4b:7d:a4:8e:02:81:
68:d8:02:08:cf:b9:79:37:91:84:83:ce:76:52:fe:
c2:25:81:cf:37:d7:8c:24:07:76:fa:ac:62:0f:61:
4d:12:5b:80:51:8a:ac:df:02:98:6f:83:21:84:39:
15:32:92:91:5e:3e:7b:cf:7f:c5:3b:0b:a8:1c:75:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:C3:DB:AD:17:58:02:DE:19:62:41:6A:8F:0F:18:09:39:63:97
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.16.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:b5:6d:0c:ad:9e:46:93:f0:4e:b1:2d:5b:de:25:ce:c4:4b:
84:e4:e5:5e:5f:16:ee:bd:79:79:1c:15:01:fd:02:b6:48:82:
7d:c1:28:95:77:bd:b4:68:08:03:c5:6b:09:6c:a4:57:60:ca:
20:bc:58:4e:b6:c4:c5:0e:fd:e3:34:56:91:7f:73:0a:1d:ba:
de:24:6f:10:90:06:2a:a1:9a:a9:21:66:86:a9:bc:f8:ee:7e:
f0:4e:56:68:03:c6:b9:c8:22:0d:eb:75:67:c8:63:fc:36:e3:
ab:76:7e:98:99:94:5f:a1:b4:23:80:2e:51:31:36:38:52:f3:
b1:e5:0f:6c:44:21:cc:2c:f9:5a:fe:33:11:1f:de:a6:0a:27:
2d:62:8a:92:b6:39:04:a6:d5:a4:38:a5:d8:e4:54:8a:dc:67:
11:66:c7:94:f7:19:6e:1a:44:b1:fa:00:b8:a5:42:3c:9b:24:
3c:73:14:22:c4:76:62:52:f5:ff:0b:54:ea:10:07:75:ed:d5:
49:21:ab:ec:2c:1d:db:cb:45:d6:58:cd:ba:10:80:59:05:41:
99:94:cd:ab:a4:c6:49:31:7c:4e:a1:a3:26:0b:18:e8:de:62:
c2:bf:57:e3:8a:f3:9f:7c:31:8c:54:35:43:0f:5f:33:7d:9b:
cf:de:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:29 2026 by rpki-client