This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e32302e302f32322d3232203d3e203234343236.roa File: 34332e3234362e32302e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: W0z95MBo+MCyMfCnUyllVcF3IAADxU44bixOfo3E57Q= Subject key identifier: 98:1D:93:D4:FD:F5:7A:4B:44:49:EC:0B:55:6D:E7:4C:86:C5:A7:43 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 5A14A42C2636C73B84313D96CAB6C4F3FD84AD34 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e32302e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:06 +0000 ROA not before: Tue 20 Jan 2026 01:14:06 +0000 ROA not after: Tue 19 Jan 2027 01:19:06 +0000 asID: 24426 IP address blocks: 43.246.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:14:a4:2c:26:36:c7:3b:84:31:3d:96:ca:b6:c4:f3:fd:84:ad:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:06 2026 GMT Not After : Jan 19 01:19:06 2027 GMT Subject: CN=981D93D4FDF57A4B4449EC0B556DE74C86C5A743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:73:18:0d:9b:6b:fb:15:b5:5c:6a:08:89: 35:ae:16:1f:d0:73:5c:5d:1e:97:10:d8:69:07:f4: 9b:e3:ef:7b:b5:d2:82:2e:c2:0b:e6:1b:b9:bd:e8: 1b:c5:78:56:dc:d2:05:0b:e8:c4:9a:a1:4a:e3:32: 82:cd:17:2a:1f:9f:30:fb:b1:44:56:5a:c6:a2:db: ea:4a:8a:76:37:9c:d2:79:9c:fb:61:71:76:ab:e0: b2:d5:be:76:81:26:92:1a:d1:21:3e:25:a6:0f:5e: b8:b2:20:3c:cf:52:4c:03:e7:64:7b:b5:e5:0c:0e: 14:b2:48:a8:99:d9:1a:e3:66:83:02:8c:d6:7d:fc: 33:13:26:69:41:a2:c2:2d:7a:2d:5b:1d:b9:1a:0d: 98:8f:7d:8c:67:25:60:5c:4f:89:e7:27:16:ea:aa: 94:68:ed:99:a6:a9:d0:a2:63:53:c0:13:5a:c7:a5: 34:3a:24:50:3a:77:99:d8:c3:68:46:73:11:29:9d: de:4f:29:dd:f8:47:33:a7:31:99:5b:f8:d2:87:08: 39:44:54:17:de:38:91:3f:bf:2a:75:b0:6a:b5:40: 74:f1:df:e3:3b:b5:f0:7a:2d:7a:7b:08:0e:30:a8: 8c:43:48:9a:ab:2a:c0:4b:a6:13:e3:8a:aa:d7:9c: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1D:93:D4:FD:F5:7A:4B:44:49:EC:0B:55:6D:E7:4C:86:C5:A7:43 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e32302e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.20.0/22 Signature Algorithm: sha256WithRSAEncryption 15:47:86:df:97:ec:9f:5b:77:2a:e4:15:e7:91:c3:0e:77:98: 26:9d:52:07:6e:14:56:49:ef:f3:a5:4f:30:be:f7:c7:ef:3b: f9:f0:d5:ca:53:6e:eb:51:9f:0f:79:0c:07:d4:7d:a9:da:3b: 2b:28:af:75:5f:7a:73:e5:60:c4:f2:20:e6:b2:f3:ac:4b:d2: 0e:85:8b:7c:8d:e9:70:f1:57:40:b1:e8:fb:7b:d1:9a:a8:35: 24:57:91:cd:df:be:13:1d:bb:92:f7:21:3c:0a:61:77:32:e1: 87:d4:bf:0c:54:1b:18:ee:25:f7:c3:b8:d2:e6:8f:9e:d0:0a: 5b:7f:a7:a9:07:67:be:6b:d9:bb:60:ab:74:64:d2:fc:a5:0e: a4:50:1a:1f:6a:31:f1:77:a8:00:8e:15:80:18:23:10:16:6d: 31:2b:34:2e:9e:55:d9:57:26:4c:27:3c:81:95:e5:17:6e:cc: 3e:3c:0d:2f:d2:dd:ff:cf:b2:43:90:92:0f:aa:1c:b9:32:4d: 9e:6f:c0:e9:33:f5:75:b6:e6:79:f7:d3:96:ed:73:25:03:6c: 22:f6:9a:27:5c:66:e2:3f:b8:8b:4e:21:ad:42:f6:7b:c1:b1: 37:65:93:31:ea:c9:58:67:4a:06:8a:1f:94:b0:c2:82:96:54: 8a:5f:e5:fa -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUWhSkLCY2xzuEMT2WyrbE8/2ErTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDZaFw0yNzAxMTkwMTE5MDZaMDMxMTAvBgNV BAMTKDk4MUQ5M0Q0RkRGNTdBNEI0NDQ5RUMwQjU1NkRFNzRDODZDNUE3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvHMYDZtr+xW1XGoIiTWuFh/Q c1xdHpcQ2GkH9Jvj73u10oIuwgvmG7m96BvFeFbc0gUL6MSaoUrjMoLNFyofnzD7 sURWWsai2+pKinY3nNJ5nPthcXar4LLVvnaBJpIa0SE+JaYPXriyIDzPUkwD52R7 teUMDhSySKiZ2RrjZoMCjNZ9/DMTJmlBosItei1bHbkaDZiPfYxnJWBcT4nnJxbq qpRo7ZmmqdCiY1PAE1rHpTQ6JFA6d5nYw2hGcxEpnd5PKd34RzOnMZlb+NKHCDlE VBfeOJE/vyp1sGq1QHTx3+M7tfB6LXp7CA4wqIxDSJqrKsBLphPjiqrXnCJZAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUmB2T1P31ektESewLVW3nTIbFp0MwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2FDANBgkqhkiG9w0BAQsFAAOCAQEAFUeG35fsn1t3KuQV55HDDneYJp1S B24UVknv86VPML73x+87+fDVylNu61GfD3kMB9R9qdo7KyivdV96c+VgxPIg5rLz rEvSDoWLfI3pcPFXQLHo+3vRmqg1JFeRzd++Ex27kvchPAphdzLhh9S/DFQbGO4l 98O40uaPntAKW3+nqQdnvmvZu2CrdGTS/KUOpFAaH2ox8XeoAI4VgBgjEBZtMSs0 Lp5V2VcmTCc8gZXlF27MPjwNL9Ld/8+yQ5CSD6ocuTJNnm/A6TP1dbbmeffTlu1z JQNsIvaaJ1xm4j+4i04hrUL2e8GxN2WTMerJWGdKBooflLDCgpZUil/l+g== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:49 2026 by rpki-client