This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e32382e302f32322d3232203d3e203234343236.roa File: 34332e3234362e32382e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: r8FpisT4whtHwz94sb5FoXyEgPyHgLaRtW0sH+/DgkI= Subject key identifier: C6:55:43:AF:CC:A2:B6:7E:FB:80:BE:EA:69:B4:A3:6A:38:9F:75:73 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 03E3B78FC501469CE39520FEF69A040A04FACDC5 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e32382e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:07 +0000 ROA not before: Tue 20 Jan 2026 01:14:07 +0000 ROA not after: Tue 19 Jan 2027 01:19:07 +0000 asID: 24426 IP address blocks: 43.246.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e3:b7:8f:c5:01:46:9c:e3:95:20:fe:f6:9a:04:0a:04:fa:cd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:07 2026 GMT Not After : Jan 19 01:19:07 2027 GMT Subject: CN=C65543AFCCA2B67EFB80BEEA69B4A36A389F7573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:82:ca:04:fa:e7:07:ab:0b:c2:32:71:7c:d1: e1:0f:59:49:e2:17:3e:38:ac:ee:d5:85:02:98:37: 02:e1:7a:de:94:09:98:35:89:ea:01:51:33:85:ee: 78:a2:36:6f:5c:63:44:48:e2:30:13:8c:46:f0:11: 4f:ed:9d:d7:3c:14:b6:81:37:70:2c:a7:22:08:1c: eb:e1:cf:72:bc:c5:bc:55:7e:f1:8f:86:f4:7f:d5: 93:62:6d:f5:ba:76:6e:d1:a1:9d:9f:5d:8e:e1:5d: d9:ca:2a:da:ce:fa:e8:01:48:c8:21:ba:41:d7:88: 56:82:f4:30:6f:98:af:2b:3c:28:68:c7:3a:3f:31: 10:71:ca:5e:d5:f7:01:d5:e1:66:5c:42:96:25:b1: 3e:fc:40:92:9b:4a:4f:dd:ef:65:df:4d:f2:ee:62: cc:c9:d5:77:3f:66:a7:92:85:aa:5b:31:44:4d:f9: ab:40:8c:f7:26:2c:25:0d:1c:77:7b:54:66:a1:5c: 17:83:cd:a2:bb:9f:0f:6f:eb:6b:ae:2b:2a:4f:7c: 29:a8:8f:62:3e:7c:6d:63:1d:4d:5f:ba:bb:de:51: 95:b5:75:2e:58:af:d3:e7:bb:09:0f:15:d3:06:3a: a9:47:74:13:fe:12:f9:32:2e:a1:b3:0b:3f:e2:85: fa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:55:43:AF:CC:A2:B6:7E:FB:80:BE:EA:69:B4:A3:6A:38:9F:75:73 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e32382e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.28.0/22 Signature Algorithm: sha256WithRSAEncryption a8:e0:52:3e:84:98:62:d8:0a:8a:c2:82:0a:7c:34:c0:45:3f: 19:8b:6d:4c:c5:47:cb:c0:64:4f:84:b0:9f:31:10:c6:7b:36: b8:45:45:35:ce:2e:1a:3d:a7:dd:7d:dc:2f:8e:1f:f7:2b:06: 48:4d:99:f1:d4:02:f8:3c:3e:9b:13:b9:bd:5a:b2:4b:d1:c1: 2b:70:16:8f:9e:e3:cf:df:a6:9d:60:1d:6d:53:f8:e7:5b:96: b3:41:cc:f7:71:6a:8e:67:80:ca:42:63:77:0e:0a:e1:35:79: f0:98:9e:82:47:4c:33:f9:eb:90:d5:84:a9:ee:03:39:06:de: 52:71:87:e5:ad:dd:b1:94:df:bc:1b:02:6c:d2:82:d9:cf:cc: 40:36:ca:26:4b:85:8a:ac:bb:52:61:3c:72:eb:54:75:f4:be: ba:66:9a:77:a0:e0:bc:81:04:a4:b8:f1:27:06:06:c9:83:2a: bb:91:19:9e:d8:bd:0e:14:b0:a8:0c:49:be:31:7d:b2:67:5c: 3e:30:9f:0b:87:7c:15:46:3a:66:eb:62:d0:06:80:b8:db:73: 2f:c9:9c:84:2f:a5:23:1a:35:c4:41:71:5c:f4:62:4d:4d:59: 74:e4:51:47:b5:d4:20:a6:7c:86:97:11:b0:c8:87:c6:3c:0a: 66:c7:76:cf -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUA+O3j8UBRpzjlSD+9poECgT6zcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDdaFw0yNzAxMTkwMTE5MDdaMDMxMTAvBgNV BAMTKEM2NTU0M0FGQ0NBMkI2N0VGQjgwQkVFQTY5QjRBMzZBMzg5Rjc1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgsoE+ucHqwvCMnF80eEPWUni Fz44rO7VhQKYNwLhet6UCZg1ieoBUTOF7niiNm9cY0RI4jATjEbwEU/tndc8FLaB N3AspyIIHOvhz3K8xbxVfvGPhvR/1ZNibfW6dm7RoZ2fXY7hXdnKKtrO+ugBSMgh ukHXiFaC9DBvmK8rPChoxzo/MRBxyl7V9wHV4WZcQpYlsT78QJKbSk/d72XfTfLu YszJ1Xc/ZqeShapbMURN+atAjPcmLCUNHHd7VGahXBeDzaK7nw9v62uuKypPfCmo j2I+fG1jHU1furveUZW1dS5Yr9PnuwkPFdMGOqlHdBP+EvkyLqGzCz/ihfrdAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUxlVDr8yitn77gL7qabSjajifdXMwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2HDANBgkqhkiG9w0BAQsFAAOCAQEAqOBSPoSYYtgKisKCCnw0wEU/GYtt TMVHy8BkT4SwnzEQxns2uEVFNc4uGj2n3X3cL44f9ysGSE2Z8dQC+Dw+mxO5vVqy S9HBK3AWj57jz9+mnWAdbVP451uWs0HM93FqjmeAykJjdw4K4TV58JiegkdMM/nr kNWEqe4DOQbeUnGH5a3dsZTfvBsCbNKC2c/MQDbKJkuFiqy7UmE8cutUdfS+umaa d6DgvIEEpLjxJwYGyYMqu5EZnti9DhSwqAxJvjF9smdcPjCfC4d8FUY6Zuti0AaA uNtzL8mchC+lIxo1xEFxXPRiTU1ZdORRR7XUIKZ8hpcRsMiHxjwKZsd2zw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:37 2026 by rpki-client