This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33322e302f32322d3232203d3e203234343236.roa File: 34332e3234362e33322e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: 9ORTDCVkdYToUBGsafno3QLXlUEcUjPQ3/cABan6VXI= Subject key identifier: CD:CD:AB:04:F9:F5:35:52:B8:C6:99:82:6F:88:86:2B:FD:36:53:FF Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 3E085619C5FFB39600A3D6781DED0FF6257D172B Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33322e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:05 +0000 ROA not before: Tue 20 Jan 2026 01:14:05 +0000 ROA not after: Tue 19 Jan 2027 01:19:05 +0000 asID: 24426 IP address blocks: 43.246.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:08:56:19:c5:ff:b3:96:00:a3:d6:78:1d:ed:0f:f6:25:7d:17:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:05 2026 GMT Not After : Jan 19 01:19:05 2027 GMT Subject: CN=CDCDAB04F9F53552B8C699826F88862BFD3653FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0c:36:e5:77:ea:1f:4b:6e:bd:a1:5d:43:16: 43:39:d6:a5:78:aa:b1:bb:c2:4f:03:50:1c:7d:c4: d0:c9:31:db:90:13:48:f7:03:70:4a:29:61:54:c7: 13:b5:59:57:1f:7e:88:8a:1b:84:dc:18:cd:a6:f7: e2:a7:c0:89:3c:26:16:17:17:b0:05:d4:cc:fe:c7: 3e:32:76:cf:cf:53:8f:ae:c2:ac:13:e2:71:d3:b4: 30:67:f7:13:8c:cd:43:1e:c7:5a:f2:24:e6:38:13: 5b:0e:98:40:c3:8a:96:7c:71:34:39:3e:b6:21:27: a7:a0:67:46:4f:d0:a9:a8:a3:41:b1:65:0a:3d:10: 56:7e:8a:68:a4:52:83:e4:e2:9a:1c:18:50:a8:22: 64:f4:94:0b:9f:e1:c6:70:05:f5:dc:2e:9c:4f:6c: e2:38:ba:f4:08:68:4e:21:2c:c7:38:e3:05:85:dc: f6:24:96:bf:e3:b0:18:65:7a:7b:6c:74:6a:4d:82: 28:9e:ab:8b:26:c2:27:13:a0:0e:b4:9c:e9:ff:d7: 32:e8:db:3e:ff:cc:03:ca:9a:90:53:43:50:1b:7a: e8:58:1e:0b:72:3a:64:2f:af:66:e7:5a:f0:9b:e3: 0f:e1:5f:1d:4f:a7:07:1c:b9:7f:05:c7:87:3d:20: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CD:AB:04:F9:F5:35:52:B8:C6:99:82:6F:88:86:2B:FD:36:53:FF X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33322e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.32.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:18:e6:1f:58:cf:e7:0c:8e:99:9e:89:e7:68:8c:40:2b:d4: 3f:51:a0:b0:74:46:b5:d9:84:3a:4c:19:94:0e:bb:38:1f:33: 6b:c2:ee:9b:3a:da:56:ac:4b:de:1b:32:45:41:52:15:93:7b: 2b:45:39:39:5e:6b:cc:be:77:ad:c2:2c:fe:5a:6d:a5:ec:e1: 0a:46:cc:96:ea:cc:e9:76:5d:44:5d:97:aa:d3:2d:f9:5f:1e: 35:fe:0e:5d:12:fe:f1:98:8e:e8:62:cf:d4:79:4d:45:2a:ec: 08:0e:c7:2d:b6:b6:a8:7f:24:5f:a1:eb:7a:fb:e4:95:65:97: b8:d4:00:f5:10:f7:48:ac:94:66:64:32:d4:1f:98:87:ee:74: cb:00:ff:89:d1:ce:f2:26:e6:4b:69:0d:4e:9e:96:64:30:18: 7e:aa:cf:ac:53:62:9c:52:52:0c:07:ff:94:87:53:a0:07:56: 33:00:d4:7a:2f:08:ea:fd:3b:89:39:cc:6a:2d:6b:3f:02:58: da:27:87:96:39:35:dc:e8:83:ab:ab:b2:5e:22:b9:97:a7:66: 66:fe:56:55:5c:37:d6:5b:77:f4:4c:59:47:db:6d:fd:45:60: e4:8f:dd:51:e2:21:dc:d4:e8:d0:c8:91:a8:9e:b8:5c:13:4f: 97:f5:f2:8d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUPghWGcX/s5YAo9Z4He0P9iV9FyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDVaFw0yNzAxMTkwMTE5MDVaMDMxMTAvBgNV BAMTKENEQ0RBQjA0RjlGNTM1NTJCOEM2OTk4MjZGODg4NjJCRkQzNjUzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDDbld+ofS269oV1DFkM51qV4 qrG7wk8DUBx9xNDJMduQE0j3A3BKKWFUxxO1WVcffoiKG4TcGM2m9+KnwIk8JhYX F7AF1Mz+xz4yds/PU4+uwqwT4nHTtDBn9xOMzUMex1ryJOY4E1sOmEDDipZ8cTQ5 PrYhJ6egZ0ZP0Kmoo0GxZQo9EFZ+imikUoPk4pocGFCoImT0lAuf4cZwBfXcLpxP bOI4uvQIaE4hLMc44wWF3PYklr/jsBhlentsdGpNgiieq4smwicToA60nOn/1zLo 2z7/zAPKmpBTQ1AbeuhYHgtyOmQvr2bnWvCb4w/hXx1PpwccuX8Fx4c9IGPpAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUzc2rBPn1NVK4xpmCb4iGK/02U/8wHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2IDANBgkqhkiG9w0BAQsFAAOCAQEAehjmH1jP5wyOmZ6J52iMQCvUP1Gg sHRGtdmEOkwZlA67OB8za8LumzraVqxL3hsyRUFSFZN7K0U5OV5rzL53rcIs/lpt pezhCkbMlurM6XZdRF2XqtMt+V8eNf4OXRL+8ZiO6GLP1HlNRSrsCA7HLba2qH8k X6HrevvklWWXuNQA9RD3SKyUZmQy1B+Yh+50ywD/idHO8ibmS2kNTp6WZDAYfqrP rFNinFJSDAf/lIdToAdWMwDUei8I6v07iTnMai1rPwJY2ieHljk13OiDq6uyXiK5 l6dmZv5WVVw31lt39ExZR9tt/UVg5I/dUeIh3NTo0MiRqJ64XBNPl/XyjQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:04 2026 by rpki-client