This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33362e302f32322d3232203d3e203234343236.roa File: 34332e3234362e33362e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: dqN66cd7HlpDiUvUeDGTZZu0W4CNwvHGuZ+Mt7f1PV0= Subject key identifier: B4:B6:1F:1E:3E:9B:14:9A:57:17:2C:AC:72:F3:67:3F:F3:CB:1B:A8 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 05A7D20B26254C90805A32E407E18136CB879963 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33362e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:06 +0000 ROA not before: Tue 20 Jan 2026 01:14:06 +0000 ROA not after: Tue 19 Jan 2027 01:19:06 +0000 asID: 24426 IP address blocks: 43.246.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a7:d2:0b:26:25:4c:90:80:5a:32:e4:07:e1:81:36:cb:87:99:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:06 2026 GMT Not After : Jan 19 01:19:06 2027 GMT Subject: CN=B4B61F1E3E9B149A57172CAC72F3673FF3CB1BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:62:f1:35:e9:c6:23:d8:50:c9:3a:bf:81: 82:81:3b:7f:c6:cb:5f:eb:41:da:1a:c1:2a:76:b7: 73:d8:e3:ee:91:2f:fc:c5:61:44:b9:49:20:4b:7a: 64:c8:96:86:cd:e6:17:28:c2:3d:9f:6e:f4:da:dc: 84:be:7a:19:1e:28:88:c5:1e:9d:0c:83:7d:a2:c1: f3:00:30:9c:39:f6:1d:e2:87:f1:4e:93:89:d3:16: 90:e0:de:18:63:eb:1b:b7:b5:c8:89:4f:40:6c:a7: 31:4f:a0:68:0c:be:4c:e8:01:9d:22:b8:17:40:cb: 29:1f:91:2d:d3:a0:94:b3:74:a9:26:6d:e9:4c:17: 5a:13:a2:d6:16:43:62:3e:56:5c:1a:2d:09:7a:e1: 49:a9:71:63:40:e5:b4:cd:15:e1:a4:ba:cc:68:3a: f6:be:62:a2:7b:4f:c8:0c:b8:73:28:0e:90:36:13: 75:21:c8:9d:cc:c3:8a:8f:56:05:e0:9b:a8:92:03: 76:12:ea:26:ec:66:71:a0:99:9a:33:cd:68:00:20: 08:71:d6:9a:d2:b5:e3:83:65:21:e0:8e:07:de:f9: 8b:11:bc:47:a9:fb:cb:86:a9:f0:f1:d3:e1:03:42: 97:bb:21:98:ae:43:45:7c:af:6e:0e:d3:9d:e6:0f: 73:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B6:1F:1E:3E:9B:14:9A:57:17:2C:AC:72:F3:67:3F:F3:CB:1B:A8 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33362e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.36.0/22 Signature Algorithm: sha256WithRSAEncryption 41:0a:12:4f:c3:17:38:2b:dd:73:64:34:2b:3a:28:31:38:a5: cd:60:df:bc:1f:83:ca:12:ae:64:75:b6:a6:c0:4a:ce:8b:54: 68:a3:00:16:b3:25:85:ae:fb:6a:38:28:fd:62:dc:bf:e0:15: 65:3d:f7:45:e0:67:fb:20:06:c6:23:9d:fb:2d:c1:fa:69:a7: 46:c7:cb:fa:53:10:1e:03:35:58:11:8b:42:3c:09:6e:b7:69: 14:d9:59:7f:94:1e:8b:a3:e9:67:c9:67:9e:55:6a:15:3c:8f: 25:d5:5b:7d:6b:fb:aa:e9:5e:ad:04:26:88:a3:6f:79:6d:02: 4a:5c:e1:94:04:f6:f4:d1:d9:b6:3c:4e:b7:92:1b:81:54:a2: 22:16:c3:43:bb:56:9b:55:99:01:a1:63:b4:a2:13:50:ed:55: 04:e1:ce:44:e8:8d:08:22:0d:95:33:aa:cb:a5:0a:db:5d:19: 26:b8:62:fc:6f:3f:b7:cf:f8:0a:70:69:bd:f2:65:c8:fc:8a: 25:c8:52:30:34:92:58:ef:6c:7e:25:65:4e:f9:71:ab:2f:0a: 9c:59:f3:9c:f0:58:05:c1:2b:58:77:2c:c1:75:d3:78:89:95: 50:20:af:83:68:d9:b0:70:d6:f3:5b:5d:5d:13:46:a8:77:8d: 7f:d2:9c:90 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUBafSCyYlTJCAWjLkB+GBNsuHmWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDZaFw0yNzAxMTkwMTE5MDZaMDMxMTAvBgNV BAMTKEI0QjYxRjFFM0U5QjE0OUE1NzE3MkNBQzcyRjM2NzNGRjNDQjFCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx52LxNenGI9hQyTq/gYKBO3/G y1/rQdoawSp2t3PY4+6RL/zFYUS5SSBLemTIlobN5hcowj2fbvTa3IS+ehkeKIjF Hp0Mg32iwfMAMJw59h3ih/FOk4nTFpDg3hhj6xu3tciJT0BspzFPoGgMvkzoAZ0i uBdAyykfkS3ToJSzdKkmbelMF1oTotYWQ2I+VlwaLQl64UmpcWNA5bTNFeGkusxo Ova+YqJ7T8gMuHMoDpA2E3UhyJ3Mw4qPVgXgm6iSA3YS6ibsZnGgmZozzWgAIAhx 1prSteODZSHgjgfe+YsRvEep+8uGqfDx0+EDQpe7IZiuQ0V8r24O053mD3O3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUtLYfHj6bFJpXFyyscvNnP/PLG6gwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2JDANBgkqhkiG9w0BAQsFAAOCAQEAQQoST8MXOCvdc2Q0KzooMTilzWDf vB+DyhKuZHW2psBKzotUaKMAFrMlha77ajgo/WLcv+AVZT33ReBn+yAGxiOd+y3B +mmnRsfL+lMQHgM1WBGLQjwJbrdpFNlZf5Qei6PpZ8lnnlVqFTyPJdVbfWv7qule rQQmiKNveW0CSlzhlAT29NHZtjxOt5IbgVSiIhbDQ7tWm1WZAaFjtKITUO1VBOHO ROiNCCINlTOqy6UK210ZJrhi/G8/t8/4CnBpvfJlyPyKJchSMDSSWO9sfiVlTvlx qy8KnFnznPBYBcErWHcswXXTeImVUCCvg2jZsHDW81tdXRNGqHeNf9KckA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:34 2026 by rpki-client