This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34302e302f32322d3232203d3e203234343236.roa File: 34332e3234362e34302e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: bxQA+FJdfQ9bQq5f6p5CY+OwiLB0duIpHi6hFcxV/gA= Subject key identifier: 3E:A8:42:C2:C0:B3:9D:43:07:74:5B:C0:BC:81:79:2F:22:B6:FA:1C Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 7F6471263588B508196656E33EC3F500755C0DF9 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34302e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:06 +0000 ROA not before: Tue 20 Jan 2026 01:14:06 +0000 ROA not after: Tue 19 Jan 2027 01:19:06 +0000 asID: 24426 IP address blocks: 43.246.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:64:71:26:35:88:b5:08:19:66:56:e3:3e:c3:f5:00:75:5c:0d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:06 2026 GMT Not After : Jan 19 01:19:06 2027 GMT Subject: CN=3EA842C2C0B39D4307745BC0BC81792F22B6FA1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:82:09:8c:49:8e:df:3d:83:0a:e4:0f:1d: dc:e3:35:3f:f9:d3:d5:ba:7f:73:66:72:c7:d3:3e: eb:1e:33:7b:b9:b0:ae:ae:77:d8:da:87:18:dc:80: 8f:a6:d0:e4:fa:56:50:84:8f:5a:2f:3a:af:2e:55: 9f:82:3b:8d:a2:f1:8c:ff:eb:84:9e:81:06:78:45: da:35:96:27:9b:cd:2e:34:6e:54:d5:fb:a9:55:82: 8d:26:1d:fe:2b:50:fa:7a:92:d7:d6:c0:ce:a9:b9: 1e:1e:36:55:97:58:ac:d4:d1:07:3a:32:53:18:8e: ba:58:96:c7:ef:c9:d2:01:7e:ee:13:96:02:c0:d5: f2:e3:83:24:97:06:52:5b:38:fe:48:f2:f5:c4:9a: f3:7a:2a:5a:1e:1b:c7:06:6c:b8:35:4a:aa:4c:a5: d1:85:33:76:44:0f:34:b8:17:e6:fd:12:e9:26:b0: d1:3e:4a:85:3d:9e:26:99:25:69:82:f9:35:58:a9: fe:1f:e3:cf:ac:7c:f3:ff:9b:83:13:77:f4:ca:31: a3:3e:18:a2:8d:69:97:ee:c2:3e:37:89:c1:02:18: e1:3e:b2:09:99:cc:52:e6:b5:f5:5c:2d:b9:60:3c: 58:f4:5c:3e:50:a9:b4:69:3f:7a:e3:36:00:ae:22: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A8:42:C2:C0:B3:9D:43:07:74:5B:C0:BC:81:79:2F:22:B6:FA:1C X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34302e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.40.0/22 Signature Algorithm: sha256WithRSAEncryption 23:a7:e3:12:c4:38:d8:bc:b3:92:c9:0f:df:9c:12:29:2e:c8: d5:64:9e:50:52:65:b6:d6:67:4c:b0:48:f9:95:59:4b:10:f4: 89:62:79:5a:e4:7c:e8:76:ed:cf:33:dd:e1:2a:7b:f2:fd:d6: 43:71:f9:e7:a4:b7:2d:36:5e:a1:74:2a:c8:5a:d8:99:b2:4e: 2d:2e:fe:9e:b6:95:6d:bb:5e:17:72:6e:4e:8e:dd:86:05:4d: 9b:ba:6c:c3:68:d5:a6:75:68:23:f6:bf:e5:11:1c:3f:0d:6e: d8:d4:da:4c:c0:60:09:44:df:ab:9a:6b:e0:5d:6e:68:eb:df: 2b:65:4a:4c:7f:bf:55:97:09:8e:a8:e4:11:d4:ce:1f:2f:0c: b7:ee:89:6b:30:7a:aa:ff:e6:74:4b:2a:56:8d:f0:43:9d:15: 31:df:2b:9e:7d:ce:06:0d:2e:71:cb:a8:a6:55:6b:a6:92:47: 46:6e:81:fc:6b:37:0c:05:df:9b:25:78:62:e4:e4:50:a7:ff: 4f:28:d6:2f:f8:02:f2:32:e9:f2:15:b7:f5:d0:61:3e:d3:a9: 5b:4a:ee:14:45:e8:c7:95:d5:6a:6e:ea:b6:71:c6:6a:01:61: 93:9d:bc:b2:ab:d0:16:1a:47:1e:72:14:6f:9d:35:f8:15:13: a8:36:40:21 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUf2RxJjWItQgZZlbjPsP1AHVcDfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDZaFw0yNzAxMTkwMTE5MDZaMDMxMTAvBgNV BAMTKDNFQTg0MkMyQzBCMzlENDMwNzc0NUJDMEJDODE3OTJGMjJCNkZBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cYIJjEmO3z2DCuQPHdzjNT/5 09W6f3NmcsfTPuseM3u5sK6ud9jahxjcgI+m0OT6VlCEj1ovOq8uVZ+CO42i8Yz/ 64SegQZ4Rdo1liebzS40blTV+6lVgo0mHf4rUPp6ktfWwM6puR4eNlWXWKzU0Qc6 MlMYjrpYlsfvydIBfu4TlgLA1fLjgySXBlJbOP5I8vXEmvN6KloeG8cGbLg1SqpM pdGFM3ZEDzS4F+b9EukmsNE+SoU9niaZJWmC+TVYqf4f48+sfPP/m4MTd/TKMaM+ GKKNaZfuwj43icECGOE+sgmZzFLmtfVcLblgPFj0XD5QqbRpP3rjNgCuIvx5AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUPqhCwsCznUMHdFvAvIF5LyK2+hwwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2KDANBgkqhkiG9w0BAQsFAAOCAQEAI6fjEsQ42LyzkskP35wSKS7I1WSe UFJlttZnTLBI+ZVZSxD0iWJ5WuR86HbtzzPd4Sp78v3WQ3H556S3LTZeoXQqyFrY mbJOLS7+nraVbbteF3JuTo7dhgVNm7psw2jVpnVoI/a/5REcPw1u2NTaTMBgCUTf q5pr4F1uaOvfK2VKTH+/VZcJjqjkEdTOHy8Mt+6JazB6qv/mdEsqVo3wQ50VMd8r nn3OBg0uccuoplVrppJHRm6B/Gs3DAXfmyV4YuTkUKf/TyjWL/gC8jLp8hW39dBh PtOpW0ruFEXox5XVam7qtnHGagFhk528sqvQFhpHHnIUb501+BUTqDZAIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:30 2026 by rpki-client