This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34342e302f32322d3232203d3e203234343236.roa File: 34332e3234362e34342e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: yaEXlU+vuPmEReqDGuSmoKD/gURk4S5gHATIyXAmh0s= Subject key identifier: 0C:A9:FA:79:1A:DD:73:F0:D4:42:5A:DE:69:58:17:13:B5:AA:A6:E9 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 1EAA155D584875EDAC444ACD76B8125E58AAF70B Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34342e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:05 +0000 ROA not before: Tue 20 Jan 2026 01:14:05 +0000 ROA not after: Tue 19 Jan 2027 01:19:05 +0000 asID: 24426 IP address blocks: 43.246.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:aa:15:5d:58:48:75:ed:ac:44:4a:cd:76:b8:12:5e:58:aa:f7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:05 2026 GMT Not After : Jan 19 01:19:05 2027 GMT Subject: CN=0CA9FA791ADD73F0D4425ADE69581713B5AAA6E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:92:b7:e9:46:bb:a3:62:cb:2f:0e:14:b9: 5e:96:4f:3d:9c:57:2f:db:0a:eb:81:ba:1c:7e:5f: 38:eb:9b:d5:e8:dc:c9:3f:43:8f:d7:00:64:9a:7b: a4:f8:e7:95:80:9c:f8:65:63:15:1e:68:5e:f8:97: cb:94:3a:c9:71:36:81:56:b8:55:13:53:04:de:1e: 9b:b0:c1:ce:39:60:26:3a:0b:5b:10:34:fc:76:89: 92:d1:a9:85:6e:d8:73:cd:60:43:ca:37:ab:65:fe: 07:db:e7:cf:b4:6c:16:3a:df:da:cf:60:44:7e:ce: 2c:bc:c9:d7:8e:88:aa:b8:96:10:a5:cc:a4:dc:78: 3d:b0:7c:85:3f:c6:25:ca:86:50:15:f9:d3:40:7f: b9:2b:bf:c2:3f:9c:5b:60:b7:7a:74:28:e2:2b:2c: 6c:67:4a:64:80:72:15:01:18:22:38:80:5a:91:3d: 88:37:42:2c:ce:42:b5:fb:ce:cf:5c:b1:30:ed:43: d0:97:5d:e6:b4:4a:11:8f:a8:93:7d:90:ea:8c:e5: a2:d1:9e:ed:18:35:2a:23:ae:4f:41:ae:72:96:e6: 95:32:3b:20:8f:47:bd:bc:80:14:da:47:ad:4c:12: 55:0a:84:6c:b6:74:07:91:c6:ce:b2:0b:ab:5e:d5: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A9:FA:79:1A:DD:73:F0:D4:42:5A:DE:69:58:17:13:B5:AA:A6:E9 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34342e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.44.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:b7:48:62:74:d2:5f:9b:0f:4a:dd:ee:1e:3e:6c:c7:34:10: 24:89:e0:ef:fe:cd:23:f3:b6:24:4c:ad:c9:ae:69:77:23:89: 6d:c8:04:09:0d:af:88:f3:13:ad:13:0f:be:f4:59:47:3c:9a: 03:c7:11:bb:1a:0b:a5:d7:68:bd:95:65:7b:2c:71:92:98:4f: a6:1f:2c:77:7a:04:d5:d4:a8:15:52:dc:00:fb:3d:6f:13:7b: 41:5c:ae:42:9d:ae:e6:12:0e:59:5d:9f:47:e8:55:51:2a:8a: 37:93:80:94:ae:10:c1:39:76:fd:6d:df:b2:d3:1a:9e:db:7d: c6:b1:50:58:e0:24:b3:c3:60:7c:95:ea:43:56:9e:7b:49:71: 41:66:ab:2b:f3:d0:18:b7:cb:4e:87:68:c2:51:e0:56:ea:fd: 41:cb:e6:b5:8e:70:e9:98:7c:36:d2:f9:1a:a9:cb:53:0c:d3: a3:70:8a:f7:95:45:8c:dc:60:df:ab:db:02:2f:cd:74:02:1f: a6:0a:54:eb:62:5d:3a:df:dd:fb:07:93:58:7d:2f:e6:d1:9a: a2:64:7b:ef:49:7e:f5:a2:d2:68:a2:b7:5b:57:38:23:a6:0c: 07:ef:7c:f5:84:e7:8e:6e:ce:ce:5b:e1:8a:66:5a:f5:9a:9e: f8:9b:1f:c0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHqoVXVhIde2sRErNdrgSXliq9wswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDVaFw0yNzAxMTkwMTE5MDVaMDMxMTAvBgNV BAMTKDBDQTlGQTc5MUFERDczRjBENDQyNUFERTY5NTgxNzEzQjVBQUE2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZ5K36Ua7o2LLLw4UuV6WTz2c Vy/bCuuBuhx+Xzjrm9Xo3Mk/Q4/XAGSae6T455WAnPhlYxUeaF74l8uUOslxNoFW uFUTUwTeHpuwwc45YCY6C1sQNPx2iZLRqYVu2HPNYEPKN6tl/gfb58+0bBY639rP YER+ziy8ydeOiKq4lhClzKTceD2wfIU/xiXKhlAV+dNAf7krv8I/nFtgt3p0KOIr LGxnSmSAchUBGCI4gFqRPYg3QizOQrX7zs9csTDtQ9CXXea0ShGPqJN9kOqM5aLR nu0YNSojrk9BrnKW5pUyOyCPR728gBTaR61MElUKhGy2dAeRxs6yC6te1ffRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUDKn6eRrdc/DUQlreaVgXE7WqpukwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2LDANBgkqhkiG9w0BAQsFAAOCAQEAK7dIYnTSX5sPSt3uHj5sxzQQJIng 7/7NI/O2JEytya5pdyOJbcgECQ2viPMTrRMPvvRZRzyaA8cRuxoLpddovZVleyxx kphPph8sd3oE1dSoFVLcAPs9bxN7QVyuQp2u5hIOWV2fR+hVUSqKN5OAlK4QwTl2 /W3fstMantt9xrFQWOAks8NgfJXqQ1aee0lxQWarK/PQGLfLTodowlHgVur9Qcvm tY5w6Zh8NtL5GqnLUwzTo3CK95VFjNxg36vbAi/NdAIfpgpU62JdOt/d+weTWH0v 5tGaomR770l+9aLSaKK3W1c4I6YMB+989YTnjm7OzlvhimZa9Zqe+JsfwA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:22 2026 by rpki-client