This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35362e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e35362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: x1otCxuIjjEngEOqE9oWlZoQt1Le+UHzVqTDCwVAt1k=
Subject key identifier: E0:18:62:C7:C8:05:78:1C:EA:90:E1:45:CD:D6:7C:91:22:42:10:E8
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 7F6E8EABA06456EE0BD8772E362A56D77C61E829
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35362e302f32322d3232203d3e203234343236.roa
Signing time: Tue 20 Jan 2026 01:19:08 +0000
ROA not before: Tue 20 Jan 2026 01:14:08 +0000
ROA not after: Tue 19 Jan 2027 01:19:08 +0000
asID: 24426
IP address blocks: 43.246.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:6e:8e:ab:a0:64:56:ee:0b:d8:77:2e:36:2a:56:d7:7c:61:e8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jan 20 01:14:08 2026 GMT
Not After : Jan 19 01:19:08 2027 GMT
Subject: CN=E01862C7C805781CEA90E145CDD67C91224210E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:cf:9f:31:06:62:d6:73:d7:f2:a9:a1:7c:
c2:59:65:4e:36:af:8d:81:b8:45:61:bb:c5:44:fc:
21:fb:4d:1e:bb:14:f9:3a:2c:16:65:1f:69:be:db:
6f:26:e2:d7:48:99:ac:a8:95:81:1e:12:fe:a3:95:
c9:9a:6a:6c:f4:73:f0:b8:ac:15:fe:39:fc:5f:4d:
ff:20:a7:db:ab:47:b6:0a:95:28:04:4f:df:aa:7e:
1a:66:d5:13:ea:4c:c4:d4:a3:72:7d:6b:54:d9:da:
a3:46:81:5b:a7:61:98:e7:64:27:77:c8:30:c1:09:
b4:03:85:46:f1:e2:f6:44:88:76:57:96:c0:6c:50:
ee:70:02:e7:b9:ea:bf:ec:14:70:3c:cd:6e:6a:4d:
87:6b:73:ec:6f:f8:12:cd:4a:a0:d4:2e:9e:05:55:
6e:13:9b:27:a4:c4:9c:df:63:7b:8e:2d:48:c4:ca:
72:b8:41:ea:49:46:a7:5c:bc:ff:0d:11:01:5f:c2:
ff:00:39:cd:41:7e:ce:30:c4:39:20:c2:94:b2:1c:
47:c3:fb:0c:2b:6d:5a:62:42:db:fa:e0:55:f0:ae:
15:68:b7:83:90:be:58:f6:89:6b:a2:a6:35:66:f7:
d9:23:6e:ae:66:33:c4:cd:cc:65:68:e3:35:50:da:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:18:62:C7:C8:05:78:1C:EA:90:E1:45:CD:D6:7C:91:22:42:10:E8
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35362e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.56.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:d9:f3:cd:56:e4:e2:2f:43:42:52:fd:fc:8c:38:bc:89:1e:
67:79:da:12:b3:c2:a1:fb:ca:f5:5b:41:01:17:2a:04:9a:5f:
46:6c:0a:12:c2:35:43:3c:04:fd:6d:cd:57:1d:1a:53:00:91:
d3:dc:01:9c:ee:4a:a3:7f:cc:ca:a3:21:ec:aa:2c:53:9c:52:
10:fc:df:17:a1:7f:65:33:26:de:da:4e:ed:12:b8:42:b5:99:
bc:50:7f:82:81:bc:a7:10:ab:b2:a1:b8:cf:c5:35:12:d6:3f:
3a:45:af:6c:32:f3:d4:8d:a1:63:b9:13:7c:fd:6a:19:a4:6c:
60:82:2d:ab:21:13:28:d6:4d:b5:84:e8:5f:49:c2:ae:63:b9:
9f:49:4e:4e:b9:fe:c5:29:ee:34:29:f8:d1:70:97:d1:14:bd:
b1:47:e5:03:df:e9:ce:63:f4:14:0f:20:3e:4d:2b:48:30:71:
10:15:a2:2a:af:3f:34:0c:c5:6e:f0:25:74:9f:05:69:04:da:
12:4f:40:54:2c:eb:be:37:55:b6:3a:d2:e9:6c:24:7a:96:81:
7f:54:f4:9a:6a:23:e0:e7:e3:f9:40:36:9c:8d:7a:5d:5e:17:
0a:d0:53:f5:96:87:70:49:b6:8b:00:f0:75:34:ba:12:ae:2f:
22:88:c6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:40 2026 by rpki-client