This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36302e302f32322d3232203d3e203234343236.roa File: 34332e3234362e36302e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: E694l3yVlZDkRQyZ6QtoKV2MJcPuIVwEuMk9UfYEXP4= Subject key identifier: 2D:EE:67:C5:1D:EC:46:F9:51:40:2C:C6:B6:4B:30:10:89:80:13:9D Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 359A33C23A115711A1E2F7C494BCB42A6458F0FC Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36302e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:06 +0000 ROA not before: Tue 20 Jan 2026 01:14:06 +0000 ROA not after: Tue 19 Jan 2027 01:19:06 +0000 asID: 24426 IP address blocks: 43.246.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9a:33:c2:3a:11:57:11:a1:e2:f7:c4:94:bc:b4:2a:64:58:f0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:06 2026 GMT Not After : Jan 19 01:19:06 2027 GMT Subject: CN=2DEE67C51DEC46F951402CC6B64B30108980139D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:3d:88:f1:a4:89:60:1d:6e:24:e0:51:40: 59:ee:b0:d8:dc:3d:ce:c4:09:99:5c:12:6b:5d:6e: 4b:b2:34:52:b5:21:f1:e4:e3:35:a0:7e:26:b2:b3: 5e:6a:cb:d0:60:55:40:3b:c8:e2:c2:17:87:fe:7b: 90:9b:f4:60:0f:1a:9c:6d:e2:2e:52:b8:99:93:74: 9a:fb:b9:02:4d:a4:35:8c:81:62:46:7f:c5:c6:10: d3:3e:c6:af:60:3b:1a:3a:7d:7e:bd:40:95:4a:ec: 21:65:9a:87:c1:7a:79:8c:3b:2e:7d:57:dd:04:46: 66:e0:f3:50:6e:ee:5e:b3:56:ea:44:6b:8c:9d:1e: 08:8f:82:5a:7f:d3:01:39:3e:17:c0:83:8f:3b:93: 92:f3:2b:53:85:e0:fd:ae:a8:aa:54:84:96:18:e8: ad:15:88:69:35:57:f1:6d:25:dc:27:d3:1c:6d:18: 5a:d5:65:fb:0d:81:f5:c8:7d:fd:83:46:bb:a2:8f: c0:ee:0a:9f:24:49:5f:a3:e1:a8:8b:82:a1:40:40: ae:e1:34:49:34:3d:e1:8b:3e:e3:06:79:e4:58:54: 1b:47:8c:3f:d7:44:aa:73:99:f5:3f:4f:56:32:b4: ef:71:03:bc:33:86:87:d0:64:b1:89:8a:81:1d:4e: d0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EE:67:C5:1D:EC:46:F9:51:40:2C:C6:B6:4B:30:10:89:80:13:9D X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36302e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.60.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:be:ef:e7:66:05:cd:23:8a:51:14:ba:b2:fc:f4:db:b0:b7: 92:4d:0f:07:23:75:24:f3:59:07:ed:73:03:c6:55:36:f6:eb: d2:9b:1d:1f:52:71:cd:98:29:cd:3d:7d:b9:cc:4d:e7:e7:ce: 91:ce:1a:ba:eb:f1:8e:28:2f:1d:81:4f:b3:43:df:34:67:35: de:d0:cb:f7:11:af:23:3a:74:c9:75:70:e4:a7:20:7a:c1:46: ff:d9:3a:4e:6f:2c:b8:81:88:a2:9b:67:57:30:91:2c:11:7c: 63:12:0e:e0:4d:9a:3d:c9:69:eb:6b:1e:a9:4a:fd:a7:fe:3b: 65:2f:8a:4f:fd:a6:9b:69:2c:85:f1:96:e3:e2:08:3d:16:bc: 1d:6b:a9:f3:b7:61:3d:bc:4f:3e:a1:bb:45:32:3b:fd:97:8f: f4:7f:bb:59:52:59:84:c1:1f:05:25:c6:f8:51:4d:cc:86:22: 9f:81:5d:ba:e2:9c:a3:90:21:90:3e:c7:f0:f0:a9:49:46:40: ed:52:e9:c9:05:a9:ed:65:31:a8:23:38:4c:fb:0b:ab:79:8e: c4:52:74:98:36:dd:35:6c:32:52:d4:8b:fc:8d:e7:29:62:e6: 22:e5:96:4a:bc:b4:88:53:b9:23:ab:81:8a:1d:40:03:d0:ec: 0b:5d:8c:17 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUNZozwjoRVxGh4vfElLy0KmRY8PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDZaFw0yNzAxMTkwMTE5MDZaMDMxMTAvBgNV BAMTKDJERUU2N0M1MURFQzQ2Rjk1MTQwMkNDNkI2NEIzMDEwODk4MDEzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70z2I8aSJYB1uJOBRQFnusNjc Pc7ECZlcEmtdbkuyNFK1IfHk4zWgfiays15qy9BgVUA7yOLCF4f+e5Cb9GAPGpxt 4i5SuJmTdJr7uQJNpDWMgWJGf8XGENM+xq9gOxo6fX69QJVK7CFlmofBenmMOy59 V90ERmbg81Bu7l6zVupEa4ydHgiPglp/0wE5PhfAg487k5LzK1OF4P2uqKpUhJYY 6K0ViGk1V/FtJdwn0xxtGFrVZfsNgfXIff2DRruij8DuCp8kSV+j4aiLgqFAQK7h NEk0PeGLPuMGeeRYVBtHjD/XRKpzmfU/T1YytO9xA7wzhofQZLGJioEdTtAXAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQULe5nxR3sRvlRQCzGtkswEImAE50wHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzNjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2PDANBgkqhkiG9w0BAQsFAAOCAQEAfL7v52YFzSOKURS6svz027C3kk0P ByN1JPNZB+1zA8ZVNvbr0psdH1JxzZgpzT19ucxN5+fOkc4auuvxjigvHYFPs0Pf NGc13tDL9xGvIzp0yXVw5KcgesFG/9k6Tm8suIGIoptnVzCRLBF8YxIO4E2aPclp 62seqUr9p/47ZS+KT/2mm2kshfGW4+IIPRa8HWup87dhPbxPPqG7RTI7/ZeP9H+7 WVJZhMEfBSXG+FFNzIYin4FduuKco5AhkD7H8PCpSUZA7VLpyQWp7WUxqCM4TPsL q3mOxFJ0mDbdNWwyUtSL/I3nKWLmIuWWSry0iFO5I6uBih1AA9DsC12MFw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:43 2026 by rpki-client