This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37322e302f32322d3232203d3e203234343236.roa File: 34332e3234362e37322e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: bR1/9paf3cImLCmnN21SUG9yhc7ELWrgIa20MaOLtyM= Subject key identifier: 2C:88:1F:77:0B:A0:6E:B1:06:0B:FC:B5:4F:72:E4:41:09:D5:7C:31 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 6F43EF2AC6ADF397ED00073ED6DDAF39F6E9017D Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37322e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:07 +0000 ROA not before: Tue 20 Jan 2026 01:14:07 +0000 ROA not after: Tue 19 Jan 2027 01:19:07 +0000 asID: 24426 IP address blocks: 43.246.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:43:ef:2a:c6:ad:f3:97:ed:00:07:3e:d6:dd:af:39:f6:e9:01:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:07 2026 GMT Not After : Jan 19 01:19:07 2027 GMT Subject: CN=2C881F770BA06EB1060BFCB54F72E44109D57C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:12:5e:06:e1:32:c6:2d:39:03:ee:82:54: fd:25:24:3f:3b:4e:df:2a:d0:dc:b0:ef:3b:64:8f: bc:69:77:32:09:02:6e:31:6f:25:d8:5e:4a:db:2d: ce:73:11:93:0b:fa:b2:e7:34:59:dc:92:9b:8c:5e: 6e:cd:d3:e4:ce:ed:a8:cf:ee:6d:f6:62:e2:4b:aa: a1:2b:b4:87:48:11:11:ca:37:4b:d1:3b:6e:f5:58: dc:c4:1a:dd:25:34:f2:16:29:f9:b2:08:eb:d9:ef: 11:2a:d8:7d:ff:24:0e:84:93:51:80:02:c3:61:3f: fe:8d:e1:41:7b:e2:91:ae:f3:7c:4b:5a:cb:ee:34: 4c:ce:db:9e:f6:07:29:05:58:0a:5a:5f:18:f1:5a: a6:62:b2:b8:75:c7:b8:02:9d:b5:8d:a5:78:60:5d: 6c:4f:e4:f9:79:32:ee:4b:8f:80:7f:d4:85:ab:e9: f7:60:91:b8:8d:66:88:19:32:1d:40:ee:31:e2:63: c3:20:14:c2:e7:a2:6a:9f:2b:a9:87:03:93:e1:cb: 8c:d3:03:71:c3:01:aa:e5:95:a9:ae:d2:af:8c:a8: d3:fa:14:b7:ee:be:96:3b:be:c4:89:85:01:1c:62: ec:da:5f:e4:3c:94:05:2f:0d:98:08:14:22:da:bc: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:1F:77:0B:A0:6E:B1:06:0B:FC:B5:4F:72:E4:41:09:D5:7C:31 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37322e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.72.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:12:27:1f:53:3d:00:0b:17:20:8e:c2:fc:35:b6:d5:85:6c: d7:b4:67:89:bd:3a:4f:3e:53:e2:1e:21:fa:07:4d:2c:e5:ba: 36:6d:f3:ea:dd:c6:90:18:d8:fb:b1:1b:cf:6f:b6:78:dc:1c: ac:3a:6c:67:17:0d:4c:d9:87:e7:10:7b:00:e5:72:96:8e:7c: 38:72:c2:dc:23:8d:4f:92:db:d6:24:18:7a:6a:32:36:50:3f: 11:d6:62:ed:e8:2b:cc:a4:26:ce:15:ae:b1:4a:17:b1:97:8b: 02:94:d6:c7:47:17:7d:9e:ec:82:b1:7c:0d:86:18:39:03:2e: 40:07:5e:5e:ee:04:03:89:88:f2:ee:b5:ae:93:34:0e:ec:e5: fa:7a:07:bd:2a:ff:5e:f1:f6:a9:cd:f9:f1:5d:52:0b:d0:b9: 50:82:48:32:b1:e8:45:6c:20:9e:f8:d2:1b:a3:f0:60:6f:67: 31:b5:61:ea:12:8e:af:5f:0b:b3:fc:bf:69:12:a0:37:49:49: 4d:3d:9e:91:06:e3:46:7a:20:ce:7a:da:85:70:c8:5f:38:76: 33:98:ad:97:14:53:20:4b:65:0a:bb:04:f8:b4:79:2c:67:11: 61:5b:a9:38:05:d0:cd:2b:a4:2f:7b:d7:1b:9c:83:a4:99:aa: f3:43:7c:98 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUb0PvKsat85ftAAc+1t2vOfbpAX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDdaFw0yNzAxMTkwMTE5MDdaMDMxMTAvBgNV BAMTKDJDODgxRjc3MEJBMDZFQjEwNjBCRkNCNTRGNzJFNDQxMDlENTdDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cxJeBuEyxi05A+6CVP0lJD87 Tt8q0Nyw7ztkj7xpdzIJAm4xbyXYXkrbLc5zEZML+rLnNFnckpuMXm7N0+TO7ajP 7m32YuJLqqErtIdIERHKN0vRO271WNzEGt0lNPIWKfmyCOvZ7xEq2H3/JA6Ek1GA AsNhP/6N4UF74pGu83xLWsvuNEzO2572BykFWApaXxjxWqZisrh1x7gCnbWNpXhg XWxP5Pl5Mu5Lj4B/1IWr6fdgkbiNZogZMh1A7jHiY8MgFMLnomqfK6mHA5Phy4zT A3HDAarllamu0q+MqNP6FLfuvpY7vsSJhQEcYuzaX+Q8lAUvDZgIFCLavBNPAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQULIgfdwugbrEGC/y1T3LkQQnVfDEwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2SDANBgkqhkiG9w0BAQsFAAOCAQEAehInH1M9AAsXII7C/DW21YVs17Rn ib06Tz5T4h4h+gdNLOW6Nm3z6t3GkBjY+7Ebz2+2eNwcrDpsZxcNTNmH5xB7AOVy lo58OHLC3CONT5Lb1iQYemoyNlA/EdZi7egrzKQmzhWusUoXsZeLApTWx0cXfZ7s grF8DYYYOQMuQAdeXu4EA4mI8u61rpM0Duzl+noHvSr/XvH2qc358V1SC9C5UIJI MrHoRWwgnvjSG6PwYG9nMbVh6hKOr18Ls/y/aRKgN0lJTT2ekQbjRnogznrahXDI Xzh2M5itlxRTIEtlCrsE+LR5LGcRYVupOAXQzSukL3vXG5yDpJmq80N8mA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:05 2026 by rpki-client