This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37362e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e37362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: fzAyWKW6ehOUUdHXBpM55nhDtyV1luenoPgiZ2E9SJc=
Subject key identifier: 54:65:98:0A:A5:F1:31:F9:00:2B:91:14:F8:FE:AD:2B:85:46:1C:F3
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 0E19364C951EA7324AD514D4F33F7619FD839841
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37362e302f32322d3232203d3e203234343236.roa
Signing time: Tue 20 Jan 2026 01:19:08 +0000
ROA not before: Tue 20 Jan 2026 01:14:08 +0000
ROA not after: Tue 19 Jan 2027 01:19:08 +0000
asID: 24426
IP address blocks: 43.246.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:19:36:4c:95:1e:a7:32:4a:d5:14:d4:f3:3f:76:19:fd:83:98:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jan 20 01:14:08 2026 GMT
Not After : Jan 19 01:19:08 2027 GMT
Subject: CN=5465980AA5F131F9002B9114F8FEAD2B85461CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:db:b4:49:ae:2c:f5:f8:95:b7:39:02:89:
c1:9e:37:fa:6d:4a:8c:c9:31:f4:d3:22:4a:42:4c:
d2:a2:cf:56:b4:d1:dd:99:09:7a:ab:ce:33:40:0f:
97:f6:cd:6f:97:41:f5:e9:64:07:ca:75:9e:1d:bd:
9a:c4:77:73:62:1c:7c:e1:3a:17:75:1c:70:96:8f:
35:85:34:bb:03:97:3c:6b:61:c1:71:78:52:b0:e0:
5c:bb:6e:6f:ee:68:8a:3c:28:47:c2:a1:20:9d:40:
d7:69:bd:d4:b9:4d:b9:8b:52:a0:a7:10:74:b0:31:
6e:40:9b:20:f8:b9:9b:92:5c:d9:76:d4:0c:cb:05:
6c:f8:57:16:70:f3:b6:2b:9a:2d:0d:5b:e1:4e:92:
f9:4d:53:7e:5b:6b:fd:c0:6d:9c:13:ff:10:6f:5f:
4d:84:26:52:ad:00:c4:91:cb:53:87:ae:6f:49:20:
04:0c:09:40:7d:bd:4b:d9:01:ef:92:e9:c0:d8:ac:
5e:58:44:d3:27:95:e9:d9:c7:50:59:8e:74:a8:2b:
e7:ff:8a:46:1d:a0:90:46:19:de:94:01:52:a4:af:
99:a4:2a:25:0c:15:f0:aa:e5:02:a1:94:46:d9:4a:
3a:71:e5:2f:5f:a9:72:8a:87:29:2b:61:93:dc:74:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:98:0A:A5:F1:31:F9:00:2B:91:14:F8:FE:AD:2B:85:46:1C:F3
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37362e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:a8:dc:fc:ac:c4:1b:d4:51:ad:ae:e8:14:3a:a7:38:bc:53:
70:bd:1f:97:6f:b6:ce:a6:76:0e:99:0b:28:c2:bc:18:08:2b:
cf:69:67:3e:a3:ad:66:54:ed:e4:21:89:83:90:7d:c7:8d:23:
30:e0:67:a3:ce:ce:68:01:de:fd:ff:3c:a8:c1:6b:ec:77:cc:
31:ba:89:93:a7:ef:60:66:c6:e9:88:ba:a8:f9:7d:2f:a1:21:
cf:63:7b:df:21:1b:60:e7:6a:90:1f:7c:90:13:0c:66:df:09:
77:3f:40:21:ff:95:7a:7b:d0:6f:ba:1e:bd:a1:df:5e:dd:b6:
9a:7f:9b:53:6e:6e:52:50:2b:4d:63:f2:5c:64:89:62:f0:85:
17:9e:0f:f1:17:e0:ed:55:50:b5:9b:61:4b:9d:9c:21:bd:2d:
9e:ca:04:51:4f:08:97:1b:27:2f:a8:cc:e7:0c:fe:32:8a:9f:
75:9f:57:41:ec:b1:3e:2e:83:5d:8e:b6:0a:40:18:74:2b:f2:
85:df:5b:a0:9d:b3:82:e7:0f:8e:e1:d6:1d:16:58:64:07:a3:
96:c6:62:f2:c4:de:f2:d7:e2:bb:60:d2:72:6f:84:52:d0:8d:
24:6f:09:22:c4:a0:09:4f:a5:b2:ee:95:88:fb:58:f9:58:eb:
c9:ef:a1:27
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUDhk2TJUepzJK1RTU8z92Gf2DmEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDhaFw0yNzAxMTkwMTE5MDhaMDMxMTAvBgNV
BAMTKDU0NjU5ODBBQTVGMTMxRjkwMDJCOTExNEY4RkVBRDJCODU0NjFDRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkiNu0Sa4s9fiVtzkCicGeN/pt
SozJMfTTIkpCTNKiz1a00d2ZCXqrzjNAD5f2zW+XQfXpZAfKdZ4dvZrEd3NiHHzh
Ohd1HHCWjzWFNLsDlzxrYcFxeFKw4Fy7bm/uaIo8KEfCoSCdQNdpvdS5TbmLUqCn
EHSwMW5AmyD4uZuSXNl21AzLBWz4VxZw87Yrmi0NW+FOkvlNU35ba/3AbZwT/xBv
X02EJlKtAMSRy1OHrm9JIAQMCUB9vUvZAe+S6cDYrF5YRNMnlenZx1BZjnSoK+f/
ikYdoJBGGd6UAVKkr5mkKiUMFfCq5QKhlEbZSjpx5S9fqXKKhykrYZPcdKs5AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUVGWYCqXxMfkAK5EU+P6tK4VGHPMwHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2
MmUzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv2TDANBgkqhkiG9w0BAQsFAAOCAQEAeqjc/KzEG9RRra7oFDqnOLxTcL0f
l2+2zqZ2DpkLKMK8GAgrz2lnPqOtZlTt5CGJg5B9x40jMOBno87OaAHe/f88qMFr
7HfMMbqJk6fvYGbG6Yi6qPl9L6Ehz2N73yEbYOdqkB98kBMMZt8Jdz9AIf+VenvQ
b7oevaHfXt22mn+bU25uUlArTWPyXGSJYvCFF54P8Rfg7VVQtZthS52cIb0tnsoE
UU8IlxsnL6jM5wz+MoqfdZ9XQeyxPi6DXY62CkAYdCvyhd9boJ2zgucPjuHWHRZY
ZAejlsZi8sTe8tfiu2DScm+EUtCNJG8JIsSgCU+lsu6ViPtY+Vjrye+hJw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:05:21 2026 by rpki-client