This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38342e302f32322d3232203d3e203234343236.roa File: 34332e3234362e38342e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: 7GErE33rhEuJM66NZ5ATLoEexTUMNM3oxAZTuuOsNro= Subject key identifier: A4:C6:B4:47:AD:5E:B1:C6:86:B2:90:28:D5:9E:C8:C0:7C:29:C3:12 Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 77474868C996237119F494966887B360D34DD494 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38342e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:06 +0000 ROA not before: Tue 20 Jan 2026 01:14:06 +0000 ROA not after: Tue 19 Jan 2027 01:19:06 +0000 asID: 24426 IP address blocks: 43.246.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:47:48:68:c9:96:23:71:19:f4:94:96:68:87:b3:60:d3:4d:d4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:06 2026 GMT Not After : Jan 19 01:19:06 2027 GMT Subject: CN=A4C6B447AD5EB1C686B29028D59EC8C07C29C312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:eb:59:dc:d2:24:dc:37:3e:94:97:8c:99:27: db:b1:8d:cd:ba:79:74:75:f8:25:e7:03:cb:26:ff: 9a:15:fc:5e:c3:38:fe:2b:0b:a8:e5:63:de:10:ac: ec:eb:7e:3e:03:58:de:f9:0b:43:f2:19:4d:df:3e: 11:87:88:41:50:eb:e8:98:32:15:99:92:e9:ef:de: 0e:e0:28:ba:75:ff:61:c5:e3:67:52:d1:7a:86:6d: 28:75:d0:7d:a2:fc:9b:46:f7:29:f9:f0:3f:84:d7: b6:82:12:98:5f:53:4d:a2:22:ee:0b:4c:96:69:d5: b7:ba:86:57:46:ae:bf:90:78:9d:d1:21:e0:41:6e: af:bd:b0:6a:ba:d5:63:fb:58:54:f4:d6:7d:d0:4c: 47:ab:1b:6b:ea:4f:6b:1d:38:73:55:59:c1:74:76: 49:20:0d:9b:9f:b7:b5:88:9b:82:fb:d4:08:a5:5c: e6:08:99:ec:2a:9e:4c:b8:08:05:44:b7:86:70:ca: b0:c0:26:5a:75:50:d8:1a:0f:c0:40:a3:4b:ed:38: ff:65:bb:eb:a3:ba:ed:01:24:04:8c:78:f6:fa:fb: e0:99:e7:c2:3b:20:48:66:12:83:e6:26:f4:09:8d: b5:9f:c7:a7:1a:ca:c0:0e:89:f1:90:fd:84:cd:fb: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C6:B4:47:AD:5E:B1:C6:86:B2:90:28:D5:9E:C8:C0:7C:29:C3:12 X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38342e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.84.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:73:66:74:7f:90:cf:c0:b6:2e:0e:57:e6:12:2c:07:86:69: 5f:5c:79:ad:e7:c0:49:1b:ca:10:4b:d4:3f:2b:7f:5f:08:ec: 4a:8d:62:14:14:95:d1:b6:db:18:4f:68:d7:ac:6c:0c:74:b2: fb:5f:ba:e9:30:45:42:06:e6:c9:12:0d:77:ec:d1:45:90:ea: 7b:94:ad:cf:a5:20:84:06:86:87:99:a7:31:82:db:22:97:87: df:f3:83:0b:75:e7:30:77:da:35:eb:55:9b:fc:4e:c0:d9:df: 62:0f:60:c4:45:95:e5:5d:88:b0:9e:fa:8a:1f:47:c9:c5:8b: db:9c:99:df:af:b3:8b:e0:5e:9e:74:63:a1:e0:f0:aa:05:ef: 1a:f9:4b:13:26:a2:6a:0d:1e:d1:85:f3:dc:65:cc:09:77:45: 15:4e:27:ca:c5:f3:16:29:0e:02:55:11:b3:1a:ab:16:8b:68: 2b:12:0c:bd:14:eb:13:e7:db:22:e5:07:f9:cf:91:94:82:93: bf:12:8b:3f:2a:8b:aa:d4:f6:67:1e:6b:ce:6a:96:44:28:42: 63:23:f6:cc:6f:5d:f4:3b:e2:72:62:77:16:6a:00:7d:f2:cd: e9:31:16:25:8e:ea:a3:2e:f6:ff:b1:90:98:af:f7:27:e1:34: ef:fa:18:c8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUd0dIaMmWI3EZ9JSWaIezYNNN1JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDZaFw0yNzAxMTkwMTE5MDZaMDMxMTAvBgNV BAMTKEE0QzZCNDQ3QUQ1RUIxQzY4NkIyOTAyOEQ1OUVDOEMwN0MyOUMzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp61nc0iTcNz6Ul4yZJ9uxjc26 eXR1+CXnA8sm/5oV/F7DOP4rC6jlY94QrOzrfj4DWN75C0PyGU3fPhGHiEFQ6+iY MhWZkunv3g7gKLp1/2HF42dS0XqGbSh10H2i/JtG9yn58D+E17aCEphfU02iIu4L TJZp1be6hldGrr+QeJ3RIeBBbq+9sGq61WP7WFT01n3QTEerG2vqT2sdOHNVWcF0 dkkgDZuft7WIm4L71AilXOYImewqnky4CAVEt4ZwyrDAJlp1UNgaD8BAo0vtOP9l u+ujuu0BJASMePb6++CZ58I7IEhmEoPmJvQJjbWfx6caysAOifGQ/YTN+++XAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUpMa0R61escaGspAo1Z7IwHwpwxIwHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzODM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2VDANBgkqhkiG9w0BAQsFAAOCAQEAj3NmdH+Qz8C2Lg5X5hIsB4ZpX1x5 refASRvKEEvUPyt/XwjsSo1iFBSV0bbbGE9o16xsDHSy+1+66TBFQgbmyRINd+zR RZDqe5Stz6UghAaGh5mnMYLbIpeH3/ODC3XnMHfaNetVm/xOwNnfYg9gxEWV5V2I sJ76ih9HycWL25yZ36+zi+BennRjoeDwqgXvGvlLEyaiag0e0YXz3GXMCXdFFU4n ysXzFikOAlURsxqrFotoKxIMvRTrE+fbIuUH+c+RlIKTvxKLPyqLqtT2Zx5rzmqW RChCYyP2zG9d9DvicmJ3FmoAffLN6TEWJY7qoy72/7GQmK/3J+E07/oYyA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:39 2026 by rpki-client