This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38382e302f32322d3232203d3e203234343236.roa File: 34332e3234362e38382e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: yEUlvAuWhb+HNL+/yFHFs7rQx2mrRmQvGGG0xK6yG3o= Subject key identifier: E0:70:6C:C3:EB:2A:79:A7:2A:35:E8:0D:5B:5C:36:B7:F6:F3:45:AB Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 6F7CB45AD85283616AB14C758CCD68BF15B8ECE3 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38382e302f32322d3232203d3e203234343236.roa Signing time: Tue 20 Jan 2026 01:19:08 +0000 ROA not before: Tue 20 Jan 2026 01:14:08 +0000 ROA not after: Tue 19 Jan 2027 01:19:08 +0000 asID: 24426 IP address blocks: 43.246.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7c:b4:5a:d8:52:83:61:6a:b1:4c:75:8c:cd:68:bf:15:b8:ec:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jan 20 01:14:08 2026 GMT Not After : Jan 19 01:19:08 2027 GMT Subject: CN=E0706CC3EB2A79A72A35E80D5B5C36B7F6F345AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:4b:64:b0:05:ca:59:5c:4a:e5:b8:bd:c9: f1:f6:15:9c:11:70:11:7a:b5:46:54:d2:d8:3d:ee: 07:2d:bd:3b:39:29:55:5c:41:95:19:77:58:ef:1e: 0e:58:e5:d3:ac:b3:0e:26:e3:a8:1c:57:02:3a:b7: 9f:61:cb:01:82:42:c3:4c:f3:64:8b:3e:25:80:e3: d2:92:9b:8f:ce:3d:90:af:aa:92:34:ea:b5:c3:f3: 7b:9e:25:fd:ec:5b:39:dc:73:13:54:ff:4a:d3:ce: d3:56:84:c0:91:12:35:78:67:86:40:3f:f1:67:54: 10:82:97:57:41:31:77:c4:c1:86:c0:80:20:3c:38: e3:56:4d:ed:20:51:f5:c7:40:24:91:3f:c7:8f:e8: 7b:db:3a:16:79:d0:c1:4b:0f:e4:4e:8c:34:65:83: dd:5f:97:9b:c0:68:3b:21:8b:59:19:fc:de:67:52: ab:b9:14:d2:ea:ac:00:02:f7:e7:ea:6b:78:ab:e3: 3d:80:2e:85:da:fd:6e:4a:f2:e7:7e:70:99:3e:d1: 14:47:96:16:d8:26:59:ee:e4:eb:28:e4:d3:cf:07: 93:6e:59:f6:6b:66:71:ad:07:cc:f1:3a:b4:c2:2f: 7d:1e:24:46:61:f0:97:c5:7d:f9:e6:5a:f7:2a:69: 46:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:70:6C:C3:EB:2A:79:A7:2A:35:E8:0D:5B:5C:36:B7:F6:F3:45:AB X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38382e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.88.0/22 Signature Algorithm: sha256WithRSAEncryption a7:75:12:1f:8d:80:80:5f:30:7f:82:d3:17:44:1a:4d:21:5a: dc:5c:ea:65:6e:22:2f:35:6f:c6:40:95:bf:89:35:cc:fe:84: 70:80:43:75:eb:83:5c:8d:ca:3b:96:40:fe:cd:c1:fd:d8:cf: 69:67:c9:7b:98:b8:6c:7c:96:9c:d4:07:20:23:a1:96:2f:53: f5:1d:df:eb:c6:6e:5f:67:9c:93:e8:71:36:d3:1a:23:6e:54: c0:50:1a:9e:08:0e:df:94:ef:62:28:5b:aa:09:cb:df:9a:53: f0:ff:ff:5c:50:e5:02:3d:2a:a0:c2:bd:05:66:05:f5:33:08: 0f:a2:e2:54:90:21:69:74:3e:7e:85:fe:44:b1:30:2d:8b:90: 46:27:7f:04:e3:36:73:fa:da:77:c2:78:cd:99:54:a9:d8:a0: f6:3e:18:e2:d2:ee:67:68:70:58:10:54:64:cf:13:6d:d9:8d: 58:f3:0a:b3:d0:9f:77:b6:62:8c:2b:d5:22:ca:2a:7b:11:27: 33:7a:a4:bf:c6:7c:ab:0e:5e:cc:50:dd:01:62:b0:e3:18:13: 07:84:60:d3:3b:39:b4:f0:c9:58:b7:e5:9f:f4:20:59:a0:f3: c1:01:92:0f:28:28:ad:84:f5:61:67:53:d4:4e:a5:05:e4:b8: d3:73:41:dc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUb3y0WthSg2FqsUx1jM1ovxW47OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDhaFw0yNzAxMTkwMTE5MDhaMDMxMTAvBgNV BAMTKEUwNzA2Q0MzRUIyQTc5QTcyQTM1RTgwRDVCNUMzNkI3RjZGMzQ1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOktksAXKWVxK5bi9yfH2FZwR cBF6tUZU0tg97gctvTs5KVVcQZUZd1jvHg5Y5dOssw4m46gcVwI6t59hywGCQsNM 82SLPiWA49KSm4/OPZCvqpI06rXD83ueJf3sWznccxNU/0rTztNWhMCREjV4Z4ZA P/FnVBCCl1dBMXfEwYbAgCA8OONWTe0gUfXHQCSRP8eP6HvbOhZ50MFLD+ROjDRl g91fl5vAaDshi1kZ/N5nUqu5FNLqrAAC9+fqa3ir4z2ALoXa/W5K8ud+cJk+0RRH lhbYJlnu5Oso5NPPB5NuWfZrZnGtB8zxOrTCL30eJEZh8JfFffnmWvcqaUabAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU4HBsw+sqeacqNegNW1w2t/bzRaswHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2WDANBgkqhkiG9w0BAQsFAAOCAQEAp3USH42AgF8wf4LTF0QaTSFa3Fzq ZW4iLzVvxkCVv4k1zP6EcIBDdeuDXI3KO5ZA/s3B/djPaWfJe5i4bHyWnNQHICOh li9T9R3f68ZuX2eck+hxNtMaI25UwFAanggO35TvYihbqgnL35pT8P//XFDlAj0q oMK9BWYF9TMID6LiVJAhaXQ+foX+RLEwLYuQRid/BOM2c/rad8J4zZlUqdig9j4Y 4tLuZ2hwWBBUZM8TbdmNWPMKs9Cfd7ZijCvVIsoqexEnM3qkv8Z8qw5ezFDdAWKw 4xgTB4Rg0zs5tPDJWLfln/QgWaDzwQGSDygorYT1YWdT1E6lBeS403NB3A== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:16 2026 by rpki-client