This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS134810.roa File: AS134810.roa (raw, json) Hash identifier: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA= Subject key identifier: EE:35:D5:8D:19:58:DA:2C:A1:53:B1:CF:2F:6A:82:4E:9E:BD:35:6A Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 43DD7BD7778F3E3543659DA7C8923072FE17326A Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS134810.roa Signing time: Tue 20 Jan 2026 02:17:00 +0000 ROA not before: Tue 20 Jan 2026 02:12:00 +0000 ROA not after: Tue 19 Jan 2027 02:17:00 +0000 asID: 134810 IP address blocks: 240a:40c1:4000::/44 maxlen: 48 240a:40c1:4010::/44 maxlen: 48 240a:4298::/31 maxlen: 31 240a:429c::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:dd:7b:d7:77:8f:3e:35:43:65:9d:a7:c8:92:30:72:fe:17:32:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:12:00 2026 GMT Not After : Jan 19 02:17:00 2027 GMT Subject: CN=EE35D58D1958DA2CA153B1CF2F6A824E9EBD356A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:87:e7:7b:b8:b4:bc:73:49:5e:5b:91:38: 87:f7:03:14:98:63:93:07:1f:31:4e:5b:bb:ab:b4: 78:d1:fe:0a:1f:30:3a:77:06:b3:13:20:1c:58:ca: 0c:2c:63:18:f9:b9:05:70:7f:1c:bd:ce:a8:5a:ae: c8:7e:68:e1:36:29:fe:b9:47:d2:8d:f8:95:10:92: b2:85:b7:e2:d8:f8:14:d5:0f:e3:d8:f8:a5:66:4d: ad:b3:5e:db:0b:4c:0c:10:be:ed:c3:12:a8:44:24: 5b:34:ff:77:97:76:4b:fd:2a:9d:7b:bd:d2:f9:65: 11:3c:c6:f3:e5:08:cd:dd:71:ff:3b:53:22:25:54: 75:eb:e0:61:16:9d:bd:91:ca:55:d9:e0:eb:72:c8: b2:48:f1:72:1d:e6:aa:70:ef:00:ae:d8:34:ee:23: 80:8c:6f:40:27:88:a0:73:ad:89:e5:1c:de:eb:91: f2:a9:f5:79:39:2a:77:38:c0:73:0a:fd:c6:c1:71: 7c:a3:f6:2e:5b:17:62:55:69:6e:62:85:06:85:66: 6a:f5:22:1f:d6:bf:c6:b9:82:f4:3e:ca:3c:2e:e4: 46:02:0b:6b:ed:1d:83:56:2d:8d:76:df:f4:c1:52: ad:06:61:49:9e:df:9f:21:f8:3c:5e:56:b2:58:c2: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:35:D5:8D:19:58:DA:2C:A1:53:B1:CF:2F:6A:82:4E:9E:BD:35:6A X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS134810.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:40c1:4000::/43 240a:4298::/31 240a:429c::/31 Signature Algorithm: sha256WithRSAEncryption d6:f3:9a:96:0f:62:8b:be:d2:b2:b7:36:18:53:ed:0a:5f:17: 61:b9:37:a1:72:09:4c:44:1e:36:b1:78:6d:94:7f:ce:50:d7: bf:e9:98:0f:53:cf:fd:62:3f:fa:f8:19:28:5f:23:30:78:6e: 99:ea:d6:a7:42:ee:4b:f0:fb:44:29:ae:ac:71:4e:b8:42:8d: 11:87:c2:82:4f:3e:5a:38:68:f8:08:20:86:85:30:72:f9:fc: 41:99:77:50:0b:7e:eb:f6:0f:29:37:72:84:91:28:fc:2b:bf: 35:58:2c:84:c0:dd:3e:f5:fa:98:f4:56:9e:fd:85:bc:83:8f: c3:09:e5:8f:b5:38:f1:e4:ce:7b:a6:e7:e3:5a:e7:58:c8:f9: df:66:48:25:6d:9d:05:87:05:ab:35:df:22:64:83:a0:01:c9: 34:84:63:9c:ed:17:54:e7:ef:7e:6a:1f:39:77:f4:15:ff:c2: 15:96:e3:ea:00:98:63:f5:f2:f9:a3:11:cc:56:c8:13:d1:0e: e0:38:2b:3c:31:1a:ae:05:6d:96:c7:65:b1:cc:c2:85:77:5a: 86:61:5c:cf:4e:e5:b2:44:35:00:e3:14:51:b4:b0:48:e5:40: 55:bd:ee:e8:2e:05:d5:4b:bc:97:5a:6c:1a:6a:eb:bf:86:eb: 29:04:f9:10 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUQ91713ePPjVDZZ2nyJIwcv4XMmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjEyMDBaFw0yNzAxMTkwMjE3MDBaMDMxMTAvBgNV BAMTKEVFMzVENThEMTk1OERBMkNBMTUzQjFDRjJGNkE4MjRFOUVCRDM1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlofne7i0vHNJXluROIf3AxSY Y5MHHzFOW7urtHjR/gofMDp3BrMTIBxYygwsYxj5uQVwfxy9zqharsh+aOE2Kf65 R9KN+JUQkrKFt+LY+BTVD+PY+KVmTa2zXtsLTAwQvu3DEqhEJFs0/3eXdkv9Kp17 vdL5ZRE8xvPlCM3dcf87UyIlVHXr4GEWnb2RylXZ4OtyyLJI8XId5qpw7wCu2DTu I4CMb0AniKBzrYnlHN7rkfKp9Xk5Knc4wHMK/cbBcXyj9i5bF2JVaW5ihQaFZmr1 Ih/Wv8a5gvQ+yjwu5EYCC2vtHYNWLY123/TBUq0GYUme358h+DxeVrJYwoKdAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQU7jXVjRlY2iyhU7HPL2qCTp69NWowHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzEzNDgxMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wHQQC AAIwFwMHBSQKQMFAAAMFASQKQpgDBQEkCkKcMA0GCSqGSIb3DQEBCwUAA4IBAQDW 85qWD2KLvtKytzYYU+0KXxdhuTehcglMRB42sXhtlH/OUNe/6ZgPU8/9Yj/6+Bko XyMweG6Z6tanQu5L8PtEKa6scU64Qo0Rh8KCTz5aOGj4CCCGhTBy+fxBmXdQC37r 9g8pN3KEkSj8K781WCyEwN0+9fqY9Fae/YW8g4/DCeWPtTjx5M57pufjWudYyPnf ZkglbZ0FhwWrNd8iZIOgAck0hGOc7RdU5+9+ah85d/QV/8IVluPqAJhj9fL5oxHM VsgT0Q7gOCs8MRquBW2Wx2WxzMKFd1qGYVzPTuWyRDUA4xRRtLBI5UBVve7oLgXV S7yXWmwaauu/huspBPkQ -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:25 2026 by rpki-client