This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24400.roa File: AS24400.roa (raw, json) Hash identifier: ql35zIap451HVcpWGnoICAb2sHI19dHkxqC8PGi+o/s= Subject key identifier: D1:CD:E6:F2:05:70:66:88:71:D7:27:4D:96:B5:0D:3D:00:63:54:FC Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 6AD90C85096588034DF34B85226ACF8303FA2833 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24400.roa Signing time: Tue 20 Jan 2026 02:18:02 +0000 ROA not before: Tue 20 Jan 2026 02:13:02 +0000 ROA not after: Tue 19 Jan 2027 02:18:02 +0000 asID: 24400 IP address blocks: 240a:429e::/31 maxlen: 31 240a:42a2::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d9:0c:85:09:65:88:03:4d:f3:4b:85:22:6a:cf:83:03:fa:28:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:13:02 2026 GMT Not After : Jan 19 02:18:02 2027 GMT Subject: CN=D1CDE6F20570668871D7274D96B50D3D006354FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:50:d0:f2:e5:73:aa:db:2f:6b:0d:13:fa:ea: 35:4d:5d:30:7d:43:3c:16:4d:bb:f2:78:fd:a1:c1: ec:12:cf:63:fc:06:8a:a7:95:d0:79:4f:1c:bb:23: 24:25:d1:79:71:b8:20:06:f9:91:e0:08:47:b7:31: bb:78:5e:51:0b:ac:4c:13:03:bd:fb:e7:3d:8c:9a: 82:7e:ea:42:10:7c:09:2d:70:dd:d5:fb:88:6f:2a: 00:5d:d5:3d:0f:3b:5d:93:72:19:c0:da:0b:a4:01: 4e:e1:5d:be:13:43:26:8d:f8:56:61:09:48:67:97: 52:fd:db:31:01:84:a0:26:f9:8f:99:a5:93:b3:3d: 44:92:00:94:02:41:a9:f1:34:46:7c:55:44:bb:82: 39:87:5c:a0:0d:8d:96:c7:ab:f5:01:a0:63:a4:55: 61:96:04:c0:28:ba:68:a4:4f:e2:22:95:2f:db:a9: 59:d8:bf:b2:df:ed:ec:98:72:94:65:d1:87:f1:b9: 76:05:bd:c1:54:46:67:12:34:04:44:e9:f1:68:f5: ed:05:26:28:62:25:d1:70:97:58:ab:cb:a4:b3:58: a2:02:f2:ab:3f:55:87:06:2d:1e:c2:9a:ec:73:fe: 50:af:1e:82:81:f4:99:28:9a:c5:d5:48:20:14:6b: 7d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CD:E6:F2:05:70:66:88:71:D7:27:4D:96:B5:0D:3D:00:63:54:FC X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24400.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:429e::/31 240a:42a2::/31 Signature Algorithm: sha256WithRSAEncryption af:66:3a:f4:62:58:96:08:ed:7d:a3:b8:87:3d:13:0e:7e:60: 8d:80:ed:d2:1c:20:f6:59:3d:87:8e:f2:c4:e7:75:50:1f:f9: 11:00:0b:bc:1f:bf:8b:77:f1:16:df:53:2a:c6:99:5d:46:fb: 9e:31:63:d3:7d:93:73:2a:37:19:39:ff:54:69:de:c5:c3:c7: 9d:70:31:ed:d9:b1:9b:ed:96:01:ab:9d:97:b7:27:ee:a3:1a: 5f:e6:13:e8:4a:70:e0:2e:72:58:14:7b:05:72:dc:77:a9:bc: 31:79:51:a0:90:95:66:4e:47:01:f6:8f:ce:de:a2:3c:f2:51: 34:02:b8:d9:00:ae:25:97:61:4e:69:34:66:06:2f:ae:df:68: 67:33:e3:4c:ba:f6:3a:26:6a:38:e2:b2:d4:0e:f7:28:cb:42: 61:e0:b9:49:e5:5f:83:fd:29:a0:3a:78:4d:c9:36:70:6a:03: c1:df:48:b7:d0:31:34:bb:e4:4d:b5:64:7d:e8:99:a2:e7:44: 0e:50:e3:4e:ff:e3:0e:c1:8e:06:ef:eb:f3:af:64:48:cd:a8: 0e:d3:dd:71:59:6e:bc:ca:43:78:5b:15:03:01:7e:70:42:3a: 8e:bb:79:bd:bd:c5:e5:21:27:49:65:bd:ce:4f:6e:74:ec:cf: 6d:b5:5a:b2 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUatkMhQlliANN80uFImrPgwP6KDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjEzMDJaFw0yNzAxMTkwMjE4MDJaMDMxMTAvBgNV BAMTKEQxQ0RFNkYyMDU3MDY2ODg3MUQ3Mjc0RDk2QjUwRDNEMDA2MzU0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZUNDy5XOq2y9rDRP66jVNXTB9 QzwWTbvyeP2hwewSz2P8BoqnldB5Txy7IyQl0XlxuCAG+ZHgCEe3Mbt4XlELrEwT A7375z2MmoJ+6kIQfAktcN3V+4hvKgBd1T0PO12TchnA2gukAU7hXb4TQyaN+FZh CUhnl1L92zEBhKAm+Y+ZpZOzPUSSAJQCQanxNEZ8VUS7gjmHXKANjZbHq/UBoGOk VWGWBMAoumikT+IilS/bqVnYv7Lf7eyYcpRl0YfxuXYFvcFURmcSNARE6fFo9e0F JihiJdFwl1iry6SzWKIC8qs/VYcGLR7Cmuxz/lCvHoKB9JkomsXVSCAUa33RAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQU0c3m8gVwZohx1ydNlrUNPQBjVPwwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzI0NDAwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIA AjAOAwUBJApCngMFASQKQqIwDQYJKoZIhvcNAQELBQADggEBAK9mOvRiWJYI7X2j uIc9Ew5+YI2A7dIcIPZZPYeO8sTndVAf+REAC7wfv4t38RbfUyrGmV1G+54xY9N9 k3MqNxk5/1Rp3sXDx51wMe3ZsZvtlgGrnZe3J+6jGl/mE+hKcOAuclgUewVy3Hep vDF5UaCQlWZORwH2j87eojzyUTQCuNkAriWXYU5pNGYGL67faGcz40y69jomajji stQO9yjLQmHguUnlX4P9KaA6eE3JNnBqA8HfSLfQMTS75E21ZH3omaLnRA5Q407/ 4w7Bjgbv6/OvZEjNqA7T3XFZbrzKQ3hbFQMBfnBCOo67eb29xeUhJ0llvc5PbnTs z221WrI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:34 2026 by rpki-client