This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24444.roa File: AS24444.roa (raw, json) Hash identifier: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo= Subject key identifier: B6:77:FE:9A:9D:9B:F8:21:35:16:25:62:A0:FA:8B:9B:EF:B2:96:34 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 075C571DBFDF67ECA1CF8E3D82E4A9BE73133860 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24444.roa Signing time: Tue 20 Jan 2026 02:16:59 +0000 ROA not before: Tue 20 Jan 2026 02:11:59 +0000 ROA not after: Tue 19 Jan 2027 02:16:59 +0000 asID: 24444 IP address blocks: 240a:40c2:4000::/44 maxlen: 48 240a:40c2:4010::/44 maxlen: 48 240a:42b8::/31 maxlen: 31 240a:42ba::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:5c:57:1d:bf:df:67:ec:a1:cf:8e:3d:82:e4:a9:be:73:13:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:11:59 2026 GMT Not After : Jan 19 02:16:59 2027 GMT Subject: CN=B677FE9A9D9BF82135162562A0FA8B9BEFB29634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:19:71:44:9b:45:70:26:d0:e6:73:2f:3f: 72:53:07:0e:93:26:29:81:bd:00:3b:d7:a0:aa:2a: b1:69:c6:2e:5a:8e:4c:87:97:96:16:4b:36:2a:2e: d5:21:c8:1b:a2:c1:b7:02:19:fe:6e:d2:b3:06:c6: 89:e9:90:dc:0a:41:b8:f3:96:09:1c:1f:4d:25:21: 89:e6:56:d0:68:21:38:21:a2:ea:21:4e:6a:be:76: 29:df:95:63:74:46:be:25:b3:2d:e2:0c:10:fa:d2: 8d:51:f8:76:1d:02:96:b9:8b:d3:91:cb:63:47:f0: 12:59:38:10:26:be:d5:e4:41:59:37:6e:0f:6f:db: e5:2c:af:a5:f1:13:fa:a1:45:56:ac:03:91:19:2b: 5b:1b:8c:4e:83:38:b9:d0:40:80:67:d3:ea:ea:6c: 57:f1:ad:dc:5b:0e:54:a1:1e:51:06:c7:4a:f1:59: 56:ae:9f:95:a4:48:41:f7:0a:35:cf:48:a8:e5:7e: 17:55:25:a0:8d:98:16:de:1e:2a:f4:97:5f:3c:1d: ab:fb:35:4e:ef:d0:55:c4:6e:5f:10:fd:2d:24:d4: 52:d7:59:7d:fa:c0:36:1d:85:97:a4:43:7a:17:8e: b1:26:39:79:ef:93:9c:c0:5c:2d:04:e7:8e:1a:96: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:77:FE:9A:9D:9B:F8:21:35:16:25:62:A0:FA:8B:9B:EF:B2:96:34 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24444.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:40c2:4000::/43 240a:42b8::/30 Signature Algorithm: sha256WithRSAEncryption 05:5e:d5:6a:d9:10:53:90:e1:59:26:ac:e1:a1:56:0d:ad:d5: 17:06:0d:12:a1:dd:dd:c6:8f:36:d4:a0:22:e6:4f:92:80:07: 8d:61:5a:cf:b4:d6:b6:da:0e:b8:69:4e:4b:fc:13:76:61:88: 48:b7:a6:25:e1:f4:dd:9f:d3:cc:09:d5:da:fe:3b:15:15:a6: fb:81:5c:05:c6:b4:1d:6a:ba:96:13:2e:7b:38:9c:83:a4:62: cb:3c:73:ce:c8:2d:5e:9e:c9:04:4f:39:79:de:7b:7d:b6:eb: 84:14:38:c9:d7:77:f3:c2:aa:fa:8d:1c:4f:4c:c9:45:6f:2f: 71:dd:ef:9e:bd:39:88:2f:f5:8c:84:17:25:07:e3:cf:9e:d6: 11:3f:bb:d8:23:47:d2:d7:47:65:f9:4b:b6:55:06:20:3a:25: 2b:92:11:98:ef:f4:5d:c9:ac:5e:38:3e:ec:1d:62:2c:92:fb: 37:31:96:9a:cd:9b:20:8c:d2:88:07:ce:71:24:b2:23:0c:f2: be:ab:9a:05:cd:a9:46:2f:95:b3:8c:75:83:27:94:67:57:2a: a7:52:49:f8:bb:8a:61:d9:29:c0:75:e2:57:70:0b:2e:ec:d3: be:df:09:2b:5b:dc:c8:d4:a9:99:71:b9:93:49:b0:08:e3:1f: 03:c2:28:ef -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUB1xXHb/fZ+yhz449guSpvnMTOGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjExNTlaFw0yNzAxMTkwMjE2NTlaMDMxMTAvBgNV BAMTKEI2NzdGRTlBOUQ5QkY4MjEzNTE2MjU2MkEwRkE4QjlCRUZCMjk2MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGhlxRJtFcCbQ5nMvP3JTBw6T JimBvQA716CqKrFpxi5ajkyHl5YWSzYqLtUhyBuiwbcCGf5u0rMGxonpkNwKQbjz lgkcH00lIYnmVtBoITghouohTmq+dinflWN0Rr4lsy3iDBD60o1R+HYdApa5i9OR y2NH8BJZOBAmvtXkQVk3bg9v2+Usr6XxE/qhRVasA5EZK1sbjE6DOLnQQIBn0+rq bFfxrdxbDlShHlEGx0rxWVaun5WkSEH3CjXPSKjlfhdVJaCNmBbeHir0l188Hav7 NU7v0FXEbl8Q/S0k1FLXWX36wDYdhZekQ3oXjrEmOXnvk5zAXC0E544allFnAgMB AAGjggHtMIIB6TAdBgNVHQ4EFgQUtnf+mp2b+CE1FiVioPqLm++yljQwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzI0NDQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIA AjAQAwcFJApAwkAAAwUCJApCuDANBgkqhkiG9w0BAQsFAAOCAQEABV7VatkQU5Dh WSas4aFWDa3VFwYNEqHd3caPNtSgIuZPkoAHjWFaz7TWttoOuGlOS/wTdmGISLem JeH03Z/TzAnV2v47FRWm+4FcBca0HWq6lhMuezicg6RiyzxzzsgtXp7JBE85ed57 fbbrhBQ4ydd388Kq+o0cT0zJRW8vcd3vnr05iC/1jIQXJQfjz57WET+72CNH0tdH ZflLtlUGIDolK5IRmO/0XcmsXjg+7B1iLJL7NzGWms2bIIzSiAfOcSSyIwzyvqua Bc2pRi+Vs4x1gyeUZ1cqp1JJ+LuKYdkpwHXiV3ALLuzTvt8JK1vcyNSpmXG5k0mw COMfA8Io7w== -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:32 2026 by rpki-client