This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24547.roa File: AS24547.roa (raw, json) Hash identifier: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g= Subject key identifier: 89:2C:B2:3C:D7:FF:3E:37:C7:03:07:BA:DE:23:A5:99:03:4B:BA:6B Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 5AAA390ACC853E88FA6A5E619F2077320606D949 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24547.roa Signing time: Tue 20 Jan 2026 02:17:01 +0000 ROA not before: Tue 20 Jan 2026 02:12:01 +0000 ROA not after: Tue 19 Jan 2027 02:17:01 +0000 asID: 24547 IP address blocks: 240a:40c0:c000::/44 maxlen: 48 240a:40c0:c010::/44 maxlen: 48 240a:4288::/31 maxlen: 31 240a:428a::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:aa:39:0a:cc:85:3e:88:fa:6a:5e:61:9f:20:77:32:06:06:d9:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:12:01 2026 GMT Not After : Jan 19 02:17:01 2027 GMT Subject: CN=892CB23CD7FF3E37C70307BADE23A599034BBA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:d3:97:40:e7:d7:30:e9:88:72:d6:f9:58: 7c:c1:5d:fb:77:d7:a3:82:e2:c1:b5:1d:08:1f:9a: 6b:87:29:2d:6b:0f:bf:67:a6:23:34:ae:7a:9e:ee: db:ba:38:0d:a5:b0:65:af:ba:06:0a:dd:a0:63:d2: 96:b2:92:01:0f:2b:05:77:2f:40:81:c5:db:17:5e: 5c:dc:1b:ed:ea:05:37:a6:ca:e5:c3:17:12:e6:03: 65:80:ab:c7:b4:68:72:2c:93:f3:52:f5:a0:ed:a1: 49:06:84:c7:03:8c:18:67:47:76:a8:f5:be:ee:27: c2:f8:06:25:b8:e0:b4:3b:48:9a:7d:6b:59:b8:60: 94:cf:6b:e9:83:37:3d:01:80:10:87:eb:44:13:68: c4:26:d0:90:b9:a0:c9:d6:15:19:6f:7e:db:f5:af: 9b:b0:5a:7c:ed:93:01:df:7c:f1:4a:f3:da:53:94: b4:d6:f4:e6:a2:05:d5:56:12:90:29:c6:e2:8f:e1: ea:63:61:45:58:7e:9a:7e:66:d7:37:d5:46:ea:8b: bf:eb:b3:ed:72:d9:eb:ed:8e:e4:0d:c3:1d:74:5c: 97:a9:24:c5:77:68:f0:10:2c:5e:18:1a:f2:ba:4f: 90:9f:cf:e4:dc:71:05:78:13:43:87:83:46:b8:3f: 96:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2C:B2:3C:D7:FF:3E:37:C7:03:07:BA:DE:23:A5:99:03:4B:BA:6B X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24547.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:40c0:c000::/43 240a:4288::/30 Signature Algorithm: sha256WithRSAEncryption 81:f6:7b:17:d2:87:1f:aa:67:ed:9e:63:e8:b5:c7:83:9f:a1: f7:94:14:4f:63:f7:04:b3:7d:23:fa:88:5c:a7:6b:65:5b:b5: 08:5c:8d:3d:1f:67:da:c1:c8:e0:87:ab:9c:97:64:00:84:a2: bd:cd:89:76:63:87:6a:5d:b5:bb:ca:2a:b0:12:11:9b:42:e9: a9:08:ad:f7:75:d6:ba:ec:e0:8e:54:b4:cf:39:13:91:0c:a2: 41:8b:22:8c:65:22:6c:16:24:a8:ef:a5:07:3b:2f:62:13:9e: 5d:ac:46:c7:69:f4:ad:90:28:07:f0:fe:d5:4c:ab:f9:0e:f0: 8b:cb:9f:43:66:d9:1e:b3:ee:93:4d:d1:38:87:97:f9:e9:86: 0e:42:81:94:6b:d3:3e:f6:0d:7a:7d:ad:b5:ee:70:fe:55:4e: 51:24:ae:94:e4:ea:4d:dc:26:f5:fb:e6:8f:9a:a5:6a:ba:78: 3c:ab:0a:d4:9d:ce:e2:55:5d:ff:4a:de:77:c9:d5:1c:9a:2e: e4:63:4c:de:fc:4b:cf:4f:c6:82:b7:d1:67:1a:a9:28:a9:01: ac:33:b5:1a:cf:5b:23:7e:bb:0a:88:e3:2e:a8:f2:3a:f2:75: cd:2d:9a:7d:44:b8:c4:3a:af:fe:a2:bb:d4:3c:82:89:e9:37: 58:b5:68:b1 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUWqo5CsyFPoj6al5hnyB3MgYG2UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjEyMDFaFw0yNzAxMTkwMjE3MDFaMDMxMTAvBgNV BAMTKDg5MkNCMjNDRDdGRjNFMzdDNzAzMDdCQURFMjNBNTk5MDM0QkJBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVNOXQOfXMOmIctb5WHzBXft3 16OC4sG1HQgfmmuHKS1rD79npiM0rnqe7tu6OA2lsGWvugYK3aBj0paykgEPKwV3 L0CBxdsXXlzcG+3qBTemyuXDFxLmA2WAq8e0aHIsk/NS9aDtoUkGhMcDjBhnR3ao 9b7uJ8L4BiW44LQ7SJp9a1m4YJTPa+mDNz0BgBCH60QTaMQm0JC5oMnWFRlvftv1 r5uwWnztkwHffPFK89pTlLTW9OaiBdVWEpApxuKP4epjYUVYfpp+Ztc31Ubqi7/r s+1y2evtjuQNwx10XJepJMV3aPAQLF4YGvK6T5Cfz+TccQV4E0OHg0a4P5YlAgMB AAGjggHtMIIB6TAdBgNVHQ4EFgQUiSyyPNf/PjfHAwe63iOlmQNLumswHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzI0NTQ3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIA AjAQAwcFJApAwMAAAwUCJApCiDANBgkqhkiG9w0BAQsFAAOCAQEAgfZ7F9KHH6pn 7Z5j6LXHg5+h95QUT2P3BLN9I/qIXKdrZVu1CFyNPR9n2sHI4IernJdkAISivc2J dmOHal21u8oqsBIRm0LpqQit93XWuuzgjlS0zzkTkQyiQYsijGUibBYkqO+lBzsv YhOeXaxGx2n0rZAoB/D+1Uyr+Q7wi8ufQ2bZHrPuk03ROIeX+emGDkKBlGvTPvYN en2tte5w/lVOUSSulOTqTdwm9fvmj5qlarp4PKsK1J3O4lVd/0red8nVHJou5GNM 3vxLz0/GgrfRZxqpKKkBrDO1Gs9bI367CojjLqjyOvJ1zS2afUS4xDqv/qK71DyC iek3WLVosQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:31 2026 by rpki-client