This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS38019.roa File: AS38019.roa (raw, json) Hash identifier: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU= Subject key identifier: FC:A7:83:05:6C:95:F2:88:5A:9B:41:99:04:BC:9C:36:3E:CE:80:02 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 48C33D1E3FD77D43A11A90077B28B0B979DE1641 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS38019.roa Signing time: Tue 20 Jan 2026 02:17:01 +0000 ROA not before: Tue 20 Jan 2026 02:12:01 +0000 ROA not after: Tue 19 Jan 2027 02:17:01 +0000 asID: 38019 IP address blocks: 240a:40c0:a000::/44 maxlen: 48 240a:40c0:a010::/44 maxlen: 48 240a:4284::/31 maxlen: 31 240a:4286::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c3:3d:1e:3f:d7:7d:43:a1:1a:90:07:7b:28:b0:b9:79:de:16:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:12:01 2026 GMT Not After : Jan 19 02:17:01 2027 GMT Subject: CN=FCA783056C95F2885A9B419904BC9C363ECE8002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:af:94:67:35:61:69:1b:82:65:56:ac:3c: 00:6c:1f:4f:55:f2:88:a6:25:03:13:1d:cf:a6:0c: 41:b7:52:c0:49:cd:ea:77:97:af:52:2d:29:7e:96: 04:9b:e7:6c:8f:cc:32:cd:50:04:73:5e:87:9a:08: b7:b8:91:ab:3c:3d:ff:a6:98:29:9a:62:73:67:33: cc:c3:3c:6b:81:7f:e8:2b:9d:be:d6:80:f9:fe:f8: c5:c9:72:e9:86:c1:e8:f0:48:0f:bf:c5:90:92:c7: 65:2a:d7:42:63:d6:9b:1f:ae:f7:f9:6d:c1:b9:b2: e3:29:9b:a1:3e:bc:f3:39:e3:ce:ed:06:28:bc:d9: 30:39:c9:d9:11:ec:ce:7a:1e:c3:e0:cb:dc:cb:88: 61:d3:8b:75:ad:95:46:71:e6:38:7a:10:80:00:06: 42:c3:ca:57:3d:a6:06:f9:4a:42:24:75:89:1a:c4: e9:84:65:40:6a:42:0a:55:ca:90:ea:9e:96:47:2d: 84:93:b4:5e:15:13:06:f3:a1:ee:20:ee:94:ac:3c: 3a:1e:5b:45:70:16:4f:18:8d:9e:cc:b4:08:0b:7b: c6:42:ca:b6:f5:ec:8d:af:d6:40:80:ce:73:84:fc: c1:0e:18:18:a6:e9:18:71:ae:5a:e4:2e:20:bf:92: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A7:83:05:6C:95:F2:88:5A:9B:41:99:04:BC:9C:36:3E:CE:80:02 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS38019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:40c0:a000::/43 240a:4284::/30 Signature Algorithm: sha256WithRSAEncryption b6:05:d4:c3:83:2b:ff:f9:38:6d:17:68:36:b5:81:b8:71:61: 29:a3:93:1a:c1:1a:42:b4:f6:ec:8a:02:8d:78:ce:e7:de:47: 85:df:50:de:c0:10:59:16:05:3e:43:5a:b9:87:98:dc:53:6d: f7:59:40:7c:75:e1:2c:92:6a:b5:5f:f0:35:39:fa:02:d4:d5: 03:f9:f2:10:8a:c0:34:89:16:0f:61:a7:88:3c:49:d2:04:ff: 0c:a7:83:23:7d:07:e4:d1:11:f4:16:a8:50:ec:5f:cb:22:08: 55:21:95:49:52:32:82:3d:39:19:9f:4c:68:d0:5a:65:59:d0: 8c:5d:6d:91:94:9e:7d:91:78:a8:99:e6:d9:ed:af:f9:e2:2a: 07:71:a2:77:c0:92:88:d9:91:d3:f2:d4:18:43:bf:8a:30:21: 8f:c6:45:a4:f7:47:30:d5:a4:49:87:b1:ca:13:98:6f:3d:bd: 13:d3:fc:01:52:de:03:b8:95:a3:5a:28:54:d7:6e:88:71:10: 6d:27:64:f7:56:50:3a:0a:88:bf:a2:47:9b:45:c9:48:c1:ef: 56:be:23:69:75:51:89:12:1c:c1:dd:f7:95:13:49:27:a1:04: 7e:f3:d1:ad:60:d7:1b:dd:f6:2a:c4:ab:ef:0b:b5:65:62:4f: bc:b6:62:00 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUSMM9Hj/XfUOhGpAHeyiwuXneFkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjEyMDFaFw0yNzAxMTkwMjE3MDFaMDMxMTAvBgNV BAMTKEZDQTc4MzA1NkM5NUYyODg1QTlCNDE5OTA0QkM5QzM2M0VDRTgwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIR6+UZzVhaRuCZVasPABsH09V 8oimJQMTHc+mDEG3UsBJzep3l69SLSl+lgSb52yPzDLNUARzXoeaCLe4kas8Pf+m mCmaYnNnM8zDPGuBf+grnb7WgPn++MXJcumGwejwSA+/xZCSx2Uq10Jj1psfrvf5 bcG5suMpm6E+vPM5487tBii82TA5ydkR7M56HsPgy9zLiGHTi3WtlUZx5jh6EIAA BkLDylc9pgb5SkIkdYkaxOmEZUBqQgpVypDqnpZHLYSTtF4VEwbzoe4g7pSsPDoe W0VwFk8YjZ7MtAgLe8ZCyrb17I2v1kCAznOE/MEOGBim6RhxrlrkLiC/klbhAgMB AAGjggHtMIIB6TAdBgNVHQ4EFgQU/KeDBWyV8oham0GZBLycNj7OgAIwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzM4MDE5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIA AjAQAwcFJApAwKAAAwUCJApChDANBgkqhkiG9w0BAQsFAAOCAQEAtgXUw4Mr//k4 bRdoNrWBuHFhKaOTGsEaQrT27IoCjXjO595Hhd9Q3sAQWRYFPkNauYeY3FNt91lA fHXhLJJqtV/wNTn6AtTVA/nyEIrANIkWD2GniDxJ0gT/DKeDI30H5NER9BaoUOxf yyIIVSGVSVIygj05GZ9MaNBaZVnQjF1tkZSefZF4qJnm2e2v+eIqB3Gid8CSiNmR 0/LUGEO/ijAhj8ZFpPdHMNWkSYexyhOYbz29E9P8AVLeA7iVo1ooVNduiHEQbSdk 91ZQOgqIv6JHm0XJSMHvVr4jaXVRiRIcwd33lRNJJ6EEfvPRrWDXG932KsSr7wu1 ZWJPvLZiAA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:34 2026 by rpki-client