This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56040.roa File: AS56040.roa (raw, json) Hash identifier: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc= Subject key identifier: C7:5E:D5:9F:F6:17:0F:1E:44:5F:61:9C:85:2F:6A:6A:E6:20:86:31 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 1EF5CB8D44D55F37C9CBE9CDDE767F84BE3AB51A Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56040.roa Signing time: Tue 20 Jan 2026 02:17:00 +0000 ROA not before: Tue 20 Jan 2026 02:12:00 +0000 ROA not after: Tue 19 Jan 2027 02:17:00 +0000 asID: 56040 IP address blocks: 240a:4021:83a::/48 maxlen: 48 240a:4090:250::/48 maxlen: 48 240a:4090:1200::/40 maxlen: 40 240a:4090:3200::/40 maxlen: 40 240a:4090:5200::/40 maxlen: 40 240a:4090:7200::/40 maxlen: 40 240a:40b0:483a::/48 maxlen: 48 240a:40c2:c000::/44 maxlen: 48 240a:40c2:c010::/44 maxlen: 48 240a:42c6::/31 maxlen: 31 240a:42cc::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f5:cb:8d:44:d5:5f:37:c9:cb:e9:cd:de:76:7f:84:be:3a:b5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:12:00 2026 GMT Not After : Jan 19 02:17:00 2027 GMT Subject: CN=C75ED59FF6170F1E445F619C852F6A6AE6208631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:22:f2:fc:bd:34:6c:fc:a6:99:9a:4a:c9:f3: 4b:e2:9c:4f:7a:db:7f:7c:18:9e:ef:f8:95:61:2e: b3:2d:dc:59:df:f7:e5:26:72:5f:d8:28:4a:c8:e7: 48:3a:2d:e5:53:13:53:23:d4:8f:86:24:d6:65:0f: df:bf:2d:41:37:0e:1b:c8:62:39:26:e6:d7:d5:7f: 63:92:42:9e:f5:40:7b:b3:82:c0:33:ed:31:1e:0c: c2:2a:08:72:93:52:83:21:87:fb:ad:2f:26:b0:66: e7:51:44:2c:e2:a7:9c:0b:94:f0:d3:dc:2f:2b:2e: eb:c9:1d:fa:5c:d9:80:df:ba:2a:da:4b:71:f6:41: 0c:28:97:b8:b1:94:45:f0:d8:da:ca:da:67:d6:3e: e1:14:dd:7d:6e:54:c3:e4:9b:5c:a6:6e:86:62:e6: 0a:63:13:ac:c7:65:a6:68:1a:8b:3e:6b:e0:d2:1a: 96:fa:02:60:d6:a6:a0:3d:1c:d8:8a:0b:43:3c:b8: 99:d8:56:f3:3b:76:77:8c:dc:6b:43:33:ac:00:28: 12:f8:ae:22:36:aa:f9:17:79:d8:51:00:0b:56:25: a0:63:ff:8d:c2:98:3f:bd:16:e7:69:c7:9e:d9:59: 20:aa:0e:31:8b:2d:e5:3b:2d:e5:3a:a5:43:7c:24: f0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:D5:9F:F6:17:0F:1E:44:5F:61:9C:85:2F:6A:6A:E6:20:86:31 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56040.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:4021:83a::/48 240a:4090:250::/48 240a:4090:1200::/40 240a:4090:3200::/40 240a:4090:5200::/40 240a:4090:7200::/40 240a:40b0:483a::/48 240a:40c2:c000::/43 240a:42c6::/31 240a:42cc::/31 Signature Algorithm: sha256WithRSAEncryption d7:58:d3:f1:60:af:88:e0:4c:b9:57:90:06:aa:f4:3a:d4:05: 5c:c8:54:16:e7:f2:b4:e3:ca:df:c8:1c:1f:8f:17:f3:29:d8: a3:e5:10:8c:9a:12:d8:69:cb:d2:71:31:fb:61:92:62:ac:49: 98:c6:2d:26:df:11:ec:d3:46:83:93:c2:85:e0:2b:38:a2:d7: 91:fa:18:24:08:4e:45:78:14:8f:65:25:0b:2e:13:d8:97:c4: f3:d7:05:44:40:a6:f5:c1:c5:0f:c9:43:d7:f4:19:90:70:da: d2:57:24:80:e5:89:a4:5a:99:e6:b9:d3:f1:53:55:21:42:8d: ce:83:7c:87:0c:12:3b:0b:54:da:14:4c:55:c8:b8:45:5d:99: 04:d6:35:8b:2d:61:ad:e7:56:5e:68:5f:f9:59:da:92:d9:97: 6b:ca:73:68:c1:06:f8:c2:18:c9:39:c8:92:d3:b7:79:38:70: 62:e0:23:6e:90:a8:8c:e8:4c:c4:25:98:9a:32:1a:45:96:40: b5:33:58:06:8e:52:97:01:4d:c9:f0:ea:8c:0c:f3:ff:35:dc: c6:10:db:33:38:b5:3d:9c:91:f5:41:37:9d:22:9c:6f:ff:3e: 04:ac:41:6d:b1:29:05:33:24:35:21:14:64:11:7a:61:66:62: 5d:ff:e4:b8 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUHvXLjUTVXzfJy+nN3nZ/hL46tRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjEyMDBaFw0yNzAxMTkwMjE3MDBaMDMxMTAvBgNV BAMTKEM3NUVENTlGRjYxNzBGMUU0NDVGNjE5Qzg1MkY2QTZBRTYyMDg2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlIvL8vTRs/KaZmkrJ80vinE96 2398GJ7v+JVhLrMt3Fnf9+Umcl/YKErI50g6LeVTE1Mj1I+GJNZlD9+/LUE3DhvI Yjkm5tfVf2OSQp71QHuzgsAz7TEeDMIqCHKTUoMhh/utLyawZudRRCzip5wLlPDT 3C8rLuvJHfpc2YDfuiraS3H2QQwol7ixlEXw2NrK2mfWPuEU3X1uVMPkm1ymboZi 5gpjE6zHZaZoGos+a+DSGpb6AmDWpqA9HNiKC0M8uJnYVvM7dneM3GtDM6wAKBL4 riI2qvkXedhRAAtWJaBj/43CmD+9Fudpx57ZWSCqDjGLLeU7LeU6pUN8JPCPAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUx17Vn/YXDx5EX2GchS9qauYghjEwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzU2MDQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIA AjBSAwcAJApAIQg6AwcAJApAkAJQAwYAJApAkBIDBgAkCkCQMgMGACQKQJBSAwYA JApAkHIDBwAkCkCwSDoDBwUkCkDCwAADBQEkCkLGAwUBJApCzDANBgkqhkiG9w0B AQsFAAOCAQEA11jT8WCviOBMuVeQBqr0OtQFXMhUFufytOPK38gcH48X8ynYo+UQ jJoS2GnL0nEx+2GSYqxJmMYtJt8R7NNGg5PCheArOKLXkfoYJAhORXgUj2UlCy4T 2JfE89cFRECm9cHFD8lD1/QZkHDa0lckgOWJpFqZ5rnT8VNVIUKNzoN8hwwSOwtU 2hRMVci4RV2ZBNY1iy1hredWXmhf+VnaktmXa8pzaMEG+MIYyTnIktO3eThwYuAj bpCojOhMxCWYmjIaRZZAtTNYBo5SlwFNyfDqjAzz/zXcxhDbMzi1PZyR9UE3nSKc b/8+BKxBbbEpBTMkNSEUZBF6YWZiXf/kuA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:11 2026 by rpki-client