This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56041.roa File: AS56041.roa (raw, json) Hash identifier: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y= Subject key identifier: 7D:D8:2E:28:C5:69:95:8D:14:27:1F:D1:3D:A2:B0:71:44:F0:BE:CD Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 383CF89436479480620AF4A7F1667842AD3073BE Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56041.roa Signing time: Tue 20 Jan 2026 02:17:01 +0000 ROA not before: Tue 20 Jan 2026 02:12:01 +0000 ROA not after: Tue 19 Jan 2027 02:17:01 +0000 asID: 56041 IP address blocks: 240a:40c1:c000::/44 maxlen: 48 240a:40c1:c010::/44 maxlen: 48 240a:42a8::/31 maxlen: 31 240a:42aa::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3c:f8:94:36:47:94:80:62:0a:f4:a7:f1:66:78:42:ad:30:73:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:12:01 2026 GMT Not After : Jan 19 02:17:01 2027 GMT Subject: CN=7DD82E28C569958D14271FD13DA2B07144F0BECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:71:5d:ae:a8:de:82:ce:f9:31:af:f0:e5: f0:14:8a:09:4b:db:d2:da:34:d3:24:38:f1:3e:1c: c0:4e:c9:92:fb:cc:c4:01:b6:79:1a:f2:3b:ac:bd: d4:33:4b:4c:25:fd:be:ab:ae:01:5a:be:3b:9f:f4: b7:e4:14:1d:01:5f:f5:80:dc:7a:f8:f4:ba:42:f8: a9:f6:69:41:b7:c9:6c:44:72:5f:d5:57:d5:44:8d: 15:ff:5f:c5:cb:63:87:47:fe:9d:2e:93:64:e9:dc: 65:98:7b:94:ab:fb:60:c5:ba:2f:ed:cf:8e:1b:e3: 74:6d:9e:60:71:b5:68:ca:14:14:d1:e1:58:9b:61: 7b:4f:dd:66:2b:0c:1f:cf:5f:32:02:7c:00:b8:f2: 2e:a3:91:54:01:10:f7:76:f2:48:07:fc:92:25:bb: 84:9c:da:1a:8f:e5:ad:f8:08:b3:82:b8:d7:60:44: d8:8d:a2:14:d9:cd:20:c8:cf:f7:18:64:5a:3c:12: 61:63:e8:84:e1:ca:07:9c:a8:ca:99:69:49:6f:86: 63:6a:88:2f:c6:56:f4:f9:33:33:3f:56:f7:8c:1c: 15:79:d4:e2:07:8c:6d:b0:6d:3a:53:00:d2:cb:3e: 2b:d6:59:ce:32:0b:2e:15:94:60:46:85:b3:02:73: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D8:2E:28:C5:69:95:8D:14:27:1F:D1:3D:A2:B0:71:44:F0:BE:CD X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56041.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:40c1:c000::/43 240a:42a8::/30 Signature Algorithm: sha256WithRSAEncryption a3:42:27:c6:a8:e0:25:ae:43:11:5b:da:e8:7d:2f:c9:8a:e1: 3c:07:33:26:16:26:14:fd:93:3d:59:8b:8f:e3:f1:d3:5b:43: 24:7d:a4:0a:f2:1a:51:0d:9c:c1:06:b7:d0:b2:97:33:92:26: 04:7b:16:3e:e1:3e:8e:38:ca:42:bc:aa:c2:fc:c9:ec:9b:81: dc:4c:44:2f:14:b0:e1:be:4d:90:60:af:38:6d:9e:9a:1a:88: 82:2a:37:71:95:31:7c:fd:63:ea:c8:36:97:35:a0:db:45:d7: 54:9f:4d:f9:ce:ae:de:7e:12:18:0a:b0:cc:9d:6e:2a:01:eb: ee:fc:19:71:d2:25:dd:9f:62:e6:e1:75:57:19:4b:90:35:70: 11:bd:b1:dd:bd:3c:0b:06:a5:82:a5:6b:99:12:fa:90:d4:4e: 20:af:92:ab:1b:42:a9:92:83:e5:81:35:d9:3b:93:c5:d6:6d: 60:e7:78:ed:e8:2d:86:61:10:b7:10:14:dd:1a:e5:2e:1a:28: 35:b8:b6:02:a6:18:da:4b:bd:4c:f6:32:e2:a5:54:f2:f0:7d: c5:79:4a:6e:bb:58:03:6f:92:57:6c:6b:dd:34:35:5e:9f:6e: b7:fe:eb:a6:8f:18:0b:b6:c9:a3:d2:f0:43:ab:28:69:98:8b: a0:ae:c9:c8 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUODz4lDZHlIBiCvSn8WZ4Qq0wc74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjEyMDFaFw0yNzAxMTkwMjE3MDFaMDMxMTAvBgNV BAMTKDdERDgyRTI4QzU2OTk1OEQxNDI3MUZEMTNEQTJCMDcxNDRGMEJFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8HFdrqjegs75Ma/w5fAUiglL 29LaNNMkOPE+HMBOyZL7zMQBtnka8jusvdQzS0wl/b6rrgFavjuf9LfkFB0BX/WA 3Hr49LpC+Kn2aUG3yWxEcl/VV9VEjRX/X8XLY4dH/p0uk2Tp3GWYe5Sr+2DFui/t z44b43RtnmBxtWjKFBTR4VibYXtP3WYrDB/PXzICfAC48i6jkVQBEPd28kgH/JIl u4Sc2hqP5a34CLOCuNdgRNiNohTZzSDIz/cYZFo8EmFj6IThygecqMqZaUlvhmNq iC/GVvT5MzM/VveMHBV51OIHjG2wbTpTANLLPivWWc4yCy4VlGBGhbMCc+sNAgMB AAGjggHtMIIB6TAdBgNVHQ4EFgQUfdguKMVplY0UJx/RPaKwcUTwvs0wHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzU2MDQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIA AjAQAwcFJApAwcAAAwUCJApCqDANBgkqhkiG9w0BAQsFAAOCAQEAo0InxqjgJa5D EVva6H0vyYrhPAczJhYmFP2TPVmLj+Px01tDJH2kCvIaUQ2cwQa30LKXM5ImBHsW PuE+jjjKQryqwvzJ7JuB3ExELxSw4b5NkGCvOG2emhqIgio3cZUxfP1j6sg2lzWg 20XXVJ9N+c6u3n4SGAqwzJ1uKgHr7vwZcdIl3Z9i5uF1VxlLkDVwEb2x3b08Cwal gqVrmRL6kNROIK+SqxtCqZKD5YE12TuTxdZtYOd47egthmEQtxAU3RrlLhooNbi2 AqYY2ku9TPYy4qVU8vB9xXlKbrtYA2+SV2xr3TQ1Xp9ut/7rpo8YC7bJo9LwQ6so aZiLoK7JyA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:12 2026 by rpki-client