This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56042.roa File: AS56042.roa (raw, json) Hash identifier: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc= Subject key identifier: C8:CE:38:58:B9:89:08:FE:A1:98:71:EE:E0:F8:36:60:EF:83:F9:67 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 7B0FB60932D175FC8DDDDAD13735DF7D1A09D290 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56042.roa Signing time: Tue 20 Jan 2026 02:16:59 +0000 ROA not before: Tue 20 Jan 2026 02:11:59 +0000 ROA not after: Tue 19 Jan 2027 02:16:59 +0000 asID: 56042 IP address blocks: 240a:40c0:e000::/44 maxlen: 48 240a:40c0:e010::/44 maxlen: 48 240a:428c::/31 maxlen: 31 240a:4290::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0f:b6:09:32:d1:75:fc:8d:dd:da:d1:37:35:df:7d:1a:09:d2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:11:59 2026 GMT Not After : Jan 19 02:16:59 2027 GMT Subject: CN=C8CE3858B98908FEA19871EEE0F83660EF83F967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e9:54:e7:d3:a5:ee:db:b4:1e:ee:ca:d3:bd: f3:7d:70:1f:d8:2a:d4:ae:67:83:1c:8e:37:59:57: 17:47:e1:7a:b9:09:24:c4:04:82:c2:84:fb:3b:ef: 53:62:bd:77:bb:f2:a7:f3:b2:4a:c0:91:15:5f:17: aa:73:7c:84:e7:cf:19:50:c0:37:a4:ff:f4:65:66: a1:31:f3:11:6c:0c:9f:6e:1b:1b:c6:4a:d6:f0:3b: 8e:33:9c:46:60:d9:0b:f0:60:a9:f4:dc:1c:7e:de: 3a:7e:9d:9c:0e:92:91:f2:85:67:17:e2:e0:d3:e9: 5f:28:10:2e:95:8e:8c:bf:e2:8a:5f:ef:89:b1:62: 56:58:c0:e9:12:30:12:fd:ab:0b:28:a3:e0:44:02: 75:e1:e7:9d:f4:81:35:32:b5:85:ef:90:ad:96:08: 00:b7:a9:1e:c9:b4:13:93:8e:3d:bb:96:1f:0b:1b: 3d:ce:9b:a2:21:10:73:98:92:7f:d6:d5:cf:78:02: 29:c7:87:6f:78:a4:40:46:53:71:45:58:4d:79:ac: 42:2c:66:9c:2a:6d:2c:22:25:a5:61:75:67:91:fe: d9:b3:f9:8b:73:d0:32:16:3f:16:eb:88:8d:b9:d6: 82:25:e7:a2:a1:21:17:29:e1:6e:8c:d7:d2:d9:db: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CE:38:58:B9:89:08:FE:A1:98:71:EE:E0:F8:36:60:EF:83:F9:67 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:40c0:e000::/43 240a:428c::/31 240a:4290::/31 Signature Algorithm: sha256WithRSAEncryption a9:e8:7a:ad:97:45:d9:77:be:72:2f:3b:eb:72:35:d7:a7:f1: 4a:ed:f6:c4:47:75:86:5b:2c:a5:4c:78:de:2e:25:b0:f2:cb: b5:66:4b:d9:10:fb:e6:aa:c6:37:b3:cc:28:f5:7b:2d:e8:44: 6d:4c:c9:bf:86:00:69:e5:8e:77:68:bd:3c:2e:3f:ad:63:a6: 7c:a9:95:de:32:24:9b:5a:a9:6e:8f:ad:89:4d:b3:34:d0:04: ba:37:ae:64:27:d9:fc:c8:d9:6b:48:78:75:90:a4:c7:86:98: 00:17:74:12:df:58:e7:1f:14:33:90:aa:41:bc:f2:5f:bd:2f: 06:50:b0:e1:2c:34:76:da:65:fd:c9:b0:29:25:08:b0:32:62: a8:ad:c8:6d:73:8f:73:6f:41:aa:7c:bf:10:83:88:21:55:d4: b0:ef:59:e9:bb:bb:0b:43:1e:49:55:49:b2:d0:23:91:b1:4b: 7a:7e:eb:f8:17:d8:bb:0c:29:48:39:8e:51:21:24:26:27:1a: a2:91:e7:1c:fb:50:d9:00:47:38:0a:0a:08:19:e1:dc:6a:41: f5:f4:a5:77:84:27:e2:fc:04:d9:0d:91:ac:84:2b:f0:b1:c8: 9a:89:17:cc:73:ca:9f:b2:9a:c4:13:d2:e6:7c:df:7b:00:55: 2c:14:66:46 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUew+2CTLRdfyN3drRNzXffRoJ0pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjExNTlaFw0yNzAxMTkwMjE2NTlaMDMxMTAvBgNV BAMTKEM4Q0UzODU4Qjk4OTA4RkVBMTk4NzFFRUUwRjgzNjYwRUY4M0Y5NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa6VTn06Xu27Qe7srTvfN9cB/Y KtSuZ4McjjdZVxdH4Xq5CSTEBILChPs771NivXe78qfzskrAkRVfF6pzfITnzxlQ wDek//RlZqEx8xFsDJ9uGxvGStbwO44znEZg2QvwYKn03Bx+3jp+nZwOkpHyhWcX 4uDT6V8oEC6Vjoy/4opf74mxYlZYwOkSMBL9qwsoo+BEAnXh5530gTUytYXvkK2W CAC3qR7JtBOTjj27lh8LGz3Om6IhEHOYkn/W1c94AinHh294pEBGU3FFWE15rEIs ZpwqbSwiJaVhdWeR/tmz+Ytz0DIWPxbriI251oIl56KhIRcp4W6M19LZ20ENAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUyM44WLmJCP6hmHHu4Pg2YO+D+WcwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzU2MDQyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIA AjAXAwcFJApAwOAAAwUBJApCjAMFASQKQpAwDQYJKoZIhvcNAQELBQADggEBAKno eq2XRdl3vnIvO+tyNden8Urt9sRHdYZbLKVMeN4uJbDyy7VmS9kQ++aqxjezzCj1 ey3oRG1Myb+GAGnljndovTwuP61jpnypld4yJJtaqW6PrYlNszTQBLo3rmQn2fzI 2WtIeHWQpMeGmAAXdBLfWOcfFDOQqkG88l+9LwZQsOEsNHbaZf3JsCklCLAyYqit yG1zj3NvQap8vxCDiCFV1LDvWem7uwtDHklVSbLQI5GxS3p+6/gX2LsMKUg5jlEh JCYnGqKR5xz7UNkARzgKCggZ4dxqQfX0pXeEJ+L8BNkNkayEK/CxyJqJF8xzyp+y msQT0uZ833sAVSwUZkY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:38 2026 by rpki-client