This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56046.roa File: AS56046.roa (raw, json) Hash identifier: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk= Subject key identifier: 25:96:CE:39:31:5F:FD:3C:67:9D:73:A2:EA:F0:4F:23:1E:51:5D:40 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 69F423852607F86B9FA23C97D0C7A6D7054B1B09 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56046.roa Signing time: Tue 20 Jan 2026 02:18:02 +0000 ROA not before: Tue 20 Jan 2026 02:13:02 +0000 ROA not after: Tue 19 Jan 2027 02:18:02 +0000 asID: 56046 IP address blocks: 240a:4020:883a::/48 maxlen: 48 240a:40b0:283a::/48 maxlen: 48 240a:40c1:a000::/44 maxlen: 48 240a:40c1:a010::/44 maxlen: 48 240a:42a4::/31 maxlen: 31 240a:42a6::/31 maxlen: 31 240a:42ae::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f4:23:85:26:07:f8:6b:9f:a2:3c:97:d0:c7:a6:d7:05:4b:1b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:13:02 2026 GMT Not After : Jan 19 02:18:02 2027 GMT Subject: CN=2596CE39315FFD3C679D73A2EAF04F231E515D40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:11:da:cb:1a:ed:39:5f:fb:33:6c:bf:26:fd: 79:78:23:fd:12:00:da:44:f2:6b:43:30:e6:ff:d1: 3b:44:3a:db:53:ee:46:f3:b1:bb:28:b6:b1:44:0e: 5a:d2:75:53:2d:08:b4:65:9b:c3:ee:75:ed:bb:ef: 25:99:b4:34:29:19:8c:89:e2:6e:fe:94:4f:f8:38: e5:ed:bd:36:d2:ac:64:69:97:f6:bf:80:43:40:45: 9b:a4:6d:79:a6:59:b9:0c:f1:ce:3f:ca:0a:45:5b: 36:7b:be:bf:be:1a:bf:5f:02:9e:17:ff:96:47:d7: ae:6e:35:e3:ec:9f:08:2d:42:6d:4b:91:15:f0:0f: ff:6f:68:c4:41:7e:27:ee:db:03:f8:92:47:f2:79: a6:88:8e:f0:ce:ec:c0:80:a1:4b:97:67:4f:5b:14: e0:11:61:a9:c4:1d:cd:09:17:11:89:54:51:54:61: 58:ae:7b:da:41:d9:d3:28:08:b1:f4:8f:0a:83:33: 35:d3:0b:d2:7d:d7:df:ac:8b:83:5d:b8:31:d7:d2: 82:a2:0e:b9:76:a5:f1:4e:b4:61:9b:48:a6:60:9c: c7:1b:79:c3:db:df:a0:8a:09:1a:0f:d1:f0:e0:c5: d9:21:52:e5:5a:00:15:54:7c:de:07:d7:40:50:8a: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:96:CE:39:31:5F:FD:3C:67:9D:73:A2:EA:F0:4F:23:1E:51:5D:40 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56046.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:4020:883a::/48 240a:40b0:283a::/48 240a:40c1:a000::/43 240a:42a4::/30 240a:42ae::/31 Signature Algorithm: sha256WithRSAEncryption 46:9c:de:29:83:db:62:c6:15:bc:1d:1c:cf:1d:fc:bd:c5:11: ec:42:9a:be:17:67:54:11:64:59:2e:de:96:7b:89:11:07:3f: d7:a2:d5:29:30:50:b8:79:11:a1:95:95:af:2a:78:5e:2a:81: 9c:f3:cf:a9:f3:39:8a:7b:99:bc:85:cb:41:19:e0:0f:14:2d: 59:f3:f4:69:2c:5f:7d:f4:05:02:e9:d5:f7:2d:af:d5:4e:56: eb:7f:09:84:d8:e1:58:19:c7:0b:0a:fe:b9:0f:b9:18:6b:cc: f5:1b:4e:40:89:8d:41:2f:c0:47:ef:de:79:07:20:89:1f:51: 11:aa:49:da:47:ab:aa:9f:f1:f8:05:b3:12:0d:41:12:82:0f: 5a:d1:51:b7:4c:c8:3b:43:6d:37:fe:9d:c3:3e:3d:23:33:88: 7c:cc:ea:bb:66:4e:27:c3:57:a2:16:47:fe:8f:3c:c3:5f:c0: 4e:cd:b7:02:22:33:11:29:88:90:4a:e1:57:a4:cb:a1:14:35: b6:80:e0:4e:4b:b5:12:88:e6:00:95:f9:cc:a6:49:8f:26:33: 58:64:4d:14:d3:07:7f:c9:3b:38:02:56:00:f6:33:7b:d8:20: fd:14:bf:79:8e:8c:46:ed:ed:9c:b3:02:09:22:0b:11:66:26: 36:4c:93:aa -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUafQjhSYH+GufojyX0Mem1wVLGwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjEzMDJaFw0yNzAxMTkwMjE4MDJaMDMxMTAvBgNV BAMTKDI1OTZDRTM5MzE1RkZEM0M2NzlENzNBMkVBRjA0RjIzMUU1MTVENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdEdrLGu05X/szbL8m/Xl4I/0S ANpE8mtDMOb/0TtEOttT7kbzsbsotrFEDlrSdVMtCLRlm8Pude277yWZtDQpGYyJ 4m7+lE/4OOXtvTbSrGRpl/a/gENARZukbXmmWbkM8c4/ygpFWzZ7vr++Gr9fAp4X /5ZH165uNePsnwgtQm1LkRXwD/9vaMRBfifu2wP4kkfyeaaIjvDO7MCAoUuXZ09b FOARYanEHc0JFxGJVFFUYViue9pB2dMoCLH0jwqDMzXTC9J919+si4NduDHX0oKi Drl2pfFOtGGbSKZgnMcbecPb36CKCRoP0fDgxdkhUuVaABVUfN4H10BQiuBZAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQUJZbOOTFf/TxnnXOi6vBPIx5RXUAwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzU2MDQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAvBAIA AjApAwcAJApAIIg6AwcAJApAsCg6AwcFJApAwaAAAwUCJApCpAMFASQKQq4wDQYJ KoZIhvcNAQELBQADggEBAEac3imD22LGFbwdHM8d/L3FEexCmr4XZ1QRZFku3pZ7 iREHP9ei1SkwULh5EaGVla8qeF4qgZzzz6nzOYp7mbyFy0EZ4A8ULVnz9GksX330 BQLp1fctr9VOVut/CYTY4VgZxwsK/rkPuRhrzPUbTkCJjUEvwEfv3nkHIIkfURGq SdpHq6qf8fgFsxINQRKCD1rRUbdMyDtDbTf+ncM+PSMziHzM6rtmTifDV6IWR/6P PMNfwE7NtwIiMxEpiJBK4Veky6EUNbaA4E5LtRKI5gCV+cymSY8mM1hkTRTTB3/J OzgCVgD2M3vYIP0Uv3mOjEbt7ZyzAgkiCxFmJjZMk6o= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:11 2026 by rpki-client