This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56047.roa File: AS56047.roa (raw, json) Hash identifier: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4= Subject key identifier: E4:4D:20:7D:59:7C:59:66:2E:9B:B4:D6:2B:73:E6:27:27:44:EC:D5 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 1468C8A4F60AE49FBE5744B45A343313EAEAFD63 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56047.roa Signing time: Tue 20 Jan 2026 02:17:00 +0000 ROA not before: Tue 20 Jan 2026 02:12:00 +0000 ROA not after: Tue 19 Jan 2027 02:17:00 +0000 asID: 56047 IP address blocks: 240a:40c2:a000::/44 maxlen: 48 240a:40c2:a010::/44 maxlen: 48 240a:42c2::/31 maxlen: 31 240a:42c8::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:68:c8:a4:f6:0a:e4:9f:be:57:44:b4:5a:34:33:13:ea:ea:fd:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:12:00 2026 GMT Not After : Jan 19 02:17:00 2027 GMT Subject: CN=E44D207D597C59662E9BB4D62B73E6272744ECD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:41:80:43:e6:19:05:f6:af:c7:61:29:e8:2f: bd:6b:2a:61:21:2c:2b:7c:d9:d6:9b:c3:01:d0:6f: 7a:3d:e4:6e:d4:40:24:e7:7a:33:c7:b8:5c:45:90: 2b:21:51:fd:11:bb:38:4d:f9:31:c7:0f:97:c4:43: 32:0b:6b:28:fa:5e:a3:6a:7e:34:2a:f1:dd:76:bd: 2e:fe:76:46:4f:b3:a7:6a:f5:51:5e:f7:5b:86:05: b0:00:7a:a0:25:e6:c0:b1:2e:f1:22:ee:9b:9b:db: 29:ac:12:bf:aa:62:d8:c8:f3:c4:96:0d:c4:ac:90: 38:4b:49:c4:98:76:0e:85:9a:96:5a:84:a5:cd:bd: 29:5e:dc:b9:96:92:c1:ec:ec:ef:24:7e:3f:55:90: df:88:14:3e:20:05:2b:35:40:10:d8:42:c9:8c:d4: 22:84:bc:2b:8e:7b:db:78:da:56:2c:57:b1:96:81: 83:81:2e:2f:a0:83:34:e4:ce:b4:0a:aa:87:0a:cc: 4b:fa:7c:ec:59:98:33:2a:d1:d3:21:26:86:ec:ea: 93:b3:e2:5a:ec:a4:68:90:e6:18:08:7d:fe:f3:0a: cd:46:07:07:0b:eb:34:52:e4:de:3b:ca:43:35:7a: 3b:a3:80:9d:43:b8:f0:e2:42:5d:f2:89:bb:49:dc: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4D:20:7D:59:7C:59:66:2E:9B:B4:D6:2B:73:E6:27:27:44:EC:D5 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56047.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:40c2:a000::/43 240a:42c2::/31 240a:42c8::/31 Signature Algorithm: sha256WithRSAEncryption 6d:3e:82:78:d7:de:7a:2f:8e:02:92:d3:1e:9f:80:5f:0d:7f: 29:07:65:1a:2a:e3:dc:95:4c:de:e6:40:3d:5a:ef:b6:c6:42: c4:e7:b4:05:2c:57:52:f2:44:c6:05:0a:ae:5b:0f:82:9e:d2: 66:72:c3:37:57:cd:df:08:47:05:95:bf:75:e3:c2:dc:58:08: b9:ab:08:05:c0:42:aa:9c:f1:ce:19:c7:43:ec:5a:fe:7b:06: 69:23:b8:94:1a:63:2f:ce:ed:56:e1:5c:67:e4:5e:cd:dc:a7: 02:b1:2d:c5:9c:09:7e:36:15:c7:9e:f1:2c:bf:2b:19:cd:be: 51:ef:d0:80:6d:86:76:ee:ea:dd:a8:f7:3f:94:80:29:f4:b4: e3:26:2b:d6:2a:fd:31:b4:42:bf:6b:03:4e:ca:5e:66:ea:2d: ff:b1:1a:8d:1d:46:69:5a:4b:a7:58:b8:f9:ed:a4:f3:b0:2e: 96:8c:78:78:8e:a9:01:c4:b5:ef:64:8f:6b:98:84:f6:09:08: 11:b8:b2:e6:99:3c:73:98:60:b6:75:37:e0:32:b3:05:ec:e1: 31:28:d1:d0:22:93:4e:bf:97:55:06:6f:50:dc:d0:bc:9b:c9: 41:5e:86:f6:8a:a3:a1:ac:7b:37:1b:46:be:88:a7:9b:ea:98: e0:c7:56:0a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUFGjIpPYK5J++V0S0WjQzE+rq/WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjEyMDBaFw0yNzAxMTkwMjE3MDBaMDMxMTAvBgNV BAMTKEU0NEQyMDdENTk3QzU5NjYyRTlCQjRENjJCNzNFNjI3Mjc0NEVDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuQYBD5hkF9q/HYSnoL71rKmEh LCt82dabwwHQb3o95G7UQCTnejPHuFxFkCshUf0RuzhN+THHD5fEQzILayj6XqNq fjQq8d12vS7+dkZPs6dq9VFe91uGBbAAeqAl5sCxLvEi7pub2ymsEr+qYtjI88SW DcSskDhLScSYdg6FmpZahKXNvSle3LmWksHs7O8kfj9VkN+IFD4gBSs1QBDYQsmM 1CKEvCuOe9t42lYsV7GWgYOBLi+ggzTkzrQKqocKzEv6fOxZmDMq0dMhJobs6pOz 4lrspGiQ5hgIff7zCs1GBwcL6zRS5N47ykM1ejujgJ1DuPDiQl3yibtJ3Kv9AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU5E0gfVl8WWYum7TWK3PmJydE7NUwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzU2MDQ3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIA AjAXAwcFJApAwqAAAwUBJApCwgMFASQKQsgwDQYJKoZIhvcNAQELBQADggEBAG0+ gnjX3novjgKS0x6fgF8NfykHZRoq49yVTN7mQD1a77bGQsTntAUsV1LyRMYFCq5b D4Ke0mZywzdXzd8IRwWVv3XjwtxYCLmrCAXAQqqc8c4Zx0PsWv57BmkjuJQaYy/O 7VbhXGfkXs3cpwKxLcWcCX42Fcee8Sy/KxnNvlHv0IBthnbu6t2o9z+UgCn0tOMm K9Yq/TG0Qr9rA07KXmbqLf+xGo0dRmlaS6dYuPntpPOwLpaMeHiOqQHEte9kj2uY hPYJCBG4suaZPHOYYLZ1N+AyswXs4TEo0dAik06/l1UGb1Dc0LybyUFehvaKo6Gs ezcbRr6Ip5vqmODHVgo= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:10 2026 by rpki-client