This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56048.roa File: AS56048.roa (raw, json) Hash identifier: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg= Subject key identifier: AB:56:CF:A5:04:3B:C4:B3:31:C2:9F:BA:DE:B2:19:AA:10:9C:36:93 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 3E93321C4C741E22E14EECEFD2C7E9321D168E17 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56048.roa Signing time: Tue 20 Jan 2026 02:18:02 +0000 ROA not before: Tue 20 Jan 2026 02:13:02 +0000 ROA not after: Tue 19 Jan 2027 02:18:02 +0000 asID: 56048 IP address blocks: 240a:4020:83a::/48 maxlen: 48 240a:4090:50::/48 maxlen: 48 240a:4090:120::/48 maxlen: 48 240a:4090:1000::/40 maxlen: 40 240a:4090:1100::/40 maxlen: 40 240a:4090:2010::/48 maxlen: 48 240a:4090:2041::/48 maxlen: 48 240a:4090:2061::/48 maxlen: 48 240a:4090:3000::/40 maxlen: 40 240a:4090:3100::/40 maxlen: 40 240a:4090:5000::/40 maxlen: 40 240a:4090:5100::/40 maxlen: 40 240a:4090:7000::/40 maxlen: 40 240a:4090:7100::/40 maxlen: 40 240a:40b0:83a::/48 maxlen: 48 240a:40c0:8000::/44 maxlen: 48 240a:40c0:8010::/44 maxlen: 48 240a:4280::/31 maxlen: 31 240a:4282::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:93:32:1c:4c:74:1e:22:e1:4e:ec:ef:d2:c7:e9:32:1d:16:8e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jan 20 02:13:02 2026 GMT Not After : Jan 19 02:18:02 2027 GMT Subject: CN=AB56CFA5043BC4B331C29FBADEB219AA109C3693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:f7:65:e4:46:74:f9:3f:45:5a:39:c8:1a: fb:d9:58:36:8d:05:2f:9b:08:4d:53:d7:70:aa:33: 6e:e1:88:0b:53:9e:08:e5:c8:5c:c6:73:f5:6f:00: 2b:f3:db:cd:c0:47:8d:76:86:b0:4c:12:ee:58:52: c9:6c:c2:1f:0d:01:53:48:3b:e8:b6:ae:b9:13:1f: ac:0a:85:d9:f0:9f:b4:1c:61:73:9b:dc:70:9c:94: a3:bd:04:2e:2e:5a:f1:66:4b:37:f1:4d:c3:0b:d7: 4c:8a:1a:b5:11:1e:d5:b1:fd:98:2d:9a:ee:bc:61: fb:5e:7a:45:23:36:09:78:b3:9a:24:97:86:79:d7: 97:e3:0a:84:7f:df:4c:e4:6b:c5:cc:62:bf:d4:28: 63:b1:7d:ea:f3:0e:1d:84:e2:2e:75:24:f6:80:e4: af:e9:96:f2:d9:2e:92:57:09:5d:82:10:a4:76:c5: ba:0e:56:fa:5e:79:d6:6c:9c:41:c9:0b:e9:60:64: b9:d9:53:a5:db:4a:98:7d:f4:44:eb:dd:94:40:33: 10:71:25:61:9b:4f:97:8b:1b:fb:df:12:59:f5:37: 38:58:06:64:1f:17:88:3e:56:9f:15:30:cb:f1:d2: de:92:2a:96:92:2d:73:54:2c:4a:fd:6c:7a:05:6a: d1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:56:CF:A5:04:3B:C4:B3:31:C2:9F:BA:DE:B2:19:AA:10:9C:36:93 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56048.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:4020:83a::/48 240a:4090:50::/48 240a:4090:120::/48 240a:4090:1000::/39 240a:4090:2010::/48 240a:4090:2041::/48 240a:4090:2061::/48 240a:4090:3000::/39 240a:4090:5000::/39 240a:4090:7000::/39 240a:40b0:83a::/48 240a:40c0:8000::/43 240a:4280::/30 Signature Algorithm: sha256WithRSAEncryption 52:f0:de:2b:0d:07:37:ca:04:4d:e3:c8:2b:1d:2e:51:69:ec: 9b:77:bd:65:08:03:59:90:c3:b3:49:93:85:ca:de:8e:d9:6d: 04:17:5b:98:95:2a:da:a8:15:70:e5:06:4e:1b:21:b2:4a:4e: 45:ef:55:c5:fc:6a:c0:e8:77:15:bb:40:f6:d9:37:0e:a6:bd: d0:7b:89:b7:d6:cb:ac:df:1b:b3:f2:e2:7b:7b:2e:85:ae:70: f0:15:75:a5:09:1d:b5:51:43:e2:b3:8f:30:dc:b7:47:a9:ff: 23:7f:8c:f8:5d:6f:02:ba:fb:14:50:9a:9e:25:d5:bd:3c:ad: 51:64:09:5f:b6:d5:d3:21:01:86:75:20:79:ee:fa:22:01:cd: de:24:de:d1:27:ee:4e:e4:b9:3a:39:52:7a:31:d2:34:dd:2a: 29:e4:1c:31:82:79:ea:a9:d1:07:05:cb:ca:d0:99:df:24:ea: 34:1f:20:41:f2:c1:16:d6:04:db:85:2d:88:bd:5c:22:5f:c9: d1:36:9a:c7:d2:f7:9a:ce:e4:55:8c:46:0c:db:f0:26:62:50: 79:7a:47:3c:90:c8:b3:9c:f9:ca:00:84:dc:79:ea:29:5c:46: e1:50:1f:28:99:a0:f5:a8:14:8d:60:5d:92:58:9c:1f:f8:b9: 8f:90:d8:8b -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUPpMyHEx0HiLhTuzv0sfpMh0WjhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAxMjAwMjEzMDJaFw0yNzAxMTkwMjE4MDJaMDMxMTAvBgNV BAMTKEFCNTZDRkE1MDQzQkM0QjMzMUMyOUZCQURFQjIxOUFBMTA5QzM2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yfdl5EZ0+T9FWjnIGvvZWDaN BS+bCE1T13CqM27hiAtTngjlyFzGc/VvACvz283AR412hrBMEu5YUslswh8NAVNI O+i2rrkTH6wKhdnwn7QcYXOb3HCclKO9BC4uWvFmSzfxTcML10yKGrURHtWx/Zgt mu68YfteekUjNgl4s5okl4Z515fjCoR/30zka8XMYr/UKGOxferzDh2E4i51JPaA 5K/plvLZLpJXCV2CEKR2xboOVvpeedZsnEHJC+lgZLnZU6XbSph99ETr3ZRAMxBx JWGbT5eLG/vfEln1NzhYBmQfF4g+Vp8VMMvx0t6SKpaSLXNULEr9bHoFatGRAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUq1bPpQQ7xLMxwp+63rIZqhCcNpMwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzU2MDQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwdQQC AAIwbwMHACQKQCAIOgMHACQKQJAAUAMHACQKQJABIAMGASQKQJAQAwcAJApAkCAQ AwcAJApAkCBBAwcAJApAkCBhAwYBJApAkDADBgEkCkCQUAMGASQKQJBwAwcAJApA sAg6AwcFJApAwIAAAwUCJApCgDANBgkqhkiG9w0BAQsFAAOCAQEAUvDeKw0HN8oE TePIKx0uUWnsm3e9ZQgDWZDDs0mThcrejtltBBdbmJUq2qgVcOUGThshskpORe9V xfxqwOh3FbtA9tk3Dqa90HuJt9bLrN8bs/Lie3suha5w8BV1pQkdtVFD4rOPMNy3 R6n/I3+M+F1vArr7FFCaniXVvTytUWQJX7bV0yEBhnUgee76IgHN3iTe0SfuTuS5 OjlSejHSNN0qKeQcMYJ56qnRBwXLytCZ3yTqNB8gQfLBFtYE24UtiL1cIl/J0Taa x9L3ms7kVYxGDNvwJmJQeXpHPJDIs5z5ygCE3HnqKVxG4VAfKJmg9agUjWBdklic H/i5j5DYiw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:11 2026 by rpki-client