This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/323430333a3630303a3a2f33322d3438203d3e2037363431.roa File: 323430333a3630303a3a2f33322d3438203d3e2037363431.roa (raw, json) Hash identifier: 9xGoLF93hvbGV+uLC4ZwW6fVqLSQzV6keVkhFN/Vq3s= Subject key identifier: 04:29:25:45:41:40:DF:36:CC:C5:F8:B1:9D:F7:C4:EC:11:71:A1:3E Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 438F5AC180698B164750792C704C1A808622B6AE Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/323430333a3630303a3a2f33322d3438203d3e2037363431.roa Signing time: Tue 20 Jan 2026 02:27:25 +0000 ROA not before: Tue 20 Jan 2026 02:22:25 +0000 ROA not after: Tue 19 Jan 2027 02:27:25 +0000 asID: 7641 IP address blocks: 2403:600::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8f:5a:c1:80:69:8b:16:47:50:79:2c:70:4c:1a:80:86:22:b6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Jan 20 02:22:25 2026 GMT Not After : Jan 19 02:27:25 2027 GMT Subject: CN=042925454140DF36CCC5F8B19DF7C4EC1171A13E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:6d:d6:14:94:77:81:ce:68:da:45:ea:59: 36:cb:62:bc:1e:cf:49:d1:e8:50:e6:4e:6d:23:d4: 94:ab:e3:87:1a:0a:17:8f:7a:b0:91:dc:dd:15:61: 21:7e:9a:d5:9e:d9:cf:cd:bc:0c:c5:20:c4:8d:33: c3:d8:0f:1e:08:2f:46:7b:54:49:75:06:67:37:d7: b8:90:c9:bd:12:ee:e4:c5:95:f2:d4:4e:90:5e:00: 0f:02:8c:e5:99:b9:a2:90:74:28:e6:49:1f:56:7a: 93:80:00:2f:75:54:bd:11:5e:5c:35:db:36:2d:82: 9f:37:b5:2a:38:0d:24:b0:1e:4d:d9:14:d7:26:55: 0b:a5:35:39:ba:e7:47:9a:b0:6d:1b:5d:f9:5c:34: 1b:d4:ec:20:13:2e:7d:05:0d:c5:31:72:7d:ce:36: ab:f7:aa:c9:67:93:88:69:17:be:a3:5e:9a:a9:8c: e8:21:4e:a6:b0:7c:87:22:81:86:e3:64:51:40:ab: fc:51:a2:f2:fa:1c:85:76:87:41:d5:5b:90:f1:d2: 09:7d:32:0a:60:bf:7b:d8:f7:da:6a:b9:2e:31:25: 6f:f4:c7:2b:59:24:ce:31:6f:d1:47:1e:ca:88:58: d9:e8:ba:39:e0:a7:8a:25:36:0d:5c:c0:7c:39:58: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:29:25:45:41:40:DF:36:CC:C5:F8:B1:9D:F7:C4:EC:11:71:A1:3E X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/323430333a3630303a3a2f33322d3438203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:600::/32 Signature Algorithm: sha256WithRSAEncryption 6d:2e:fe:bf:dd:05:26:c6:c6:af:a3:a5:c4:bc:6b:16:2c:59: bb:3d:f5:8d:b5:2a:ce:bc:ea:d7:03:a8:8f:b2:98:9f:ec:31: 45:8b:7c:7e:86:ec:bb:c6:67:3c:cd:75:43:26:86:ca:c0:9b: dc:2d:a1:35:99:1f:4d:2b:42:29:e5:80:12:44:91:55:9c:04: 8e:9f:8e:3e:3d:29:38:44:86:2c:e8:2a:8e:26:90:82:d1:7e: b1:0e:f0:e7:00:e7:c2:f0:aa:ad:e9:12:28:7e:14:63:59:45: 93:19:2d:2e:37:17:54:d0:32:db:34:d8:b9:26:ab:1e:d9:71: d7:f3:5c:26:8f:d4:c1:fa:db:c2:2d:c1:fa:b9:36:e6:be:9b: 82:12:88:bd:49:ca:ca:9c:a6:51:d0:4f:91:6b:60:8b:96:8f: 66:c4:eb:c4:95:32:d9:03:0b:dd:e6:7d:bc:80:9e:43:10:f4: a1:ef:0a:de:45:30:db:90:f9:36:a6:5e:48:20:7d:b3:8c:45: 06:98:7b:54:49:19:87:d1:60:e4:f4:71:4f:3d:0f:12:cb:64: cf:71:3f:99:c6:c6:2c:83:f0:fa:9a:40:50:25:7b:7d:11:2a: 47:78:ea:e7:de:93:8b:21:65:c7:80:79:40:c4:85:86:da:7e: a7:d5:6b:e1 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUQ49awYBpixZHUHkscEwagIYitq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV BAMTKDA0MjkyNTQ1NDE0MERGMzZDQ0M1RjhCMTlERjdDNEVDMTE3MUExM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FG3WFJR3gc5o2kXqWTbLYrwe z0nR6FDmTm0j1JSr44caChePerCR3N0VYSF+mtWe2c/NvAzFIMSNM8PYDx4IL0Z7 VEl1Bmc317iQyb0S7uTFlfLUTpBeAA8CjOWZuaKQdCjmSR9WepOAAC91VL0RXlw1 2zYtgp83tSo4DSSwHk3ZFNcmVQulNTm650easG0bXflcNBvU7CATLn0FDcUxcn3O Nqv3qslnk4hpF76jXpqpjOghTqawfIcigYbjZFFAq/xRovL6HIV2h0HVW5Dx0gl9 Mgpgv3vY99pquS4xJW/0xytZJM4xb9FHHsqIWNnoujngp4olNg1cwHw5WMyFAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUBCklRUFA3zbMxfixnffE7BFxoT4wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzNDMwMzMzYTM2 MzAzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM3MzYzNDMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JAMGADANBgkqhkiG9w0BAQsFAAOCAQEAbS7+v90FJsbGr6OlxLxrFixZuz31jbUq zrzq1wOoj7KYn+wxRYt8fobsu8ZnPM11QyaGysCb3C2hNZkfTStCKeWAEkSRVZwE jp+OPj0pOESGLOgqjiaQgtF+sQ7w5wDnwvCqrekSKH4UY1lFkxktLjcXVNAy2zTY uSarHtlx1/NcJo/Uwfrbwi3B+rk25r6bghKIvUnKypymUdBPkWtgi5aPZsTrxJUy 2QML3eZ9vICeQxD0oe8K3kUw25D5NqZeSCB9s4xFBph7VEkZh9Fg5PRxTz0PEstk z3E/mcbGLIPw+ppAUCV7fREqR3jq596TiyFlx4B5QMSFhtp+p9Vr4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:51 2026 by rpki-client