This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/323430333a343330303a3a2f33322d3438203d3e203137343239.roa File: 323430333a343330303a3a2f33322d3438203d3e203137343239.roa (raw, json) Hash identifier: BxtN59vqgBZxPoERk/JYSA/midP2NXeRF93I1z+oqtg= Subject key identifier: E2:D4:63:AB:1F:99:EB:8B:9C:ED:0F:70:55:7E:B4:4C:F3:C5:0B:92 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 0A11FB31B6F0CCA6AD165DCDBD3BF06394781DF5 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/323430333a343330303a3a2f33322d3438203d3e203137343239.roa Signing time: Tue 20 Jan 2026 02:07:13 +0000 ROA not before: Tue 20 Jan 2026 02:02:13 +0000 ROA not after: Tue 19 Jan 2027 02:07:13 +0000 asID: 17429 IP address blocks: 2403:4300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:11:fb:31:b6:f0:cc:a6:ad:16:5d:cd:bd:3b:f0:63:94:78:1d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Jan 20 02:02:13 2026 GMT Not After : Jan 19 02:07:13 2027 GMT Subject: CN=E2D463AB1F99EB8B9CED0F70557EB44CF3C50B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:c8:cf:51:22:04:01:14:57:36:96:42:56: 24:fb:f1:0d:1a:c2:80:b4:e6:20:2a:8b:be:6d:01: 6c:fb:64:6a:81:4f:9e:a3:dd:97:90:0d:f5:e2:49: 7d:28:d7:67:a8:65:f4:02:28:8d:96:16:4e:7a:70: ff:e5:74:3e:8d:89:f9:79:0d:d3:6a:fd:a6:eb:1b: 4c:5e:e6:8a:83:86:55:db:4a:24:a8:91:d4:da:22: 80:ee:8e:42:3f:40:75:46:a3:be:2c:ed:a3:20:aa: 01:0e:ed:bd:3c:6c:93:36:a6:d9:e3:2b:a3:ac:9f: 30:8e:7a:78:49:93:fe:f8:15:9b:59:1f:e9:f1:cb: 2d:0c:83:3a:e6:c6:e0:ab:4e:cd:97:99:bf:f6:d1: 0f:6e:9d:39:aa:f7:ea:3a:de:26:24:04:82:70:63: 61:40:64:ac:ef:82:80:cb:59:7c:6f:8f:f9:e9:eb: 36:70:50:2d:68:ec:f0:c0:84:3e:ca:81:3d:65:ee: f6:fa:89:80:f6:38:0b:d1:7d:f6:a4:df:c2:bf:91: e9:ef:05:ed:56:0e:55:ab:a6:c6:35:dd:07:71:77: c5:d3:55:97:e9:c0:71:3d:35:e8:86:5a:fe:22:97: 1c:c7:59:3f:ed:d5:ab:b7:aa:a7:d7:60:a7:4f:68: c9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D4:63:AB:1F:99:EB:8B:9C:ED:0F:70:55:7E:B4:4C:F3:C5:0B:92 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/323430333a343330303a3a2f33322d3438203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:4300::/32 Signature Algorithm: sha256WithRSAEncryption 29:fe:32:23:17:d6:1c:6e:d7:cc:f8:86:bc:6c:8a:42:95:87: 11:4d:a2:f4:0b:b8:2f:68:38:d8:12:ae:b2:0e:52:e9:e7:13: 90:0c:3e:6c:1d:d3:2e:09:d5:e1:18:5e:4f:8f:bd:43:9f:2b: 50:cc:1d:9f:f4:e6:81:96:7e:2e:16:e7:e5:b0:f6:78:24:d8: 89:d8:12:9e:c2:1f:58:ba:40:93:27:b7:65:a6:84:41:ac:0f: 16:98:0e:48:91:56:3a:39:09:50:d6:89:26:dd:9c:9d:d2:cd: b9:3c:43:12:78:fb:5e:44:ba:3b:92:18:d5:83:d8:25:24:01: f2:e6:e9:93:01:a4:b9:8d:67:c6:89:96:81:6f:47:bb:e8:6a: ce:78:a6:e1:b4:71:65:ec:81:92:32:ea:05:43:b0:f0:55:d7: 61:78:6e:c9:75:dc:de:ca:9a:e4:16:94:d1:d5:e2:71:21:d2: 32:e1:ea:bb:2f:84:9f:fc:94:07:e6:f0:b1:c5:e0:1d:66:d4: 1f:a2:fd:1f:99:85:09:c6:37:9b:40:3d:e1:da:3c:9d:a4:a4: f3:c3:b3:f4:6b:61:9f:60:75:c5:f6:ae:b1:2a:76:27:30:53: b5:7f:08:b8:f2:3a:7d:a3:bc:9e:e7:f5:d8:dd:ef:9f:51:4b: 76:65:81:64 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUChH7MbbwzKatFl3NvTvwY5R4HfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjAxMjAwMjAyMTNaFw0yNzAxMTkwMjA3MTNaMDMxMTAvBgNV BAMTKEUyRDQ2M0FCMUY5OUVCOEI5Q0VEMEY3MDU1N0VCNDRDRjNDNTBCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutMjPUSIEARRXNpZCViT78Q0a woC05iAqi75tAWz7ZGqBT56j3ZeQDfXiSX0o12eoZfQCKI2WFk56cP/ldD6Nifl5 DdNq/abrG0xe5oqDhlXbSiSokdTaIoDujkI/QHVGo74s7aMgqgEO7b08bJM2ptnj K6OsnzCOenhJk/74FZtZH+nxyy0MgzrmxuCrTs2Xmb/20Q9unTmq9+o63iYkBIJw Y2FAZKzvgoDLWXxvj/np6zZwUC1o7PDAhD7KgT1l7vb6iYD2OAvRffak38K/kenv Be1WDlWrpsY13Qdxd8XTVZfpwHE9NeiGWv4ilxzHWT/t1au3qqfXYKdPaMk1AgMB AAGjggISMIICDjAdBgNVHQ4EFgQU4tRjqx+Z64uc7Q9wVX60TPPFC5IwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzIzNDMwMzMzYTM0 MzMzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzEzNzM0MzIzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQDQwAwDQYJKoZIhvcNAQELBQADggEBACn+MiMX1hxu18z4hrxsikKVhxFN ovQLuC9oONgSrrIOUunnE5AMPmwd0y4J1eEYXk+PvUOfK1DMHZ/05oGWfi4W5+Ww 9ngk2InYEp7CH1i6QJMnt2WmhEGsDxaYDkiRVjo5CVDWiSbdnJ3Szbk8QxJ4+15E ujuSGNWD2CUkAfLm6ZMBpLmNZ8aJloFvR7voas54puG0cWXsgZIy6gVDsPBV12F4 bsl13N7KmuQWlNHV4nEh0jLh6rsvhJ/8lAfm8LHF4B1m1B+i/R+ZhQnGN5tAPeHa PJ2kpPPDs/RrYZ9gdcX2rrEqdicwU7V/CLjyOn2jvJ7n9djd759RS3ZlgWQ= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:36 2026 by rpki-client