This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/323430313a376530303a3a2f33322d3634203d3e203137393639.roa File: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (raw, json) Hash identifier: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY= Subject key identifier: CD:1D:AE:12:CC:29:A6:B6:52:F7:B2:C5:AE:1C:AC:D9:2D:49:BE:16 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 7EE02ADFA06BD0FF0B5906C8E594DB2F5231447A Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/323430313a376530303a3a2f33322d3634203d3e203137393639.roa Signing time: Tue 20 Jan 2026 02:26:11 +0000 ROA not before: Tue 20 Jan 2026 02:21:11 +0000 ROA not after: Tue 19 Jan 2027 02:26:11 +0000 asID: 17969 IP address blocks: 2401:7e00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 00:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e0:2a:df:a0:6b:d0:ff:0b:59:06:c8:e5:94:db:2f:52:31:44:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Jan 20 02:21:11 2026 GMT Not After : Jan 19 02:26:11 2027 GMT Subject: CN=CD1DAE12CC29A6B652F7B2C5AE1CACD92D49BE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e3:1b:cd:ad:fe:ee:8b:99:49:1e:d6:86:ec: 28:79:f4:e7:20:e8:87:36:dd:18:26:65:f9:b1:c7: a5:0c:99:6b:51:bf:6a:42:5a:29:2b:40:6d:0d:67: fc:56:2b:59:c4:04:91:96:53:c2:32:6d:22:8d:fd: 10:59:d1:a8:77:4c:74:f2:fc:f2:a8:11:c9:52:43: 88:d7:2f:99:8c:1a:8f:4f:03:00:e8:65:42:b9:c9: 35:01:cc:d9:e9:53:8f:fd:83:2b:73:1b:1a:02:b9: 14:a5:df:4b:82:f5:5d:65:ad:61:5d:50:16:3d:f2: c3:52:2f:a0:c2:da:9f:0e:00:53:89:95:e7:fe:68: 0e:3a:e2:e1:4a:b9:b6:20:2b:89:84:fe:b5:9b:b6: 08:5b:34:8e:c7:6b:6d:fa:3e:8a:d4:d3:dc:02:72: 01:ae:71:e3:fe:76:88:96:34:96:34:4c:ca:d8:9b: 47:a1:7d:af:12:6f:78:6a:b7:24:9d:ba:1b:ff:82: dd:23:eb:d9:83:6c:89:fe:51:1d:76:e4:52:62:63: 13:62:f1:cd:1c:f8:b7:63:70:b9:49:e4:d0:97:a8: 2e:7c:a8:dc:3a:f7:a0:7e:fe:42:85:15:fc:5d:f4: 40:08:03:9e:34:07:50:06:33:85:35:14:76:aa:7f: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1D:AE:12:CC:29:A6:B6:52:F7:B2:C5:AE:1C:AC:D9:2D:49:BE:16 X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/323430313a376530303a3a2f33322d3634203d3e203137393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:7e00::/32 Signature Algorithm: sha256WithRSAEncryption 0c:3e:8c:31:58:b5:bb:12:44:ae:96:40:0b:8c:9a:28:01:a4: 0e:35:e7:5e:2d:45:ed:93:4c:42:5c:ed:79:4b:92:83:97:f7: ad:09:23:3b:47:39:96:ba:32:27:aa:80:a0:0d:cc:b4:3f:3a: a6:e0:87:d9:96:1c:4f:e8:10:0a:3f:7d:8b:dc:17:cc:40:e9: bf:e0:8f:e2:90:db:dc:6d:b7:aa:d5:ad:e1:40:ea:27:26:96: 88:65:f8:f7:89:df:b1:6f:a3:7e:c3:16:9b:0b:6a:dc:e5:64: 51:78:55:8b:cd:13:97:53:ed:76:7a:12:20:cd:15:41:dd:cb: 13:98:c3:22:0e:dc:d0:06:4e:0b:73:81:29:0f:3b:51:b9:a9: 76:14:2d:4b:4b:50:88:c0:e1:a2:71:35:8e:67:f8:7e:00:33: a6:6c:05:b9:cb:be:ad:25:36:60:b5:bb:36:d1:53:ea:9c:27: 81:c8:d4:cd:73:18:29:89:0f:38:c0:b4:cb:b9:5e:0b:e9:d2: 0b:35:14:9f:5f:ed:78:07:3b:e6:41:c0:4e:65:f1:b8:e3:8b: 08:4c:af:14:1d:35:bd:ef:57:65:20:6b:2a:48:ac:b7:f9:fe: 13:63:0b:5f:b8:10:f9:36:5b:36:39:db:09:a1:03:55:e4:f7: 96:ec:5b:1c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUfuAq36Br0P8LWQbI5ZTbL1IxRHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjAxMjAwMjIxMTFaFw0yNzAxMTkwMjI2MTFaMDMxMTAvBgNV BAMTKENEMURBRTEyQ0MyOUE2QjY1MkY3QjJDNUFFMUNBQ0Q5MkQ0OUJFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ4xvNrf7ui5lJHtaG7Ch59Ocg 6Ic23RgmZfmxx6UMmWtRv2pCWikrQG0NZ/xWK1nEBJGWU8IybSKN/RBZ0ah3THTy /PKoEclSQ4jXL5mMGo9PAwDoZUK5yTUBzNnpU4/9gytzGxoCuRSl30uC9V1lrWFd UBY98sNSL6DC2p8OAFOJlef+aA464uFKubYgK4mE/rWbtghbNI7Ha236PorU09wC cgGuceP+doiWNJY0TMrYm0ehfa8Sb3hqtySduhv/gt0j69mDbIn+UR125FJiYxNi 8c0c+LdjcLlJ5NCXqC58qNw696B+/kKFFfxd9EAIA540B1AGM4U1FHaqfyAbAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUzR2uEswpprZS97LFrhys2S1JvhYwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODc4NDAzLzAvMzIzNDMwMzEzYTM3 NjUzMDMwM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzEzNzM5MzYzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBfgAwDQYJKoZIhvcNAQELBQADggEBAAw+jDFYtbsSRK6WQAuMmigBpA41 514tRe2TTEJc7XlLkoOX960JIztHOZa6MieqgKANzLQ/Oqbgh9mWHE/oEAo/fYvc F8xA6b/gj+KQ29xtt6rVreFA6icmlohl+PeJ37Fvo37DFpsLatzlZFF4VYvNE5dT 7XZ6EiDNFUHdyxOYwyIO3NAGTgtzgSkPO1G5qXYULUtLUIjA4aJxNY5n+H4AM6Zs BbnLvq0lNmC1uzbRU+qcJ4HI1M1zGCmJDzjAtMu5Xgvp0gs1FJ9f7XgHO+ZBwE5l 8bjjiwhMrxQdNb3vV2UgaypIrLf5/hNjC1+4EPk2WzY52wmhA1Xk95bsWxw= -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:26 2026 by rpki-client