This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa File: 323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa (raw, json) Hash identifier: kyxkLgkSkLdtiphgwfgYitM4gd3kF0CU9WboqJpH+Kg= Subject key identifier: 50:21:47:57:B9:5A:D8:8A:83:88:5A:8C:E4:C8:FE:E6:3F:63:58:D4 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 7BDC39BDA431898E247F0818CCFD1B5CE9381A46 Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa Signing time: Tue 20 Jan 2026 02:14:13 +0000 ROA not before: Tue 20 Jan 2026 02:09:13 +0000 ROA not after: Tue 19 Jan 2027 02:14:13 +0000 asID: 4847 IP address blocks: 2403:8080:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:dc:39:bd:a4:31:89:8e:24:7f:08:18:cc:fd:1b:5c:e9:38:1a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Jan 20 02:09:13 2026 GMT Not After : Jan 19 02:14:13 2027 GMT Subject: CN=50214757B95AD88A83885A8CE4C8FEE63F6358D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:a6:98:3b:1b:d9:de:ea:85:92:de:0a:32: 3d:21:1b:cd:8a:b1:ec:5d:7f:99:01:4f:42:e1:c4: f4:e1:1e:07:84:8c:77:b2:5f:fb:b8:ba:f4:bf:27: d7:79:30:7b:99:48:24:4f:ed:23:8f:2a:5f:59:da: 64:02:c8:28:5d:57:af:79:2a:65:76:b8:27:fb:b9: be:26:1f:28:3b:0e:a2:ce:ac:b6:c3:e9:a3:cb:a8: eb:e4:76:dd:cc:46:1a:7d:ec:d3:63:f6:af:55:75: b3:50:78:25:45:0d:db:a6:29:75:68:86:4b:13:1c: 61:13:7c:79:c0:63:90:96:c8:3d:96:76:54:1d:b4: 39:1f:9d:ec:c5:0a:fa:3f:43:9e:27:2b:88:33:df: 6a:fd:48:b0:de:4d:d0:c3:01:fc:e0:1d:0e:e8:42: 76:9c:cf:65:6a:8d:80:c5:62:05:61:a0:55:cc:20: bc:9c:08:3c:18:43:53:91:c1:ad:18:59:59:1a:e5: 2e:15:a1:19:65:c6:9b:04:59:4a:3b:c0:6c:33:3b: 01:a2:7e:37:27:a3:f5:99:cd:3a:d5:29:cd:89:06: 16:8a:e0:ed:fe:ca:f0:12:18:78:0f:42:97:37:67: 92:c6:ec:be:ea:2b:9d:4a:08:0a:ba:1a:50:39:d2: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:21:47:57:B9:5A:D8:8A:83:88:5A:8C:E4:C8:FE:E6:3F:63:58:D4 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:8080:101::/48 Signature Algorithm: sha256WithRSAEncryption 24:ac:34:27:68:15:07:f2:c6:4a:41:a6:95:8b:6f:ed:39:f0: 0e:62:c5:75:99:dd:1a:23:3d:2c:b6:74:82:0b:7c:1f:a1:a5: 50:64:53:ae:7d:08:77:b2:c4:6e:d0:00:9b:e3:35:b1:80:d8: 8c:83:d4:bd:cd:0e:42:41:ee:2a:dd:9a:91:6d:d3:42:b7:b7: e9:ee:1c:60:d5:14:20:8a:d7:e3:f7:59:f2:01:4c:61:ae:1a: c5:e1:ce:e8:b2:4f:ea:37:e8:d7:b1:48:0b:4f:51:10:e8:fc: 52:20:fe:7c:0d:9f:ad:34:78:24:f1:66:e2:17:4b:52:d1:ed: a0:ee:f9:4a:94:d8:b1:3e:2a:a4:75:05:da:62:25:56:5d:ca: 0d:35:12:78:9d:49:1b:fc:c9:09:40:37:ab:68:6e:81:0f:17: 39:eb:de:bf:12:79:c2:fa:b0:9c:87:cc:77:c6:09:32:42:0a: 77:50:f9:70:1a:9f:6a:b1:b9:d7:a2:1e:21:b3:81:f6:09:d2: e3:4a:3e:52:05:7e:e4:3e:78:4a:e3:34:af:27:45:df:01:04: 69:38:0c:a2:c7:f6:7d:87:1c:81:66:7f:d0:48:2b:12:1d:11: 7a:d2:8c:56:01:c6:6a:13:fe:5a:76:7a:0c:86:f2:80:09:65: cf:d4:b1:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe9w5vaQxiY4kfwgYzP0bXOk4GkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjAxMjAwMjA5MTNaFw0yNzAxMTkwMjE0MTNaMDMxMTAvBgNV BAMTKDUwMjE0NzU3Qjk1QUQ4OEE4Mzg4NUE4Q0U0QzhGRUU2M0Y2MzU4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQaaYOxvZ3uqFkt4KMj0hG82K sexdf5kBT0LhxPThHgeEjHeyX/u4uvS/J9d5MHuZSCRP7SOPKl9Z2mQCyChdV695 KmV2uCf7ub4mHyg7DqLOrLbD6aPLqOvkdt3MRhp97NNj9q9VdbNQeCVFDdumKXVo hksTHGETfHnAY5CWyD2WdlQdtDkfnezFCvo/Q54nK4gz32r9SLDeTdDDAfzgHQ7o Qnacz2VqjYDFYgVhoFXMILycCDwYQ1ORwa0YWVka5S4VoRllxpsEWUo7wGwzOwGi fjcno/WZzTrVKc2JBhaK4O3+yvASGHgPQpc3Z5LG7L7qK51KCAq6GlA50gpJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUCFHV7la2IqDiFqM5Mj+5j9jWNQwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzIzNDMwMzMz YTM4MzAzODMwM2EzMTMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM4MzQz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQDgIABATANBgkqhkiG9w0BAQsFAAOCAQEAJKw0J2gVB/LG SkGmlYtv7TnwDmLFdZndGiM9LLZ0ggt8H6GlUGRTrn0Id7LEbtAAm+M1sYDYjIPU vc0OQkHuKt2akW3TQre36e4cYNUUIIrX4/dZ8gFMYa4axeHO6LJP6jfo17FIC09R EOj8UiD+fA2frTR4JPFm4hdLUtHtoO75SpTYsT4qpHUF2mIlVl3KDTUSeJ1JG/zJ CUA3q2hugQ8XOevevxJ5wvqwnIfMd8YJMkIKd1D5cBqfarG516IeIbOB9gnS40o+ UgV+5D54SuM0rydF3wEEaTgMosf2fYccgWZ/0EgrEh0RetKMVgHGahP+WnZ6DIby gAllz9SxWw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:05:03 2026 by rpki-client