This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3a2f33322d3634203d3e203137393634.roa File: 323430333a383038303a3a2f33322d3634203d3e203137393634.roa (raw, json) Hash identifier: piQDqbo6ovz4X+QtGKO2nAVFYTFJJbefb5lvlP5mnSU= Subject key identifier: E0:F6:E1:1D:49:B3:16:DC:D8:27:BA:D0:78:34:6F:C8:B6:B1:18:A3 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 635C2F0EB78D7001B33B479FE782A7E26B70590E Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3a2f33322d3634203d3e203137393634.roa Signing time: Tue 20 Jan 2026 02:14:13 +0000 ROA not before: Tue 20 Jan 2026 02:09:13 +0000 ROA not after: Tue 19 Jan 2027 02:14:13 +0000 asID: 17964 IP address blocks: 2403:8080::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5c:2f:0e:b7:8d:70:01:b3:3b:47:9f:e7:82:a7:e2:6b:70:59:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Jan 20 02:09:13 2026 GMT Not After : Jan 19 02:14:13 2027 GMT Subject: CN=E0F6E11D49B316DCD827BAD078346FC8B6B118A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:ba:5e:ba:3b:12:a1:f6:aa:c7:9d:f2:7b: 73:04:2d:ac:c1:3f:4c:b5:fc:33:fb:4f:34:34:ae: bc:47:58:7f:66:57:21:dc:92:14:1e:2b:8f:63:4c: 96:26:49:22:d3:d9:0f:b1:92:ac:49:f8:1c:9b:33: c2:8c:21:6f:1c:72:73:94:12:e5:dc:33:12:e7:1b: b8:3b:cb:4c:20:56:e5:69:d2:5f:69:16:13:ec:86: d3:1a:c8:1e:3a:94:12:5f:79:4a:3c:60:92:df:f0: f6:33:53:0d:9b:ca:00:66:9f:ae:f8:a6:01:00:73: 38:ca:30:5b:d5:6c:3a:32:51:58:62:6c:cd:fb:78: dc:48:38:42:d6:7a:53:ca:9c:5f:8d:06:63:6d:11: ff:8c:9b:d7:0b:84:eb:5e:64:db:ae:8a:82:c4:ce: 49:c2:52:a1:b3:df:0e:e0:79:6f:68:17:cd:42:98: d4:d4:3a:5d:eb:63:4c:e9:99:1e:f5:50:bc:de:96: 2a:63:15:df:4c:80:12:8f:57:f2:df:84:1a:1e:01: 59:5e:8e:e9:2e:18:c5:3e:09:8c:2a:7b:f6:95:a2: 75:3d:09:1d:07:0c:39:0f:92:f3:07:50:c7:43:28: fe:65:2a:e1:d4:0f:4a:45:7c:27:05:ba:e6:df:5a: bf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:E1:1D:49:B3:16:DC:D8:27:BA:D0:78:34:6F:C8:B6:B1:18:A3 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3a2f33322d3634203d3e203137393634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:8080::/32 Signature Algorithm: sha256WithRSAEncryption b2:f4:aa:7c:9e:af:3c:03:ab:1b:d5:87:11:ba:85:52:b7:3d: 41:30:1f:71:bb:2b:b3:0b:fc:ef:00:10:4a:a7:43:ce:6c:23: f7:ca:31:34:10:9e:d9:f0:ab:d9:55:0c:49:85:b7:4c:ad:a3: 4d:47:3b:7e:c3:e5:e4:e3:e3:03:b1:c8:f2:6f:ab:4d:43:3d: 89:30:38:d6:66:57:fd:32:c4:9e:9a:b4:c9:b7:15:96:10:f0: 4c:12:cf:60:9a:23:0c:31:04:88:24:92:41:a8:ff:5d:5c:5a: cc:1c:bf:94:65:d7:7b:93:9e:4b:9a:e7:0a:68:ed:0b:45:3e: a1:da:9c:7c:45:7d:b6:95:a8:89:9c:83:ff:bc:49:89:75:af: 07:ec:2b:d5:35:70:a7:3e:74:d5:f7:ed:13:1d:e0:67:d2:bc: 26:8d:49:94:13:37:c9:26:e3:94:58:2f:c8:89:5f:f4:79:db: bb:e8:99:7c:7f:14:3e:fe:57:ff:e3:f6:d2:30:ee:d3:b8:ee: db:d9:f9:e3:b9:93:85:9c:f0:09:a0:28:ad:16:67:3b:f3:ba: 7a:45:e8:f8:f9:4d:93:bd:81:a2:47:68:9a:98:95:64:70:b5: e9:d4:71:36:17:2f:56:8b:89:d8:04:40:2d:3b:ae:ea:10:06: b0:a8:86:81 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUY1wvDreNcAGzO0ef54Kn4mtwWQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjAxMjAwMjA5MTNaFw0yNzAxMTkwMjE0MTNaMDMxMTAvBgNV BAMTKEUwRjZFMTFENDlCMzE2RENEODI3QkFEMDc4MzQ2RkM4QjZCMTE4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jLpeujsSofaqx53ye3MELazB P0y1/DP7TzQ0rrxHWH9mVyHckhQeK49jTJYmSSLT2Q+xkqxJ+BybM8KMIW8ccnOU EuXcMxLnG7g7y0wgVuVp0l9pFhPshtMayB46lBJfeUo8YJLf8PYzUw2bygBmn674 pgEAczjKMFvVbDoyUVhibM37eNxIOELWelPKnF+NBmNtEf+Mm9cLhOteZNuuioLE zknCUqGz3w7geW9oF81CmNTUOl3rY0zpmR71ULzelipjFd9MgBKPV/LfhBoeAVle jukuGMU+CYwqe/aVonU9CR0HDDkPkvMHUMdDKP5lKuHUD0pFfCcFuubfWr+FAgMB AAGjggISMIICDjAdBgNVHQ4EFgQU4PbhHUmzFtzYJ7rQeDRvyLaxGKMwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzIzNDMwMzMzYTM4 MzAzODMwM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzEzNzM5MzYzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQDgIAwDQYJKoZIhvcNAQELBQADggEBALL0qnyerzwDqxvVhxG6hVK3PUEw H3G7K7ML/O8AEEqnQ85sI/fKMTQQntnwq9lVDEmFt0yto01HO37D5eTj4wOxyPJv q01DPYkwONZmV/0yxJ6atMm3FZYQ8EwSz2CaIwwxBIgkkkGo/11cWswcv5Rl13uT nkua5wpo7QtFPqHanHxFfbaVqImcg/+8SYl1rwfsK9U1cKc+dNX37RMd4GfSvCaN SZQTN8km45RYL8iJX/R527vomXx/FD7+V//j9tIw7tO47tvZ+eO5k4Wc8AmgKK0W ZzvzunpF6Pj5TZO9gaJHaJqYlWRwtenUcTYXL1aLidgEQC07ruoQBrCohoE= -----END CERTIFICATE-----Generated at Mon Jan 26 00:40:09 2026 by rpki-client