This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383838303a3a2f33322d3634203d3e203137393634.roa File: 323430333a383838303a3a2f33322d3634203d3e203137393634.roa (raw, json) Hash identifier: +pvZ0/1DLgneMPaWbyvqBXYh1zOEumfoQPnHJUD/aYo= Subject key identifier: 0F:15:9F:4F:EF:55:36:C1:62:46:02:4F:3A:F2:59:52:10:C3:6F:F1 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 03218C6B94A91C09423C116CF3DDF6201EC20F30 Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383838303a3a2f33322d3634203d3e203137393634.roa Signing time: Tue 20 Jan 2026 02:14:13 +0000 ROA not before: Tue 20 Jan 2026 02:09:13 +0000 ROA not after: Tue 19 Jan 2027 02:14:13 +0000 asID: 17964 IP address blocks: 2403:8880::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:21:8c:6b:94:a9:1c:09:42:3c:11:6c:f3:dd:f6:20:1e:c2:0f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Jan 20 02:09:13 2026 GMT Not After : Jan 19 02:14:13 2027 GMT Subject: CN=0F159F4FEF5536C16246024F3AF2595210C36FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:65:ac:78:1c:f2:85:21:a4:77:d4:51:55:46: 0b:53:6c:9c:31:98:e0:5e:ca:72:26:ef:ba:fe:4c: 78:49:8a:21:60:37:6c:3a:1a:ec:76:57:ea:43:fc: af:90:e1:8d:ad:60:07:08:c2:e9:ad:a8:78:58:54: 0b:ef:97:d1:1c:fd:70:10:07:5a:3b:58:53:af:a4: 99:f0:dd:03:eb:ec:2a:b5:78:a6:70:11:17:50:f0: b8:36:7f:76:31:f9:5b:a6:98:b5:6d:71:e6:60:6e: 4f:c8:31:43:0d:98:6a:f6:f0:c6:dc:18:14:64:22: 8f:ba:42:dc:ad:7f:c6:d9:1e:29:1b:ba:f6:66:9f: 23:27:7b:bf:f2:72:70:a3:a3:19:1c:27:90:49:86: 26:e9:12:7c:bf:57:15:7b:b7:ca:01:68:1d:8e:c1: a1:58:79:30:ed:3a:02:87:3d:70:08:2c:8f:68:e6: d3:31:71:cb:24:d0:9a:05:28:c4:8f:0c:40:fe:2b: b2:12:45:60:30:2b:79:af:93:d8:31:04:6f:fa:37: c4:ba:0c:29:c4:23:ff:73:d2:b2:2f:65:a7:28:6d: 97:b0:9f:f1:42:83:12:e2:74:33:62:2c:fd:e2:14: db:40:8a:33:63:7f:15:ee:48:3e:dd:a2:42:d1:4b: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:15:9F:4F:EF:55:36:C1:62:46:02:4F:3A:F2:59:52:10:C3:6F:F1 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383838303a3a2f33322d3634203d3e203137393634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:8880::/32 Signature Algorithm: sha256WithRSAEncryption 92:ac:f9:d1:8e:1d:27:b1:5b:c7:38:3c:67:e2:36:47:11:71: 42:e7:78:c9:eb:8c:20:3c:8f:7d:ef:02:ee:7a:51:18:4b:bb: f8:da:ce:51:75:f3:2e:c3:4e:72:ed:45:31:b1:77:57:62:ac: 55:47:d1:a9:80:a2:b3:45:6d:e8:26:c4:98:c9:a2:60:1c:33: fa:13:d1:27:50:86:6d:e0:1b:a9:ce:4c:de:3e:52:b6:a7:e3: 02:43:37:6a:b6:7c:4b:df:6b:56:e2:dd:72:66:d9:fa:bc:77: dc:ff:91:e3:b1:0f:6e:29:b7:72:7f:dd:38:d3:a1:49:0e:35: 1c:6a:f1:11:2f:89:b5:3e:7e:db:71:3d:a3:60:71:ed:73:a1: 55:1d:6d:d8:93:ac:22:82:58:95:30:22:ef:2a:b4:a2:d4:24: fc:56:aa:69:27:d2:02:65:be:52:87:d6:2e:d3:e8:68:f5:ff: 95:b8:75:8e:45:5e:12:41:ea:13:47:44:62:ce:a1:25:10:90: bb:e0:be:6b:b8:04:4b:18:c1:3c:60:2b:7a:50:08:ea:55:14: a6:2d:8e:3d:33:02:ed:a7:2a:5c:22:5d:03:fe:ec:67:46:b3: e3:d1:f6:cb:e0:c3:ce:eb:f8:e1:b4:91:78:4f:20:3d:87:0f: bf:18:67:db -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUAyGMa5SpHAlCPBFs8932IB7CDzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjAxMjAwMjA5MTNaFw0yNzAxMTkwMjE0MTNaMDMxMTAvBgNV BAMTKDBGMTU5RjRGRUY1NTM2QzE2MjQ2MDI0RjNBRjI1OTUyMTBDMzZGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaZax4HPKFIaR31FFVRgtTbJwx mOBeynIm77r+THhJiiFgN2w6Gux2V+pD/K+Q4Y2tYAcIwumtqHhYVAvvl9Ec/XAQ B1o7WFOvpJnw3QPr7Cq1eKZwERdQ8Lg2f3Yx+VummLVtceZgbk/IMUMNmGr28Mbc GBRkIo+6Qtytf8bZHikbuvZmnyMne7/ycnCjoxkcJ5BJhibpEny/VxV7t8oBaB2O waFYeTDtOgKHPXAILI9o5tMxccsk0JoFKMSPDED+K7ISRWAwK3mvk9gxBG/6N8S6 DCnEI/9z0rIvZacobZewn/FCgxLidDNiLP3iFNtAijNjfxXuSD7dokLRS7FVAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUDxWfT+9VNsFiRgJPOvJZUhDDb/EwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzIzNDMwMzMzYTM4 MzgzODMwM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzEzNzM5MzYzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQDiIAwDQYJKoZIhvcNAQELBQADggEBAJKs+dGOHSexW8c4PGfiNkcRcULn eMnrjCA8j33vAu56URhLu/jazlF18y7DTnLtRTGxd1dirFVH0amAorNFbegmxJjJ omAcM/oT0SdQhm3gG6nOTN4+Uran4wJDN2q2fEvfa1bi3XJm2fq8d9z/keOxD24p t3J/3TjToUkONRxq8REvibU+fttxPaNgce1zoVUdbdiTrCKCWJUwIu8qtKLUJPxW qmkn0gJlvlKH1i7T6Gj1/5W4dY5FXhJB6hNHRGLOoSUQkLvgvmu4BEsYwTxgK3pQ COpVFKYtjj0zAu2nKlwiXQP+7GdGs+PR9svgw87r+OG0kXhPID2HD78YZ9s= -----END CERTIFICATE-----Generated at Sun Jan 25 23:05:19 2026 by rpki-client