This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/323430303a623630303a3a2f33322d3332203d3e203234333632.roa
File: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (raw, json)
Hash identifier: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=
Subject key identifier: 77:C0:DC:0E:DC:C9:94:29:82:82:CC:29:EA:41:87:F8:70:1C:8A:3A
Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Certificate serial: 780DB3D167D08F18ECEA40E3CFE7F8667C8DFA0F
Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/323430303a623630303a3a2f33322d3332203d3e203234333632.roa
Signing time: Tue 20 Jan 2026 02:23:45 +0000
ROA not before: Tue 20 Jan 2026 02:18:45 +0000
ROA not after: Tue 19 Jan 2027 02:23:45 +0000
asID: 24362
IP address blocks: 2400:b600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 13:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:0d:b3:d1:67:d0:8f:18:ec:ea:40:e3:cf:e7:f8:66:7c:8d:fa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Validity
Not Before: Jan 20 02:18:45 2026 GMT
Not After : Jan 19 02:23:45 2027 GMT
Subject: CN=77C0DC0EDCC994298282CC29EA4187F8701C8A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:05:3c:4a:db:2c:28:e8:3e:d4:48:c3:a0:
df:87:29:58:1b:64:f3:65:f7:b2:35:61:a6:cf:a0:
d0:9d:14:d7:e0:27:cd:b5:bc:56:99:6d:74:b8:0b:
81:26:69:4c:13:f7:5b:62:a9:0d:98:56:22:bd:37:
fc:8e:23:c9:b9:a3:06:93:12:0e:76:96:50:4a:e9:
4d:cd:68:57:14:d9:11:8f:24:fb:9c:9e:56:d0:9b:
51:db:51:e4:0f:a7:73:3b:3d:f7:a2:f5:a2:e0:b0:
51:4c:bc:5d:fa:ed:4f:80:b8:11:10:62:3e:fb:e6:
1c:a8:2c:4d:d3:29:7c:7e:8f:6c:2d:6f:ae:3a:da:
c7:2f:72:8d:1a:0b:0d:23:80:5a:fc:a4:3c:4c:be:
19:2d:2b:4d:56:ca:1f:d2:89:69:4a:9b:e8:aa:15:
ab:d8:94:b5:42:61:8f:58:ea:18:14:97:3a:3e:d0:
3f:46:2d:c3:c6:00:a2:e2:b1:c5:2e:20:49:33:e0:
ba:1a:ad:32:34:f1:a6:a1:dc:44:8a:52:15:0c:ab:
93:f0:c4:60:f2:da:4b:8c:2f:bb:dc:91:49:e1:8e:
2e:fe:81:e8:f6:1e:72:47:be:c5:5c:a6:ba:e1:5f:
40:68:95:b0:b1:d0:cd:2f:60:d6:8b:fe:cb:b6:22:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C0:DC:0E:DC:C9:94:29:82:82:CC:29:EA:41:87:F8:70:1C:8A:3A
X509v3 Authority Key Identifier:
keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/323430303a623630303a3a2f33322d3332203d3e203234333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:b600::/32
Signature Algorithm: sha256WithRSAEncryption
c2:4d:d7:86:c0:fe:6e:34:ad:8f:e3:1e:96:9e:19:93:64:88:
ca:d4:80:ee:91:0d:49:9e:57:05:41:1f:d8:2f:84:c0:70:d4:
e4:2b:3b:26:1b:82:45:0d:cc:4a:75:78:7b:27:4e:a7:65:e3:
ad:7d:c3:a6:ce:55:db:1a:d6:4f:15:49:2f:45:d4:c4:79:bf:
b2:4c:02:40:51:2a:7d:ef:8b:60:42:e8:55:8d:35:1c:d2:93:
bb:35:06:34:52:4f:da:ce:82:12:3d:4b:e3:02:b9:d8:d2:28:
19:dd:ee:ff:f5:ad:ab:b0:dd:7a:7a:9c:9e:df:c1:8a:9b:4c:
7c:27:11:57:3f:59:17:94:79:76:aa:08:20:33:5a:4f:3d:d9:
17:4e:55:38:33:af:a7:4e:c0:9d:e7:42:6b:2b:98:4e:12:c0:
d6:85:9a:4a:66:93:16:49:fd:e5:5a:23:2a:fd:d6:11:d8:79:
df:77:9c:8f:18:1a:e9:85:77:fc:44:51:23:e8:29:a7:3e:dc:
e1:06:f2:a4:3b:22:93:46:2f:4f:b9:38:0d:23:5e:13:45:64:
5c:1c:4a:8b:04:5f:6f:bc:bf:b3:71:34:ac:65:0c:59:4f:0d:
d8:02:56:74:74:15:8f:9f:5c:5e:e2:de:75:9b:ee:dd:c4:aa:
1d:0b:6c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:02:04 2026 by rpki-client