This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/323430313a326130303a3a2f33322d3438203d3e2037343638.roa File: 323430313a326130303a3a2f33322d3438203d3e2037343638.roa (raw, json) Hash identifier: A8NZ0UY8B3O3+sohjguWnNXSf3IoWdVu8cAaIcwGSx4= Subject key identifier: AC:BB:71:DA:77:7E:83:62:9B:31:AA:B0:1D:A8:43:AC:57:BE:4D:F0 Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Certificate serial: 0EA7E1A5B66BC9C5C2DD8361D0D9CF3CC0785128 Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/323430313a326130303a3a2f33322d3438203d3e2037343638.roa Signing time: Tue 20 Jan 2026 02:19:14 +0000 ROA not before: Tue 20 Jan 2026 02:14:14 +0000 ROA not after: Tue 19 Jan 2027 02:19:14 +0000 asID: 7468 IP address blocks: 2401:2a00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a7:e1:a5:b6:6b:c9:c5:c2:dd:83:61:d0:d9:cf:3c:c0:78:51:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Validity Not Before: Jan 20 02:14:14 2026 GMT Not After : Jan 19 02:19:14 2027 GMT Subject: CN=ACBB71DA777E83629B31AAB01DA843AC57BE4DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:c3:ad:54:8a:b0:b2:56:a5:7e:31:1c:84: 4a:9b:5a:86:cd:a6:0d:aa:92:c7:d1:24:b2:bd:52: 60:f6:9d:fd:3d:85:59:fc:45:b2:90:7c:9e:70:12: ef:9b:3d:00:8e:28:e6:e6:45:cc:05:b7:50:7c:d6: 49:58:c8:cc:59:25:1d:a9:15:fc:f5:52:f7:e5:0a: 08:cc:dc:0e:ca:33:a3:49:75:d0:6b:39:e7:8a:2e: 9e:77:ae:53:74:b7:19:37:91:75:47:9c:f4:21:e4: ab:10:c1:03:1f:3e:6d:28:1f:99:30:49:ed:3f:55: ec:40:5a:df:57:24:cf:33:b5:85:7e:33:6d:16:77: aa:e4:08:ae:2e:16:ba:1b:00:fe:64:49:85:63:da: 4c:ef:b5:07:82:b7:f7:d7:2e:a9:ab:ea:c0:91:9f: 47:0f:37:35:fa:e1:98:1c:c8:3d:96:31:fc:ad:b7: 47:35:81:2f:12:cc:aa:ba:0c:67:31:4e:06:e9:f2: 1e:d0:84:99:e9:93:48:67:91:62:a7:1a:8a:43:ee: 70:8c:e7:a7:23:72:ce:3a:31:73:94:b1:38:e2:48: 31:83:77:07:27:4a:c9:b7:82:5f:42:9a:46:d5:51: e3:b1:01:8d:b5:a5:c7:e8:31:15:0f:f3:95:96:b4: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BB:71:DA:77:7E:83:62:9B:31:AA:B0:1D:A8:43:AC:57:BE:4D:F0 X509v3 Authority Key Identifier: keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/323430313a326130303a3a2f33322d3438203d3e2037343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 99:8c:69:17:ea:d1:27:b5:22:13:cb:7b:5d:ac:ff:de:01:8f: a2:58:ab:f5:a3:b9:f3:73:15:e8:ac:58:51:74:b2:f8:4c:79: 97:17:5f:8e:53:ef:0b:5c:39:a1:16:d9:61:d4:be:9c:e9:34: 63:b1:f8:89:fa:58:f5:66:07:ae:2c:21:d7:59:df:f2:64:4b: 73:c2:a9:85:21:81:8a:ff:53:81:bd:ad:d3:13:bc:c5:29:c8: f1:41:96:a5:8b:28:73:7f:d3:da:e3:5e:d9:fe:27:cf:dc:12: b7:1a:64:be:53:b1:a3:10:2b:7d:35:e9:f9:8e:97:61:cc:06: c7:a9:05:51:a5:8c:4f:47:8e:24:51:8e:dc:75:62:55:81:d7: 1f:d3:ad:de:37:b4:f7:8d:f9:0e:6e:8b:70:97:28:4a:8c:25: 98:a7:1b:7d:38:35:d2:39:5b:1a:69:2e:5d:6a:a4:88:17:7a: da:ee:24:c4:ac:39:b9:f2:e3:12:56:10:a2:ac:3f:ed:d0:94: 10:c0:3b:c3:d6:f6:0d:9e:e9:a3:48:86:11:a3:88:56:78:a0: 15:22:f4:22:96:9a:09:4c:3c:b3:e0:9c:67:50:4e:47:1f:8a: dd:80:2d:3b:dd:43:a7:a7:4a:6a:7f:6f:f7:b2:5b:fa:9e:a8: e8:5b:7a:90 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUDqfhpbZrycXC3YNh0NnPPMB4USgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0 RTBFNEM1RTAeFw0yNjAxMjAwMjE0MTRaFw0yNzAxMTkwMjE5MTRaMDMxMTAvBgNV BAMTKEFDQkI3MURBNzc3RTgzNjI5QjMxQUFCMDFEQTg0M0FDNTdCRTRERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRV8OtVIqwslalfjEchEqbWobN pg2qksfRJLK9UmD2nf09hVn8RbKQfJ5wEu+bPQCOKObmRcwFt1B81klYyMxZJR2p Ffz1UvflCgjM3A7KM6NJddBrOeeKLp53rlN0txk3kXVHnPQh5KsQwQMfPm0oH5kw Se0/VexAWt9XJM8ztYV+M20Wd6rkCK4uFrobAP5kSYVj2kzvtQeCt/fXLqmr6sCR n0cPNzX64ZgcyD2WMfytt0c1gS8SzKq6DGcxTgbp8h7QhJnpk0hnkWKnGopD7nCM 56cjcs46MXOUsTjiSDGDdwcnSsm3gl9CmkbVUeOxAY21pcfoMRUP85WWtAZ7AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUrLtx2nd+g2KbMaqwHahDrFe+TfAwHwYDVR0j BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MjcxNjE5LzAvMzIzNDMwMzEzYTMy NjEzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzczNDM2Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkASoAMA0GCSqGSIb3DQEBCwUAA4IBAQCZjGkX6tEntSITy3tdrP/eAY+iWKv1 o7nzcxXorFhRdLL4THmXF1+OU+8LXDmhFtlh1L6c6TRjsfiJ+lj1ZgeuLCHXWd/y ZEtzwqmFIYGK/1OBva3TE7zFKcjxQZaliyhzf9Pa417Z/ifP3BK3GmS+U7GjECt9 Nen5jpdhzAbHqQVRpYxPR44kUY7cdWJVgdcf063eN7T3jfkObotwlyhKjCWYpxt9 ODXSOVsaaS5daqSIF3ra7iTErDm58uMSVhCirD/t0JQQwDvD1vYNnumjSIYRo4hW eKAVIvQilpoJTDyz4JxnUE5HH4rdgC073UOnp0pqf2/3slv6nqjoW3qQ -----END CERTIFICATE-----Generated at Sun Jan 25 15:53:00 2026 by rpki-client