This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa File: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (raw, json) Hash identifier: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY= Subject key identifier: E4:CB:19:D5:BF:7B:88:55:1D:0D:0E:FD:C5:16:32:A6:90:A7:9D:06 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 2EB3DB378F6384C0F4A88DB3E48D075054A84C55 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:17 +0000 ROA not before: Tue 20 Jan 2026 02:22:17 +0000 ROA not after: Tue 19 Jan 2027 02:27:17 +0000 asID: 23853 IP address blocks: 2404:7600:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b3:db:37:8f:63:84:c0:f4:a8:8d:b3:e4:8d:07:50:54:a8:4c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:17 2026 GMT Not After : Jan 19 02:27:17 2027 GMT Subject: CN=E4CB19D5BF7B88551D0D0EFDC51632A690A79D06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:73:71:e9:45:36:4d:7e:38:d7:12:68:75: 29:fa:d4:af:83:4a:2a:ca:38:c5:b4:71:81:5a:a7: 07:0e:c2:35:0c:e3:a0:0a:77:43:d8:0c:af:62:99: 10:af:41:8c:7f:45:35:34:28:92:37:7f:21:a6:14: dd:23:c0:de:6b:a1:0c:9c:74:1a:77:dd:99:ff:99: c5:67:a1:51:1d:bd:b9:6b:ac:2b:e9:d2:28:78:ff: 03:98:0d:f3:9f:d4:6e:57:96:ad:5b:c3:ad:c8:ad: 6c:d9:8d:02:ce:0d:aa:a5:2c:67:ae:aa:8a:cc:79: 13:e0:ec:23:b4:bc:48:8b:ed:98:d0:dc:10:87:c9: 1c:c6:68:32:67:98:b3:d8:c1:d4:87:4a:49:a3:56: 00:0c:dd:dc:16:5d:13:4a:ae:7b:56:9f:cf:63:eb: 66:8d:57:8b:2f:fb:0c:e0:10:da:1a:73:37:5f:22: c0:ed:1c:97:93:05:f3:6d:aa:3b:6d:9c:bf:71:b2: 1d:8a:e0:1f:d7:50:13:80:cb:05:f1:bd:56:e6:5b: 54:06:e7:dd:93:ad:e1:49:48:25:64:8b:08:95:de: a9:f3:e0:a2:9e:34:7f:4e:e9:26:4d:09:47:a2:ae: 99:ed:f6:1d:f4:c4:cd:3e:48:eb:52:34:54:38:4d: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CB:19:D5:BF:7B:88:55:1D:0D:0E:FD:C5:16:32:A6:90:A7:9D:06 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:1000::/36 Signature Algorithm: sha256WithRSAEncryption 1b:90:41:10:af:b0:88:6a:14:a8:97:3c:bc:c4:5d:48:4b:a0: f5:56:1a:a5:de:2b:09:a6:5a:9b:0d:d5:fb:60:b1:5c:9d:55: d4:bb:97:b0:4f:6e:7f:f2:aa:d1:ba:f9:5c:f5:fe:a8:95:1d: e8:73:39:5f:4e:4e:ab:45:4a:a5:d3:49:6f:a8:ad:2e:2b:d9: 9b:38:59:8d:cd:4e:8c:37:e7:02:7a:6d:48:d4:de:49:8b:dc: de:e8:91:06:a6:6c:f1:2d:8d:f3:8b:1a:62:44:40:52:13:3c: c7:af:6d:fa:2f:8d:c1:ff:eb:1c:0d:14:26:c4:01:fb:60:9c: 76:50:91:3d:97:40:6d:08:05:b0:d8:25:d2:10:56:04:9e:0e: e3:5a:2f:61:27:e9:9e:e2:d3:5c:ac:cb:74:32:09:8d:44:1d: 1b:c8:41:b5:aa:41:15:de:11:a5:c2:5d:d4:c5:74:d6:38:a0: 4c:8e:62:a2:e9:01:23:41:cf:ec:c0:21:e3:30:86:4c:bc:f5: fd:54:b8:e4:96:c3:d4:53:ed:66:a3:0d:13:69:b4:42:25:f4: d4:ad:ab:27:f9:99:28:09:5c:2c:57:1e:15:8b:9e:23:8d:ad: 5c:7d:f2:94:fe:76:86:4b:f4:94:75:21:13:8c:d1:4b:b4:71: 5e:ee:73:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIULrPbN49jhMD0qI2z5I0HUFSoTFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTdaFw0yNzAxMTkwMjI3MTdaMDMxMTAvBgNV BAMTKEU0Q0IxOUQ1QkY3Qjg4NTUxRDBEMEVGREM1MTYzMkE2OTBBNzlEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYnNx6UU2TX441xJodSn61K+D SirKOMW0cYFapwcOwjUM46AKd0PYDK9imRCvQYx/RTU0KJI3fyGmFN0jwN5roQyc dBp33Zn/mcVnoVEdvblrrCvp0ih4/wOYDfOf1G5Xlq1bw63IrWzZjQLODaqlLGeu qorMeRPg7CO0vEiL7ZjQ3BCHyRzGaDJnmLPYwdSHSkmjVgAM3dwWXRNKrntWn89j 62aNV4sv+wzgENoaczdfIsDtHJeTBfNtqjttnL9xsh2K4B/XUBOAywXxvVbmW1QG 592TreFJSCVkiwiV3qnz4KKeNH9O6SZNCUeirpnt9h30xM0+SOtSNFQ4TcYDAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQU5MsZ1b97iFUdDQ79xRYyppCnnQYwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzMz ODM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkBHYAEDANBgkqhkiG9w0BAQsFAAOCAQEAG5BBEK+w iGoUqJc8vMRdSEug9VYapd4rCaZamw3V+2CxXJ1V1LuXsE9uf/Kq0br5XPX+qJUd 6HM5X05Oq0VKpdNJb6itLivZmzhZjc1OjDfnAnptSNTeSYvc3uiRBqZs8S2N84sa YkRAUhM8x69t+i+Nwf/rHA0UJsQB+2CcdlCRPZdAbQgFsNgl0hBWBJ4O41ovYSfp nuLTXKzLdDIJjUQdG8hBtapBFd4RpcJd1MV01jigTI5ioukBI0HP7MAh4zCGTLz1 /VS45JbD1FPtZqMNE2m0QiX01K2rJ/mZKAlcLFceFYueI42tXH3ylP52hkv0lHUh E4zRS7RxXu5ztg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:55 2026 by rpki-client