This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa File: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (raw, json) Hash identifier: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk= Subject key identifier: 04:02:17:4C:6D:3D:52:4B:52:04:CF:77:89:B8:AA:66:0A:CC:81:A0 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 3724A772486600745FA252765A0228001D38B79C Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa Signing time: Tue 20 Jan 2026 02:27:17 +0000 ROA not before: Tue 20 Jan 2026 02:22:17 +0000 ROA not after: Tue 19 Jan 2027 02:27:17 +0000 asID: 17621 IP address blocks: 2404:7600:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:24:a7:72:48:66:00:74:5f:a2:52:76:5a:02:28:00:1d:38:b7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:17 2026 GMT Not After : Jan 19 02:27:17 2027 GMT Subject: CN=0402174C6D3D524B5204CF7789B8AA660ACC81A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:dd:63:91:2c:c3:cc:8b:c5:9b:cb:5c:95: 59:21:67:bb:61:2f:26:db:c2:29:1d:bb:90:8a:99: c5:c1:36:c7:ef:82:72:2d:d6:87:4f:0c:44:fd:04: 25:1b:2e:d3:e4:1a:96:d7:19:3c:32:03:a1:41:d5: d7:b0:59:c4:79:fd:cf:b8:6f:d3:6e:e1:c6:56:01: 8f:b0:25:ac:68:1a:74:f9:25:06:07:b6:0a:58:39: 68:8b:92:39:78:87:4d:8e:a3:04:17:3a:e6:42:d7: 65:ef:18:2f:43:f8:d2:b9:f8:1a:2b:f3:e8:50:8d: 6b:7f:59:57:f7:62:eb:5e:77:11:c1:fb:b0:79:56: a4:76:d4:55:79:5e:3f:2a:37:4b:b6:19:24:34:d8: 61:83:ba:29:4f:df:a9:15:e3:0f:2b:2a:94:60:15: 2e:2f:79:06:3d:e3:87:d8:77:96:be:63:d3:92:0b: 73:3b:88:6c:f9:65:f2:b4:73:56:ab:41:33:d3:d9: 25:0f:49:f4:b3:19:50:c2:8e:9f:4d:92:bc:87:d8: 42:d9:f1:11:cd:70:97:96:50:41:e4:e8:11:2c:3b: 0a:a0:52:8e:21:93:b2:12:bb:5e:53:8a:74:9c:ae: e8:c7:df:4a:74:87:90:15:3d:a2:90:19:fa:76:19: c2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:02:17:4C:6D:3D:52:4B:52:04:CF:77:89:B8:AA:66:0A:CC:81:A0 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:101::/48 Signature Algorithm: sha256WithRSAEncryption 35:b0:b8:9c:be:44:32:f1:21:28:64:62:0c:e6:ea:25:a0:45: e6:22:79:b3:47:d4:b5:2d:18:a7:51:ca:df:98:4e:46:d6:74: 6c:d8:d5:af:95:57:c6:44:3c:11:02:c7:43:f5:eb:0d:1a:5a: 05:5b:45:18:94:6b:65:f4:8d:03:98:c9:34:20:93:a0:c3:37: 59:86:2a:24:2b:ce:f3:4c:a8:9f:9b:11:f4:e4:30:f5:1f:49: a7:f3:bb:99:a5:66:70:1a:bd:f8:59:1e:93:f8:09:4a:59:6f: cb:a2:ab:3e:45:85:29:60:e9:14:48:03:b0:38:ee:8b:18:ec: 3e:96:6c:df:53:95:cd:99:2b:5d:d1:1f:92:f4:71:4f:08:a3: 4a:95:8a:ba:39:fb:64:cd:0d:1b:fe:76:d4:d7:f4:2f:af:ae: b1:9b:06:4b:98:48:82:37:8a:3f:8b:9b:18:94:61:30:03:63: 71:c9:89:3e:96:88:4b:a8:72:92:44:12:b7:d0:ad:3f:75:f3: 53:dd:65:dc:30:74:a9:ab:e6:e2:7f:af:85:99:8b:c4:59:ab: e6:0f:f7:45:42:53:0b:4a:11:34:5f:86:6e:21:10:04:1f:eb: c3:9c:a7:4b:09:b2:30:8e:e6:df:bb:a3:ea:c0:c3:fc:a3:a0: 16:70:5a:1a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUNySnckhmAHRfolJ2WgIoAB04t5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTdaFw0yNzAxMTkwMjI3MTdaMDMxMTAvBgNV BAMTKDA0MDIxNzRDNkQzRDUyNEI1MjA0Q0Y3Nzg5QjhBQTY2MEFDQzgxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1t1jkSzDzIvFm8tclVkhZ7th Lybbwikdu5CKmcXBNsfvgnIt1odPDET9BCUbLtPkGpbXGTwyA6FB1dewWcR5/c+4 b9Nu4cZWAY+wJaxoGnT5JQYHtgpYOWiLkjl4h02OowQXOuZC12XvGC9D+NK5+Bor 8+hQjWt/WVf3YutedxHB+7B5VqR21FV5Xj8qN0u2GSQ02GGDuilP36kV4w8rKpRg FS4veQY944fYd5a+Y9OSC3M7iGz5ZfK0c1arQTPT2SUPSfSzGVDCjp9NkryH2ELZ 8RHNcJeWUEHk6BEsOwqgUo4hk7ISu15TinScrujH30p0h5AVPaKQGfp2GcKtAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUBAIXTG09UktSBM93ibiqZgrMgaAwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM3MzYz MjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJAR2AAEBMA0GCSqGSIb3DQEBCwUAA4IBAQA1sLicvkQy 8SEoZGIM5uoloEXmInmzR9S1LRinUcrfmE5G1nRs2NWvlVfGRDwRAsdD9esNGloF W0UYlGtl9I0DmMk0IJOgwzdZhiokK87zTKifmxH05DD1H0mn87uZpWZwGr34WR6T +AlKWW/Loqs+RYUpYOkUSAOwOO6LGOw+lmzfU5XNmStd0R+S9HFPCKNKlYq6Oftk zQ0b/nbU1/Qvr66xmwZLmEiCN4o/i5sYlGEwA2NxyYk+lohLqHKSRBK30K0/dfNT 3WXcMHSpq+bif6+FmYvEWavmD/dFQlMLShE0X4ZuIRAEH+vDnKdLCbIwjubfu6Pq wMP8o6AWcFoa -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:00 2026 by rpki-client