This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa File: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (raw, json) Hash identifier: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g= Subject key identifier: 94:28:16:00:A0:92:D9:77:18:2A:24:D3:57:6F:FC:12:F2:C8:A6:60 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 41B65CCEDA317B6B03028C29AC7225873C5C9753 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:16 +0000 ROA not before: Tue 20 Jan 2026 02:22:16 +0000 ROA not after: Tue 19 Jan 2027 02:27:16 +0000 asID: 23853 IP address blocks: 2404:7600:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b6:5c:ce:da:31:7b:6b:03:02:8c:29:ac:72:25:87:3c:5c:97:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:16 2026 GMT Not After : Jan 19 02:27:16 2027 GMT Subject: CN=94281600A092D977182A24D3576FFC12F2C8A660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:cb:2f:cd:4a:82:03:43:09:f8:d6:9a:46: 16:d2:c3:b2:6e:7c:c4:f8:04:af:81:a6:73:a8:d3: 14:d0:93:28:81:fe:77:29:fe:15:2a:cc:b1:be:6b: 06:b6:e6:4c:09:51:86:0d:d5:92:46:a1:c8:d8:3e: e0:02:c6:8f:81:77:bf:32:54:e0:13:89:a2:9d:a3: 7d:4b:5d:f2:77:7d:6d:37:5f:a2:38:a6:3b:2c:16: c6:62:21:e0:1d:c3:4f:2d:af:48:b0:18:f5:c2:bb: 50:6d:45:4b:29:f2:2c:9d:75:c5:b1:60:cb:0c:57: ba:ad:0d:11:72:e5:20:bb:de:ed:a6:90:09:a7:5e: 2a:82:21:1f:ff:7a:cf:d4:51:a8:df:30:17:69:8c: c4:49:c9:0a:94:f2:06:56:25:0a:f8:38:85:67:3e: 11:ea:3d:7d:8c:9c:f9:70:43:50:61:4e:44:8f:4c: 3e:a7:c9:ad:c4:83:c6:fa:20:0a:93:07:4c:01:cf: fc:49:6d:12:20:b9:99:6a:ae:de:bc:ad:2c:00:52: 8c:1b:d3:6e:97:e6:5b:4f:92:cf:7a:22:9a:11:f1: 2e:33:23:66:69:27:85:34:9e:13:e8:7e:f9:d1:5e: 08:59:d8:04:f9:9b:37:ce:ff:18:49:d8:cb:a1:ee: 12:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:28:16:00:A0:92:D9:77:18:2A:24:D3:57:6F:FC:12:F2:C8:A6:60 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:101::/48 Signature Algorithm: sha256WithRSAEncryption 07:85:b7:cf:26:24:13:23:42:ea:1c:0c:09:da:4f:bc:bf:6a: 01:b8:cd:e0:b3:d2:df:cd:02:27:bc:0d:44:a3:51:fe:0e:77: ad:60:38:d5:f6:22:d4:72:bd:23:5e:c7:b6:d4:1c:be:f4:09: ac:c4:d9:58:2d:f6:4d:04:ab:b3:63:f5:07:2a:57:fd:8b:eb: 55:c4:06:c0:9e:28:d2:24:cc:34:9f:89:9c:bb:53:32:d6:18: ca:2c:3e:c6:c4:fc:46:a5:3f:a7:31:6c:8d:73:cc:bd:56:3c: 8b:89:b1:a2:04:37:ef:52:b7:b1:1c:bb:a5:ee:16:f0:16:52: 87:5d:4c:d6:7f:14:34:59:6e:03:c4:d3:f8:fa:0d:48:41:74: 8e:96:db:d6:51:c7:c3:ca:57:ec:9d:69:31:7e:92:7a:42:34: 2f:59:da:dd:69:67:8b:4f:4d:36:4d:8a:c0:6b:ff:ed:5c:8d: 78:56:64:8d:e0:6f:ea:ba:04:14:dd:82:80:79:79:30:b1:11: 4f:14:6c:ae:79:91:f2:50:ab:ab:7c:bb:fe:aa:d4:55:1c:bf: 98:bc:16:66:46:e1:9f:3a:f0:97:b4:61:01:d0:8d:8c:df:a2: ff:59:69:1c:26:31:64:07:da:f5:57:8c:59:91:e4:f2:d8:8a: 0e:aa:dc:33 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUQbZcztoxe2sDAowprHIlhzxcl1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTZaFw0yNzAxMTkwMjI3MTZaMDMxMTAvBgNV BAMTKDk0MjgxNjAwQTA5MkQ5NzcxODJBMjREMzU3NkZGQzEyRjJDOEE2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ucsvzUqCA0MJ+NaaRhbSw7Ju fMT4BK+BpnOo0xTQkyiB/ncp/hUqzLG+awa25kwJUYYN1ZJGocjYPuACxo+Bd78y VOATiaKdo31LXfJ3fW03X6I4pjssFsZiIeAdw08tr0iwGPXCu1BtRUsp8iyddcWx YMsMV7qtDRFy5SC73u2mkAmnXiqCIR//es/UUajfMBdpjMRJyQqU8gZWJQr4OIVn PhHqPX2MnPlwQ1BhTkSPTD6nya3Eg8b6IAqTB0wBz/xJbRIguZlqrt68rSwAUowb 026X5ltPks96IpoR8S4zI2ZpJ4U0nhPofvnRXghZ2AT5mzfO/xhJ2Muh7hIXAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUlCgWAKCS2XcYKiTTV2/8EvLIpmAwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzgz NTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJAR2AAEBMA0GCSqGSIb3DQEBCwUAA4IBAQAHhbfPJiQT I0LqHAwJ2k+8v2oBuM3gs9LfzQInvA1Eo1H+DnetYDjV9iLUcr0jXse21By+9Ams xNlYLfZNBKuzY/UHKlf9i+tVxAbAnijSJMw0n4mcu1My1hjKLD7GxPxGpT+nMWyN c8y9VjyLibGiBDfvUrexHLul7hbwFlKHXUzWfxQ0WW4DxNP4+g1IQXSOltvWUcfD ylfsnWkxfpJ6QjQvWdrdaWeLT002TYrAa//tXI14VmSN4G/qugQU3YKAeXkwsRFP FGyueZHyUKurfLv+qtRVHL+YvBZmRuGfOvCXtGEB0I2M36L/WWkcJjFkB9r1V4xZ keTy2IoOqtwz -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:53 2026 by rpki-client