This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa File: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (raw, json) Hash identifier: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec= Subject key identifier: F5:B6:8E:9F:D0:7E:21:58:D6:4B:9D:B1:66:C4:7A:03:31:A8:F6:01 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 72024ED8DF43D399FA8B72A875FA0CDF9EF32806 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa Signing time: Tue 20 Jan 2026 02:27:18 +0000 ROA not before: Tue 20 Jan 2026 02:22:18 +0000 ROA not after: Tue 19 Jan 2027 02:27:18 +0000 asID: 4812 IP address blocks: 2404:7600:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:02:4e:d8:df:43:d3:99:fa:8b:72:a8:75:fa:0c:df:9e:f3:28:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:18 2026 GMT Not After : Jan 19 02:27:18 2027 GMT Subject: CN=F5B68E9FD07E2158D64B9DB166C47A0331A8F601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:a7:12:e5:f7:8a:e2:35:de:f2:1d:02:a3: 52:b4:7b:32:69:b4:bd:d2:1b:bb:7c:51:d3:15:af: dc:c0:12:15:7c:ea:0f:ef:2c:62:9c:b2:20:79:bb: 5b:e8:dc:1d:04:9b:4a:b2:9d:73:23:00:7c:00:ce: 5b:67:41:68:1f:18:a8:03:f0:6c:c4:bf:fb:a8:8b: 97:5f:97:53:a1:81:b9:3e:e6:88:1e:2d:6b:de:6b: 94:84:13:3f:73:2c:db:06:d0:f9:12:5e:8b:c4:99: ff:9e:89:30:fd:5f:4a:4f:f2:73:36:91:04:ab:fd: 65:e7:8e:dc:85:42:0d:fb:37:31:a2:0a:ca:e6:cf: 05:6d:f9:36:f9:eb:9d:69:b2:c6:c9:1e:68:86:22: 04:95:e4:d7:c3:0d:e3:79:8f:d6:df:66:d6:47:7d: 0c:52:8d:fb:27:49:5d:a3:0b:2d:0b:18:d8:d5:09: 3c:3f:90:5d:b5:c3:ff:ec:5e:d2:90:92:5e:2a:95: e9:6d:b6:30:71:73:7b:9c:6b:d0:a7:fa:1b:ea:7f: 73:da:60:04:32:f7:4c:18:67:e8:67:0f:a5:a0:25: ee:97:be:ab:4d:58:e1:ba:5f:f2:4a:c4:50:25:c6: 0b:cf:f6:e3:14:76:ab:ee:b1:fb:cd:f8:7a:35:04: 11:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B6:8E:9F:D0:7E:21:58:D6:4B:9D:B1:66:C4:7A:03:31:A8:F6:01 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:101::/48 Signature Algorithm: sha256WithRSAEncryption 47:8e:31:6b:2e:91:bb:f8:9e:7c:85:d3:eb:2d:7f:f1:a5:e1: 43:ae:24:43:16:3d:0f:5b:64:84:ea:85:e9:78:b2:58:b2:fa: 5d:24:7e:f2:9e:6e:2e:fc:73:f4:ca:7e:95:95:d5:44:6b:44: 36:c0:2a:cc:60:88:49:33:4c:0e:fd:33:2e:8b:94:92:87:25: eb:ed:82:c7:71:82:6e:7e:3e:4a:52:dc:c0:8e:ad:be:c2:08: 22:bc:ab:d9:5e:49:b0:9f:8d:d8:8e:1a:51:fc:eb:bc:aa:cb: 85:d6:7e:95:88:d7:27:a5:be:40:c2:49:6b:05:98:d2:96:7e: ee:ab:4a:08:92:48:7d:ea:8c:e6:4b:d9:ef:54:40:09:6b:79: b6:09:d1:db:5e:d2:49:de:6e:aa:94:d5:9b:68:8b:1c:ab:20: 3d:3d:eb:6f:ba:28:9e:c0:17:35:cb:fc:9a:67:96:e5:94:c3: 97:f8:81:ef:82:aa:2c:9c:ca:16:5f:05:aa:07:de:6a:57:00: c4:b2:5f:90:fd:ec:89:22:7b:3f:58:ee:4d:9d:55:d8:81:7b: a7:91:57:1f:e0:9a:2e:01:b2:59:43:80:95:25:9d:fb:3b:6a: 75:ef:22:b8:29:40:63:e7:97:75:63:a8:ad:7b:f3:d0:fa:4e: 7e:13:80:90 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcgJO2N9D05n6i3KodfoM357zKAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMThaFw0yNzAxMTkwMjI3MThaMDMxMTAvBgNV BAMTKEY1QjY4RTlGRDA3RTIxNThENjRCOURCMTY2QzQ3QTAzMzFBOEY2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpR6cS5feK4jXe8h0Co1K0ezJp tL3SG7t8UdMVr9zAEhV86g/vLGKcsiB5u1vo3B0Em0qynXMjAHwAzltnQWgfGKgD 8GzEv/uoi5dfl1Ohgbk+5ogeLWvea5SEEz9zLNsG0PkSXovEmf+eiTD9X0pP8nM2 kQSr/WXnjtyFQg37NzGiCsrmzwVt+Tb5651pssbJHmiGIgSV5NfDDeN5j9bfZtZH fQxSjfsnSV2jCy0LGNjVCTw/kF21w//sXtKQkl4qlelttjBxc3uca9Cn+hvqf3Pa YAQy90wYZ+hnD6WgJe6XvqtNWOG6X/JKxFAlxgvP9uMUdqvusfvN+Ho1BBFJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9baOn9B+IVjWS52xZsR6AzGo9gEwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM4MzEz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQEdgABATANBgkqhkiG9w0BAQsFAAOCAQEAR44xay6Ru/ie fIXT6y1/8aXhQ64kQxY9D1tkhOqF6XiyWLL6XSR+8p5uLvxz9Mp+lZXVRGtENsAq zGCISTNMDv0zLouUkocl6+2Cx3GCbn4+SlLcwI6tvsIIIryr2V5JsJ+N2I4aUfzr vKrLhdZ+lYjXJ6W+QMJJawWY0pZ+7qtKCJJIfeqM5kvZ71RACWt5tgnR217SSd5u qpTVm2iLHKsgPT3rb7oonsAXNcv8mmeW5ZTDl/iB74KqLJzKFl8FqgfealcAxLJf kP3siSJ7P1juTZ1V2IF7p5FXH+CaLgGyWUOAlSWd+ztqde8iuClAY+eXdWOorXvz 0PpOfhOAkA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:59 2026 by rpki-client