This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa File: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (raw, json) Hash identifier: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo= Subject key identifier: 8B:A3:80:CE:F5:8C:01:35:0A:9E:1B:5C:18:A2:CC:90:3D:84:70:EE Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 7E53A65D707E75C5246A104F73B86E05BE10AD1F Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:18 +0000 ROA not before: Tue 20 Jan 2026 02:22:18 +0000 ROA not after: Tue 19 Jan 2027 02:27:18 +0000 asID: 23853 IP address blocks: 2404:7600:102::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:53:a6:5d:70:7e:75:c5:24:6a:10:4f:73:b8:6e:05:be:10:ad:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:18 2026 GMT Not After : Jan 19 02:27:18 2027 GMT Subject: CN=8BA380CEF58C01350A9E1B5C18A2CC903D8470EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:58:f4:61:3d:75:5b:4c:8d:1e:5d:1b:5d: 99:86:98:5c:f0:09:b2:6b:ae:9e:9d:89:cf:27:63: 56:25:8f:ae:42:b0:54:dc:31:db:8e:91:7c:fb:d1: 57:8c:0b:a1:a9:42:4d:c3:95:d5:6f:7a:76:1a:43: 17:14:a3:fe:bf:e4:7f:5b:f4:f7:78:01:29:a6:8b: f5:10:65:51:05:85:d8:ff:d2:bf:fc:6e:b6:28:d8: 42:15:8c:ce:41:b1:6b:94:8d:c2:b3:9c:ee:fa:d2: 6a:c5:0e:cf:01:44:11:aa:f7:50:0f:b0:49:04:e9: 64:20:e5:b1:67:62:93:4d:4b:b2:09:bd:f8:90:f3: 78:03:98:fa:c5:78:89:44:89:f9:6b:89:03:a8:57: 7a:64:30:12:17:ca:a3:d4:90:f9:4e:af:ba:39:79: 64:5d:d5:7c:f1:a4:a9:cf:0b:04:e0:35:63:34:29: 35:e3:c0:3c:53:a0:df:22:70:e0:d3:87:96:46:72: 65:39:84:fc:07:da:5f:41:36:7e:f7:70:28:9b:f6: 45:54:66:ff:25:31:d6:c8:1f:54:41:de:fe:fa:4c: 5b:fc:28:79:6a:7f:a9:42:28:27:3d:2d:9c:2e:9c: cb:10:9b:05:c4:65:4d:62:1b:c2:d1:3e:b5:d7:6f: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A3:80:CE:F5:8C:01:35:0A:9E:1B:5C:18:A2:CC:90:3D:84:70:EE X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:102::/47 Signature Algorithm: sha256WithRSAEncryption a0:df:ed:09:d8:af:da:bc:2a:94:f6:21:7f:3e:40:c7:bd:31: 3c:a3:c0:7c:94:af:fc:97:e7:38:8b:4d:a1:80:00:6f:1d:d0: ec:00:cb:87:ad:1c:5a:2a:c5:cb:e7:fe:95:0b:1b:1d:18:e1: 2b:82:72:29:ab:a8:32:e4:46:ad:bb:55:2d:0b:0b:80:bc:c0: 01:11:c1:92:6a:73:20:61:d7:f0:bd:41:8a:f5:93:ff:d4:5b: d5:83:4a:4f:8d:41:bc:a8:01:36:3c:af:00:db:e0:6d:58:ab: 03:8d:29:4d:31:e6:eb:3b:d6:38:84:37:4c:02:75:1d:72:27: 60:d7:5d:c7:d2:21:f0:a9:7c:df:a6:71:52:c8:2d:8f:b9:c9: af:b9:30:9f:36:d9:4c:db:4f:18:02:30:12:b3:56:87:00:9e: 04:4a:ab:5b:d4:cd:23:5a:5e:d9:5b:6b:8e:01:c1:94:ed:72: 49:0a:b0:3d:72:d5:3a:31:96:6d:e3:2d:6b:a6:b4:cd:9e:d4: 2e:a5:25:61:e1:bd:c8:31:d6:e4:63:98:0f:b1:6b:07:b1:3f: dc:b4:18:49:78:cd:d9:c7:b0:be:31:e8:39:cb:25:bd:2c:59: 1f:5b:79:90:d9:a9:c3:f0:eb:30:9a:b0:93:b4:ac:02:b5:0c: 5b:78:93:40 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUflOmXXB+dcUkahBPc7huBb4QrR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMThaFw0yNzAxMTkwMjI3MThaMDMxMTAvBgNV BAMTKDhCQTM4MENFRjU4QzAxMzUwQTlFMUI1QzE4QTJDQzkwM0Q4NDcwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVW1j0YT11W0yNHl0bXZmGmFzw CbJrrp6dic8nY1Ylj65CsFTcMduOkXz70VeMC6GpQk3DldVvenYaQxcUo/6/5H9b 9Pd4ASmmi/UQZVEFhdj/0r/8brYo2EIVjM5BsWuUjcKznO760mrFDs8BRBGq91AP sEkE6WQg5bFnYpNNS7IJvfiQ83gDmPrFeIlEiflriQOoV3pkMBIXyqPUkPlOr7o5 eWRd1XzxpKnPCwTgNWM0KTXjwDxToN8icODTh5ZGcmU5hPwH2l9BNn73cCib9kVU Zv8lMdbIH1RB3v76TFv8KHlqf6lCKCc9LZwunMsQmwXEZU1iG8LRPrXXb5TtAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUi6OAzvWMATUKnhtcGKLMkD2EcO4wHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTMwMzIzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMjMzMzgz NTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcBJAR2AAECMA0GCSqGSIb3DQEBCwUAA4IBAQCg3+0J2K/a vCqU9iF/PkDHvTE8o8B8lK/8l+c4i02hgABvHdDsAMuHrRxaKsXL5/6VCxsdGOEr gnIpq6gy5Eatu1UtCwuAvMABEcGSanMgYdfwvUGK9ZP/1FvVg0pPjUG8qAE2PK8A 2+BtWKsDjSlNMebrO9Y4hDdMAnUdcidg113H0iHwqXzfpnFSyC2PucmvuTCfNtlM 208YAjASs1aHAJ4ESqtb1M0jWl7ZW2uOAcGU7XJJCrA9ctU6MZZt4y1rprTNntQu pSVh4b3IMdbkY5gPsWsHsT/ctBhJeM3Zx7C+Meg5yyW9LFkfW3mQ2anD8OswmrCT tKwCtQxbeJNA -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:01 2026 by rpki-client