This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa File: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (raw, json) Hash identifier: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI= Subject key identifier: 45:35:87:DC:68:1B:75:B1:99:F3:9E:BB:79:E5:F1:86:2C:C6:10:AD Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 7AB4F15DD3DAF6743161851E7545FA82561FD793 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:17 +0000 ROA not before: Tue 20 Jan 2026 02:22:17 +0000 ROA not after: Tue 19 Jan 2027 02:27:17 +0000 asID: 23853 IP address blocks: 2404:7600:104::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b4:f1:5d:d3:da:f6:74:31:61:85:1e:75:45:fa:82:56:1f:d7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:17 2026 GMT Not After : Jan 19 02:27:17 2027 GMT Subject: CN=453587DC681B75B199F39EBB79E5F1862CC610AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:8e:41:36:ee:e5:9e:87:5b:9e:83:24:f7: 27:3b:a2:ba:6c:8a:67:b5:92:71:a5:75:9b:2b:a3: 00:13:b1:28:04:a3:47:e7:19:f5:07:b2:85:13:27: bf:47:24:c2:f1:c4:88:29:fa:5a:06:f2:57:7a:76: 5d:72:6a:85:d6:95:57:6d:57:ae:5a:2c:15:af:1f: bf:6d:e2:e9:d5:07:6b:45:8b:be:b7:20:5c:98:3e: fa:67:17:ea:bb:24:8a:cc:dc:eb:6b:5e:4f:be:4d: 38:5b:6d:47:75:30:f1:54:f3:7c:e7:46:6c:b1:20: 1e:3d:75:59:d5:33:38:50:dc:a9:e9:a4:78:cc:31: 94:54:8e:de:8f:60:40:2a:4b:be:65:a9:7d:5d:79: ac:21:73:21:b2:ed:e2:dd:b5:08:37:95:8f:e4:a3: 02:5a:22:bb:8b:b6:d4:29:f4:d5:e2:db:6f:26:86: c2:79:0c:02:42:cd:97:06:a8:16:27:d0:f9:b6:64: 3b:15:db:b3:45:6f:37:b0:7a:d1:29:8e:d9:f7:91: 25:2b:b6:51:dd:e5:4e:41:83:a5:20:2c:67:45:e8: df:58:d0:fb:58:14:c8:a3:bc:c3:e1:d0:2a:c2:7e: 1a:d3:6e:0d:c2:98:01:b1:72:f5:e5:f5:c0:d0:04: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:35:87:DC:68:1B:75:B1:99:F3:9E:BB:79:E5:F1:86:2C:C6:10:AD X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:104::/46 Signature Algorithm: sha256WithRSAEncryption 95:cf:3f:f4:48:a7:ff:80:3a:2e:99:22:36:19:d0:00:f0:e1: eb:21:d1:c7:6c:26:ee:c8:3f:10:ab:78:e5:5a:b5:84:b3:c0: 20:36:82:40:03:4c:b8:29:82:73:43:fa:4e:b3:97:3a:1b:fa: 35:59:a3:8b:2a:47:6f:62:a4:36:b6:46:02:ae:20:1e:a3:1f: de:af:43:31:71:c8:d9:69:45:f8:9a:46:07:dc:8f:d5:e4:4b: c2:a7:4c:16:1a:41:a1:08:5b:21:4c:94:5a:00:7e:1f:d4:42: e6:21:be:d1:c8:20:c9:3d:70:40:05:6b:26:5b:48:ed:b9:12: 86:b9:5e:f9:e8:93:1f:ec:05:7a:48:42:3f:d1:eb:ab:3d:bb: 2f:94:03:c2:1e:41:85:e7:1f:49:01:0b:d5:b1:00:21:ab:38: ab:c9:47:02:e5:87:18:78:cc:76:8b:8b:bf:82:94:96:12:82: 93:b3:fc:53:44:7d:65:ea:b4:38:5f:7e:3c:5a:89:ce:47:cf: 0b:db:3c:f1:8a:29:2b:cc:92:b0:49:90:5d:b6:c8:7e:a7:bf: e3:b9:7f:bf:f1:d2:a7:fb:a3:f2:c3:e0:df:a7:87:55:4a:6e: 3a:8a:87:42:3a:91:ec:a9:f5:2f:5e:95:b3:40:b1:31:2b:29: ec:5f:6e:de -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUerTxXdPa9nQxYYUedUX6glYf15MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTdaFw0yNzAxMTkwMjI3MTdaMDMxMTAvBgNV BAMTKDQ1MzU4N0RDNjgxQjc1QjE5OUYzOUVCQjc5RTVGMTg2MkNDNjEwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTjo5BNu7lnodbnoMk9yc7orps ime1knGldZsrowATsSgEo0fnGfUHsoUTJ79HJMLxxIgp+loG8ld6dl1yaoXWlVdt V65aLBWvH79t4unVB2tFi763IFyYPvpnF+q7JIrM3OtrXk++TThbbUd1MPFU83zn RmyxIB49dVnVMzhQ3KnppHjMMZRUjt6PYEAqS75lqX1deawhcyGy7eLdtQg3lY/k owJaIruLttQp9NXi228mhsJ5DAJCzZcGqBYn0Pm2ZDsV27NFbzewetEpjtn3kSUr tlHd5U5Bg6UgLGdF6N9Y0PtYFMijvMPh0CrCfhrTbg3CmAGxcvXl9cDQBBrJAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQURTWH3GgbdbGZ8567eeXxhizGEK0wHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTMwMzQzYTNhMmYzNDM2MmQzNDM4MjAzZDNlMjAzMjMzMzgz NTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcCJAR2AAEEMA0GCSqGSIb3DQEBCwUAA4IBAQCVzz/0SKf/ gDoumSI2GdAA8OHrIdHHbCbuyD8Qq3jlWrWEs8AgNoJAA0y4KYJzQ/pOs5c6G/o1 WaOLKkdvYqQ2tkYCriAeox/er0MxccjZaUX4mkYH3I/V5EvCp0wWGkGhCFshTJRa AH4f1ELmIb7RyCDJPXBABWsmW0jtuRKGuV756JMf7AV6SEI/0eurPbsvlAPCHkGF 5x9JAQvVsQAhqziryUcC5YcYeMx2i4u/gpSWEoKTs/xTRH1l6rQ4X348WonOR88L 2zzxiikrzJKwSZBdtsh+p7/juX+/8dKn+6Pyw+Dfp4dVSm46iodCOpHsqfUvXpWz QLExKynsX27e -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:06 2026 by rpki-client