This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa File: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (raw, json) Hash identifier: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc= Subject key identifier: 2C:F7:83:36:34:B8:54:BF:5A:B1:BF:D9:5F:98:02:F8:88:78:FE:15 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 6A07C285DDEAFB8D92D65FC1EEA9DC549B6E9E85 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:18 +0000 ROA not before: Tue 20 Jan 2026 02:22:18 +0000 ROA not after: Tue 19 Jan 2027 02:27:18 +0000 asID: 23853 IP address blocks: 2404:7600:108::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:07:c2:85:dd:ea:fb:8d:92:d6:5f:c1:ee:a9:dc:54:9b:6e:9e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:18 2026 GMT Not After : Jan 19 02:27:18 2027 GMT Subject: CN=2CF7833634B854BF5AB1BFD95F9802F88878FE15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:59:23:1a:59:ef:92:e7:58:ee:f0:72:9c: 72:ac:dc:7b:be:ff:b6:6f:6b:b8:bb:70:1d:3b:5e: 77:8e:1b:a4:80:6f:0d:8e:ec:bf:80:5b:9f:dc:ff: 36:a5:da:a4:b2:53:f3:cd:cf:e5:b0:9b:25:44:ba: 14:25:35:32:29:2c:b4:bb:6c:1c:3a:89:9a:77:27: d0:85:de:b4:8b:ae:8f:60:d4:13:f4:bb:4c:ca:8d: 2c:c3:bb:74:02:f5:63:c2:81:e7:76:db:4e:40:92: e5:ab:5e:1d:f0:e1:ac:0b:4c:a2:3f:6f:c4:62:c3: 45:98:8c:bc:74:50:cc:11:6a:e8:d0:bc:60:17:80: c2:d6:7f:b5:38:e9:f0:72:56:a5:8a:e8:a8:94:8c: a0:d7:aa:74:8b:e9:b8:e3:93:f7:ce:41:6f:f8:08: c1:42:4e:c4:4a:ce:99:60:51:bc:a1:c4:a2:33:b2: 30:a0:29:3e:30:64:2c:ce:25:9d:91:82:e5:37:04: d7:b0:f8:8b:52:67:96:be:2d:3b:e9:6f:52:f2:4d: b4:7f:3c:f8:d1:2f:84:34:9a:7b:06:fc:8c:27:53: 7a:57:cb:e8:f2:13:f5:03:d1:30:25:de:37:59:64: f6:27:ea:21:48:9c:db:2c:1c:96:ab:1d:62:af:52: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F7:83:36:34:B8:54:BF:5A:B1:BF:D9:5F:98:02:F8:88:78:FE:15 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:108::/45 Signature Algorithm: sha256WithRSAEncryption 6a:b7:fa:51:f7:5e:25:21:ad:f3:3c:21:f0:cf:54:34:f7:41: 61:c0:55:20:f6:c6:ef:ba:a5:d0:18:10:67:45:8b:3b:c4:3c: 80:55:cf:3d:7d:c3:fe:06:d4:3c:6f:f8:b1:18:6b:05:06:e7: e7:db:25:ff:7e:6d:29:4d:6b:70:bc:d5:a1:4b:5c:7f:70:60: d9:c4:a0:28:de:95:e0:cc:74:4a:50:52:04:c1:d2:10:77:07: df:31:5e:c3:e8:94:5a:b6:6c:ee:6e:2d:7e:70:c3:fd:16:9c: a8:41:2c:19:ab:f5:35:9a:c6:6f:99:fb:62:1a:f5:c0:26:15: 7e:38:3d:a9:19:0f:1b:4d:06:4a:7d:b9:db:8f:ca:d8:52:84: 32:af:59:ac:0f:7a:1b:45:bf:06:a0:09:78:f8:9b:c5:c7:60: 99:b9:5e:8d:f5:84:56:b1:4e:cd:c8:93:f8:49:f2:d0:ad:f0: ff:f3:3e:f8:61:0c:f3:08:ec:23:60:b4:3f:5e:49:38:c5:10: 83:8d:ba:d0:85:11:c8:f5:fc:23:b2:72:a9:7e:b1:7f:21:e1: 28:24:92:ac:4d:5d:0f:d1:05:69:83:a8:8f:c6:35:2f:f3:01: 94:4f:b9:a7:9b:5a:ed:04:37:af:56:3e:85:c3:d4:7f:67:86: 0c:db:ca:f5 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUagfChd3q+42S1l/B7qncVJtunoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMThaFw0yNzAxMTkwMjI3MThaMDMxMTAvBgNV BAMTKDJDRjc4MzM2MzRCODU0QkY1QUIxQkZEOTVGOTgwMkY4ODg3OEZFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm61kjGlnvkudY7vBynHKs3Hu+ /7Zva7i7cB07XneOG6SAbw2O7L+AW5/c/zal2qSyU/PNz+WwmyVEuhQlNTIpLLS7 bBw6iZp3J9CF3rSLro9g1BP0u0zKjSzDu3QC9WPCged2205AkuWrXh3w4awLTKI/ b8Riw0WYjLx0UMwRaujQvGAXgMLWf7U46fByVqWK6KiUjKDXqnSL6bjjk/fOQW/4 CMFCTsRKzplgUbyhxKIzsjCgKT4wZCzOJZ2RguU3BNew+ItSZ5a+LTvpb1LyTbR/ PPjRL4Q0mnsG/IwnU3pXy+jyE/UD0TAl3jdZZPYn6iFInNssHJarHWKvUnwrAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQULPeDNjS4VL9asb/ZX5gC+Ih4/hUwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTMwMzgzYTNhMmYzNDM1MmQzNDM4MjAzZDNlMjAzMjMzMzgz NTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcDJAR2AAEIMA0GCSqGSIb3DQEBCwUAA4IBAQBqt/pR914l Ia3zPCHwz1Q090FhwFUg9sbvuqXQGBBnRYs7xDyAVc89fcP+BtQ8b/ixGGsFBufn 2yX/fm0pTWtwvNWhS1x/cGDZxKAo3pXgzHRKUFIEwdIQdwffMV7D6JRatmzubi1+ cMP9FpyoQSwZq/U1msZvmftiGvXAJhV+OD2pGQ8bTQZKfbnbj8rYUoQyr1msD3ob Rb8GoAl4+JvFx2CZuV6N9YRWsU7NyJP4SfLQrfD/8z74YQzzCOwjYLQ/Xkk4xRCD jbrQhRHI9fwjsnKpfrF/IeEoJJKsTV0P0QVpg6iPxjUv8wGUT7mnm1rtBDevVj6F w9R/Z4YM28r1 -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:04 2026 by rpki-client