This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa File: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (raw, json) Hash identifier: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY= Subject key identifier: 24:0F:DE:C7:3B:47:26:38:E7:24:9A:64:26:77:02:D6:FF:7F:A1:30 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 4D5B7D76E16DCE3BEE245C5F61A8D76006BF517F Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:19 +0000 ROA not before: Tue 20 Jan 2026 02:22:19 +0000 ROA not after: Tue 19 Jan 2027 02:27:19 +0000 asID: 23853 IP address blocks: 2404:7600:110::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5b:7d:76:e1:6d:ce:3b:ee:24:5c:5f:61:a8:d7:60:06:bf:51:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:19 2026 GMT Not After : Jan 19 02:27:19 2027 GMT Subject: CN=240FDEC73B472638E7249A64267702D6FF7FA130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:61:d9:e5:a5:93:21:08:b9:ca:6a:cc:3f: de:09:f2:f4:c8:1b:3d:fb:18:e8:1f:9b:17:c8:65: 0d:3b:e8:a7:39:3d:90:1c:6a:9a:e8:45:34:bb:aa: 28:9f:29:89:20:6e:ab:24:58:ba:11:6b:e1:3d:32: 43:bc:d5:da:51:5d:d7:02:02:00:b1:2f:77:0d:4c: da:da:bc:90:ab:ea:d5:5f:b1:a2:0b:71:20:eb:e6: fd:48:ee:08:d3:1f:7e:9a:fe:6c:6b:db:a4:55:90: df:61:8d:59:8c:01:7f:cc:78:ae:7d:ac:41:96:35: 07:b1:e8:c7:40:66:f9:3b:e9:fc:fa:0b:cb:24:88: e4:46:cf:30:3e:cb:22:26:a2:f1:7a:03:ad:4f:ab: 34:d1:01:fe:59:ff:6e:b2:e4:0e:b5:cc:41:ec:5c: 6a:cf:15:f5:8b:f5:53:ea:bb:83:d8:bb:36:a1:b2: 5c:79:5a:e9:65:eb:f2:f4:ad:6e:42:8d:ff:ee:e6: 4b:c4:37:f1:92:7b:a2:84:5d:58:77:44:49:c7:6b: af:63:b5:84:08:d0:a5:3b:5c:89:3d:95:f2:bb:68: 7c:19:aa:25:5d:e6:d9:b3:1f:6d:87:69:19:5e:e3: c7:b7:37:78:2b:6e:0e:61:5c:c6:05:15:fc:68:22: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0F:DE:C7:3B:47:26:38:E7:24:9A:64:26:77:02:D6:FF:7F:A1:30 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:110::/44 Signature Algorithm: sha256WithRSAEncryption 17:cd:da:76:d4:1f:a1:2b:d4:b5:63:b9:3e:df:b4:15:66:54: 5c:b1:bd:74:42:3c:e8:e5:2e:4a:18:21:eb:d6:c0:f4:03:09: 1c:1b:16:52:8d:57:bb:ab:f7:2f:24:0d:6c:44:9e:7b:f1:4f: 75:7f:52:93:bf:71:9f:fc:98:f9:bd:c5:f7:1a:8c:86:22:0f: 9c:ef:28:2d:d0:9e:08:ac:a3:bc:b2:6d:1f:ac:19:5a:08:d3: dc:65:2a:88:d6:fd:f2:f5:94:7e:d3:f2:a8:e3:39:3a:63:2a: 63:2d:a0:97:40:e0:bb:42:d7:73:a5:a5:60:75:59:23:2d:7d: c4:99:a1:12:c2:76:b4:8a:4c:f7:f9:77:89:75:6d:4b:40:41: 00:f1:2a:f0:8f:91:67:91:ed:d7:db:1f:22:92:18:73:68:fe: ee:0b:1c:cf:05:cc:ea:5c:f9:06:c3:77:91:36:96:8d:9e:60: f4:6e:1c:60:23:fe:3c:d7:34:91:88:67:22:50:26:7a:a9:33: 46:c0:37:e5:f5:04:24:26:2d:6f:32:20:ab:43:b1:8a:ba:3f: d8:8f:3e:31:a7:d6:84:8c:8e:fc:0a:90:1f:2a:c4:c6:b5:d9: 5b:f8:1e:be:7b:31:18:a6:c0:bf:80:ee:c6:4d:14:48:c7:97: 92:bf:4e:d1 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUTVt9duFtzjvuJFxfYajXYAa/UX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTlaFw0yNzAxMTkwMjI3MTlaMDMxMTAvBgNV BAMTKDI0MEZERUM3M0I0NzI2MzhFNzI0OUE2NDI2NzcwMkQ2RkY3RkExMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uGHZ5aWTIQi5ymrMP94J8vTI Gz37GOgfmxfIZQ076Kc5PZAcaproRTS7qiifKYkgbqskWLoRa+E9MkO81dpRXdcC AgCxL3cNTNravJCr6tVfsaILcSDr5v1I7gjTH36a/mxr26RVkN9hjVmMAX/MeK59 rEGWNQex6MdAZvk76fz6C8skiORGzzA+yyImovF6A61PqzTRAf5Z/26y5A61zEHs XGrPFfWL9VPqu4PYuzahslx5Wull6/L0rW5Cjf/u5kvEN/GSe6KEXVh3REnHa69j tYQI0KU7XIk9lfK7aHwZqiVd5tmzH22HaRle48e3N3grbg5hXMYFFfxoIpPNAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUJA/exztHJjjnJJpkJncC1v9/oTAwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTMxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMzMzgz NTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcEJAR2AAEQMA0GCSqGSIb3DQEBCwUAA4IBAQAXzdp21B+h K9S1Y7k+37QVZlRcsb10Qjzo5S5KGCHr1sD0AwkcGxZSjVe7q/cvJA1sRJ578U91 f1KTv3Gf/Jj5vcX3GoyGIg+c7ygt0J4IrKO8sm0frBlaCNPcZSqI1v3y9ZR+0/Ko 4zk6YypjLaCXQOC7QtdzpaVgdVkjLX3EmaESwna0ikz3+XeJdW1LQEEA8Srwj5Fn ke3X2x8ikhhzaP7uCxzPBczqXPkGw3eRNpaNnmD0bhxgI/481zSRiGciUCZ6qTNG wDfl9QQkJi1vMiCrQ7GKuj/Yjz4xp9aEjI78CpAfKsTGtdlb+B6+ezEYpsC/gO7G TRRIx5eSv07R -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:07 2026 by rpki-client