This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa File: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (raw, json) Hash identifier: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY= Subject key identifier: 43:47:74:01:43:71:40:82:C3:8D:B4:DB:D3:9B:A2:03:F1:F8:65:A0 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 174C0190905A94E972CEC58B5A85B58181A72208 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:18 +0000 ROA not before: Tue 20 Jan 2026 02:22:18 +0000 ROA not after: Tue 19 Jan 2027 02:27:18 +0000 asID: 23853 IP address blocks: 2404:7600:120::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4c:01:90:90:5a:94:e9:72:ce:c5:8b:5a:85:b5:81:81:a7:22:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:18 2026 GMT Not After : Jan 19 02:27:18 2027 GMT Subject: CN=4347740143714082C38DB4DBD39BA203F1F865A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:70:37:2f:9c:c1:a1:52:63:00:18:ff:45: 55:8a:31:cf:58:ed:9f:f9:11:04:f5:d0:c7:48:31: 27:be:f8:5e:2a:ea:fa:b9:62:20:65:5a:21:5e:a1: 39:46:18:93:13:bd:56:41:af:03:ef:2b:df:27:45: e4:87:da:67:a9:a2:27:e0:80:2f:f8:49:0b:7e:ab: a7:1e:b9:b7:e9:24:9d:c2:12:94:54:3b:71:39:25: 46:60:ee:28:00:88:2d:c8:97:98:9e:50:33:20:28: 90:43:b6:4d:99:85:a9:14:66:b7:8a:4d:a7:af:d0: 88:a7:a2:59:1c:7b:74:da:8b:b2:fc:6a:eb:63:e0: f8:c0:5b:80:9e:26:30:7e:c6:c7:c4:fe:39:e5:f4: 0c:45:67:7e:60:87:35:09:32:b7:b5:ad:43:13:30: e1:55:a9:60:21:56:4f:ee:fb:9d:04:d3:e2:34:78: 96:a4:91:da:c1:32:87:6d:0b:b6:3f:f9:c6:44:78: bd:bb:f3:61:d2:71:72:45:b6:e2:3d:4e:af:94:41: 9b:fb:9e:30:b5:af:8f:37:64:05:34:bc:73:a9:8b: d0:ce:60:45:f7:e5:2f:e9:2a:17:cd:83:28:98:e5: 25:5a:d1:0f:38:33:c8:f2:97:4f:92:fa:64:ff:8c: 76:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:47:74:01:43:71:40:82:C3:8D:B4:DB:D3:9B:A2:03:F1:F8:65:A0 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:120::/43 Signature Algorithm: sha256WithRSAEncryption 46:6b:0f:51:f0:73:a5:61:65:49:22:4a:da:c4:23:a1:d0:b4: 17:83:0a:51:8b:f0:99:6a:4d:f4:a9:11:af:a7:ba:29:a9:ff: 78:85:47:80:85:1d:01:b6:40:34:c2:18:97:00:83:e9:93:85: a0:4e:8e:d6:f5:83:62:bb:9a:7c:aa:76:a3:9e:9c:09:00:dd: e2:68:21:52:95:2b:6e:97:7e:5b:d1:78:4c:49:40:29:bf:2d: d6:66:06:5d:35:50:13:ac:37:af:5e:4b:8b:b9:92:67:25:af: 93:8a:b4:5b:e3:68:82:02:11:96:b9:27:16:2a:3b:3c:77:06: 3c:87:44:4e:e2:33:a1:fa:50:f0:31:c8:f5:75:8f:54:d2:31: 5b:06:cb:f3:c2:14:0d:09:10:1c:e4:3e:c2:c1:11:9e:7f:78: c0:28:07:12:e3:7b:e5:dc:a3:0f:2f:a3:b3:a9:ab:ea:f6:4c: 94:ab:58:4d:a8:f8:25:9b:63:f1:8a:f1:05:e0:ce:87:37:f0: 29:12:9f:ff:93:86:83:4e:35:1b:ef:c2:bb:8c:a2:57:f3:93: 47:f3:3d:7f:ed:da:23:e7:96:6f:3b:dd:5c:cb:8d:67:76:7a: b7:ef:16:90:54:d2:62:26:a5:46:18:a2:ed:b9:87:c0:91:24: 62:fc:a4:97 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUF0wBkJBalOlyzsWLWoW1gYGnIggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMThaFw0yNzAxMTkwMjI3MThaMDMxMTAvBgNV BAMTKDQzNDc3NDAxNDM3MTQwODJDMzhEQjREQkQzOUJBMjAzRjFGODY1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJHA3L5zBoVJjABj/RVWKMc9Y 7Z/5EQT10MdIMSe++F4q6vq5YiBlWiFeoTlGGJMTvVZBrwPvK98nReSH2mepoifg gC/4SQt+q6ceubfpJJ3CEpRUO3E5JUZg7igAiC3Il5ieUDMgKJBDtk2ZhakUZreK Taev0Iinolkce3Tai7L8autj4PjAW4CeJjB+xsfE/jnl9AxFZ35ghzUJMre1rUMT MOFVqWAhVk/u+50E0+I0eJakkdrBModtC7Y/+cZEeL2782HScXJFtuI9Tq+UQZv7 njC1r483ZAU0vHOpi9DOYEX35S/pKhfNgyiY5SVa0Q84M8jyl0+S+mT/jHYRAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUQ0d0AUNxQILDjbTb05uiA/H4ZaAwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTMyMzAzYTNhMmYzNDMzMmQzNDM4MjAzZDNlMjAzMjMzMzgz NTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcFJAR2AAEgMA0GCSqGSIb3DQEBCwUAA4IBAQBGaw9R8HOl YWVJIkraxCOh0LQXgwpRi/CZak30qRGvp7opqf94hUeAhR0BtkA0whiXAIPpk4Wg To7W9YNiu5p8qnajnpwJAN3iaCFSlStul35b0XhMSUApvy3WZgZdNVATrDevXkuL uZJnJa+TirRb42iCAhGWuScWKjs8dwY8h0RO4jOh+lDwMcj1dY9U0jFbBsvzwhQN CRAc5D7CwRGef3jAKAcS43vl3KMPL6Ozqavq9kyUq1hNqPglm2PxivEF4M6HN/Ap Ep//k4aDTjUb78K7jKJX85NH8z1/7doj55ZvO91cy41ndnq37xaQVNJiJqVGGKLt uYfAkSRi/KSX -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:09 2026 by rpki-client