This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa File: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (raw, json) Hash identifier: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo= Subject key identifier: DE:78:4C:FC:10:0F:C2:DA:CC:6C:FC:84:1B:C9:98:EF:E8:B1:1C:80 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 6A2D57DEF91B9FE05C9AE4230A19EE6E74143A1D Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:16 +0000 ROA not before: Tue 20 Jan 2026 02:22:16 +0000 ROA not after: Tue 19 Jan 2027 02:27:16 +0000 asID: 23853 IP address blocks: 2404:7600:140::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2d:57:de:f9:1b:9f:e0:5c:9a:e4:23:0a:19:ee:6e:74:14:3a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:16 2026 GMT Not After : Jan 19 02:27:16 2027 GMT Subject: CN=DE784CFC100FC2DACC6CFC841BC998EFE8B11C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3f:bf:38:8b:c5:a6:89:b1:8a:3c:ae:5b:6d: 06:2d:ab:a2:04:d4:45:a9:08:a3:c7:0f:73:23:7c: b2:02:83:37:f4:93:0d:6a:37:89:e8:41:38:b7:ad: 5f:50:56:03:06:cc:b0:47:d5:de:2f:79:dc:d7:d5: cb:d6:4a:27:c4:b8:b3:0f:03:c8:b5:d2:e8:86:f6: d9:08:c0:7e:84:65:ad:81:b8:c9:e2:0a:f6:ec:74: 3b:b1:d1:69:33:4f:e4:46:91:18:a4:03:6b:ea:28: b0:f6:b1:bb:4e:e0:a5:fa:1c:e2:99:af:a9:4c:43: 1b:cc:99:ab:1f:a7:d8:fa:08:4b:df:84:d0:41:bc: 1d:d6:e1:43:41:f4:e6:64:76:e5:2f:fa:be:10:39: 4e:6e:3c:bf:8a:f3:a6:0e:02:de:92:ce:9f:73:8c: fe:4e:10:0d:2c:e5:e4:46:ef:cd:b2:7a:46:ed:dc: a5:63:ef:67:16:7a:d9:e3:1a:2a:6f:16:12:c1:0a: 8b:d2:b7:6d:7d:11:10:50:09:83:60:16:85:ca:96: 0d:94:51:56:1c:d9:b7:e8:96:ee:3b:c7:24:2b:dc: ed:f1:31:c6:45:9a:be:e8:00:7d:be:ea:d5:93:46: 18:45:82:72:f0:f7:bd:23:16:88:07:3b:0f:ad:6a: 52:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:78:4C:FC:10:0F:C2:DA:CC:6C:FC:84:1B:C9:98:EF:E8:B1:1C:80 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:140::/42 Signature Algorithm: sha256WithRSAEncryption 29:bb:34:c9:74:dc:e0:63:c6:0d:dc:fd:f9:2b:ac:32:4e:ca: c0:94:40:32:b6:df:6e:06:01:98:f8:50:d7:a5:b1:72:a6:23: 95:ae:b0:79:40:73:a1:13:ab:df:8a:92:15:75:7e:e5:ae:9b: fa:93:a3:1e:4b:db:12:b5:74:62:64:19:fc:a3:34:0b:ca:fd: 7b:3b:a0:c0:71:d8:f2:e3:a8:0f:57:c4:30:74:e0:7c:2f:0b: 88:a4:bb:32:f1:8f:37:8a:44:e7:40:66:58:f3:63:0e:08:ce: c4:07:c4:b9:47:1b:0d:2d:56:e1:ba:04:9f:d6:8d:b5:c2:df: 61:6d:70:16:51:ed:df:62:a6:70:26:a3:71:a6:3d:48:01:0d: 5b:0f:ab:d2:7f:f1:88:cd:02:03:f3:13:77:8e:ed:ad:8b:4b: 65:c3:4f:b7:83:6c:3e:65:ea:12:70:c4:91:ce:17:93:03:31: 13:42:1c:cd:23:25:68:20:2c:6d:1d:14:45:81:81:f6:f4:ae: c8:18:08:59:a9:c2:14:a2:0c:17:8a:9b:3d:25:62:b6:09:80: f5:28:0a:e1:3f:45:62:40:5b:49:f4:65:6b:27:fc:b9:05:fd: da:45:2e:fd:27:4c:f8:24:7c:63:b4:8d:73:52:67:20:5c:be: 6d:fe:94:b1 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUai1X3vkbn+BcmuQjChnubnQUOh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTZaFw0yNzAxMTkwMjI3MTZaMDMxMTAvBgNV BAMTKERFNzg0Q0ZDMTAwRkMyREFDQzZDRkM4NDFCQzk5OEVGRThCMTFDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaP784i8WmibGKPK5bbQYtq6IE 1EWpCKPHD3MjfLICgzf0kw1qN4noQTi3rV9QVgMGzLBH1d4vedzX1cvWSifEuLMP A8i10uiG9tkIwH6EZa2BuMniCvbsdDux0WkzT+RGkRikA2vqKLD2sbtO4KX6HOKZ r6lMQxvMmasfp9j6CEvfhNBBvB3W4UNB9OZkduUv+r4QOU5uPL+K86YOAt6Szp9z jP5OEA0s5eRG782yekbt3KVj72cWetnjGipvFhLBCovSt219ERBQCYNgFoXKlg2U UVYc2bfolu47xyQr3O3xMcZFmr7oAH2+6tWTRhhFgnLw970jFogHOw+talJzAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQU3nhM/BAPwtrMbPyEG8mY7+ixHIAwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTM0MzAzYTNhMmYzNDMyMmQzNDM4MjAzZDNlMjAzMjMzMzgz NTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcGJAR2AAFAMA0GCSqGSIb3DQEBCwUAA4IBAQApuzTJdNzg Y8YN3P35K6wyTsrAlEAytt9uBgGY+FDXpbFypiOVrrB5QHOhE6vfipIVdX7lrpv6 k6MeS9sStXRiZBn8ozQLyv17O6DAcdjy46gPV8QwdOB8LwuIpLsy8Y83ikTnQGZY 82MOCM7EB8S5RxsNLVbhugSf1o21wt9hbXAWUe3fYqZwJqNxpj1IAQ1bD6vSf/GI zQID8xN3ju2ti0tlw0+3g2w+ZeoScMSRzheTAzETQhzNIyVoICxtHRRFgYH29K7I GAhZqcIUogwXips9JWK2CYD1KArhP0ViQFtJ9GVrJ/y5Bf3aRS79J0z4JHxjtI1z UmcgXL5t/pSx -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:53 2026 by rpki-client