This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa File: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (raw, json) Hash identifier: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ= Subject key identifier: 1F:BE:89:84:AC:D3:E3:39:A8:0B:72:6C:37:FD:32:E2:C9:4B:FD:90 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 68D1AA787B51ADC5E362CDDF9BC73A6B74634730 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:17 +0000 ROA not before: Tue 20 Jan 2026 02:22:17 +0000 ROA not after: Tue 19 Jan 2027 02:27:17 +0000 asID: 23853 IP address blocks: 2404:7600:180::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d1:aa:78:7b:51:ad:c5:e3:62:cd:df:9b:c7:3a:6b:74:63:47:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:17 2026 GMT Not After : Jan 19 02:27:17 2027 GMT Subject: CN=1FBE8984ACD3E339A80B726C37FD32E2C94BFD90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:01:8b:77:d6:c0:ec:5c:a3:6c:f4:28:cf: 77:e6:75:bd:97:81:78:8b:7b:ba:c6:a1:64:77:90: b5:6e:0f:87:c2:01:0a:c4:d3:f4:05:38:df:92:59: eb:4f:f6:94:b3:3d:77:07:a8:54:11:c7:6f:a1:8e: 7c:58:5a:c1:e9:c2:15:aa:54:de:16:a9:b0:14:fc: 70:4e:da:b3:81:2a:4c:a3:cb:a3:7f:29:c8:99:01: f0:1d:42:d0:39:b0:6d:10:87:14:54:cb:3c:39:d3: 2d:49:42:df:3d:4f:49:c2:6d:de:80:09:20:e9:d8: 53:e8:76:81:99:d9:04:d9:f6:26:15:45:18:62:18: 82:10:40:d5:5a:79:49:aa:22:b5:63:47:ee:b1:87: 43:55:d5:69:2c:5a:da:33:99:02:c2:c8:7e:56:aa: 16:5c:9c:ae:ef:c2:37:8d:60:4c:94:cb:d1:43:d8: 2b:11:e8:c3:b9:5a:69:71:68:0b:c5:07:5a:e9:c8: 95:15:a6:74:a4:62:d9:33:fc:de:e4:14:55:7b:49: 50:9d:0a:38:2a:c0:23:35:15:09:fb:d7:78:5f:85: 15:52:1a:06:5c:8d:ac:d1:28:37:50:09:cf:9e:8a: 7c:de:36:31:6f:5b:b2:ef:f4:5e:c1:4c:57:c2:21: 35:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BE:89:84:AC:D3:E3:39:A8:0B:72:6C:37:FD:32:E2:C9:4B:FD:90 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:180::/41 Signature Algorithm: sha256WithRSAEncryption 49:3d:0c:69:63:fc:3f:57:fa:62:c8:b5:b7:2c:ef:82:ba:f2: e0:a5:ea:ec:36:86:7c:88:16:04:32:34:3f:a1:55:0d:88:c2: c8:f3:ca:aa:5c:8e:7f:cf:43:e2:01:42:1f:9b:2b:d6:56:aa: 69:89:b0:c1:09:35:e2:b7:cd:1f:ff:aa:34:bc:0d:70:c0:ce: 6f:c0:b7:65:47:80:0d:9a:c4:24:0f:6a:6a:7b:a6:d7:98:8c: db:6a:b8:53:c1:d8:f2:43:00:51:93:25:9b:de:0f:72:b1:6c: 78:d2:c9:aa:ec:db:79:dc:b3:96:91:af:fe:20:d1:3e:9a:35: 5c:e4:76:b0:79:fe:03:8a:8a:06:13:c7:f5:2c:46:fe:96:f0: b2:15:85:50:97:09:d8:58:ec:31:fd:10:4f:01:9f:81:46:c5: a9:a8:4f:8b:fe:12:5c:fa:c1:6b:2a:56:ac:ba:45:40:7b:65: b0:e2:b8:2d:fa:60:21:9b:06:c5:32:3c:ad:58:65:43:84:98: c9:f7:9c:11:3b:9f:ed:13:d8:4e:a3:f4:7d:a8:f8:06:53:80: eb:64:47:f9:b5:bf:3b:5d:c0:ed:4f:e3:9f:4b:9c:09:56:47: fb:35:e4:78:8e:4c:a0:10:08:73:95:f6:bd:d6:da:e9:c0:35: 71:61:51:34 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUaNGqeHtRrcXjYs3fm8c6a3RjRzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTdaFw0yNzAxMTkwMjI3MTdaMDMxMTAvBgNV BAMTKDFGQkU4OTg0QUNEM0UzMzlBODBCNzI2QzM3RkQzMkUyQzk0QkZEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioQGLd9bA7FyjbPQoz3fmdb2X gXiLe7rGoWR3kLVuD4fCAQrE0/QFON+SWetP9pSzPXcHqFQRx2+hjnxYWsHpwhWq VN4WqbAU/HBO2rOBKkyjy6N/KciZAfAdQtA5sG0QhxRUyzw50y1JQt89T0nCbd6A CSDp2FPodoGZ2QTZ9iYVRRhiGIIQQNVaeUmqIrVjR+6xh0NV1WksWtozmQLCyH5W qhZcnK7vwjeNYEyUy9FD2CsR6MO5WmlxaAvFB1rpyJUVpnSkYtkz/N7kFFV7SVCd CjgqwCM1FQn713hfhRVSGgZcjazRKDdQCc+einzeNjFvW7Lv9F7BTFfCITUhAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUH76JhKzT4zmoC3JsN/0y4slL/ZAwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMTM4MzAzYTNhMmYzNDMxMmQzNDM4MjAzZDNlMjAzMjMzMzgz NTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcHJAR2AAGAMA0GCSqGSIb3DQEBCwUAA4IBAQBJPQxpY/w/ V/piyLW3LO+CuvLgpersNoZ8iBYEMjQ/oVUNiMLI88qqXI5/z0PiAUIfmyvWVqpp ibDBCTXit80f/6o0vA1wwM5vwLdlR4ANmsQkD2pqe6bXmIzbarhTwdjyQwBRkyWb 3g9ysWx40smq7Nt53LOWka/+INE+mjVc5Hawef4DiooGE8f1LEb+lvCyFYVQlwnY WOwx/RBPAZ+BRsWpqE+L/hJc+sFrKlasukVAe2Ww4rgt+mAhmwbFMjytWGVDhJjJ 95wRO5/tE9hOo/R9qPgGU4DrZEf5tb87XcDtT+OfS5wJVkf7NeR4jkygEAhzlfa9 1trpwDVxYVE0 -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:56 2026 by rpki-client