This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa File: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (raw, json) Hash identifier: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0= Subject key identifier: 55:E9:0D:77:57:D5:67:0F:AB:78:68:4B:01:CB:E0:30:84:A1:F1:EA Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 3649A904F6691A506BC11720A4648FA12ECB4561 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:17 +0000 ROA not before: Tue 20 Jan 2026 02:22:17 +0000 ROA not after: Tue 19 Jan 2027 02:27:17 +0000 asID: 23853 IP address blocks: 2404:7600:2000::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:49:a9:04:f6:69:1a:50:6b:c1:17:20:a4:64:8f:a1:2e:cb:45:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:17 2026 GMT Not After : Jan 19 02:27:17 2027 GMT Subject: CN=55E90D7757D5670FAB78684B01CBE03084A1F1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:44:89:74:f2:c0:3e:56:77:bd:5e:91:94: 4e:a3:c5:5a:db:47:80:02:b0:5a:7b:d4:15:c0:7a: 0a:0b:32:6a:9b:f4:a0:84:98:df:3b:a0:22:86:c0: 4c:ce:d9:72:53:b5:f0:e6:db:f0:ff:bb:2c:d7:00: b9:34:63:35:5e:20:36:b4:9a:42:eb:18:80:34:f9: a2:24:68:56:ec:f5:80:64:c9:33:5c:70:b5:a1:31: 54:fc:68:9f:91:1b:cf:a8:05:b1:d9:c2:7a:d2:5f: 82:bf:a4:b7:01:79:96:b1:14:11:2c:18:a3:0c:5c: 99:af:95:af:c8:7c:f2:a8:75:15:a2:22:01:08:9a: 75:7f:ae:3b:3c:3c:4a:c8:a1:44:d9:0f:99:8d:60: 7a:0e:dc:00:be:05:ad:1e:a0:f6:43:8c:0c:2c:69: ac:ce:0b:1b:c0:ae:4b:4d:66:24:f9:cc:69:73:e8: 27:34:c7:0d:07:fd:ca:32:21:e3:67:7d:e1:95:66: dd:f6:bb:0e:75:ae:9e:a6:b2:d7:91:2b:83:bc:9f: 45:65:70:60:a9:28:b1:0f:18:23:90:ae:e2:05:49: d8:23:c3:2d:f9:6d:b2:04:28:4a:d2:cb:ed:34:4b: 1d:8b:70:7b:ba:07:31:ce:6a:3b:fa:c2:4b:59:87: c4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E9:0D:77:57:D5:67:0F:AB:78:68:4B:01:CB:E0:30:84:A1:F1:EA X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:2000::/35 Signature Algorithm: sha256WithRSAEncryption 6a:2e:7d:be:8d:ed:4e:bb:00:6d:eb:10:b4:bd:30:63:49:cf: 68:1b:ff:e3:28:f1:cc:7c:4e:df:87:24:96:a6:ff:88:23:a9: a8:a0:d2:5e:73:c1:22:2f:66:83:94:0e:86:03:d9:87:e1:01: b9:0b:79:ea:f2:e4:44:7b:2e:5d:45:ca:b1:14:7d:b5:3b:20: 90:98:82:4a:83:c4:fb:2d:ca:5f:c8:f4:c5:54:8a:ca:ed:da: 0f:04:8d:8f:92:6b:80:c5:60:1e:4c:bd:92:71:75:90:e0:0e: d9:c9:a6:24:15:64:b9:49:21:c4:dc:78:e3:4d:69:7d:8d:ad: a0:85:bc:73:c4:09:24:53:0a:3d:e9:f9:13:d7:80:ef:bc:21: 22:9d:30:08:05:48:db:85:83:90:60:fb:57:5c:63:57:d0:e8: 1e:2d:0c:3a:5e:77:2f:a5:36:d9:9f:fc:b8:54:00:a9:a6:73: c0:f2:05:1b:ca:33:93:50:3b:b9:95:42:53:c4:2a:b7:9d:0e: d8:b9:b2:82:73:7d:36:9b:87:66:10:d5:a4:c8:6b:62:34:72: 44:2c:49:47:5c:9b:ce:9e:83:2b:e0:3f:da:6b:5c:b2:d5:cd: a8:2f:51:67:4c:0a:43:03:c4:90:65:8a:07:1b:18:0b:c5:03: d3:49:31:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUNkmpBPZpGlBrwRcgpGSPoS7LRWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTdaFw0yNzAxMTkwMjI3MTdaMDMxMTAvBgNV BAMTKDU1RTkwRDc3NTdENTY3MEZBQjc4Njg0QjAxQ0JFMDMwODRBMUYxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqESJdPLAPlZ3vV6RlE6jxVrb R4ACsFp71BXAegoLMmqb9KCEmN87oCKGwEzO2XJTtfDm2/D/uyzXALk0YzVeIDa0 mkLrGIA0+aIkaFbs9YBkyTNccLWhMVT8aJ+RG8+oBbHZwnrSX4K/pLcBeZaxFBEs GKMMXJmvla/IfPKodRWiIgEImnV/rjs8PErIoUTZD5mNYHoO3AC+Ba0eoPZDjAws aazOCxvArktNZiT5zGlz6Cc0xw0H/coyIeNnfeGVZt32uw51rp6msteRK4O8n0Vl cGCpKLEPGCOQruIFSdgjwy35bbIEKErSy+00Sx2LcHu6BzHOajv6wktZh8QnAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUVekNd1fVZw+reGhLAcvgMISh8eowHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzMjMwMzAzMDNhM2EyZjMzMzUyZDM0MzgyMDNkM2UyMDMyMzMz ODM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgUkBHYAIDANBgkqhkiG9w0BAQsFAAOCAQEAai59vo3t TrsAbesQtL0wY0nPaBv/4yjxzHxO34cklqb/iCOpqKDSXnPBIi9mg5QOhgPZh+EB uQt56vLkRHsuXUXKsRR9tTsgkJiCSoPE+y3KX8j0xVSKyu3aDwSNj5JrgMVgHky9 knF1kOAO2cmmJBVkuUkhxNx4401pfY2toIW8c8QJJFMKPen5E9eA77whIp0wCAVI 24WDkGD7V1xjV9DoHi0MOl53L6U22Z/8uFQAqaZzwPIFG8ozk1A7uZVCU8Qqt50O 2LmygnN9NpuHZhDVpMhrYjRyRCxJR1ybzp6DK+A/2mtcstXNqC9RZ0wKQwPEkGWK BxsYC8UD00kxeg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:02 2026 by rpki-client