This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa File: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (raw, json) Hash identifier: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U= Subject key identifier: 92:71:19:9F:42:A4:86:FA:7B:03:8E:B0:88:E1:B6:04:1B:AF:14:B6 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 5A807C63051CA9B19FB715ADFDF4ABE5378143CE Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:16 +0000 ROA not before: Tue 20 Jan 2026 02:22:16 +0000 ROA not after: Tue 19 Jan 2027 02:27:16 +0000 asID: 23853 IP address blocks: 2404:7600:4000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:80:7c:63:05:1c:a9:b1:9f:b7:15:ad:fd:f4:ab:e5:37:81:43:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:16 2026 GMT Not After : Jan 19 02:27:16 2027 GMT Subject: CN=9271199F42A486FA7B038EB088E1B6041BAF14B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:3e:ab:44:fa:e2:45:0b:59:0b:75:da:0b: fa:6a:66:b1:21:10:3a:57:a7:fa:12:03:b9:d6:63: f5:72:33:8c:a1:7e:ef:f8:09:6a:61:97:79:f7:75: 04:de:0e:6d:58:1c:d6:9d:f4:d7:ec:b0:dc:b0:34: c6:f4:7a:c5:ad:ee:09:63:4e:06:2a:77:6b:1b:93: 7e:ac:99:f4:97:b7:1e:d9:dd:22:b7:f0:d9:8d:6e: 05:be:37:06:e2:09:09:53:eb:be:83:a1:64:d8:38: 02:04:97:de:ef:17:3c:f7:92:5c:18:fb:e3:92:2c: 1c:2a:b0:31:34:4a:6d:93:f7:26:d0:fe:37:6b:19: de:cb:c0:16:ee:e8:bb:da:01:98:88:ae:08:14:31: 42:15:12:08:3b:df:e3:05:8f:9a:a9:8a:c5:7e:e7: b8:c5:d6:37:6b:f7:22:2e:06:1d:af:7c:61:5f:1d: 73:11:6f:ef:7a:88:a8:3e:29:9c:03:26:5e:ee:05: b2:e3:81:0e:b6:7e:8a:ef:f1:02:df:40:a5:31:05: 94:88:49:b3:56:0f:bc:ae:e3:6d:ae:a5:1e:ec:72: f3:5c:67:ba:bb:fc:a5:10:69:5d:64:cc:95:fd:fb: 8e:31:db:75:f8:e4:d7:82:1e:bd:93:87:68:3d:58: 8c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:71:19:9F:42:A4:86:FA:7B:03:8E:B0:88:E1:B6:04:1B:AF:14:B6 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:4000::/34 Signature Algorithm: sha256WithRSAEncryption 81:54:89:cb:0c:0e:05:03:ab:23:b8:59:25:b8:70:a2:11:3a: e1:27:b9:76:a6:3a:76:32:86:6f:77:21:9f:6b:da:39:71:cb: dd:32:e8:d2:09:33:f6:30:18:a0:96:26:4a:26:51:34:81:a1: 86:dd:9c:bf:47:01:74:5a:78:61:49:fc:41:4b:a2:2e:98:d5: d2:13:44:bc:48:c8:2e:38:d3:3c:27:09:4e:6b:f6:8e:3e:ae: 84:25:d1:f5:5f:d1:43:d9:aa:62:e8:0e:70:a9:fb:7c:c7:12: 2a:ca:a9:a0:31:84:4e:47:ca:d2:44:bc:85:89:10:67:1c:4a: 63:bb:55:87:00:dd:af:ff:d5:62:44:71:1e:df:e8:ca:98:ce: 70:46:93:a8:2c:42:1f:e4:aa:00:33:a3:3c:31:37:2d:77:cf: c2:ac:41:5c:c9:43:e4:e4:bc:d7:26:61:27:ca:25:a7:a0:6c: 35:05:a7:29:d3:2d:d3:34:14:f1:da:05:24:bb:54:45:b7:ee: 46:c8:34:e2:61:62:92:1c:c7:e2:c4:b4:0a:13:9b:d2:39:08: c1:54:82:3f:d5:7b:23:43:07:4e:9a:19:dd:7e:60:d2:65:bd: 00:9d:77:4c:5f:82:a0:d0:61:74:d0:75:57:7e:6d:c4:29:a9: 10:f9:88:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUWoB8YwUcqbGftxWt/fSr5TeBQ84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTZaFw0yNzAxMTkwMjI3MTZaMDMxMTAvBgNV BAMTKDkyNzExOTlGNDJBNDg2RkE3QjAzOEVCMDg4RTFCNjA0MUJBRjE0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/z6rRPriRQtZC3XaC/pqZrEh EDpXp/oSA7nWY/VyM4yhfu/4CWphl3n3dQTeDm1YHNad9NfssNywNMb0esWt7glj TgYqd2sbk36smfSXtx7Z3SK38NmNbgW+NwbiCQlT676DoWTYOAIEl97vFzz3klwY ++OSLBwqsDE0Sm2T9ybQ/jdrGd7LwBbu6LvaAZiIrggUMUIVEgg73+MFj5qpisV+ 57jF1jdr9yIuBh2vfGFfHXMRb+96iKg+KZwDJl7uBbLjgQ62forv8QLfQKUxBZSI SbNWD7yu422upR7scvNcZ7q7/KUQaV1kzJX9+44x23X45NeCHr2Th2g9WIx7AgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUknEZn0Kkhvp7A46wiOG2BBuvFLYwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDM0MzgyMDNkM2UyMDMyMzMz ODM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgYkBHYAQDANBgkqhkiG9w0BAQsFAAOCAQEAgVSJywwO BQOrI7hZJbhwohE64Se5dqY6djKGb3chn2vaOXHL3TLo0gkz9jAYoJYmSiZRNIGh ht2cv0cBdFp4YUn8QUuiLpjV0hNEvEjILjjTPCcJTmv2jj6uhCXR9V/RQ9mqYugO cKn7fMcSKsqpoDGETkfK0kS8hYkQZxxKY7tVhwDdr//VYkRxHt/oypjOcEaTqCxC H+SqADOjPDE3LXfPwqxBXMlD5OS81yZhJ8olp6BsNQWnKdMt0zQU8doFJLtURbfu Rsg04mFikhzH4sS0ChOb0jkIwVSCP9V7I0MHTpoZ3X5g0mW9AJ13TF+CoNBhdNB1 V35txCmpEPmIpw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:57 2026 by rpki-client