This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa File: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (raw, json) Hash identifier: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc= Subject key identifier: 6D:E0:72:E0:0A:FF:DA:24:25:0A:4C:D5:57:4C:DA:6C:53:7B:B8:8C Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 4E40DFA8129BE12DD39236E26AFDCA95C5C8F8D8 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:17 +0000 ROA not before: Tue 20 Jan 2026 02:22:17 +0000 ROA not after: Tue 19 Jan 2027 02:27:17 +0000 asID: 23853 IP address blocks: 2404:7600:800::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:40:df:a8:12:9b:e1:2d:d3:92:36:e2:6a:fd:ca:95:c5:c8:f8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:17 2026 GMT Not After : Jan 19 02:27:17 2027 GMT Subject: CN=6DE072E00AFFDA24250A4CD5574CDA6C537BB88C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:e2:14:b2:4c:20:02:ed:61:6b:8c:3f:a4: b0:26:8a:20:af:50:4c:13:b3:3b:e3:68:f2:94:53: 9d:72:89:e2:94:68:0e:84:a4:32:25:54:be:72:1b: ba:10:f8:da:5e:9a:cd:dc:ab:be:79:5f:d9:51:dd: 96:cf:32:11:df:2d:4a:82:c4:45:41:24:77:b3:c7: f3:02:73:b3:36:6d:9d:1c:e8:36:55:b1:9c:0f:35: bd:f4:e1:2f:66:4b:05:c7:f6:3c:43:c3:19:86:2d: e3:d2:89:5c:0b:d9:de:28:74:86:1f:41:be:8e:4a: 49:41:69:9e:25:b9:56:25:0c:5b:95:5e:60:78:d4: 94:38:fe:69:cf:18:de:f8:58:06:78:07:da:5a:54: aa:49:d3:7d:ad:f1:4f:88:ba:10:20:3c:68:95:53: fb:ce:99:90:a0:6f:0e:15:cd:a6:eb:8e:f5:c2:9b: 19:62:64:4b:08:f4:42:94:0d:da:4b:30:c2:d5:9f: f4:bb:6b:d5:85:15:8b:5a:48:b7:5e:34:9d:d0:0c: 11:d8:08:b7:d3:ca:86:43:be:fc:e8:43:b8:76:4a: 16:a3:d8:28:3b:aa:e5:74:1e:bd:93:ed:30:77:b2: ed:da:db:0b:49:03:74:f0:f0:9b:f6:d4:28:4b:7c: 79:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E0:72:E0:0A:FF:DA:24:25:0A:4C:D5:57:4C:DA:6C:53:7B:B8:8C X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600:800::/37 Signature Algorithm: sha256WithRSAEncryption 90:27:e6:39:6e:b9:92:18:9d:f8:5c:5a:00:42:50:13:2d:95: 31:aa:a4:43:49:c9:0b:4c:7c:18:54:7f:16:62:d3:68:28:69: ae:99:62:3a:c6:9e:e6:b3:fa:1e:61:aa:46:77:77:ed:90:b4: 58:93:e3:24:cb:ab:6f:4b:d4:44:a3:ec:b7:8c:2e:07:07:be: ca:d0:7d:1e:a1:ee:d0:72:bd:29:fd:95:6a:5c:98:3d:a9:a7: c5:a5:6a:16:56:06:9a:30:be:c1:67:76:97:29:cb:ed:9b:2f: 87:49:d8:51:7f:bc:8e:82:d4:8f:a7:13:e8:29:c1:0f:77:82: 4b:7c:1a:81:e0:5b:27:ee:dd:b3:c8:5a:ff:52:e2:f9:0f:f5: 72:fe:10:3d:e0:fe:99:4e:d0:d8:18:51:b9:93:e9:2d:c8:26: 45:78:d9:3c:ec:37:3e:bf:6b:4e:5c:d2:3d:14:ed:52:26:39: 53:41:58:d0:1e:b5:be:ae:52:af:29:f8:2d:78:02:8e:61:af: ea:16:d7:a0:56:cf:4c:37:ee:17:65:a1:48:e5:57:31:18:80: 5e:09:e3:15:5b:54:e1:26:b5:77:ae:06:24:1b:0f:2d:4c:18: 69:07:d8:86:f1:7b:92:35:06:db:90:c3:d8:65:74:e2:7d:97: 5f:a9:c8:72 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUTkDfqBKb4S3Tkjbiav3KlcXI+NgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTdaFw0yNzAxMTkwMjI3MTdaMDMxMTAvBgNV BAMTKDZERTA3MkUwMEFGRkRBMjQyNTBBNENENTU3NENEQTZDNTM3QkI4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDlOIUskwgAu1ha4w/pLAmiiCv UEwTszvjaPKUU51yieKUaA6EpDIlVL5yG7oQ+Npems3cq755X9lR3ZbPMhHfLUqC xEVBJHezx/MCc7M2bZ0c6DZVsZwPNb304S9mSwXH9jxDwxmGLePSiVwL2d4odIYf Qb6OSklBaZ4luVYlDFuVXmB41JQ4/mnPGN74WAZ4B9paVKpJ032t8U+IuhAgPGiV U/vOmZCgbw4VzabrjvXCmxliZEsI9EKUDdpLMMLVn/S7a9WFFYtaSLdeNJ3QDBHY CLfTyoZDvvzoQ7h2Shaj2Cg7quV0Hr2T7TB3su3a2wtJA3Tw8Jv21ChLfHkVAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUbeBy4Ar/2iQlCkzVV0zabFN7uIwwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQz YTM3MzYzMDMwM2EzODMwMzAzYTNhMmYzMzM3MmQzNDM4MjAzZDNlMjAzMjMzMzgz NTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYDJAR2AAgwDQYJKoZIhvcNAQELBQADggEBAJAn5jluuZIY nfhcWgBCUBMtlTGqpENJyQtMfBhUfxZi02goaa6ZYjrGnuaz+h5hqkZ3d+2QtFiT 4yTLq29L1ESj7LeMLgcHvsrQfR6h7tByvSn9lWpcmD2pp8WlahZWBpowvsFndpcp y+2bL4dJ2FF/vI6C1I+nE+gpwQ93gkt8GoHgWyfu3bPIWv9S4vkP9XL+ED3g/plO 0NgYUbmT6S3IJkV42TzsNz6/a05c0j0U7VImOVNBWNAetb6uUq8p+C14Ao5hr+oW 16BWz0w37hdloUjlVzEYgF4J4xVbVOEmtXeuBiQbDy1MGGkH2Ibxe5I1BtuQw9hl dOJ9l1+pyHI= -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:06 2026 by rpki-client