This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3a2f34302d3438203d3e203233383533.roa File: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (raw, json) Hash identifier: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM= Subject key identifier: 46:04:C4:D2:D3:76:36:CA:D1:C8:00:35:65:C3:DB:AF:04:F9:76:84 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 39E888FA21255F2D09E62F0241A191CD7CE69517 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3a2f34302d3438203d3e203233383533.roa Signing time: Tue 20 Jan 2026 02:27:17 +0000 ROA not before: Tue 20 Jan 2026 02:22:17 +0000 ROA not after: Tue 19 Jan 2027 02:27:17 +0000 asID: 23853 IP address blocks: 2404:7600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 18:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e8:88:fa:21:25:5f:2d:09:e6:2f:02:41:a1:91:cd:7c:e6:95:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Jan 20 02:22:17 2026 GMT Not After : Jan 19 02:27:17 2027 GMT Subject: CN=4604C4D2D37636CAD1C8003565C3DBAF04F97684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:05:98:b1:45:8d:6c:a7:54:28:1e:c6:b5: b9:da:aa:9a:e8:9b:ce:c4:d9:f4:c6:f1:05:6c:44: b0:3d:99:e4:59:83:0c:6d:a0:96:20:56:c1:82:43: 33:47:4f:f4:66:a9:b0:fa:54:fe:d6:d7:09:ad:ed: cf:36:1a:3c:08:b5:34:c7:06:31:c9:77:6f:72:4f: ec:94:12:d2:14:33:6d:b7:b8:cd:3d:65:b3:94:2b: 21:78:9e:8b:a9:84:a0:5c:85:7a:d0:e2:86:6d:08: eb:a0:8d:b8:ce:29:45:f8:63:b7:d2:7c:91:b4:03: dd:eb:e7:d9:d9:28:3a:e5:01:41:a1:0d:a1:74:c4: cd:ae:e0:4f:42:bf:36:d8:f0:56:81:a5:cc:1e:98: a4:50:bf:f6:19:79:57:cd:ef:c1:a0:25:e3:87:92: f7:8a:36:82:fd:ba:19:a9:a4:bd:58:48:3c:08:f4: 32:55:0d:f6:a5:ff:5d:a2:a3:01:eb:c8:e1:91:aa: 64:0e:25:a2:fe:8d:c1:e3:36:c9:58:a8:d4:ce:a2: af:13:77:6f:8f:42:bc:d5:c3:c7:59:42:c4:d4:86: aa:8d:11:ec:d3:f7:8c:d1:69:47:1a:32:7d:0c:55: 0f:9f:76:b3:0e:51:de:e5:cf:5a:5c:6f:e2:7d:3f: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:04:C4:D2:D3:76:36:CA:D1:C8:00:35:65:C3:DB:AF:04:F9:76:84 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/323430343a373630303a3a2f34302d3438203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7600::/40 Signature Algorithm: sha256WithRSAEncryption 2f:ef:d9:27:f2:a4:4f:fd:12:0d:18:0d:c9:c8:7d:80:50:ba: d4:cd:a6:5c:bb:58:5d:4b:50:83:c1:cb:47:ad:eb:37:67:1b: e4:87:ca:f3:73:76:0d:bc:d6:c1:08:a0:09:a6:15:c6:67:10: 5e:ad:70:27:f6:fe:a2:95:56:98:6b:8e:f7:00:6d:23:b6:94: b0:2c:4d:3b:0b:e0:c4:b3:5e:7f:7f:8c:22:63:79:53:cc:f5: 75:5e:82:fb:19:9d:72:87:84:ec:f9:01:71:1a:5a:c7:47:66: 10:63:9c:38:51:d5:38:aa:46:d1:e6:f3:1e:a1:50:fc:bc:44: 23:7e:e0:66:28:d7:8b:3b:9b:b1:ea:9f:bf:d3:5d:6b:f4:65: cb:51:d2:a1:83:8e:2e:6a:ab:78:80:7d:ab:77:21:18:75:18: 39:37:27:66:78:b6:c1:e9:3e:a0:de:79:43:df:c9:48:13:d7: 6a:bd:2a:24:4c:f1:98:4e:5c:ad:22:b7:26:23:47:7a:9c:8d: 24:64:5b:b4:d2:3c:7e:24:51:31:52:25:d8:4e:f1:7b:f6:7c: 00:cf:ff:34:9a:30:ea:a1:14:07:e8:da:ce:cc:6d:06:32:1e: 1e:4b:7c:c9:27:3c:df:a7:5a:fc:c7:23:01:ed:9d:94:50:38: 5d:f3:65:ca -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUOeiI+iElXy0J5i8CQaGRzXzmlRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAxMjAwMjIyMTdaFw0yNzAxMTkwMjI3MTdaMDMxMTAvBgNV BAMTKDQ2MDRDNEQyRDM3NjM2Q0FEMUM4MDAzNTY1QzNEQkFGMDRGOTc2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0QWYsUWNbKdUKB7Gtbnaqpro m87E2fTG8QVsRLA9meRZgwxtoJYgVsGCQzNHT/RmqbD6VP7W1wmt7c82GjwItTTH BjHJd29yT+yUEtIUM223uM09ZbOUKyF4nouphKBchXrQ4oZtCOugjbjOKUX4Y7fS fJG0A93r59nZKDrlAUGhDaF0xM2u4E9CvzbY8FaBpcwemKRQv/YZeVfN78GgJeOH kveKNoL9uhmppL1YSDwI9DJVDfal/12iowHryOGRqmQOJaL+jcHjNslYqNTOoq8T d2+PQrzVw8dZQsTUhqqNEezT94zRaUcaMn0MVQ+fdrMOUd7lz1pcb+J9P1tPAgMB AAGjggITMIICDzAdBgNVHQ4EFgQURgTE0tN2NsrRyAA1ZcPbrwT5doQwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzNDMwMzQzYTM3 MzYzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzMzM4MzUzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGACQEdgAAMA0GCSqGSIb3DQEBCwUAA4IBAQAv79kn8qRP/RINGA3JyH2AULrU zaZcu1hdS1CDwctHres3Zxvkh8rzc3YNvNbBCKAJphXGZxBerXAn9v6ilVaYa473 AG0jtpSwLE07C+DEs15/f4wiY3lTzPV1XoL7GZ1yh4Ts+QFxGlrHR2YQY5w4UdU4 qkbR5vMeoVD8vEQjfuBmKNeLO5ux6p+/011r9GXLUdKhg44uaqt4gH2rdyEYdRg5 NydmeLbB6T6g3nlD38lIE9dqvSokTPGYTlytIrcmI0d6nI0kZFu00jx+JFExUiXY TvF79nwAz/80mjDqoRQH6NrOzG0GMh4eS3zJJzzfp1r8xyMB7Z2UUDhd82XK -----END CERTIFICATE-----Generated at Sun Jan 25 11:14:18 2026 by rpki-client