This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371851778/0/323430323a616530303a3a2f33322d3332203d3e2039333931.roa File: 323430323a616530303a3a2f33322d3332203d3e2039333931.roa (raw, json) Hash identifier: FTYIWfCnmmvW90OE/8bpSjtcoyCXbulb9f9TPye52qc= Subject key identifier: BC:14:CE:29:EE:AC:28:1F:74:36:F4:C4:81:25:B0:78:C2:2A:4C:F0 Certificate issuer: /CN=745EC59458DF98DC3674219750AB7E7BC251E62C Certificate serial: 17866E7F9445AEABED1CB5F714F030BD4939E1DF Authority key identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/323430323a616530303a3a2f33322d3332203d3e2039333931.roa Signing time: Tue 20 Jan 2026 02:26:05 +0000 ROA not before: Tue 20 Jan 2026 02:21:05 +0000 ROA not after: Tue 19 Jan 2027 02:26:05 +0000 asID: 9391 IP address blocks: 2402:ae00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:86:6e:7f:94:45:ae:ab:ed:1c:b5:f7:14:f0:30:bd:49:39:e1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745EC59458DF98DC3674219750AB7E7BC251E62C Validity Not Before: Jan 20 02:21:05 2026 GMT Not After : Jan 19 02:26:05 2027 GMT Subject: CN=BC14CE29EEAC281F7436F4C48125B078C22A4CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e6:1d:64:2b:36:a6:d1:62:26:45:f1:26:82: 90:8b:05:03:d8:69:ba:56:ec:40:d9:09:94:e1:d4: 01:cf:71:1b:c7:be:e1:81:e9:4f:b9:1c:c1:2c:31: 71:21:ff:ba:21:28:d1:18:5a:44:d1:25:a9:ab:ee: 4e:e6:71:5c:e0:c8:e2:9e:c1:4e:be:a2:be:22:74: 0b:87:54:19:77:79:5f:1f:18:ea:0e:5b:e8:40:c3: 5d:4f:84:d7:8a:91:ed:db:bf:87:23:07:8d:7e:a5: 8a:16:0b:12:8c:06:dd:3e:75:1f:ed:61:12:d1:f7: 36:96:15:bc:d1:92:98:4c:f5:59:a8:c4:d7:3a:c3: ac:88:34:c8:57:ae:1f:d8:e0:71:e6:d1:a0:bc:24: 87:54:29:40:db:84:bc:35:91:c0:b3:57:d9:f7:cc: 69:20:b3:41:fa:87:0e:6c:36:3a:c0:0e:5a:a3:93: 6c:2a:5e:ef:12:34:79:24:49:a3:c3:6d:2e:7f:68: 23:d6:5e:f3:98:87:29:b6:45:d4:b0:21:a3:c1:e2: b9:06:75:64:ce:1f:38:5b:9e:f9:65:2f:cc:3b:46: 9e:fc:f8:b0:29:46:6f:17:4d:f4:ff:af:60:ad:17: a5:c1:36:87:eb:b7:dc:33:ce:fa:0f:f7:a3:7d:22: 3f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:14:CE:29:EE:AC:28:1F:74:36:F4:C4:81:25:B0:78:C2:2A:4C:F0 X509v3 Authority Key Identifier: keyid:74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/323430323a616530303a3a2f33322d3332203d3e2039333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:ae00::/32 Signature Algorithm: sha256WithRSAEncryption b7:45:b6:7b:01:82:ea:a7:c1:0e:a4:28:fc:4b:76:db:d2:b4: 3c:2d:4d:46:28:f1:43:59:74:7e:48:26:32:9f:a0:b2:3a:e3: 74:32:49:71:c3:91:71:84:97:dc:90:2d:cf:10:c7:79:92:32: 34:13:aa:8d:ac:dc:b8:0f:c8:bc:4d:bb:13:f2:1e:a4:4c:d8: e3:a0:80:45:d9:26:72:78:8a:06:fa:bc:33:fb:a8:86:b1:68: ed:f5:ce:f5:43:a9:56:02:5c:b7:38:74:5e:ab:5d:f3:5e:7a: 6e:e2:6a:15:81:ee:95:14:ad:1f:1d:48:06:72:b8:65:3d:8d: 82:b6:f8:4f:a7:66:f0:b2:98:d9:61:e0:ac:ef:6d:f8:08:d0: 16:8d:e0:af:9f:59:d4:c5:3d:7c:63:d9:6e:84:03:5b:c1:72: de:f6:b0:1a:02:52:34:dc:0d:1e:0b:56:4a:cf:0a:8a:ad:1c: ec:6f:2f:bf:c9:54:3e:c0:25:af:f3:fa:c0:05:cb:af:8c:d8: 9f:42:cb:b6:e2:7c:a2:20:cc:13:35:93:c6:69:a1:02:0e:d4: f0:47:82:9c:42:55:01:60:c8:85:a1:46:a4:db:66:1b:7b:5e: e7:41:d0:a5:a0:55:70:0f:aa:d4:31:fb:e1:ad:df:b0:7b:39: 58:56:b3:e2 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUF4Zuf5RFrqvtHLX3FPAwvUk54d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JD MjUxRTYyQzAeFw0yNjAxMjAwMjIxMDVaFw0yNzAxMTkwMjI2MDVaMDMxMTAvBgNV BAMTKEJDMTRDRTI5RUVBQzI4MUY3NDM2RjRDNDgxMjVCMDc4QzIyQTRDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5h1kKzam0WImRfEmgpCLBQPY abpW7EDZCZTh1AHPcRvHvuGB6U+5HMEsMXEh/7ohKNEYWkTRJamr7k7mcVzgyOKe wU6+or4idAuHVBl3eV8fGOoOW+hAw11PhNeKke3bv4cjB41+pYoWCxKMBt0+dR/t YRLR9zaWFbzRkphM9VmoxNc6w6yINMhXrh/Y4HHm0aC8JIdUKUDbhLw1kcCzV9n3 zGkgs0H6hw5sNjrADlqjk2wqXu8SNHkkSaPDbS5/aCPWXvOYhym2RdSwIaPB4rkG dWTOHzhbnvllL8w7Rp78+LApRm8XTfT/r2CtF6XBNofrt9wzzvoP96N9Ij91AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUvBTOKe6sKB90NvTEgSWweMIqTPAwHwYDVR0j BBgwFoAUdF7FlFjfmNw2dCGXUKt+e8JR5iwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTg1MTc3OC8wLzc0NUVDNTk0NThERjk4REMzNjc0MjE5NzUwQUI3 RTdCQzI1MUU2MkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JDMjUxRTYyQy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxODUxNzc4LzAvMzIzNDMwMzIzYTYx NjUzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzkzMzM5MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAq4AMA0GCSqGSIb3DQEBCwUAA4IBAQC3RbZ7AYLqp8EOpCj8S3bb0rQ8LU1G KPFDWXR+SCYyn6CyOuN0Mklxw5FxhJfckC3PEMd5kjI0E6qNrNy4D8i8TbsT8h6k TNjjoIBF2SZyeIoG+rwz+6iGsWjt9c71Q6lWAly3OHReq13zXnpu4moVge6VFK0f HUgGcrhlPY2CtvhPp2bwspjZYeCs7234CNAWjeCvn1nUxT18Y9luhANbwXLe9rAa AlI03A0eC1ZKzwqKrRzsby+/yVQ+wCWv8/rABcuvjNifQsu24nyiIMwTNZPGaaEC DtTwR4KcQlUBYMiFoUak22Ybe17nQdCloFVwD6rUMfvhrd+wezlYVrPi -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:04 2026 by rpki-client