This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323030303a3a2f34382d3438203d3e20313331333134.roa File: 323430333a396230303a323030303a3a2f34382d3438203d3e20313331333134.roa (raw, json) Hash identifier: QaWug+cNDDzS9dvHPNuT1ZuZWisdg7F8igJGbDTVhns= Subject key identifier: 57:13:26:2C:33:20:5D:A8:EA:80:E8:6D:CD:D3:54:49:42:47:E1:94 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 38F907B12205338CE3A572AB7086753CAC8F170F Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323030303a3a2f34382d3438203d3e20313331333134.roa Signing time: Tue 20 Jan 2026 01:19:12 +0000 ROA not before: Tue 20 Jan 2026 01:14:12 +0000 ROA not after: Tue 19 Jan 2027 01:19:12 +0000 asID: 131314 IP address blocks: 2403:9b00:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f9:07:b1:22:05:33:8c:e3:a5:72:ab:70:86:75:3c:ac:8f:17:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jan 20 01:14:12 2026 GMT Not After : Jan 19 01:19:12 2027 GMT Subject: CN=5713262C33205DA8EA80E86DCDD354494247E194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:1d:e3:1c:b1:dd:14:a1:c8:e3:10:ad:3e: 99:6d:8b:95:26:f0:a4:04:72:b1:9a:b6:5e:f2:ad: 9b:a3:26:ab:3d:ae:52:64:d0:8c:1d:05:7e:b0:be: f6:3a:47:ba:b7:d9:9b:58:c8:6a:82:b9:9e:d6:fa: d6:53:e7:2e:4e:7c:83:1e:0a:71:1c:d1:0a:00:2d: 6d:f1:36:a0:63:b5:20:36:0c:c4:ee:52:25:6e:d2: a4:f1:78:b3:46:c2:54:65:94:3a:16:6f:42:22:07: 51:fe:a9:66:8f:91:3c:c0:20:ab:c9:6e:2c:67:50: 24:44:db:71:2a:52:b6:5a:b7:99:fe:95:88:c5:6b: 42:67:7d:12:72:97:39:47:95:bc:ef:11:11:56:28: 02:49:c2:36:05:81:35:a9:ce:d4:97:eb:e8:df:de: 2c:4a:9f:0a:90:fa:d5:b0:25:8b:9b:32:77:ad:3f: 89:3a:dc:d8:86:8b:c2:02:69:09:16:ca:bd:f7:b2: 03:04:2c:76:75:5f:1c:a4:17:68:e5:06:c8:36:a5: 06:f4:ae:e7:d9:4e:e6:c5:c7:65:1a:e6:db:8d:86: 3d:31:da:37:6c:52:2b:ec:80:a6:86:ed:b5:09:fa: 72:00:5a:8b:f8:c5:63:04:0e:c8:34:0b:55:04:05: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:26:2C:33:20:5D:A8:EA:80:E8:6D:CD:D3:54:49:42:47:E1:94 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323030303a3a2f34382d3438203d3e20313331333134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:9b00:2000::/48 Signature Algorithm: sha256WithRSAEncryption 0e:f8:4a:42:d9:f3:1c:ec:41:b2:aa:73:7c:d3:89:cc:b4:10: 93:21:a8:a1:e6:eb:8c:fb:7d:e2:31:37:60:e1:a5:04:3a:e8: 00:dc:8d:61:b5:17:f1:99:cc:f1:c4:97:cb:39:a0:28:79:aa: ef:b2:94:c7:22:19:e7:9a:e3:2c:d8:98:fd:ac:8d:2d:56:90: b5:af:13:c2:2e:68:4d:6e:30:1b:9e:0d:73:6d:fc:86:00:d1: 86:65:7c:27:2c:ba:17:98:05:a3:cc:f4:52:71:7d:ed:7f:b4: cf:08:15:91:ee:8f:c7:47:c9:f2:84:57:5a:ab:ce:a8:ae:b9: 03:d2:19:81:21:4f:1b:ab:f6:2f:6d:c7:bc:89:b4:7c:f2:71: ac:72:57:f7:3b:3f:57:b8:60:5f:b2:c1:50:55:ca:44:e2:14: 42:10:de:76:bc:37:aa:2e:cb:41:62:0e:c7:d3:4e:f2:8d:78: c5:78:ad:77:0f:db:e3:70:f2:89:a8:47:b1:f8:13:87:fc:b8: e5:99:19:65:64:e1:24:34:e7:84:01:48:46:a2:46:be:29:e2: 18:cc:59:7a:4f:59:3a:25:41:2d:30:7f:e5:32:5b:76:40:fc: e6:42:05:ed:4d:c8:a2:6f:c9:27:57:f1:26:bb:bd:c9:bc:83: c9:6e:6f:5d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUOPkHsSIFM4zjpXKrcIZ1PKyPFw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAxMjAwMTE0MTJaFw0yNzAxMTkwMTE5MTJaMDMxMTAvBgNV BAMTKDU3MTMyNjJDMzMyMDVEQThFQTgwRTg2RENERDM1NDQ5NDI0N0UxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtXh3jHLHdFKHI4xCtPplti5Um 8KQEcrGatl7yrZujJqs9rlJk0IwdBX6wvvY6R7q32ZtYyGqCuZ7W+tZT5y5OfIMe CnEc0QoALW3xNqBjtSA2DMTuUiVu0qTxeLNGwlRllDoWb0IiB1H+qWaPkTzAIKvJ bixnUCRE23EqUrZat5n+lYjFa0JnfRJylzlHlbzvERFWKAJJwjYFgTWpztSX6+jf 3ixKnwqQ+tWwJYubMnetP4k63NiGi8ICaQkWyr33sgMELHZ1XxykF2jlBsg2pQb0 rufZTubFx2Ua5tuNhj0x2jdsUivsgKaG7bUJ+nIAWov4xWMEDsg0C1UEBYbrAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQUVxMmLDMgXajqgOhtzdNUSUJH4ZQwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTc5NDU4LzAvMzIzNDMwMzMz YTM5NjIzMDMwM2EzMjMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz MTMzMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQDmwAgADANBgkqhkiG9w0BAQsFAAOCAQEADvhK QtnzHOxBsqpzfNOJzLQQkyGooebrjPt94jE3YOGlBDroANyNYbUX8ZnM8cSXyzmg KHmq77KUxyIZ55rjLNiY/ayNLVaQta8Twi5oTW4wG54Nc238hgDRhmV8Jyy6F5gF o8z0UnF97X+0zwgVke6Px0fJ8oRXWqvOqK65A9IZgSFPG6v2L23HvIm0fPJxrHJX 9zs/V7hgX7LBUFXKROIUQhDedrw3qi7LQWIOx9NO8o14xXitdw/b43DyiahHsfgT h/y45ZkZZWThJDTnhAFIRqJGviniGMxZek9ZOiVBLTB/5TJbdkD85kIF7U3Iom/J J1fxJru9ybyDyW5vXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:16:00 2026 by rpki-client