This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323430303a3a2f34382d3438203d3e20313331333134.roa File: 323430333a396230303a323430303a3a2f34382d3438203d3e20313331333134.roa (raw, json) Hash identifier: h8Dsp5I71swsmHii1MzitIcYsL+pqCT7SgdRcyTJX7I= Subject key identifier: 93:3B:11:CC:7F:85:91:2C:3F:46:D3:72:91:F8:25:AB:05:F9:B6:38 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 36AEBFEE5E519E0A36D138068667D294D27E01B4 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323430303a3a2f34382d3438203d3e20313331333134.roa Signing time: Tue 20 Jan 2026 01:19:14 +0000 ROA not before: Tue 20 Jan 2026 01:14:14 +0000 ROA not after: Tue 19 Jan 2027 01:19:14 +0000 asID: 131314 IP address blocks: 2403:9b00:2400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ae:bf:ee:5e:51:9e:0a:36:d1:38:06:86:67:d2:94:d2:7e:01:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jan 20 01:14:14 2026 GMT Not After : Jan 19 01:19:14 2027 GMT Subject: CN=933B11CC7F85912C3F46D37291F825AB05F9B638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:f6:20:0b:27:0c:55:30:dc:51:4a:34:13: 54:6f:6b:38:c7:c8:3d:4b:92:4a:f6:6b:f4:a6:ea: 3c:70:b5:81:ff:15:39:f9:5c:df:01:ac:5a:ed:da: f4:1a:5b:c7:f8:69:66:91:ac:0c:ca:1d:fe:35:93: 88:53:a0:d1:20:96:0a:d2:9f:fe:98:5d:f0:b2:ed: 52:0d:ad:1e:43:56:36:df:9e:41:5d:ff:e1:3f:37: 9f:e3:62:85:9c:85:e6:45:0b:70:28:06:d4:08:59: 5f:40:26:00:ff:2f:d1:bb:93:e7:ee:1c:c6:e1:d7: f2:95:90:41:3c:32:7a:76:f7:17:4d:ee:ee:59:c7: 81:df:b3:be:ec:c8:08:80:53:81:b7:1c:64:37:dc: 0e:10:d4:75:b4:54:65:30:16:fc:e4:52:77:b9:9f: c4:2e:93:76:64:f0:95:6f:77:39:04:66:1e:ba:80: 81:3a:b1:b0:a2:1a:33:42:be:17:ac:29:bb:3a:88: 28:ad:0e:ca:8c:42:b1:36:9b:b0:37:f7:17:d5:91: ca:cb:96:7e:c4:37:df:2d:40:cd:eb:e8:f2:85:8b: 9e:f6:df:c5:ac:69:59:6b:d7:3f:45:4e:91:50:29: 6d:8f:00:49:6c:7b:3d:39:96:56:86:35:92:ef:c3: 43:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3B:11:CC:7F:85:91:2C:3F:46:D3:72:91:F8:25:AB:05:F9:B6:38 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323430303a3a2f34382d3438203d3e20313331333134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:9b00:2400::/48 Signature Algorithm: sha256WithRSAEncryption 89:95:67:14:51:79:79:ea:cb:41:e7:08:a2:97:80:69:2d:54: bf:5b:09:70:58:42:d5:b6:98:49:eb:25:f3:3d:80:4a:1d:9a: f3:63:52:bc:f3:d9:25:03:4d:6e:87:15:b8:d4:a5:1f:2a:57: c5:68:9e:ad:d4:f2:68:45:38:08:81:58:77:42:e2:ff:8a:f3: 62:04:b9:dd:d5:57:66:d5:f1:e8:44:ab:95:5c:46:81:d7:74: 4d:b0:4f:d1:28:7a:13:36:33:6e:86:4e:38:5a:9c:b2:62:02: 47:23:ec:01:6e:3c:27:c1:dd:78:03:a8:ed:ae:2d:32:42:66: 2d:b9:4c:02:a0:ff:bd:3b:98:f0:e3:7a:0b:31:75:35:96:32: 7d:d4:cb:72:d4:0b:5c:5f:1a:45:1c:b9:5f:e9:91:3c:58:18: be:31:32:c5:68:11:c2:8f:e4:7f:3c:93:79:6d:f0:c0:1c:5f: 23:f6:e0:74:63:d1:b7:10:2f:62:d5:2a:b1:68:89:6e:a4:24: a0:2d:52:f8:41:89:3b:6a:c1:68:24:f8:64:59:12:6e:fd:58: aa:72:65:6f:b9:99:55:28:81:fd:b2:5c:54:10:af:bc:91:9f: 50:ff:32:c9:ac:f6:21:cd:63:6c:34:6c:70:ff:9d:68:c2:80: 09:ab:6b:d6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUNq6/7l5Rngo20TgGhmfSlNJ+AbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAxMjAwMTE0MTRaFw0yNzAxMTkwMTE5MTRaMDMxMTAvBgNV BAMTKDkzM0IxMUNDN0Y4NTkxMkMzRjQ2RDM3MjkxRjgyNUFCMDVGOUI2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+fYgCycMVTDcUUo0E1RvazjH yD1Lkkr2a/Sm6jxwtYH/FTn5XN8BrFrt2vQaW8f4aWaRrAzKHf41k4hToNEglgrS n/6YXfCy7VINrR5DVjbfnkFd/+E/N5/jYoWcheZFC3AoBtQIWV9AJgD/L9G7k+fu HMbh1/KVkEE8Mnp29xdN7u5Zx4Hfs77syAiAU4G3HGQ33A4Q1HW0VGUwFvzkUne5 n8Quk3Zk8JVvdzkEZh66gIE6sbCiGjNCvhesKbs6iCitDsqMQrE2m7A39xfVkcrL ln7EN98tQM3r6PKFi57238WsaVlr1z9FTpFQKW2PAElsez05llaGNZLvw0NvAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQUkzsRzH+FkSw/RtNykfglqwX5tjgwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTc5NDU4LzAvMzIzNDMwMzMz YTM5NjIzMDMwM2EzMjM0MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz MTMzMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQDmwAkADANBgkqhkiG9w0BAQsFAAOCAQEAiZVn FFF5eerLQecIopeAaS1Uv1sJcFhC1baYSesl8z2ASh2a82NSvPPZJQNNbocVuNSl HypXxWierdTyaEU4CIFYd0Li/4rzYgS53dVXZtXx6ESrlVxGgdd0TbBP0Sh6EzYz boZOOFqcsmICRyPsAW48J8HdeAOo7a4tMkJmLblMAqD/vTuY8ON6CzF1NZYyfdTL ctQLXF8aRRy5X+mRPFgYvjEyxWgRwo/kfzyTeW3wwBxfI/bgdGPRtxAvYtUqsWiJ bqQkoC1S+EGJO2rBaCT4ZFkSbv1YqnJlb7mZVSiB/bJcVBCvvJGfUP8yyaz2Ic1j bDRscP+daMKACatr1g== -----END CERTIFICATE-----Generated at Sun Jan 25 08:15:58 2026 by rpki-client