This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323430303a3a2f34382d3438203d3e203137363231.roa File: 323430333a396230303a323430303a3a2f34382d3438203d3e203137363231.roa (raw, json) Hash identifier: P2kJYoqRoYD0SqfvYjbkoouF8EZfEcslMZdxFkbZVa0= Subject key identifier: 98:69:AE:F2:A9:03:EE:84:5A:B0:5C:B6:3F:A4:52:66:59:41:06:25 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 3D573FD879C6F37C3426834DE6F0CB3C6066EB24 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323430303a3a2f34382d3438203d3e203137363231.roa Signing time: Tue 20 Jan 2026 01:19:12 +0000 ROA not before: Tue 20 Jan 2026 01:14:12 +0000 ROA not after: Tue 19 Jan 2027 01:19:12 +0000 asID: 17621 IP address blocks: 2403:9b00:2400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:57:3f:d8:79:c6:f3:7c:34:26:83:4d:e6:f0:cb:3c:60:66:eb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jan 20 01:14:12 2026 GMT Not After : Jan 19 01:19:12 2027 GMT Subject: CN=9869AEF2A903EE845AB05CB63FA4526659410625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:31:b3:0b:91:c7:9c:bf:76:73:cd:2b:32: 9b:4a:50:d2:04:41:74:f0:81:69:91:55:87:ca:8b: 52:64:c5:61:e9:cd:d8:bf:49:d6:25:ac:d6:e2:4a: 98:41:67:93:7f:4f:49:57:5e:43:d1:8e:a0:5e:40: 2d:2f:5c:c9:16:20:82:b8:7b:a8:6f:7b:9e:5b:ea: 47:9b:e9:1a:ea:37:6e:ae:b3:35:bc:44:b4:fd:96: 67:c6:a3:8a:4e:f0:e0:59:b8:e3:fb:3c:7a:51:52: c8:2e:13:e8:40:3d:cd:f4:23:a3:31:de:6a:9d:ec: c2:97:6d:26:4f:c8:4c:4c:2d:d8:e6:e3:9e:d2:0a: a1:ca:9e:6b:ed:7e:11:bd:9d:f8:ce:a1:0d:28:e0: 3a:c9:e3:d8:d1:c1:6e:eb:b6:31:cc:ba:19:c6:61: 1e:6e:c8:05:2a:58:fe:49:40:e3:b0:d3:85:29:7c: 53:9e:ba:19:fa:ee:cf:e2:f2:56:f7:27:54:d4:0e: ff:d2:86:8f:46:86:8b:e1:fe:d6:97:e7:ac:97:aa: d7:19:a7:41:50:eb:9e:13:a9:86:29:3c:9b:55:6c: 3a:71:33:e6:3c:13:f0:04:4a:40:1e:33:12:97:e2: 9f:20:6d:ab:4a:9d:98:60:f8:63:44:93:af:8b:e0: a3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:69:AE:F2:A9:03:EE:84:5A:B0:5C:B6:3F:A4:52:66:59:41:06:25 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323430303a3a2f34382d3438203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:9b00:2400::/48 Signature Algorithm: sha256WithRSAEncryption a1:e7:ca:4c:af:b6:48:13:3c:82:09:8f:f8:bd:dc:2d:b8:92: 65:b6:a5:08:68:ff:da:7b:7e:84:e8:0e:bc:19:5e:ea:d7:9b: 1a:97:5e:4d:7d:11:96:a3:a9:af:9f:58:53:4a:b2:bb:5d:61: e5:95:10:f8:62:d3:d2:b7:41:a4:86:3f:bf:99:fe:c7:4e:a3: 8a:92:88:4f:a1:c4:79:3f:7b:48:20:70:01:7f:c4:58:e7:dc: a7:d1:08:72:14:49:cb:4d:cc:07:32:b3:88:16:c7:60:14:d3: 1f:b4:eb:4b:7c:84:01:5b:e3:d9:55:73:4d:66:08:34:27:2c: 0d:12:6e:04:0f:2f:e9:55:09:e5:43:6c:74:62:36:23:ae:62: 48:5d:91:69:bf:27:e9:03:55:7e:0e:5d:62:e8:f1:38:02:92: 69:83:a8:f2:ea:91:0f:00:31:fb:a6:c5:8a:d1:86:3c:14:48: 0c:f3:3a:10:bd:0f:bc:7e:86:1c:dc:0d:eb:8d:66:c8:b9:6e: 6c:92:53:0f:c8:d7:9c:fc:2d:6c:b5:24:10:80:7b:03:90:1c: 87:a9:ed:f6:a0:e3:e1:f3:9b:bc:09:50:b6:d2:b9:41:1f:f1: b8:23:9f:e0:2b:17:bb:f5:97:8f:ee:3c:7b:f9:09:fe:2e:9d: b9:51:db:a2 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUPVc/2HnG83w0JoNN5vDLPGBm6yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAxMjAwMTE0MTJaFw0yNzAxMTkwMTE5MTJaMDMxMTAvBgNV BAMTKDk4NjlBRUYyQTkwM0VFODQ1QUIwNUNCNjNGQTQ1MjY2NTk0MTA2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0STGzC5HHnL92c80rMptKUNIE QXTwgWmRVYfKi1JkxWHpzdi/SdYlrNbiSphBZ5N/T0lXXkPRjqBeQC0vXMkWIIK4 e6hve55b6keb6RrqN26uszW8RLT9lmfGo4pO8OBZuOP7PHpRUsguE+hAPc30I6Mx 3mqd7MKXbSZPyExMLdjm457SCqHKnmvtfhG9nfjOoQ0o4DrJ49jRwW7rtjHMuhnG YR5uyAUqWP5JQOOw04UpfFOeuhn67s/i8lb3J1TUDv/Sho9Ghovh/taX56yXqtcZ p0FQ654TqYYpPJtVbDpxM+Y8E/AESkAeMxKX4p8gbatKnZhg+GNEk6+L4KMPAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUmGmu8qkD7oRasFy2P6RSZllBBiUwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTc5NDU4LzAvMzIzNDMwMzMz YTM5NjIzMDMwM2EzMjM0MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzcz NjMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkA5sAJAAwDQYJKoZIhvcNAQELBQADggEBAKHnykyv tkgTPIIJj/i93C24kmW2pQho/9p7foToDrwZXurXmxqXXk19EZajqa+fWFNKsrtd YeWVEPhi09K3QaSGP7+Z/sdOo4qSiE+hxHk/e0ggcAF/xFjn3KfRCHIUSctNzAcy s4gWx2AU0x+060t8hAFb49lVc01mCDQnLA0SbgQPL+lVCeVDbHRiNiOuYkhdkWm/ J+kDVX4OXWLo8TgCkmmDqPLqkQ8AMfumxYrRhjwUSAzzOhC9D7x+hhzcDeuNZsi5 bmySUw/I15z8LWy1JBCAewOQHIep7fag4+Hzm7wJULbSuUEf8bgjn+ArF7v1l4/u PHv5Cf4unblR26I= -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:00 2026 by rpki-client