This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323430303a3a2f34382d3438203d3e2034383132.roa File: 323430333a396230303a323430303a3a2f34382d3438203d3e2034383132.roa (raw, json) Hash identifier: Jp2XGNH52ssQ0bdikTWGuqpgPCbzux6iZDhsBMPzYMw= Subject key identifier: 0C:73:A8:AB:A2:84:2D:67:79:C8:26:CB:9F:DB:6D:05:CA:E2:DE:50 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 1C77908EBAF4E8B01A894F5FD7DA301A4A8E9FB0 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323430303a3a2f34382d3438203d3e2034383132.roa Signing time: Tue 20 Jan 2026 01:19:13 +0000 ROA not before: Tue 20 Jan 2026 01:14:13 +0000 ROA not after: Tue 19 Jan 2027 01:19:13 +0000 asID: 4812 IP address blocks: 2403:9b00:2400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:77:90:8e:ba:f4:e8:b0:1a:89:4f:5f:d7:da:30:1a:4a:8e:9f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jan 20 01:14:13 2026 GMT Not After : Jan 19 01:19:13 2027 GMT Subject: CN=0C73A8ABA2842D6779C826CB9FDB6D05CAE2DE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ca:52:7d:90:45:75:c2:66:1a:c6:28:07:bf: fe:f0:94:02:d2:9b:2d:e2:e2:85:a6:ff:e6:b0:04: 42:a0:08:06:87:c9:c5:94:b3:13:9a:85:05:59:f3: 45:e7:65:97:aa:c9:03:a0:b4:7b:a1:2f:d6:2a:f0: fc:26:08:29:24:4a:23:e3:7d:c9:ba:21:ad:8f:b8: 56:95:57:5d:a7:e3:dc:f4:52:52:a4:c2:80:41:75: 2e:26:fe:a1:a8:c5:56:b9:dd:38:ec:7c:ad:07:6e: 2e:96:a9:31:74:34:7d:50:b7:b6:f0:bf:6a:8f:b4: d7:fe:db:94:0e:a9:60:b9:e6:00:75:4a:24:b4:f7: 24:98:30:0b:a2:50:68:7a:53:e4:e1:c2:9c:f2:41: d3:bb:c7:94:02:79:42:a1:8b:38:18:e1:a5:25:47: 58:ce:9b:09:58:ec:78:47:fe:3a:88:78:fa:07:df: 5b:d9:c2:ab:1c:02:f8:5b:15:94:6a:95:1c:25:70: 39:eb:13:d6:55:3f:3b:40:f9:b5:0d:47:90:d9:90: d0:1b:00:34:6c:b8:84:25:55:55:6b:7e:ae:e0:0c: d1:61:e2:09:7a:db:67:c8:3a:af:5e:27:a1:8f:25: 85:78:64:a7:31:1e:44:b7:57:52:29:50:1b:9f:73: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:73:A8:AB:A2:84:2D:67:79:C8:26:CB:9F:DB:6D:05:CA:E2:DE:50 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/323430333a396230303a323430303a3a2f34382d3438203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:9b00:2400::/48 Signature Algorithm: sha256WithRSAEncryption 1a:6e:dc:2b:62:de:b9:d9:b9:95:5b:be:5c:d9:fb:fc:ca:7c: 70:ff:6f:1d:ce:0a:57:9b:10:54:c5:d4:79:78:67:3f:b7:30: 46:26:83:b9:cf:89:aa:38:df:e1:37:22:69:8d:06:ad:13:7d: 74:c7:70:29:a6:db:38:22:74:95:77:8b:45:ba:1a:5f:e1:24: 08:0b:d4:9f:db:9d:df:65:fd:c9:bc:c2:03:01:13:f1:52:f0: 63:2e:75:ae:eb:8e:24:c6:cc:f4:4b:67:b1:6d:1d:66:76:0c: d9:dc:4d:42:4c:29:6b:3c:b7:a6:bd:21:8d:6d:95:52:38:fa: 85:53:90:85:40:80:d0:94:ee:99:8d:88:cc:9c:fd:17:21:80: 70:10:c2:05:75:02:7a:1d:a7:e0:dc:9a:23:56:09:c2:e3:be: 28:d5:5c:72:73:03:72:d4:85:92:12:63:a7:94:f9:98:40:16: 04:d3:d6:36:eb:72:f3:69:77:89:7f:81:ac:53:f3:14:4a:32: f3:a9:0c:9f:35:61:0e:b8:0c:7a:b8:14:bf:0e:81:9f:e4:c3: d0:3a:1e:44:30:3a:7d:aa:c0:f9:dc:fa:1d:af:ce:13:a8:fe: a5:fc:fa:f8:4f:54:15:f9:31:0f:d4:26:4e:b0:76:88:7c:34: d8:56:55:9b -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUHHeQjrr06LAaiU9f19owGkqOn7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAxMjAwMTE0MTNaFw0yNzAxMTkwMTE5MTNaMDMxMTAvBgNV BAMTKDBDNzNBOEFCQTI4NDJENjc3OUM4MjZDQjlGREI2RDA1Q0FFMkRFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkylJ9kEV1wmYaxigHv/7wlALS my3i4oWm/+awBEKgCAaHycWUsxOahQVZ80XnZZeqyQOgtHuhL9Yq8PwmCCkkSiPj fcm6Ia2PuFaVV12n49z0UlKkwoBBdS4m/qGoxVa53TjsfK0Hbi6WqTF0NH1Qt7bw v2qPtNf+25QOqWC55gB1SiS09ySYMAuiUGh6U+ThwpzyQdO7x5QCeUKhizgY4aUl R1jOmwlY7HhH/jqIePoH31vZwqscAvhbFZRqlRwlcDnrE9ZVPztA+bUNR5DZkNAb ADRsuIQlVVVrfq7gDNFh4gl622fIOq9eJ6GPJYV4ZKcxHkS3V1IpUBufc3+PAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUDHOoq6KELWd5yCbLn9ttBcri3lAwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTc5NDU4LzAvMzIzNDMwMzMz YTM5NjIzMDMwM2EzMjM0MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0Mzgz MTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJAObACQAMA0GCSqGSIb3DQEBCwUAA4IBAQAabtwrYt65 2bmVW75c2fv8ynxw/28dzgpXmxBUxdR5eGc/tzBGJoO5z4mqON/hNyJpjQatE310 x3Appts4InSVd4tFuhpf4SQIC9Sf253fZf3JvMIDARPxUvBjLnWu644kxsz0S2ex bR1mdgzZ3E1CTClrPLemvSGNbZVSOPqFU5CFQIDQlO6ZjYjMnP0XIYBwEMIFdQJ6 Hafg3JojVgnC474o1VxycwNy1IWSEmOnlPmYQBYE09Y263LzaXeJf4GsU/MUSjLz qQyfNWEOuAx6uBS/DoGf5MPQOh5EMDp9qsD53Podr84TqP6l/Pr4T1QV+TEP1CZO sHaIfDTYVlWb -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:00 2026 by rpki-client