This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/323430303a656530303a3a2f33322d3634203d3e203137393632.roa File: 323430303a656530303a3a2f33322d3634203d3e203137393632.roa (raw, json) Hash identifier: 1s9AHeqFacmS2ERAUAUAA+MVZyukBR4FW2yZWjR7rV4= Subject key identifier: 72:FF:4A:E5:29:50:84:91:9D:7E:09:E4:39:64:63:79:A8:F0:C9:DE Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Certificate serial: 5BDD03103F91328A6ED665F7B3F1C418224540A5 Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/323430303a656530303a3a2f33322d3634203d3e203137393632.roa Signing time: Tue 20 Jan 2026 02:14:14 +0000 ROA not before: Tue 20 Jan 2026 02:09:14 +0000 ROA not after: Tue 19 Jan 2027 02:14:14 +0000 asID: 17962 IP address blocks: 2400:ee00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:dd:03:10:3f:91:32:8a:6e:d6:65:f7:b3:f1:c4:18:22:45:40:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Validity Not Before: Jan 20 02:09:14 2026 GMT Not After : Jan 19 02:14:14 2027 GMT Subject: CN=72FF4AE5295084919D7E09E439646379A8F0C9DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:8d:24:89:55:23:b8:d2:22:77:b7:cd:b7: 2e:a0:31:24:fa:83:51:50:ec:fe:3b:ca:26:bb:81: d8:5c:0b:b8:2c:e4:03:54:e4:47:eb:4e:d7:f2:75: 13:d6:de:e1:f6:cd:92:54:cf:a9:56:ea:56:3d:70: b7:0a:4b:ca:a1:f8:e7:bc:a0:11:38:6d:60:07:ba: cd:3a:c8:4c:66:dc:33:7a:2d:bc:63:8b:8c:fd:2c: 1b:8d:bb:0b:ee:0e:4b:ca:a4:ac:ed:37:17:d9:43: 4e:85:ef:75:93:98:80:84:29:8a:3b:e8:d0:f4:c3: 41:dd:1f:27:65:32:57:3a:cb:2c:eb:42:30:cb:9d: 48:37:5b:b7:59:72:42:d3:48:50:4b:c7:c3:bd:36: 54:cc:0c:7a:6d:e3:8a:a5:0c:f9:f4:d8:4d:09:ce: 2d:b5:90:92:ed:b6:43:6d:cd:fd:00:56:47:6d:94: 6c:3c:fd:81:e9:84:45:8d:ce:69:b6:f0:75:bc:1f: 34:47:48:71:b0:ad:9b:9a:77:25:4b:1c:6c:42:74: 1f:4a:25:df:8e:df:bc:fe:43:81:a8:be:84:07:15: 84:7b:b0:6d:8e:d5:2c:fb:52:57:e5:c4:c2:b1:07: 07:58:96:8e:6d:de:c8:da:50:56:5a:a9:2c:1c:76: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FF:4A:E5:29:50:84:91:9D:7E:09:E4:39:64:63:79:A8:F0:C9:DE X509v3 Authority Key Identifier: keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/323430303a656530303a3a2f33322d3634203d3e203137393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ee00::/32 Signature Algorithm: sha256WithRSAEncryption a4:4d:6f:b7:0a:11:ac:07:5b:17:3b:1c:ad:a6:3e:39:c9:57: 93:87:9b:e3:f3:e9:f9:24:b0:5a:8b:8a:8d:8f:84:cd:a7:1f: e9:81:3b:b4:e3:92:de:c1:53:eb:56:7e:5b:93:24:d9:05:35: f3:11:ed:e8:16:a7:73:aa:27:ca:64:00:b7:63:9a:4a:7e:e7: 15:28:65:4e:03:98:9a:98:61:97:97:ad:6a:64:b9:c9:24:56: 9f:59:6b:3e:b3:8a:67:0d:02:b6:75:dc:2b:7c:84:9a:fb:88: bb:66:aa:52:de:b2:44:45:e4:bd:4b:54:ef:98:19:e2:d1:7b: 73:e0:71:e2:33:6d:a9:e4:c1:26:b6:24:b3:33:ae:c1:b7:85: 9f:e9:94:c9:c7:67:88:d3:d7:c1:e3:17:7c:26:01:96:36:c6: 53:d8:c3:4b:63:f6:33:20:c1:30:13:b5:66:ff:9e:ce:90:80: 47:98:14:d0:43:de:2d:4b:44:85:a4:f7:59:a3:fe:47:d7:a4: 40:ff:5b:1e:ed:ca:1e:99:f5:79:36:6e:dd:c6:31:ba:a1:6a: e4:64:3f:d1:46:cd:32:9d:84:95:c7:f3:cb:67:7f:c4:4f:57: ef:f3:40:7c:9a:4b:03:dd:66:d8:09:90:a4:b4:b0:10:2f:d1: 66:11:04:f2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUW90DED+RMopu1mX3s/HEGCJFQKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0 QjRCRDQyNjAeFw0yNjAxMjAwMjA5MTRaFw0yNzAxMTkwMjE0MTRaMDMxMTAvBgNV BAMTKDcyRkY0QUU1Mjk1MDg0OTE5RDdFMDlFNDM5NjQ2Mzc5QThGMEM5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7I0kiVUjuNIid7fNty6gMST6 g1FQ7P47yia7gdhcC7gs5ANU5EfrTtfydRPW3uH2zZJUz6lW6lY9cLcKS8qh+Oe8 oBE4bWAHus06yExm3DN6Lbxji4z9LBuNuwvuDkvKpKztNxfZQ06F73WTmICEKYo7 6ND0w0HdHydlMlc6yyzrQjDLnUg3W7dZckLTSFBLx8O9NlTMDHpt44qlDPn02E0J zi21kJLttkNtzf0AVkdtlGw8/YHphEWNzmm28HW8HzRHSHGwrZuadyVLHGxCdB9K Jd+O37z+Q4GovoQHFYR7sG2O1Sz7UlflxMKxBwdYlo5t3sjaUFZaqSwcduQHAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUcv9K5SlQhJGdfgnkOWRjeajwyd4wHwYDVR0j BBgwFoAUrdeakGE8n6LtEpTHf9uwh0tL1CYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzE0NDE5My8wL0FERDc5QTkwNjEzQzlGQTJFRDEyOTRDNzdGREJC MDg3NEI0QkQ0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0QjRCRDQyNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MTQ0MTkzLzAvMzIzNDMwMzAzYTY1 NjUzMDMwM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzEzNzM5MzYzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQA7gAwDQYJKoZIhvcNAQELBQADggEBAKRNb7cKEawHWxc7HK2mPjnJV5OH m+Pz6fkksFqLio2PhM2nH+mBO7Tjkt7BU+tWfluTJNkFNfMR7egWp3OqJ8pkALdj mkp+5xUoZU4DmJqYYZeXrWpkuckkVp9Zaz6zimcNArZ13Ct8hJr7iLtmqlLeskRF 5L1LVO+YGeLRe3PgceIzbankwSa2JLMzrsG3hZ/plMnHZ4jT18HjF3wmAZY2xlPY w0tj9jMgwTATtWb/ns6QgEeYFNBD3i1LRIWk91mj/kfXpED/Wx7tyh6Z9Xk2bt3G MbqhauRkP9FGzTKdhJXH88tnf8RPV+/zQHyaSwPdZtgJkKS0sBAv0WYRBPI= -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:25 2026 by rpki-client