This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/323430313a333830303a3a2f33322d3438203d3e203234343234.roa File: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (raw, json) Hash identifier: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg= Subject key identifier: A6:C2:8E:2C:13:31:81:0A:9D:19:34:DE:F8:09:9D:B8:F5:FF:BA:A0 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 5C8FFD47E7DFB96BF3EDB4720B968B033D6178CF Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/323430313a333830303a3a2f33322d3438203d3e203234343234.roa Signing time: Tue 20 Jan 2026 02:23:46 +0000 ROA not before: Tue 20 Jan 2026 02:18:46 +0000 ROA not after: Tue 19 Jan 2027 02:23:46 +0000 asID: 24424 IP address blocks: 2401:3800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8f:fd:47:e7:df:b9:6b:f3:ed:b4:72:0b:96:8b:03:3d:61:78:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: Jan 20 02:18:46 2026 GMT Not After : Jan 19 02:23:46 2027 GMT Subject: CN=A6C28E2C1331810A9D1934DEF8099DB8F5FFBAA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:30:c1:c7:67:9b:83:cd:8b:c3:55:ca:e6: 78:23:8b:2a:16:c6:0f:b8:50:b1:a3:4a:a9:10:a9: c6:cf:de:32:cd:9c:53:3d:62:d6:4b:6b:53:30:8d: e3:7d:16:fe:aa:68:38:16:da:0b:c0:50:61:ac:be: 41:a7:45:5e:ca:6f:1a:f9:c6:9e:12:04:e5:06:9d: d0:e4:6a:ac:47:42:2e:a5:cf:97:33:60:a1:97:e2: 6b:d0:54:e8:f6:83:60:dd:24:0d:4d:b2:5b:f5:4a: fb:63:3a:2a:77:f2:11:cd:5e:59:39:c2:e0:27:b6: f9:58:05:07:c6:ec:3d:33:ee:97:0e:97:bd:b8:a9: 94:d0:ee:9e:5d:57:8c:a6:03:58:fb:09:a0:26:e1: b8:d1:6e:63:16:da:49:e6:08:49:bf:9d:a4:5c:44: 88:6c:dc:64:9d:48:db:42:f0:9d:38:01:22:53:c9: f1:32:c3:3c:52:ea:8a:3e:33:d5:ee:96:ad:67:b8: 73:d6:aa:12:04:67:0e:03:f5:d2:09:29:31:dc:28: ba:d4:ed:ff:f6:dd:0c:37:90:04:7c:eb:be:46:41: 7b:fb:d9:cd:01:b6:ad:4b:ea:96:80:42:6e:1b:d9: 9a:d7:66:57:c2:bd:73:3e:6e:47:a0:ef:ef:7f:b9: 6c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C2:8E:2C:13:31:81:0A:9D:19:34:DE:F8:09:9D:B8:F5:FF:BA:A0 X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/323430313a333830303a3a2f33322d3438203d3e203234343234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3800::/32 Signature Algorithm: sha256WithRSAEncryption 96:6b:99:24:bd:cd:7c:5f:3a:43:5b:1d:58:58:ad:85:e7:cd: ee:f0:c9:d6:0b:fb:c5:d7:37:bf:65:10:2a:66:c8:50:99:c3: c5:07:72:af:c4:5f:f5:b5:9f:46:d7:e1:1d:0b:ad:ec:24:e3: c4:5f:be:a6:45:4a:fc:c2:af:63:63:3f:9e:d0:b0:a2:a3:04: a5:ab:5d:3d:19:35:68:50:4b:d1:85:14:2d:95:1f:02:f3:23: 73:87:18:f6:30:48:ee:04:d1:db:5f:a2:79:cb:95:8f:ab:38: d4:43:58:08:b2:27:08:cd:96:2f:87:0c:eb:20:f1:1d:54:aa: fe:f7:f8:f2:98:19:69:dd:74:3c:71:3a:b5:ce:f5:88:1e:24: 85:e8:6a:fe:f2:d4:34:8c:7e:22:6f:2a:01:62:a7:11:89:3b: 77:e9:40:e5:9f:ce:dd:03:ba:21:57:d7:04:8e:84:60:72:0b: 46:23:1e:55:9e:b5:e9:ec:85:4f:db:9e:d5:cb:ba:a2:a8:e8: ec:c3:f9:d5:52:70:f5:17:b2:1b:ab:2e:70:16:a2:22:55:11: f7:fd:c6:c6:4f:75:b8:d0:62:70:bd:68:44:d1:76:f9:a2:17: 3a:36:c9:95:e5:3b:44:ca:37:37:12:30:07:aa:a9:16:64:4c: 6f:4d:ed:52 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUXI/9R+ffuWvz7bRyC5aLAz1heM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjAxMjAwMjE4NDZaFw0yNzAxMTkwMjIzNDZaMDMxMTAvBgNV BAMTKEE2QzI4RTJDMTMzMTgxMEE5RDE5MzRERUY4MDk5REI4RjVGRkJBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrTDBx2ebg82Lw1XK5ngjiyoW xg+4ULGjSqkQqcbP3jLNnFM9YtZLa1MwjeN9Fv6qaDgW2gvAUGGsvkGnRV7Kbxr5 xp4SBOUGndDkaqxHQi6lz5czYKGX4mvQVOj2g2DdJA1Nslv1SvtjOip38hHNXlk5 wuAntvlYBQfG7D0z7pcOl724qZTQ7p5dV4ymA1j7CaAm4bjRbmMW2knmCEm/naRc RIhs3GSdSNtC8J04ASJTyfEywzxS6oo+M9Xulq1nuHPWqhIEZw4D9dIJKTHcKLrU 7f/23Qw3kAR8675GQXv72c0Btq1L6paAQm4b2ZrXZlfCvXM+bkeg7+9/uWzHAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUpsKOLBMxgQqdGTTe+AmduPX/uqAwHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NDA2MzM3LzAvMzIzNDMwMzEzYTMz MzgzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNDM0MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBOAAwDQYJKoZIhvcNAQELBQADggEBAJZrmSS9zXxfOkNbHVhYrYXnze7w ydYL+8XXN79lECpmyFCZw8UHcq/EX/W1n0bX4R0Lrewk48RfvqZFSvzCr2NjP57Q sKKjBKWrXT0ZNWhQS9GFFC2VHwLzI3OHGPYwSO4E0dtfonnLlY+rONRDWAiyJwjN li+HDOsg8R1Uqv73+PKYGWnddDxxOrXO9YgeJIXoav7y1DSMfiJvKgFipxGJO3fp QOWfzt0DuiFX1wSOhGByC0YjHlWetenshU/bntXLuqKo6OzD+dVScPUXshurLnAW oiJVEff9xsZPdbjQYnC9aETRdvmiFzo2yZXlO0TKNzcSMAeqqRZkTG9N7VI= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:43 2026 by rpki-client