This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/323430303a383230303a3a2f33322d313238203d3e203435303631.roa File: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (raw, json) Hash identifier: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug= Subject key identifier: 82:AF:EA:FD:8C:73:4F:45:FB:F4:F4:84:D9:01:72:90:E7:B4:14:67 Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 43A60308CD2F7E681AB50F5DD3B52883A8618AEF Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/323430303a383230303a3a2f33322d313238203d3e203435303631.roa Signing time: Tue 20 Jan 2026 02:20:17 +0000 ROA not before: Tue 20 Jan 2026 02:15:17 +0000 ROA not after: Tue 19 Jan 2027 02:20:17 +0000 asID: 45061 IP address blocks: 2400:8200::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a6:03:08:cd:2f:7e:68:1a:b5:0f:5d:d3:b5:28:83:a8:61:8a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Jan 20 02:15:17 2026 GMT Not After : Jan 19 02:20:17 2027 GMT Subject: CN=82AFEAFD8C734F45FBF4F484D9017290E7B41467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:1e:8f:07:29:62:ed:f1:e1:fb:34:da:5f: 72:90:eb:11:32:d7:16:55:2f:e6:33:72:bf:6a:84: 82:18:01:34:42:0d:49:ac:2f:55:d6:e9:2f:22:fd: 06:83:04:12:7c:80:bd:2a:ed:95:4e:c0:4a:f1:11: ce:13:ff:01:07:cf:74:91:a3:ef:e5:5d:52:74:c6: 19:36:79:d9:79:35:1e:71:4c:2c:fc:93:84:0f:da: ce:28:d5:ef:b4:17:a1:20:55:8b:8f:99:14:39:27: 9c:05:5b:0b:06:bf:2a:49:fa:54:00:ff:a8:30:55: 59:99:f2:47:5e:05:0a:24:fa:3e:b8:b3:48:e0:9f: 5a:81:f2:53:a4:f0:92:8b:fe:dc:39:bf:b7:d2:1c: 77:6e:ad:bd:99:f3:3e:48:ba:93:a5:a5:a7:51:f4: c9:6a:aa:86:3c:3f:67:e1:19:97:48:6f:16:a0:1a: 53:f8:b4:11:a2:de:be:e1:77:7a:3a:72:15:c9:69: f7:39:4d:f4:de:95:e2:e9:b7:4d:c0:06:8f:4b:5e: e6:df:da:da:26:e7:cc:00:2e:7d:7c:0e:7d:56:fc: e3:1c:43:70:10:87:ee:1e:26:ca:91:44:0f:22:4b: 8e:aa:3c:8c:4a:5f:47:04:3d:f0:1a:c0:f3:f3:86: 54:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AF:EA:FD:8C:73:4F:45:FB:F4:F4:84:D9:01:72:90:E7:B4:14:67 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/323430303a383230303a3a2f33322d313238203d3e203435303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:8200::/32 Signature Algorithm: sha256WithRSAEncryption 9a:73:53:c3:49:4a:f4:6b:54:b4:63:86:c8:5a:cf:ec:85:86: 47:fd:9d:43:a0:ae:a4:b5:19:0e:e0:bf:d5:39:9b:47:ed:d7: 02:02:d1:3c:0b:aa:a3:b4:3f:d4:b8:a3:cd:28:4d:a4:41:54: d8:1e:42:34:97:52:88:b6:94:80:03:66:e7:c9:34:b7:cf:6f: 70:90:48:58:11:eb:32:5d:a7:15:ad:53:20:b9:51:5c:9c:83: 8e:71:34:33:76:ac:1b:5d:6d:db:85:98:0b:81:1d:99:56:00: 56:ad:3d:9d:7e:11:23:73:5c:62:68:f2:d6:41:62:4e:81:c2: ca:ad:1d:47:00:c3:b3:2a:73:82:0a:c3:e6:10:db:7e:48:b0: 4d:02:69:18:c7:9e:c4:7c:d8:09:a3:ab:33:41:52:32:fd:2e: 0a:d7:98:3c:a7:e3:ce:85:ce:c4:47:5d:4c:f5:27:a8:cd:35: c7:12:26:90:87:80:6f:86:ea:6b:2c:b8:40:34:2a:9e:6b:09: 92:9b:d5:4e:44:d3:6b:e0:57:9e:0d:28:7a:d8:c1:4a:29:b1: 40:cf:1a:06:e7:07:ee:64:b0:49:c9:1b:d7:0a:d8:ad:aa:75: 67:4b:27:fc:07:6d:7e:f3:d7:42:62:3d:4f:ee:a8:00:5a:5a: 59:79:5f:de -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUQ6YDCM0vfmgatQ9d07Uog6hhiu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjAxMjAwMjE1MTdaFw0yNzAxMTkwMjIwMTdaMDMxMTAvBgNV BAMTKDgyQUZFQUZEOEM3MzRGNDVGQkY0RjQ4NEQ5MDE3MjkwRTdCNDE0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNB6PByli7fHh+zTaX3KQ6xEy 1xZVL+Yzcr9qhIIYATRCDUmsL1XW6S8i/QaDBBJ8gL0q7ZVOwErxEc4T/wEHz3SR o+/lXVJ0xhk2edl5NR5xTCz8k4QP2s4o1e+0F6EgVYuPmRQ5J5wFWwsGvypJ+lQA /6gwVVmZ8kdeBQok+j64s0jgn1qB8lOk8JKL/tw5v7fSHHdurb2Z8z5IupOlpadR 9MlqqoY8P2fhGZdIbxagGlP4tBGi3r7hd3o6chXJafc5TfTeleLpt03ABo9LXubf 2tom58wALn18Dn1W/OMcQ3AQh+4eJsqRRA8iS46qPIxKX0cEPfAawPPzhlRxAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUgq/q/YxzT0X79PSE2QFykOe0FGcwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzQ3MTg3My8wLzMyMzQzMDMwM2Ez ODMyMzAzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzQzNTMwMzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQAggAwDQYJKoZIhvcNAQELBQADggEBAJpzU8NJSvRrVLRjhshaz+yF hkf9nUOgrqS1GQ7gv9U5m0ft1wIC0TwLqqO0P9S4o80oTaRBVNgeQjSXUoi2lIAD ZufJNLfPb3CQSFgR6zJdpxWtUyC5UVycg45xNDN2rBtdbduFmAuBHZlWAFatPZ1+ ESNzXGJo8tZBYk6BwsqtHUcAw7Mqc4IKw+YQ235IsE0CaRjHnsR82AmjqzNBUjL9 LgrXmDyn486FzsRHXUz1J6jNNccSJpCHgG+G6mssuEA0Kp5rCZKb1U5E02vgV54N KHrYwUopsUDPGgbnB+5ksEnJG9cK2K2qdWdLJ/wHbX7z10JiPU/uqABaWll5X94= -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:29 2026 by rpki-client