This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/323430303a383230313a3a2f33322d313238203d3e203435303631.roa File: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (raw, json) Hash identifier: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ= Subject key identifier: 04:57:8D:C8:3D:A8:66:10:01:F1:E1:4B:20:7A:3C:6F:EF:36:2A:96 Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 54176F3D1E8FF0429381818B73DB3CBC1E440E9A Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/323430303a383230313a3a2f33322d313238203d3e203435303631.roa Signing time: Tue 20 Jan 2026 02:20:17 +0000 ROA not before: Tue 20 Jan 2026 02:15:17 +0000 ROA not after: Tue 19 Jan 2027 02:20:17 +0000 asID: 45061 IP address blocks: 2400:8201::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:17:6f:3d:1e:8f:f0:42:93:81:81:8b:73:db:3c:bc:1e:44:0e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Jan 20 02:15:17 2026 GMT Not After : Jan 19 02:20:17 2027 GMT Subject: CN=04578DC83DA8661001F1E14B207A3C6FEF362A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:8e:a8:8c:1f:4a:78:ac:90:e7:c7:da:db: b6:fe:ae:e3:18:02:ae:55:bc:2c:03:0c:39:8b:20: 59:53:cb:a8:b2:ee:b4:2e:4d:34:5c:cd:09:a8:ff: 2e:f6:c8:9b:b6:06:a1:03:bf:9a:58:4a:ae:fc:2f: 5d:d8:20:e2:68:1f:b3:3c:39:c8:f7:e6:1e:b0:32: e6:2b:a4:40:63:88:cc:fc:3e:4b:cb:e7:8f:73:de: 83:d4:45:c3:a5:57:3e:9b:f8:4a:33:d0:bf:a3:c2: 07:1f:3d:84:1e:e4:87:21:e2:55:c3:7e:31:e7:06: c0:d5:33:20:31:09:d8:3f:77:f7:22:72:68:d2:55: ef:17:b0:de:a7:73:ab:c6:56:f4:b3:61:ed:df:5e: 8e:a4:b3:ee:e5:3e:3d:ca:40:ff:02:b2:05:47:a2: 50:df:b5:b5:50:cd:50:21:2a:b7:8a:bf:b9:45:b4: 04:cc:10:e1:f3:91:f2:ed:26:85:23:e6:ae:49:23: fc:24:e6:31:2b:49:07:43:16:25:ee:f0:a3:e5:d1: 43:bf:69:9b:c9:1e:23:22:0a:c5:13:f4:70:86:6c: 2c:c6:32:cc:a6:aa:52:6d:76:a3:53:7b:f1:8d:d0: df:b9:42:0d:6f:e6:54:58:b2:eb:34:88:c1:a3:7c: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:57:8D:C8:3D:A8:66:10:01:F1:E1:4B:20:7A:3C:6F:EF:36:2A:96 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/323430303a383230313a3a2f33322d313238203d3e203435303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:8201::/32 Signature Algorithm: sha256WithRSAEncryption 53:1a:90:fc:48:88:b6:bf:58:d7:31:17:62:49:9b:6b:d6:7e: 93:1b:06:4b:28:a8:38:05:1c:60:03:45:00:bb:99:5e:d0:67: 28:7b:bf:e0:88:b5:85:07:68:98:a8:fd:14:80:04:7d:69:02: e9:da:e7:57:73:b8:3e:01:c9:ca:0a:82:6b:04:23:5d:71:e1: b8:81:b2:37:1e:4b:64:dd:8f:d5:20:ce:eb:85:31:c4:5f:36: 01:0d:74:99:e0:70:0a:c9:65:b2:a9:79:5f:df:25:3a:f8:1e: 09:bd:fa:fb:5b:fa:85:1c:22:45:f7:c6:94:be:21:20:ec:29: b7:f2:3c:99:82:3a:b5:38:e2:fb:ed:a0:64:96:05:69:6c:d9: cb:58:02:30:32:89:1a:0b:8f:a9:ff:38:bc:5e:2d:e4:e8:b7: 44:a7:17:90:8d:6e:30:50:a6:88:ab:1c:9d:bd:64:33:98:a0: 31:d1:c3:bb:65:59:c2:e7:6a:bf:7c:1f:db:cf:f1:b4:cd:63: 27:da:99:49:df:2d:7b:cd:75:a3:5a:93:de:d2:45:0f:d2:66: 32:ba:a9:35:84:d0:f7:f1:e4:98:e5:e9:e1:bd:e0:51:10:f7: 69:74:5c:5e:e9:b5:5d:50:52:bc:cf:be:15:41:eb:bb:0e:0e: a6:f2:00:9d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUVBdvPR6P8EKTgYGLc9s8vB5EDpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjAxMjAwMjE1MTdaFw0yNzAxMTkwMjIwMTdaMDMxMTAvBgNV BAMTKDA0NTc4REM4M0RBODY2MTAwMUYxRTE0QjIwN0EzQzZGRUYzNjJBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvy46ojB9KeKyQ58fa27b+ruMY Aq5VvCwDDDmLIFlTy6iy7rQuTTRczQmo/y72yJu2BqEDv5pYSq78L13YIOJoH7M8 Ocj35h6wMuYrpEBjiMz8PkvL549z3oPURcOlVz6b+Eoz0L+jwgcfPYQe5Ich4lXD fjHnBsDVMyAxCdg/d/cicmjSVe8XsN6nc6vGVvSzYe3fXo6ks+7lPj3KQP8CsgVH olDftbVQzVAhKreKv7lFtATMEOHzkfLtJoUj5q5JI/wk5jErSQdDFiXu8KPl0UO/ aZvJHiMiCsUT9HCGbCzGMsymqlJtdqNTe/GN0N+5Qg1v5lRYsus0iMGjfKCtAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUBFeNyD2oZhAB8eFLIHo8b+82KpYwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzQ3MTg3My8wLzMyMzQzMDMwM2Ez ODMyMzAzMTNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzQzNTMwMzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQAggEwDQYJKoZIhvcNAQELBQADggEBAFMakPxIiLa/WNcxF2JJm2vW fpMbBksoqDgFHGADRQC7mV7QZyh7v+CItYUHaJio/RSABH1pAuna51dzuD4BycoK gmsEI11x4biBsjceS2Tdj9UgzuuFMcRfNgENdJngcArJZbKpeV/fJTr4Hgm9+vtb +oUcIkX3xpS+ISDsKbfyPJmCOrU44vvtoGSWBWls2ctYAjAyiRoLj6n/OLxeLeTo t0SnF5CNbjBQpoirHJ29ZDOYoDHRw7tlWcLnar98H9vP8bTNYyfamUnfLXvNdaNa k97SRQ/SZjK6qTWE0Pfx5Jjl6eG94FEQ92l0XF7ptV1QUrzPvhVB67sODqbyAJ0= -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:13 2026 by rpki-client