This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/323430303a383230313a3a2f34382d313238203d3e203435303631.roa File: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (raw, json) Hash identifier: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs= Subject key identifier: A2:A6:C6:B4:55:E4:73:57:5A:0B:31:49:5E:62:ED:2A:27:B6:E7:B0 Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 2A7E40A2FEF190415524A6B3534E04ED532FF63E Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/323430303a383230313a3a2f34382d313238203d3e203435303631.roa Signing time: Tue 20 Jan 2026 02:20:17 +0000 ROA not before: Tue 20 Jan 2026 02:15:17 +0000 ROA not after: Tue 19 Jan 2027 02:20:17 +0000 asID: 45061 IP address blocks: 2400:8201::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7e:40:a2:fe:f1:90:41:55:24:a6:b3:53:4e:04:ed:53:2f:f6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Jan 20 02:15:17 2026 GMT Not After : Jan 19 02:20:17 2027 GMT Subject: CN=A2A6C6B455E473575A0B31495E62ED2A27B6E7B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:8e:87:d6:ac:5f:3a:f9:e0:d4:e7:ef:8b: 4d:46:6e:02:57:e8:49:52:fd:f2:e5:40:82:1c:5c: ca:91:8a:88:50:eb:7d:cf:88:e9:ef:ac:80:be:56: a3:15:7c:26:56:1f:cb:d4:26:74:62:5c:e5:34:07: c7:8c:75:4d:34:f8:8d:af:1f:cc:81:75:01:11:a5: c2:f5:13:fc:3d:fc:f0:c7:3a:c1:76:43:13:4c:83: 84:fc:e7:2a:ff:c0:2f:49:f9:dc:86:8e:af:c2:7f: 07:04:19:f4:1b:f8:15:99:9d:12:e1:f7:14:0f:b5: 51:7a:2b:c5:3b:06:e0:b1:7d:0d:a8:17:c0:aa:37: 2d:51:2b:59:04:87:c2:c0:df:33:e0:35:6f:ac:bb: b9:b2:47:9e:02:eb:f1:88:e9:c2:68:77:d9:33:3e: d0:c6:a4:89:3b:b2:e3:51:74:e3:5c:01:b1:9c:e1: 4c:3c:97:d9:cf:aa:cb:03:ee:de:0e:aa:f1:c5:81: d9:65:fe:2c:17:56:8e:84:a7:67:30:b7:66:b6:d0: 1f:22:42:bd:7d:d0:5d:6d:67:3f:38:82:32:b0:b5: 39:43:4e:ec:3a:43:e2:c1:e1:ef:b7:98:d8:89:d3: c8:cc:29:a6:38:16:fd:3e:2e:68:c0:2b:ee:fa:3b: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A6:C6:B4:55:E4:73:57:5A:0B:31:49:5E:62:ED:2A:27:B6:E7:B0 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/323430303a383230313a3a2f34382d313238203d3e203435303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:8201::/48 Signature Algorithm: sha256WithRSAEncryption 5e:9f:39:4b:85:69:7f:b5:42:bc:0f:ce:4e:5a:10:94:cd:fb: 10:d6:85:27:64:3c:99:81:4b:b9:49:87:7c:09:ef:9e:0e:37: 9e:0f:b2:19:0d:da:34:09:d4:3f:9a:3d:ca:26:56:21:de:6d: 40:f8:a6:1a:51:fe:cb:1f:1b:41:50:24:ed:ef:23:8f:bb:93: c4:2d:6c:6b:92:88:47:73:8b:29:48:58:96:7d:46:1d:07:7d: 5f:8f:46:ff:08:0b:52:b2:79:a2:c0:29:30:b9:62:c6:0c:2e: 1d:20:96:9c:65:57:fa:fd:bc:c5:f8:21:6d:bf:50:c6:98:10: 2c:e6:d5:d4:12:4c:41:b6:79:55:cc:0f:f3:af:11:00:5c:e6: 37:a2:ab:1c:38:33:60:18:19:44:db:9e:69:64:9e:12:b6:00: 10:fc:94:fb:17:1c:63:73:0f:08:d8:74:2c:26:03:36:6a:09: 7e:65:be:d8:84:12:f7:f9:31:66:4c:a1:88:2c:f6:de:24:94: 78:0a:a7:aa:84:df:18:e4:aa:ab:c4:fa:4f:a4:76:0a:2f:08: 55:6a:b4:cd:2a:09:13:1c:b4:c8:ff:80:17:f5:17:5f:01:a6: 17:a0:b3:c4:65:81:8c:ef:33:50:90:26:89:2c:e4:97:bc:31: ef:eb:1e:4a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKn5Aov7xkEFVJKazU04E7VMv9j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjAxMjAwMjE1MTdaFw0yNzAxMTkwMjIwMTdaMDMxMTAvBgNV BAMTKEEyQTZDNkI0NTVFNDczNTc1QTBCMzE0OTVFNjJFRDJBMjdCNkU3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGI6H1qxfOvng1Ofvi01GbgJX 6ElS/fLlQIIcXMqRiohQ633PiOnvrIC+VqMVfCZWH8vUJnRiXOU0B8eMdU00+I2v H8yBdQERpcL1E/w9/PDHOsF2QxNMg4T85yr/wC9J+dyGjq/CfwcEGfQb+BWZnRLh 9xQPtVF6K8U7BuCxfQ2oF8CqNy1RK1kEh8LA3zPgNW+su7myR54C6/GI6cJod9kz PtDGpIk7suNRdONcAbGc4Uw8l9nPqssD7t4OqvHFgdll/iwXVo6Ep2cwt2a20B8i Qr190F1tZz84gjKwtTlDTuw6Q+LB4e+3mNiJ08jMKaY4Fv0+LmjAK+76O3lhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUoqbGtFXkc1daCzFJXmLtKie257AwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzQ3MTg3My8wLzMyMzQzMDMwM2Ez ODMyMzAzMTNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIwMzQzNTMwMzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQAggEAADANBgkqhkiG9w0BAQsFAAOCAQEAXp85S4Vpf7VCvA/OTloQ lM37ENaFJ2Q8mYFLuUmHfAnvng43ng+yGQ3aNAnUP5o9yiZWId5tQPimGlH+yx8b QVAk7e8jj7uTxC1sa5KIR3OLKUhYln1GHQd9X49G/wgLUrJ5osApMLlixgwuHSCW nGVX+v28xfghbb9QxpgQLObV1BJMQbZ5VcwP868RAFzmN6KrHDgzYBgZRNueaWSe ErYAEPyU+xccY3MPCNh0LCYDNmoJfmW+2IQS9/kxZkyhiCz23iSUeAqnqoTfGOSq q8T6T6R2Ci8IVWq0zSoJExy0yP+AF/UXXwGmF6CzxGWBjO8zUJAmiSzkl7wx7+se Sg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:19 2026 by rpki-client