This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/323430353a616430303a3a2f33322d3332203d3e203536303032.roa File: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (raw, json) Hash identifier: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k= Subject key identifier: FF:52:9B:2D:41:81:67:F2:15:4E:6F:25:5D:F2:4B:C8:43:A7:11:C8 Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Certificate serial: 5224F99DC9841C75844050E3041129B72B3506BE Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/323430353a616430303a3a2f33322d3332203d3e203536303032.roa Signing time: Tue 20 Jan 2026 02:20:18 +0000 ROA not before: Tue 20 Jan 2026 02:15:18 +0000 ROA not after: Tue 19 Jan 2027 02:20:18 +0000 asID: 56002 IP address blocks: 2405:ad00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:24:f9:9d:c9:84:1c:75:84:40:50:e3:04:11:29:b7:2b:35:06:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Validity Not Before: Jan 20 02:15:18 2026 GMT Not After : Jan 19 02:20:18 2027 GMT Subject: CN=FF529B2D418167F2154E6F255DF24BC843A711C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:63:81:0a:39:e0:27:38:fc:3b:dc:5c:b0: 7c:6e:7d:09:ac:e1:18:d3:40:ac:0f:5b:fe:ad:40: af:f2:35:93:ea:40:00:8a:ed:6d:3b:50:61:64:53: fb:d7:b7:c9:f2:67:85:92:44:24:b9:a5:aa:fe:b0: 6b:16:c3:ec:03:e2:ff:6c:9d:27:91:78:12:71:10: c0:30:41:42:de:3b:c6:ea:40:16:91:22:7d:6a:ab: 69:6e:fd:ef:c1:a7:d4:63:e9:6a:56:0e:c6:0f:d0: 6d:3f:a3:ce:a3:56:a2:2d:dc:6a:f8:b5:d4:61:84: 4f:e2:7c:53:e6:a0:8a:23:34:5b:52:f7:0f:65:34: 43:0c:15:da:83:06:a0:34:46:cb:8d:17:fc:7b:aa: 79:41:c3:c1:88:39:c7:37:ad:c7:a1:16:dc:cd:0b: 02:9d:99:c6:57:5b:8d:f5:53:26:4d:3e:fe:4a:20: 41:c0:f7:a8:7c:03:04:82:29:d0:62:57:19:e0:73: 12:21:fe:ec:32:7f:13:2e:36:d7:f7:61:a7:73:9e: 0a:0c:b0:61:e4:86:66:50:b7:43:5a:ad:ff:62:cc: 22:7d:00:1a:7c:1a:37:4f:bb:6f:e2:90:1a:d4:a3: 62:99:fb:c8:33:d7:c8:1d:48:f2:b6:22:f6:c0:7a: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:52:9B:2D:41:81:67:F2:15:4E:6F:25:5D:F2:4B:C8:43:A7:11:C8 X509v3 Authority Key Identifier: keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/323430353a616430303a3a2f33322d3332203d3e203536303032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:ad00::/32 Signature Algorithm: sha256WithRSAEncryption 22:5c:56:b8:8c:66:14:95:ee:d0:df:f6:14:d0:7f:ab:fa:90: 69:81:01:fa:b4:04:40:87:3a:aa:b0:d8:e8:b2:6c:6c:2f:a5: c9:a6:df:b6:e9:e2:12:5f:3c:00:fe:38:d0:8e:49:45:47:5a: 34:98:74:77:7c:56:eb:10:92:c0:cb:3f:af:96:75:74:38:86: 48:e2:de:c9:bf:09:bd:21:27:ae:74:62:d3:e7:a5:32:e3:48: 78:27:63:03:91:a9:2a:e8:94:6e:9b:e7:38:59:d9:93:aa:0a: a7:c8:ea:28:54:df:d5:d4:41:ee:cc:85:cb:53:42:b6:55:dc: 39:04:ad:5f:5f:eb:50:bc:b8:ea:e9:5e:55:f4:94:b1:b9:45: 36:bc:cd:03:6c:da:59:bb:0b:51:e6:52:78:0e:f8:67:4a:72: 81:42:94:53:81:78:fb:19:5b:fe:85:90:c6:29:85:d9:90:d6: d5:c4:ff:0a:5e:b3:0f:56:8f:00:72:aa:81:28:da:69:93:8a: 7b:08:ca:33:e0:f8:f0:a3:bf:09:cc:4b:70:65:75:02:c2:ef: 03:02:7e:00:d5:80:28:b1:94:06:2c:b3:6c:1b:a6:71:6f:39: a0:25:8b:33:1c:36:ec:92:76:78:07:5f:f8:a7:20:83:1f:72: ea:0b:f3:a0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUUiT5ncmEHHWEQFDjBBEptys1Br4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw N0YxRDhCMDAeFw0yNjAxMjAwMjE1MThaFw0yNzAxMTkwMjIwMThaMDMxMTAvBgNV BAMTKEZGNTI5QjJENDE4MTY3RjIxNTRFNkYyNTVERjI0QkM4NDNBNzExQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbS2OBCjngJzj8O9xcsHxufQms 4RjTQKwPW/6tQK/yNZPqQACK7W07UGFkU/vXt8nyZ4WSRCS5par+sGsWw+wD4v9s nSeReBJxEMAwQULeO8bqQBaRIn1qq2lu/e/Bp9Rj6WpWDsYP0G0/o86jVqIt3Gr4 tdRhhE/ifFPmoIojNFtS9w9lNEMMFdqDBqA0RsuNF/x7qnlBw8GIOcc3rcehFtzN CwKdmcZXW431UyZNPv5KIEHA96h8AwSCKdBiVxngcxIh/uwyfxMuNtf3YadzngoM sGHkhmZQt0Narf9izCJ9ABp8GjdPu2/ikBrUo2KZ+8gz18gdSPK2IvbAelb9AgMB AAGjggISMIICDjAdBgNVHQ4EFgQU/1KbLUGBZ/IVTm8lXfJLyEOnEcgwHwYDVR0j BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NTM3NDA5LzAvMzIzNDMwMzUzYTYx NjQzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzNjMwMzAzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQFrQAwDQYJKoZIhvcNAQELBQADggEBACJcVriMZhSV7tDf9hTQf6v6kGmB Afq0BECHOqqw2OiybGwvpcmm37bp4hJfPAD+ONCOSUVHWjSYdHd8VusQksDLP6+W dXQ4hkji3sm/Cb0hJ650YtPnpTLjSHgnYwORqSrolG6b5zhZ2ZOqCqfI6ihU39XU Qe7MhctTQrZV3DkErV9f61C8uOrpXlX0lLG5RTa8zQNs2lm7C1HmUngO+GdKcoFC lFOBePsZW/6FkMYphdmQ1tXE/wpesw9WjwByqoEo2mmTinsIyjPg+PCjvwnMS3Bl dQLC7wMCfgDVgCixlAYss2wbpnFvOaAlizMcNuySdngHX/inIIMfcuoL86A= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:53 2026 by rpki-client