This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/323430353a623330303a3a2f33322d3332203d3e203535393936.roa File: 323430353a623330303a3a2f33322d3332203d3e203535393936.roa (raw, json) Hash identifier: iOf9DQAa5NApqZitY/bueVMIFCSGyZ/pEKngCq23c8c= Subject key identifier: B5:D9:B7:23:6B:1D:F6:F8:3D:F2:3E:B8:35:48:10:D1:4D:55:05:EA Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 29EF987E38D8F71F6316FB1173FC8AD5E7B564B1 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/323430353a623330303a3a2f33322d3332203d3e203535393936.roa Signing time: Tue 20 Jan 2026 02:13:09 +0000 ROA not before: Tue 20 Jan 2026 02:08:09 +0000 ROA not after: Tue 19 Jan 2027 02:13:09 +0000 asID: 55996 IP address blocks: 2405:b300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ef:98:7e:38:d8:f7:1f:63:16:fb:11:73:fc:8a:d5:e7:b5:64:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Jan 20 02:08:09 2026 GMT Not After : Jan 19 02:13:09 2027 GMT Subject: CN=B5D9B7236B1DF6F83DF23EB8354810D14D5505EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:35:dc:a2:d0:dc:36:c5:b6:9b:98:69:3d: 75:b1:b6:3d:57:05:c7:2c:78:4c:f9:87:5e:00:55: e1:c8:32:f5:03:22:52:93:b2:8c:63:2d:5b:29:95: 3e:4b:9e:e8:bc:96:a3:93:20:04:02:38:86:f0:9c: b5:19:3a:21:a4:e5:e1:c4:be:37:e4:bc:1c:61:b1: b8:92:91:58:9b:36:11:b1:06:53:53:9d:3d:f8:97: 94:5a:c1:74:ff:16:97:af:b7:79:2f:37:f9:a7:53: 7b:3d:ec:22:4f:e7:9a:47:52:0a:01:c6:30:6d:3a: 41:e2:a8:ad:7c:02:dc:77:73:66:71:a2:97:07:3a: 04:41:11:5c:d9:d6:68:e8:97:f2:78:4d:71:3f:17: b6:df:5a:0b:f4:54:db:5d:86:0a:a9:0d:b6:a5:e0: b8:f0:56:55:8f:23:ae:87:a5:08:0f:1f:53:c1:3a: 86:9a:09:25:28:2c:ec:e0:e1:6b:e9:0e:8f:24:7d: 41:5a:3c:ec:2d:2e:4f:86:40:51:ed:26:40:e8:36: 3e:58:ef:4c:23:fd:aa:32:b0:55:8d:b6:f3:bf:95: 55:61:4f:d7:c0:51:77:a4:03:39:37:b6:af:4d:03: 69:92:82:4f:0b:66:68:3d:8a:e4:73:c7:26:00:7e: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D9:B7:23:6B:1D:F6:F8:3D:F2:3E:B8:35:48:10:D1:4D:55:05:EA X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/323430353a623330303a3a2f33322d3332203d3e203535393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b300::/32 Signature Algorithm: sha256WithRSAEncryption 98:b0:c0:96:3d:f0:7b:85:be:47:51:a4:eb:21:8d:2a:7f:1a: b1:85:c9:b6:6e:e4:fa:18:34:15:c2:0f:75:42:c2:bd:0c:d7: 6f:9d:e7:5a:fd:13:53:b0:bf:84:81:2a:f4:5a:59:49:8b:56: a7:6c:ea:ae:e3:e3:f0:15:c0:28:c2:f1:41:88:fa:6c:52:5b: 08:15:6c:ac:38:b3:4b:fd:13:fb:c8:16:9a:7c:49:fe:4a:d0: 6d:46:2f:9c:90:ad:ee:d7:a6:e3:62:1a:b6:c7:cc:2b:d3:8a: 68:56:26:09:59:b8:5d:21:45:c3:f2:40:ba:18:57:23:9f:6f: a9:25:6b:57:8d:4c:0c:8e:5f:d0:d0:a5:33:d9:91:f0:41:4c: c0:60:27:c9:2d:e3:23:ac:63:b2:72:eb:ce:fa:d8:48:b5:43: f4:db:54:ce:71:4a:5e:8c:24:bd:e6:32:74:76:5b:9b:e4:21: 0f:06:38:d5:e9:89:f7:a2:7a:23:ee:e5:c1:37:f9:ba:0b:a3: 93:76:b0:5b:c5:01:cf:26:f9:dc:3c:2a:cd:cf:6d:ac:b1:f4: c2:32:00:c3:93:33:a7:20:88:98:db:11:47:8b:fc:f7:9a:d1: a3:93:f4:dc:f0:c0:d4:63:e9:9e:f5:60:6f:16:73:c6:3b:53: 6c:24:67:b6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUKe+YfjjY9x9jFvsRc/yK1ee1ZLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjAxMjAwMjA4MDlaFw0yNzAxMTkwMjEzMDlaMDMxMTAvBgNV BAMTKEI1RDlCNzIzNkIxREY2RjgzREYyM0VCODM1NDgxMEQxNEQ1NTA1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dzXcotDcNsW2m5hpPXWxtj1X BccseEz5h14AVeHIMvUDIlKTsoxjLVsplT5Lnui8lqOTIAQCOIbwnLUZOiGk5eHE vjfkvBxhsbiSkVibNhGxBlNTnT34l5RawXT/Fpevt3kvN/mnU3s97CJP55pHUgoB xjBtOkHiqK18Atx3c2ZxopcHOgRBEVzZ1mjol/J4TXE/F7bfWgv0VNtdhgqpDbal 4LjwVlWPI66HpQgPH1PBOoaaCSUoLOzg4WvpDo8kfUFaPOwtLk+GQFHtJkDoNj5Y 70wj/aoysFWNtvO/lVVhT9fAUXekAzk3tq9NA2mSgk8LZmg9iuRzxyYAftVzAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUtdm3I2sd9vg98j64NUgQ0U1VBeowHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzIzNDMwMzUzYTYy MzMzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzNTM5MzkzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQFswAwDQYJKoZIhvcNAQELBQADggEBAJiwwJY98HuFvkdRpOshjSp/GrGF ybZu5PoYNBXCD3VCwr0M12+d51r9E1Owv4SBKvRaWUmLVqds6q7j4/AVwCjC8UGI +mxSWwgVbKw4s0v9E/vIFpp8Sf5K0G1GL5yQre7XpuNiGrbHzCvTimhWJglZuF0h RcPyQLoYVyOfb6kla1eNTAyOX9DQpTPZkfBBTMBgJ8kt4yOsY7Jy68762Ei1Q/Tb VM5xSl6MJL3mMnR2W5vkIQ8GONXpifeieiPu5cE3+boLo5N2sFvFAc8m+dw8Ks3P bayx9MIyAMOTM6cgiJjbEUeL/Pea0aOT9NzwwNRj6Z71YG8Wc8Y7U2wkZ7Y= -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:24 2026 by rpki-client