This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/323430363a346430303a3a2f34382d3438203d3e203233373234.roa File: 323430363a346430303a3a2f34382d3438203d3e203233373234.roa (raw, json) Hash identifier: rRMv5qvSwQGSPk+JjA1TNxIYPjTFDxwyjZnHizvQI3s= Subject key identifier: 78:62:78:C1:86:DF:8D:9B:0F:66:E0:60:AA:A2:A1:C5:6B:95:8E:B6 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 145F989E5C4648CFBC72359E3A23A2D7DCA80FE2 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/323430363a346430303a3a2f34382d3438203d3e203233373234.roa Signing time: Tue 20 Jan 2026 02:15:35 +0000 ROA not before: Tue 20 Jan 2026 02:10:35 +0000 ROA not after: Tue 19 Jan 2027 02:15:35 +0000 asID: 23724 IP address blocks: 2406:4d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5f:98:9e:5c:46:48:cf:bc:72:35:9e:3a:23:a2:d7:dc:a8:0f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:35 2026 GMT Not After : Jan 19 02:15:35 2027 GMT Subject: CN=786278C186DF8D9B0F66E060AAA2A1C56B958EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:da:fa:8b:4b:47:a8:df:4f:a4:96:fb:69: 03:81:49:62:9d:33:f2:44:f1:c8:fb:ff:24:bd:c3: 03:35:d6:6f:b5:3d:47:c7:9c:3d:d7:9e:81:58:26: bb:03:7a:9c:35:8d:69:4e:6f:86:b8:6c:fe:95:ca: 9d:27:a6:0f:dd:20:19:03:89:2c:6c:4d:e2:6f:39: 57:fb:06:94:36:4b:59:8e:c4:54:6f:d6:b3:d0:cb: c7:c6:f0:2a:58:55:58:5d:c5:5a:73:fd:e4:73:58: 7a:33:4b:48:68:cb:57:41:d1:5d:8b:74:8b:e3:19: d3:3a:c7:88:9c:f5:de:49:54:98:14:92:b9:77:1a: 48:f5:7c:d4:c7:bc:7d:64:55:a6:d0:d5:33:c5:a4: 13:2f:ec:a4:60:3a:68:63:4f:9a:52:b1:0b:77:eb: fc:52:c4:63:f5:26:04:84:3b:10:a8:92:02:e1:1e: 09:27:b1:0d:d9:6c:55:90:03:91:11:63:f5:8c:1d: ff:cd:33:40:26:c0:96:72:8a:05:39:56:ae:f0:ef: 59:31:73:7d:8f:df:fa:19:05:dd:ab:13:dc:2f:a9: 0d:9c:2f:3b:2f:e5:4a:44:ef:4c:da:1f:b0:70:ff: b1:9b:05:13:69:82:3f:f0:61:83:7f:b7:a6:ab:3a: 02:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:62:78:C1:86:DF:8D:9B:0F:66:E0:60:AA:A2:A1:C5:6B:95:8E:B6 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/323430363a346430303a3a2f34382d3438203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4d00::/48 Signature Algorithm: sha256WithRSAEncryption 6d:83:ff:e5:79:52:43:c8:58:e7:26:d2:0b:56:2b:44:c3:9b: 7d:56:b8:14:f4:4d:01:4e:5b:c0:98:d8:ff:16:31:10:80:ed: 23:b3:54:18:0d:ae:3c:07:09:a8:15:5d:a7:10:98:d2:16:de: e5:f1:9b:82:59:d8:01:57:48:ad:c3:04:e0:25:3b:21:03:7f: 14:8c:6d:7e:6a:8f:b9:69:bd:37:9c:1d:8a:59:72:6a:3b:eb: 35:98:04:42:df:8e:c0:29:36:26:ac:b9:95:c6:39:96:cd:d2: 0c:58:02:16:b6:5e:04:46:2b:51:97:ab:5a:fd:c4:50:6e:75: dc:3d:fb:df:d8:a1:d2:f3:0d:a7:51:3c:0d:be:73:6e:07:de: a1:c0:9b:7d:b7:6f:01:12:97:43:d6:9d:b6:32:fd:d2:78:29: b5:de:67:9e:d5:a4:78:13:49:12:77:2b:8f:41:8c:29:62:b1: 6c:17:2d:14:8b:43:ea:cd:46:45:a0:5b:b3:96:74:b5:ea:24: c7:4b:6a:2c:c9:4d:18:df:01:5a:19:dc:70:ef:47:32:e1:82: 0a:fd:7f:74:51:36:5f:ec:fb:3f:d3:30:cf:fb:a1:32:7c:c3: 7b:ce:04:03:04:08:50:c8:9a:41:b6:14:0c:4a:9c:74:42:25: bb:b7:5e:e7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFF+YnlxGSM+8cjWeOiOi19yoD+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzVaFw0yNzAxMTkwMjE1MzVaMDMxMTAvBgNV BAMTKDc4NjI3OEMxODZERjhEOUIwRjY2RTA2MEFBQTJBMUM1NkI5NThFQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWtr6i0tHqN9PpJb7aQOBSWKd M/JE8cj7/yS9wwM11m+1PUfHnD3XnoFYJrsDepw1jWlOb4a4bP6Vyp0npg/dIBkD iSxsTeJvOVf7BpQ2S1mOxFRv1rPQy8fG8CpYVVhdxVpz/eRzWHozS0hoy1dB0V2L dIvjGdM6x4ic9d5JVJgUkrl3Gkj1fNTHvH1kVabQ1TPFpBMv7KRgOmhjT5pSsQt3 6/xSxGP1JgSEOxCokgLhHgknsQ3ZbFWQA5ERY/WMHf/NM0AmwJZyigU5Vq7w71kx c32P3/oZBd2rE9wvqQ2cLzsv5UpE70zaH7Bw/7GbBRNpgj/wYYN/t6arOgJLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUeGJ4wYbfjZsPZuBgqqKhxWuVjrYwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzIzNDMwMzYzYTM0 NjQzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQGTQAAADANBgkqhkiG9w0BAQsFAAOCAQEAbYP/5XlSQ8hY5ybSC1YrRMOb fVa4FPRNAU5bwJjY/xYxEIDtI7NUGA2uPAcJqBVdpxCY0hbe5fGbglnYAVdIrcME 4CU7IQN/FIxtfmqPuWm9N5wdillyajvrNZgEQt+OwCk2Jqy5lcY5ls3SDFgCFrZe BEYrUZerWv3EUG513D3739ih0vMNp1E8Db5zbgfeocCbfbdvARKXQ9adtjL90ngp td5nntWkeBNJEncrj0GMKWKxbBctFItD6s1GRaBbs5Z0teokx0tqLMlNGN8BWhnc cO9HMuGCCv1/dFE2X+z7P9Mwz/uhMnzDe84EAwQIUMiaQbYUDEqcdEIlu7de5w== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:46 2026 by rpki-client