This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3a2f33322d3332203d3e203539303738.roa File: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (raw, json) Hash identifier: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY= Subject key identifier: 17:ED:51:2E:DF:1F:5D:C2:E6:6E:63:41:02:80:4A:3D:12:9C:00:68 Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 09595E02546646BBA0227F7A9B0E3903BFC2E6E3 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3a2f33322d3332203d3e203539303738.roa Signing time: Tue 20 Jan 2026 02:16:49 +0000 ROA not before: Tue 20 Jan 2026 02:11:49 +0000 ROA not after: Tue 19 Jan 2027 02:16:49 +0000 asID: 59078 IP address blocks: 2402:e7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:59:5e:02:54:66:46:bb:a0:22:7f:7a:9b:0e:39:03:bf:c2:e6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Jan 20 02:11:49 2026 GMT Not After : Jan 19 02:16:49 2027 GMT Subject: CN=17ED512EDF1F5DC2E66E634102804A3D129C0068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:54:89:bd:5a:9f:e7:a8:4e:f1:de:a1:ac: a8:b5:9b:a8:5e:60:4f:e7:8c:bd:f5:89:c9:58:ef: 76:8b:7d:6c:19:26:a2:46:ba:ef:a8:55:b6:b2:e7: a0:6a:34:79:d1:3d:27:37:8c:11:83:04:c4:2a:b4: a5:ac:b3:61:c6:78:58:38:e6:87:be:07:09:81:d2: 5e:d1:c1:fe:3a:4a:b3:bf:e9:23:5f:3a:5d:41:1f: 4b:1d:84:ad:e8:7f:77:a9:9e:50:29:5a:bd:ba:6a: ed:d0:74:8c:c8:6e:12:3d:c1:02:0c:9a:44:21:c2: d3:5b:be:37:74:9d:85:1f:75:98:d8:36:dc:12:e4: f7:29:08:a3:65:22:08:1b:f2:a5:25:7a:50:7a:f6: 76:1c:77:68:ab:37:44:a9:ff:1d:b8:5b:a5:d8:6a: f0:3d:d5:c0:17:2b:b6:db:13:cf:7b:ff:4d:44:ec: 3f:66:c4:d0:61:3d:11:78:97:10:6e:2f:47:71:34: 92:e6:fa:ac:0e:84:57:16:3f:b7:13:23:23:00:88: ec:ba:70:c9:51:42:db:c0:93:7b:c6:69:f3:91:1b: 37:c7:da:93:c9:b1:60:eb:34:55:91:9e:70:c2:01: a6:70:62:2a:83:3d:d6:23:07:a1:ef:d8:5a:b9:92: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:ED:51:2E:DF:1F:5D:C2:E6:6E:63:41:02:80:4A:3D:12:9C:00:68 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3a2f33322d3332203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:e7c0::/32 Signature Algorithm: sha256WithRSAEncryption 1d:a8:86:b8:61:da:e7:61:4e:4d:26:b5:cd:53:cf:5a:bc:0b: 70:2b:11:76:fd:4f:6f:48:41:9b:66:e0:20:be:d1:90:98:1c: 70:79:f5:bd:10:c0:3f:30:6c:01:71:c6:cc:d7:01:06:3c:ae: ec:76:c4:bb:bc:d5:b1:ca:44:99:cf:11:0f:57:c1:30:16:18: c5:21:ae:07:d7:ad:87:ab:3f:ac:a7:dd:fb:94:07:17:99:a1: 26:24:88:eb:28:d3:f7:24:37:a0:8f:df:66:bb:9d:47:5e:ea: 23:bd:8c:b7:77:fa:21:a5:c4:d9:33:cf:77:1f:36:b8:a1:11: 1e:a5:2e:14:22:ca:9e:60:aa:16:71:5e:bd:b6:13:c4:67:99: 83:a5:a9:06:0f:be:d4:f4:bc:2e:4c:9b:a9:6b:72:c8:3b:d0: c5:ee:77:24:fa:98:05:49:9a:19:30:cc:3a:9a:b1:ca:b1:85: f5:c3:a4:72:e0:fa:8b:18:1c:2b:50:ec:90:a8:42:94:4b:0c: 6b:e2:29:fa:18:06:4c:82:86:b8:62:e0:40:24:a6:3c:90:cb: b3:00:23:cc:0b:ea:01:5d:11:6a:66:da:6c:05:1f:7a:97:2b: 01:f6:91:df:96:62:c2:ab:96:e5:fa:b4:82:62:75:1d:48:98: ae:7f:f4:62 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUCVleAlRmRrugIn96mw45A7/C5uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjAxMjAwMjExNDlaFw0yNzAxMTkwMjE2NDlaMDMxMTAvBgNV BAMTKDE3RUQ1MTJFREYxRjVEQzJFNjZFNjM0MTAyODA0QTNEMTI5QzAwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSlSJvVqf56hO8d6hrKi1m6he YE/njL31iclY73aLfWwZJqJGuu+oVbay56BqNHnRPSc3jBGDBMQqtKWss2HGeFg4 5oe+BwmB0l7Rwf46SrO/6SNfOl1BH0sdhK3of3epnlApWr26au3QdIzIbhI9wQIM mkQhwtNbvjd0nYUfdZjYNtwS5PcpCKNlIggb8qUlelB69nYcd2irN0Sp/x24W6XY avA91cAXK7bbE897/01E7D9mxNBhPRF4lxBuL0dxNJLm+qwOhFcWP7cTIyMAiOy6 cMlRQtvAk3vGafORGzfH2pPJsWDrNFWRnnDCAaZwYiqDPdYjB6Hv2Fq5kvtVAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUF+1RLt8fXcLmbmNBAoBKPRKcAGgwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzAvMzIzNDMwMzIzYTY1 Mzc2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzOTMwMzczOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQC58AwDQYJKoZIhvcNAQELBQADggEBAB2ohrhh2udhTk0mtc1Tz1q8C3Ar EXb9T29IQZtm4CC+0ZCYHHB59b0QwD8wbAFxxszXAQY8rux2xLu81bHKRJnPEQ9X wTAWGMUhrgfXrYerP6yn3fuUBxeZoSYkiOso0/ckN6CP32a7nUde6iO9jLd3+iGl xNkzz3cfNrihER6lLhQiyp5gqhZxXr22E8RnmYOlqQYPvtT0vC5Mm6lrcsg70MXu dyT6mAVJmhkwzDqascqxhfXDpHLg+osYHCtQ7JCoQpRLDGviKfoYBkyChrhi4EAk pjyQy7MAI8wL6gFdEWpm2mwFH3qXKwH2kd+WYsKrluX6tIJidR1ImK5/9GI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:41 2026 by rpki-client