This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa File: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (raw, json) Hash identifier: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U= Subject key identifier: 7C:92:6F:07:8D:F7:FA:81:B8:CD:C3:67:D9:78:9D:29:86:1B:89:70 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 28DB3DC8AE8EF731333B79D3506325F04DCA647B Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa Signing time: Tue 20 Jan 2026 02:20:18 +0000 ROA not before: Tue 20 Jan 2026 02:15:18 +0000 ROA not after: Tue 19 Jan 2027 02:20:18 +0000 asID: 59073 IP address blocks: 2402:93c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:db:3d:c8:ae:8e:f7:31:33:3b:79:d3:50:63:25:f0:4d:ca:64:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Jan 20 02:15:18 2026 GMT Not After : Jan 19 02:20:18 2027 GMT Subject: CN=7C926F078DF7FA81B8CDC367D9789D29861B8970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:a9:4e:5d:76:9b:67:44:0c:21:c6:2a:92: 88:94:e1:70:9a:c8:88:2b:70:0b:77:70:05:c9:7a: 2d:35:a4:73:1a:b2:be:0b:38:b3:eb:45:3f:7d:b2: a1:66:6c:d2:b0:55:65:2b:cc:aa:51:f9:2e:79:ac: b2:bd:18:85:7d:2d:24:2f:b5:8b:e6:4b:67:84:48: 45:69:2a:42:c4:c7:52:f5:b9:fb:df:a3:9a:82:8b: 74:c2:13:6e:ce:20:26:66:4a:d5:f6:18:5b:8c:f0: 11:6d:9f:3c:dc:52:ee:74:57:fd:a1:e0:42:cf:8a: ed:9a:4e:9a:5c:e5:41:3c:ff:8a:2e:a7:01:0e:8e: d2:ac:b2:0b:ed:50:1a:cb:ef:38:bc:35:53:4d:83: 63:65:49:a8:5e:25:13:e4:74:1f:f5:52:26:b3:d5: 48:a9:47:c0:ef:8f:30:bb:30:cd:29:b3:2f:bd:bd: 64:d0:47:26:61:d2:7f:4f:9e:ed:d4:b6:45:a4:bb: bd:bf:b9:21:15:f0:27:42:ce:37:72:a9:98:b1:df: 0e:60:64:b1:1e:38:96:cd:43:0a:9d:9d:f3:e4:78: f6:9f:5d:a6:dc:3f:61:d4:64:95:2b:61:4d:6e:6e: 4b:71:a5:e8:08:6f:74:04:e5:28:f0:cc:bb:5c:8c: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:92:6F:07:8D:F7:FA:81:B8:CD:C3:67:D9:78:9D:29:86:1B:89:70 X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:93c0:100::/48 Signature Algorithm: sha256WithRSAEncryption 93:28:b3:f2:21:67:f5:e0:de:7a:e8:39:47:07:1a:33:d9:04: d1:e3:52:ef:e1:bd:a1:7b:d4:10:a6:f9:0f:32:cd:c3:4c:63: c1:f3:76:d2:ce:62:a6:e7:cb:da:d9:d9:d0:69:1a:d2:07:3b: cb:49:1a:e9:55:78:f8:de:eb:e2:eb:14:ed:da:3d:b8:c5:d3: ee:1f:e7:ea:93:b3:53:7d:72:60:12:1f:ab:34:33:8e:3e:64: cc:b7:ae:4d:9f:c4:9b:bd:4a:b0:a6:4a:88:34:dc:b2:76:44: 55:3a:b9:17:4a:96:75:86:dc:20:46:7c:35:1a:4e:58:24:31: fc:1f:88:b8:71:e4:9b:95:95:14:12:05:f3:4c:54:15:8a:f7: 29:5d:15:28:33:56:b1:5a:95:1b:39:62:26:c2:3e:0f:c1:9e: 05:c7:3a:bd:2a:58:ab:17:26:83:c9:0a:c3:13:19:3d:5c:e7: d1:44:3a:68:85:d7:dd:8d:04:e2:3e:4c:3e:5a:3b:2b:5a:bd: aa:9c:1f:f0:55:18:cb:e6:ff:c3:07:85:ed:68:4b:66:51:5f: 77:3c:c9:5a:c7:14:15:b1:ca:7e:04:7c:dd:e7:40:a9:24:eb: bf:10:71:7e:3a:59:63:7a:1f:5a:00:26:24:6c:c3:12:b5:83: ce:54:24:a2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUKNs9yK6O9zEzO3nTUGMl8E3KZHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjAxMjAwMjE1MThaFw0yNzAxMTkwMjIwMThaMDMxMTAvBgNV BAMTKDdDOTI2RjA3OERGN0ZBODFCOENEQzM2N0Q5Nzg5RDI5ODYxQjg5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPqlOXXabZ0QMIcYqkoiU4XCa yIgrcAt3cAXJei01pHMasr4LOLPrRT99sqFmbNKwVWUrzKpR+S55rLK9GIV9LSQv tYvmS2eESEVpKkLEx1L1ufvfo5qCi3TCE27OICZmStX2GFuM8BFtnzzcUu50V/2h 4ELPiu2aTppc5UE8/4oupwEOjtKssgvtUBrL7zi8NVNNg2NlSaheJRPkdB/1Uiaz 1UipR8DvjzC7MM0psy+9vWTQRyZh0n9Pnu3UtkWku72/uSEV8CdCzjdyqZix3w5g ZLEeOJbNQwqdnfPkePafXabcP2HUZJUrYU1ubktxpegIb3QE5SjwzLtcjK/FAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUfJJvB433+oG4zcNn2XidKYYbiXAwHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NjU0NzIzLzAvMzIzNDMwMzIz YTM5MzM2MzMwM2EzMTMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM5MzAz NzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJAKTwAEAMA0GCSqGSIb3DQEBCwUAA4IBAQCTKLPyIWf1 4N566DlHBxoz2QTR41Lv4b2he9QQpvkPMs3DTGPB83bSzmKm58va2dnQaRrSBzvL SRrpVXj43uvi6xTt2j24xdPuH+fqk7NTfXJgEh+rNDOOPmTMt65Nn8SbvUqwpkqI NNyydkRVOrkXSpZ1htwgRnw1Gk5YJDH8H4i4ceSblZUUEgXzTFQVivcpXRUoM1ax WpUbOWImwj4PwZ4Fxzq9KlirFyaDyQrDExk9XOfRRDpohdfdjQTiPkw+WjsrWr2q nB/wVRjL5v/DB4XtaEtmUV93PMlaxxQVscp+BHzd50CpJOu/EHF+Olljeh9aACYk bMMStYPOVCSi -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:50 2026 by rpki-client