This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/323430323a313434303a3a2f33322d3438203d3e203539303333.roa File: 323430323a313434303a3a2f33322d3438203d3e203539303333.roa (raw, json) Hash identifier: CkOmBQaA+gHRUZ9w4vMvTdZ1j8VlCOLzDNBi5taRRT8= Subject key identifier: 79:B5:4C:E4:3F:D7:CB:73:70:BE:3B:B7:D1:70:53:59:D3:E0:2A:F4 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 39FC022AAB05C1D60CFA47E594B5C36BD7CEC742 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/323430323a313434303a3a2f33322d3438203d3e203539303333.roa Signing time: Tue 20 Jan 2026 02:16:43 +0000 ROA not before: Tue 20 Jan 2026 02:11:43 +0000 ROA not after: Tue 19 Jan 2027 02:16:43 +0000 asID: 59033 IP address blocks: 2402:1440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:fc:02:2a:ab:05:c1:d6:0c:fa:47:e5:94:b5:c3:6b:d7:ce:c7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:43 2026 GMT Not After : Jan 19 02:16:43 2027 GMT Subject: CN=79B54CE43FD7CB7370BE3BB7D1705359D3E02AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:fa:c7:c2:fb:af:cf:05:1e:9d:0a:25:37: f4:9b:e0:ee:6a:d3:75:3b:87:26:61:df:b8:a9:7d: 7e:5c:1e:96:50:8d:fd:3e:95:a2:86:9a:37:62:c4: 18:01:6c:e7:e2:65:87:1a:82:95:f5:d5:ec:42:97: 4e:1e:c6:8b:07:35:6f:97:a3:cf:8c:14:f9:0e:f9: 3f:8d:05:fe:9c:a7:54:af:a0:41:56:28:1d:24:f3: 56:61:0b:40:d9:3b:0d:78:68:37:42:ca:8d:84:01: 95:de:84:ea:b5:d0:04:06:62:d6:a3:f8:66:fd:f1: e3:0d:08:4c:11:82:0d:96:be:a8:43:14:72:24:e7: 3d:14:1f:5a:ea:88:92:97:62:0f:2d:c0:bf:88:f3: 63:c9:60:07:10:f3:59:37:b2:c9:56:6b:68:f6:4c: 9d:bc:b9:47:91:06:9c:64:9c:ce:73:6c:30:bd:ae: ec:72:87:06:1b:47:a1:0f:6c:56:63:dc:19:99:c8: 72:a2:d4:6f:33:b2:2c:b3:06:a6:09:3e:9a:4e:fd: d7:0b:95:7e:e7:62:05:c9:74:40:af:d3:ad:a4:6e: 0b:44:08:4e:cf:70:9c:75:f9:a0:d2:3d:8d:52:dd: 7f:97:b3:a5:8f:ed:6c:97:3f:56:53:d4:cd:19:0c: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B5:4C:E4:3F:D7:CB:73:70:BE:3B:B7:D1:70:53:59:D3:E0:2A:F4 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/323430323a313434303a3a2f33322d3438203d3e203539303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:1440::/32 Signature Algorithm: sha256WithRSAEncryption 66:f8:75:15:84:7c:b9:c3:e7:2d:ec:72:78:b7:34:ef:88:29: 0f:ed:13:ba:ac:3c:8c:27:b7:dd:2e:da:f9:95:d9:dc:6b:de: 42:5d:b3:29:35:89:ce:ea:25:85:83:c5:4e:34:63:0d:1e:27: d6:31:a1:eb:e4:5f:7e:59:aa:ba:3c:9b:be:b3:6a:98:06:19: 35:57:b4:4c:f6:c5:36:2a:1c:85:5a:51:f5:fa:a4:39:31:23: 11:03:60:6a:3d:fe:dc:b8:56:f8:7a:d9:d5:60:5d:55:0f:eb: 53:91:6e:f1:01:25:f7:37:a7:ee:16:b8:e6:0a:ea:32:18:87: 97:d3:e8:d9:a6:8b:be:4c:b7:91:6e:e2:26:27:41:66:b3:67: 0f:00:f5:4b:55:41:da:55:c6:22:b9:68:91:0b:b7:e2:19:09: 50:9b:c8:63:55:47:b5:13:6f:ef:fc:ff:56:49:c0:49:bb:5d: 8e:48:08:94:5e:cb:ef:75:0c:60:cc:82:b0:5d:10:9d:c5:99: 50:f4:78:8e:fa:e4:0d:b1:e2:d4:b9:1e:94:58:f1:47:85:5f: 16:75:b0:13:c0:49:17:17:60:45:5c:2b:1d:2a:99:1e:73:e0: 09:80:3a:8b:97:10:15:94:ff:14:8a:d6:55:f4:e4:1d:26:12: 6c:68:1d:c8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUOfwCKqsFwdYM+kfllLXDa9fOx0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDNaFw0yNzAxMTkwMjE2NDNaMDMxMTAvBgNV BAMTKDc5QjU0Q0U0M0ZEN0NCNzM3MEJFM0JCN0QxNzA1MzU5RDNFMDJBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7o/rHwvuvzwUenQolN/Sb4O5q 03U7hyZh37ipfX5cHpZQjf0+laKGmjdixBgBbOfiZYcagpX11exCl04exosHNW+X o8+MFPkO+T+NBf6cp1SvoEFWKB0k81ZhC0DZOw14aDdCyo2EAZXehOq10AQGYtaj +Gb98eMNCEwRgg2WvqhDFHIk5z0UH1rqiJKXYg8twL+I82PJYAcQ81k3sslWa2j2 TJ28uUeRBpxknM5zbDC9ruxyhwYbR6EPbFZj3BmZyHKi1G8zsiyzBqYJPppO/dcL lX7nYgXJdECv062kbgtECE7PcJx1+aDSPY1S3X+Xs6WP7WyXP1ZT1M0ZDCm3AgMB AAGjggISMIICDjAdBgNVHQ4EFgQUebVM5D/Xy3Nwvju30XBTWdPgKvQwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3LzAvMzIzNDMwMzIzYTMx MzQzNDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzOTMwMzMzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQCFEAwDQYJKoZIhvcNAQELBQADggEBAGb4dRWEfLnD5y3scni3NO+IKQ/t E7qsPIwnt90u2vmV2dxr3kJdsyk1ic7qJYWDxU40Yw0eJ9YxoevkX35Zqro8m76z apgGGTVXtEz2xTYqHIVaUfX6pDkxIxEDYGo9/ty4Vvh62dVgXVUP61ORbvEBJfc3 p+4WuOYK6jIYh5fT6Nmmi75Mt5Fu4iYnQWazZw8A9UtVQdpVxiK5aJELt+IZCVCb yGNVR7UTb+/8/1ZJwEm7XY5ICJRey+91DGDMgrBdEJ3FmVD0eI765A2x4tS5HpRY 8UeFXxZ1sBPASRcXYEVcKx0qmR5z4AmAOouXEBWU/xSK1lX05B0mEmxoHcg= -----END CERTIFICATE-----Generated at Sun Jan 25 21:32:59 2026 by rpki-client