This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/323430323a313434303a3a2f33322d3438203d3e203633363839.roa File: 323430323a313434303a3a2f33322d3438203d3e203633363839.roa (raw, json) Hash identifier: /UrNnRr41YynnFIpFDBEqy8CJjy8N/b1E3XH9o9isTI= Subject key identifier: 88:FF:9C:C3:B3:2C:2D:85:6B:3B:5E:01:53:1E:87:D6:09:2A:1F:26 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 7008DFF167CD1125188B6C786B3DD5B73F0903CD Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/323430323a313434303a3a2f33322d3438203d3e203633363839.roa Signing time: Tue 20 Jan 2026 02:16:48 +0000 ROA not before: Tue 20 Jan 2026 02:11:48 +0000 ROA not after: Tue 19 Jan 2027 02:16:48 +0000 asID: 63689 IP address blocks: 2402:1440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:08:df:f1:67:cd:11:25:18:8b:6c:78:6b:3d:d5:b7:3f:09:03:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:48 2026 GMT Not After : Jan 19 02:16:48 2027 GMT Subject: CN=88FF9CC3B32C2D856B3B5E01531E87D6092A1F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d3:a6:4f:90:be:05:a1:f7:55:b9:76:3c:1d: 46:ef:95:50:8b:b7:e7:a8:98:02:6e:16:b2:14:8d: 0a:79:75:6c:99:1e:1c:68:e7:12:82:99:3b:23:60: 84:8f:da:62:51:d6:09:4d:97:d2:cf:a0:25:0f:1a: 46:c8:ae:53:ef:6f:77:c2:a7:57:8b:73:86:1b:c9: db:71:e6:b8:4b:92:f3:30:d3:07:44:9b:82:48:8e: a8:f9:f6:69:da:41:a0:37:37:ac:cb:fb:9b:6c:de: 70:02:50:7b:c4:c9:19:27:80:49:af:2e:16:02:af: 5b:02:3c:a5:95:41:f5:4a:04:30:7a:01:68:82:fe: ac:ae:33:c1:8d:0a:74:b0:d7:9f:a7:6a:1c:12:bc: 6f:d4:91:e0:a4:aa:09:a2:c5:ac:e2:76:53:7a:b3: 73:19:66:79:3b:a5:ed:fa:a2:1e:36:8a:25:12:0d: d9:48:98:08:da:1d:ab:d0:be:57:ee:a7:e4:1c:b1: 01:b4:8b:c0:04:83:6e:fd:65:c8:b4:83:b6:2a:0d: a3:6a:63:0f:aa:4b:86:78:be:ed:b9:08:73:58:9a: c4:8e:d4:76:bf:ea:70:6c:24:a0:0b:ea:f0:94:31: d5:2e:f9:e4:7f:49:c1:a1:ad:bf:c1:b0:7a:6b:77: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FF:9C:C3:B3:2C:2D:85:6B:3B:5E:01:53:1E:87:D6:09:2A:1F:26 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/323430323a313434303a3a2f33322d3438203d3e203633363839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:1440::/32 Signature Algorithm: sha256WithRSAEncryption 85:a2:32:ab:9e:d3:38:51:b8:c2:cd:3f:b8:74:59:2c:18:0a: cf:22:23:46:49:85:8e:0d:f6:5e:99:15:11:62:4c:7f:ad:6a: 91:45:65:1c:64:e8:20:94:2e:cc:e9:70:3f:de:4e:99:82:fa: a1:6d:2a:80:d0:b0:b7:3d:ad:aa:7d:87:67:e8:35:47:3c:2c: 43:1d:86:a6:c6:6d:31:16:ae:dd:65:21:f9:24:fa:c0:33:c9: 94:b8:ea:6f:33:13:16:39:3a:d7:09:be:36:4e:39:2d:8a:73: f1:d5:0c:22:9c:5d:d3:3b:2c:0b:8f:78:43:62:b5:21:a1:54: 3a:9e:df:07:04:1b:1f:6b:69:fc:29:e4:ad:16:c8:22:21:98: 40:31:a1:b0:6b:18:74:08:c3:a1:d4:e2:fc:a7:1b:75:7e:ac: 93:50:cb:de:dc:f7:76:6d:e9:d4:d7:dd:b7:23:4f:e2:4f:65: a8:d6:2f:fd:91:c9:34:76:0f:16:df:fb:63:61:81:66:d3:95: 39:45:ac:90:b7:66:e8:23:0d:13:fe:a7:0f:3f:b4:04:ad:37: 64:94:06:29:a5:cb:d7:3c:57:61:a0:66:5a:84:d9:2d:7b:09: 8a:c1:9f:86:f5:1b:89:fc:01:90:e2:a1:aa:99:da:0d:a3:84: df:d0:ef:ec -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUcAjf8WfNESUYi2x4az3Vtz8JA80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDhaFw0yNzAxMTkwMjE2NDhaMDMxMTAvBgNV BAMTKDg4RkY5Q0MzQjMyQzJEODU2QjNCNUUwMTUzMUU4N0Q2MDkyQTFGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP06ZPkL4FofdVuXY8HUbvlVCL t+eomAJuFrIUjQp5dWyZHhxo5xKCmTsjYISP2mJR1glNl9LPoCUPGkbIrlPvb3fC p1eLc4Ybydtx5rhLkvMw0wdEm4JIjqj59mnaQaA3N6zL+5ts3nACUHvEyRkngEmv LhYCr1sCPKWVQfVKBDB6AWiC/qyuM8GNCnSw15+nahwSvG/UkeCkqgmixazidlN6 s3MZZnk7pe36oh42iiUSDdlImAjaHavQvlfup+QcsQG0i8AEg279Zci0g7YqDaNq Yw+qS4Z4vu25CHNYmsSO1Ha/6nBsJKAL6vCUMdUu+eR/ScGhrb/BsHprd5TXAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUiP+cw7MsLYVrO14BUx6H1gkqHyYwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3LzAvMzIzNDMwMzIzYTMx MzQzNDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMzM2MzgzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQCFEAwDQYJKoZIhvcNAQELBQADggEBAIWiMque0zhRuMLNP7h0WSwYCs8i I0ZJhY4N9l6ZFRFiTH+tapFFZRxk6CCULszpcD/eTpmC+qFtKoDQsLc9rap9h2fo NUc8LEMdhqbGbTEWrt1lIfkk+sAzyZS46m8zExY5OtcJvjZOOS2Kc/HVDCKcXdM7 LAuPeENitSGhVDqe3wcEGx9rafwp5K0WyCIhmEAxobBrGHQIw6HU4vynG3V+rJNQ y97c93Zt6dTX3bcjT+JPZajWL/2RyTR2Dxbf+2NhgWbTlTlFrJC3ZugjDRP+pw8/ tAStN2SUBimly9c8V2GgZlqE2S17CYrBn4b1G4n8AZDioaqZ2g2jhN/Q7+w= -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:11 2026 by rpki-client