This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f33322d3438203d3e20313531323936.roa
File: 323430363a383838303a3a2f33322d3438203d3e20313531323936.roa (raw, json)
Hash identifier: 6jkJHvaNfJJtutlBO8hSVpCzbKvz9/2EnreSyJOv8js=
Subject key identifier: DC:F9:18:6C:07:F8:F4:3B:1D:C2:6D:DF:EF:BB:CF:D7:0C:C0:0B:BE
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 6D4DB02CE9681AD831DF2571C91235B1E9F0B7A6
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f33322d3438203d3e20313531323936.roa
Signing time: Tue 20 Jan 2026 02:18:05 +0000
ROA not before: Tue 20 Jan 2026 02:13:05 +0000
ROA not after: Tue 19 Jan 2027 02:18:05 +0000
asID: 151296
IP address blocks: 2406:8880::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 04:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:4d:b0:2c:e9:68:1a:d8:31:df:25:71:c9:12:35:b1:e9:f0:b7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Jan 20 02:13:05 2026 GMT
Not After : Jan 19 02:18:05 2027 GMT
Subject: CN=DCF9186C07F8F43B1DC26DDFEFBBCFD70CC00BBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:96:40:69:1f:ef:37:69:d3:7a:e0:d0:ba:
5a:36:10:ba:4b:20:0f:98:61:14:4a:4d:a0:cb:31:
80:80:10:44:4f:6c:ff:30:7a:44:cb:02:c2:36:1e:
cf:c2:80:a5:9b:6b:a3:91:25:70:77:db:ed:0a:ac:
d6:60:30:c5:89:27:fe:5e:cd:e0:c6:31:56:0b:5f:
12:6e:b4:85:7e:c6:18:96:ea:0e:97:27:52:08:c9:
a0:a5:90:2c:fe:60:4e:33:32:5b:c7:d1:bd:7e:de:
13:76:cb:93:0c:ee:81:1e:9d:1b:6f:07:91:95:d1:
7c:8f:0c:f4:60:40:c7:0e:10:53:c2:dd:91:0a:ee:
7f:08:60:94:a6:a2:c2:74:47:9c:12:f8:8e:fc:26:
30:bc:e3:a9:89:90:c1:1e:01:f8:d8:d7:b8:1d:c9:
38:04:be:10:15:18:61:f3:b6:82:93:50:6f:5e:55:
a8:fd:da:b9:3b:10:e0:ff:2a:10:4d:4f:9c:17:e5:
fd:f5:ca:d9:b6:0c:d7:2d:4d:af:af:8c:f3:1c:24:
50:57:ae:1c:dc:47:8b:1e:61:ff:5b:2c:24:11:5c:
48:a3:4a:91:59:75:f9:1f:b5:fd:d6:1c:2b:ab:ed:
fb:d9:d2:bd:1c:9a:0f:c3:93:b0:2e:97:2e:bb:0a:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F9:18:6C:07:F8:F4:3B:1D:C2:6D:DF:EF:BB:CF:D7:0C:C0:0B:BE
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f33322d3438203d3e20313531323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:8880::/32
Signature Algorithm: sha256WithRSAEncryption
38:94:d5:96:a2:01:ce:53:59:d2:56:43:8b:a7:22:a7:f9:cc:
78:7d:50:18:d0:a9:d2:7e:94:8b:73:2a:0c:ef:92:a7:fc:6e:
6b:54:ad:8b:1f:a4:db:5b:8e:de:58:cc:5f:a6:74:e5:e5:71:
f8:04:1b:47:e3:16:e3:95:98:d7:2a:97:9f:10:62:fc:d7:fd:
db:e3:11:d6:e5:6f:12:ae:8f:05:f8:9d:9a:43:44:b8:f1:c0:
c3:03:0b:8f:b2:09:91:59:bb:f0:3d:66:05:7f:0c:a3:20:3e:
07:80:17:46:b0:01:6c:e9:32:e2:e9:51:c8:0a:3b:72:6d:9e:
7b:4c:78:d4:8d:7b:27:1b:68:2c:d1:67:c9:a7:5a:e3:e8:05:
c0:ee:fc:6d:23:d3:82:3b:14:c2:2f:2c:61:b4:94:5a:cf:67:
c0:2b:b8:81:9a:4e:89:be:90:cd:cd:c4:cb:79:29:04:e6:5c:
27:82:25:8c:37:2e:11:f2:cb:7c:f9:0b:28:89:4d:92:13:c5:
a7:8f:4c:ee:7a:fb:76:ec:bc:44:e7:93:c0:d8:18:10:2e:3b:
31:ca:c5:e5:74:28:ca:ab:77:52:6f:2a:b7:a2:02:40:59:47:
18:80:d7:79:0b:0e:0f:23:54:c3:fe:2d:81:19:2d:8d:19:3a:
fa:00:39:c3
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUbU2wLOloGtgx3yVxyRI1senwt6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjAxMjAwMjEzMDVaFw0yNzAxMTkwMjE4MDVaMDMxMTAvBgNV
BAMTKERDRjkxODZDMDdGOEY0M0IxREMyNkRERkVGQkJDRkQ3MENDMDBCQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwj5ZAaR/vN2nTeuDQulo2ELpL
IA+YYRRKTaDLMYCAEERPbP8wekTLAsI2Hs/CgKWba6ORJXB32+0KrNZgMMWJJ/5e
zeDGMVYLXxJutIV+xhiW6g6XJ1IIyaClkCz+YE4zMlvH0b1+3hN2y5MM7oEenRtv
B5GV0XyPDPRgQMcOEFPC3ZEK7n8IYJSmosJ0R5wS+I78JjC846mJkMEeAfjY17gd
yTgEvhAVGGHztoKTUG9eVaj92rk7EOD/KhBNT5wX5f31ytm2DNctTa+vjPMcJFBX
rhzcR4seYf9bLCQRXEijSpFZdfkftf3WHCur7fvZ0r0cmg/Dk7Auly67Cs9JAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQU3PkYbAf49Dsdwm3f77vP1wzAC74wHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDg4MTAyNS8wLzMyMzQzMDM2M2Ez
ODM4MzgzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzUzMTMyMzkzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC
AAIwBwMFACQGiIAwDQYJKoZIhvcNAQELBQADggEBADiU1ZaiAc5TWdJWQ4unIqf5
zHh9UBjQqdJ+lItzKgzvkqf8bmtUrYsfpNtbjt5YzF+mdOXlcfgEG0fjFuOVmNcq
l58QYvzX/dvjEdblbxKujwX4nZpDRLjxwMMDC4+yCZFZu/A9ZgV/DKMgPgeAF0aw
AWzpMuLpUcgKO3JtnntMeNSNeycbaCzRZ8mnWuPoBcDu/G0j04I7FMIvLGG0lFrP
Z8AruIGaTom+kM3NxMt5KQTmXCeCJYw3LhHyy3z5CyiJTZITxaePTO56+3bsvETn
k8DYGBAuOzHKxeV0KMqrd1JvKreiAkBZRxiA13kLDg8jVMP+LYEZLY0ZOvoAOcM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:09 2026 by rpki-client