This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/323430323a356534303a3a2f33322d3332203d3e20313331353236.roa File: 323430323a356534303a3a2f33322d3332203d3e20313331353236.roa (raw, json) Hash identifier: 1h4OrgL9zEqJdmEkth2dOBjhiLKByYppiMUDngFpF44= Subject key identifier: 62:76:05:81:7A:2A:B8:3A:3F:F4:88:90:B8:A6:E5:FB:D6:8B:0D:BA Certificate issuer: /CN=6E171695D3EF09F7A49B6AF0022DA63420988631 Certificate serial: 4145A265857CB63CE0F97DD839CCAF4EBFFF8151 Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/323430323a356534303a3a2f33322d3332203d3e20313331353236.roa Signing time: Tue 20 Jan 2026 02:21:37 +0000 ROA not before: Tue 20 Jan 2026 02:16:37 +0000 ROA not after: Tue 19 Jan 2027 02:21:37 +0000 asID: 131526 IP address blocks: 2402:5e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:45:a2:65:85:7c:b6:3c:e0:f9:7d:d8:39:cc:af:4e:bf:ff:81:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631 Validity Not Before: Jan 20 02:16:37 2026 GMT Not After : Jan 19 02:21:37 2027 GMT Subject: CN=627605817A2AB83A3FF48890B8A6E5FBD68B0DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:72:de:12:80:ea:4e:6c:89:f0:68:6c:fc: 71:18:3b:2b:e5:7e:cc:c7:dc:e5:1d:3e:a2:65:19: d9:47:70:da:63:04:96:07:17:02:20:48:6e:8e:88: d5:81:5d:5a:b1:40:83:86:3d:42:b2:12:4b:c1:c1: 80:2d:c7:62:24:4f:07:6c:cb:81:0a:49:08:8c:28: fd:27:73:28:3e:19:7a:34:18:ba:30:58:c7:3e:bc: 77:3a:bd:6f:89:12:ca:8c:88:9d:26:4e:c6:bb:92: db:65:62:a2:fc:db:2a:4e:0e:b2:46:32:f2:b7:fe: c5:05:c4:b7:e0:94:fc:57:82:6c:b4:29:39:06:d7: 09:14:78:1e:ef:de:16:54:8e:bf:6e:18:70:0d:c1: fa:8f:67:45:8f:d5:b3:4c:d0:d2:80:99:a5:c7:80: 59:72:df:51:e7:91:52:d8:c0:d8:7d:f7:94:61:af: f4:86:b3:f5:63:e0:62:70:90:31:36:9b:66:4b:af: f1:0b:ef:7b:16:4a:03:27:ff:b7:0b:3f:18:7f:4d: 7d:11:36:d2:98:9f:b2:d7:b8:c7:c6:68:5d:ab:e8: 17:dd:85:c8:1d:50:0f:49:76:08:7c:aa:79:d8:45: a0:eb:87:96:14:be:ee:5b:30:ef:75:ae:cc:48:d0: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:76:05:81:7A:2A:B8:3A:3F:F4:88:90:B8:A6:E5:FB:D6:8B:0D:BA X509v3 Authority Key Identifier: keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/323430323a356534303a3a2f33322d3332203d3e20313331353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5e40::/32 Signature Algorithm: sha256WithRSAEncryption 5e:85:ae:bb:a4:c1:f0:ab:e9:d9:88:09:dc:2a:c8:d1:4d:ec: ec:a9:f6:8c:f6:66:4a:bf:f1:9e:de:97:ba:72:82:55:63:c2: 1b:f2:71:5c:87:2f:3c:58:6c:ff:84:aa:4c:43:b9:f9:4e:67: 45:ad:66:21:93:02:04:9b:e3:8a:80:16:f8:d4:96:87:c4:40: e6:a4:3e:8b:c3:77:e1:a5:50:af:68:df:05:42:88:e9:63:99: 96:68:78:79:f1:05:db:ee:1d:16:88:05:37:ea:99:49:0a:c0: 55:cc:91:2a:a7:87:fd:13:53:45:ef:66:7a:f8:da:c0:45:ba: 3a:3e:a6:9f:c0:f0:21:41:fc:2e:9c:97:2d:33:a5:60:7c:86: 5d:b8:69:45:97:92:a2:f2:64:ca:0b:40:fe:49:55:73:d8:c4: e9:4f:f9:27:27:2a:1e:77:6c:1e:c6:42:98:de:d7:ea:74:d0: bc:91:a7:ff:91:fe:5e:2e:0c:61:e1:35:8a:56:ee:b3:eb:a5: 14:61:57:1a:06:23:ea:68:a2:b0:77:2a:cd:2c:aa:d7:ce:53: 47:08:c1:82:42:78:c8:b4:27:c8:85:c5:0f:7e:a5:aa:92:7c: 56:e9:b9:ba:0c:ae:cc:05:8f:4e:a1:6f:04:59:5d:b5:5e:d5: f6:75:5a:01 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUQUWiZYV8tjzg+X3YOcyvTr//gVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxNzE2OTVEM0VGMDlGN0E0OUI2QUYwMDIyREE2MzQy MDk4ODYzMTAeFw0yNjAxMjAwMjE2MzdaFw0yNzAxMTkwMjIxMzdaMDMxMTAvBgNV BAMTKDYyNzYwNTgxN0EyQUI4M0EzRkY0ODg5MEI4QTZFNUZCRDY4QjBEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzInLeEoDqTmyJ8Ghs/HEYOyvl fszH3OUdPqJlGdlHcNpjBJYHFwIgSG6OiNWBXVqxQIOGPUKyEkvBwYAtx2IkTwds y4EKSQiMKP0ncyg+GXo0GLowWMc+vHc6vW+JEsqMiJ0mTsa7kttlYqL82ypODrJG MvK3/sUFxLfglPxXgmy0KTkG1wkUeB7v3hZUjr9uGHANwfqPZ0WP1bNM0NKAmaXH gFly31HnkVLYwNh995Rhr/SGs/Vj4GJwkDE2m2ZLr/EL73sWSgMn/7cLPxh/TX0R NtKYn7LXuMfGaF2r6BfdhcgdUA9Jdgh8qnnYRaDrh5YUvu5bMO91rsxI0BHzAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUYnYFgXoquDo/9IiQuKbl+9aLDbowHwYDVR0j BBgwFoAUbhcWldPvCfekm2rwAi2mNCCYhjEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTQ5NDAxOC8wLzZFMTcxNjk1RDNFRjA5RjdBNDlCNkFGMDAyMkRB NjM0MjA5ODg2MzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkUxNzE2OTVEM0VGMDlGN0E0OUI2QUYwMDIyREE2MzQyMDk4ODYzMS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTQ5NDAxOC8wLzMyMzQzMDMyM2Ez NTY1MzQzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzMzMTM1MzIzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQCXkAwDQYJKoZIhvcNAQELBQADggEBAF6FrrukwfCr6dmICdwqyNFN 7Oyp9oz2Zkq/8Z7el7pyglVjwhvycVyHLzxYbP+EqkxDuflOZ0WtZiGTAgSb44qA FvjUlofEQOakPovDd+GlUK9o3wVCiOljmZZoeHnxBdvuHRaIBTfqmUkKwFXMkSqn h/0TU0XvZnr42sBFujo+pp/A8CFB/C6cly0zpWB8hl24aUWXkqLyZMoLQP5JVXPY xOlP+ScnKh53bB7GQpje1+p00LyRp/+R/l4uDGHhNYpW7rPrpRRhVxoGI+poorB3 Ks0sqtfOU0cIwYJCeMi0J8iFxQ9+paqSfFbpuboMrswFj06hbwRZXbVe1fZ1WgE= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:26 2026 by rpki-client