This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/323430313a323738303a3a2f33322d3332203d3e203633373139.roa File: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (raw, json) Hash identifier: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo= Subject key identifier: D8:3A:8E:6F:AB:D4:8E:5F:77:F5:4A:9E:D0:BD:50:92:72:36:A3:35 Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Certificate serial: 487CF1212374CCB9FDAE4161F8DFDD043B9EEDE7 Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/323430313a323738303a3a2f33322d3332203d3e203633373139.roa Signing time: Tue 20 Jan 2026 02:22:43 +0000 ROA not before: Tue 20 Jan 2026 02:17:43 +0000 ROA not after: Tue 19 Jan 2027 02:22:43 +0000 asID: 63719 IP address blocks: 2401:2780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7c:f1:21:23:74:cc:b9:fd:ae:41:61:f8:df:dd:04:3b:9e:ed:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Validity Not Before: Jan 20 02:17:43 2026 GMT Not After : Jan 19 02:22:43 2027 GMT Subject: CN=D83A8E6FABD48E5F77F54A9ED0BD50927236A335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:a8:e5:8f:c6:fb:54:de:ea:d3:26:12:a0: 56:93:ec:2f:30:08:f1:d3:1f:70:85:30:d1:54:a3: 28:3f:4c:ab:fe:14:cf:6d:cf:88:d9:26:c4:00:bc: 34:45:84:6f:29:d5:f8:98:0d:7e:bc:23:77:26:41: 42:45:d5:41:4c:cc:ae:ae:a6:46:74:f6:02:73:3c: 16:80:75:a6:8b:85:13:ae:40:df:7c:85:c4:76:5c: ec:d9:13:80:0e:c6:f5:f6:56:67:8a:95:79:83:52: b8:06:32:0f:98:a7:29:93:da:b7:79:ea:3c:83:d8: 86:93:5b:c2:a7:3f:06:5f:11:a6:c5:00:c9:69:66: 69:ef:19:8c:e3:4b:c8:c4:0d:cd:2f:d7:2b:cf:a7: 43:a1:a5:37:b6:db:08:26:b9:88:7b:aa:b9:49:97: 2c:16:73:ed:59:68:70:a3:dc:5d:89:99:fa:16:b1: b8:ba:24:1b:de:a1:ea:d6:c2:8d:1b:6f:e2:7d:47: 28:00:ab:e2:2e:05:42:cc:39:cd:08:16:fd:69:43: 21:71:a9:aa:75:19:93:a5:7d:22:58:96:de:22:e1: 86:c8:cf:b9:52:c0:a2:d8:e4:08:97:04:ed:40:75: ff:3c:c7:96:e2:f5:79:6e:ab:8b:f2:8e:6b:91:13: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3A:8E:6F:AB:D4:8E:5F:77:F5:4A:9E:D0:BD:50:92:72:36:A3:35 X509v3 Authority Key Identifier: keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/323430313a323738303a3a2f33322d3332203d3e203633373139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2780::/32 Signature Algorithm: sha256WithRSAEncryption 41:ae:72:d6:75:2f:57:58:4e:41:30:ed:4f:bd:6a:99:1c:04: a8:bf:6b:0e:14:2f:2e:9b:b3:03:3a:b4:6a:ee:a7:dd:5a:fa: cc:88:d7:6a:11:ed:1b:2d:48:95:63:2b:a4:6c:7f:53:7a:52: 07:ff:45:67:87:79:13:34:91:fa:99:02:d4:d8:b0:3e:26:4a: 67:47:f3:ef:74:4e:c4:2d:2f:b6:73:ad:4a:19:de:1a:b3:da: 5b:3c:9d:40:e4:58:df:66:0f:9b:04:36:c3:99:05:9f:6b:63: 84:06:7d:85:46:cb:6f:88:2b:00:4b:46:9c:6a:c9:8c:19:19: b1:00:3c:b7:c2:a2:b6:d8:8e:b0:2c:b8:59:1b:d0:c1:08:0b: 75:47:22:8f:fb:ca:86:7a:ee:36:2c:9b:20:b5:82:89:fa:ef: fe:3c:df:09:a7:d8:0d:f1:2f:6c:19:05:8f:7c:00:14:a1:01: d1:22:fe:18:ba:18:1a:73:eb:ca:cc:89:9d:8b:d5:4c:ce:52: 09:7d:7c:cc:b6:ee:5b:51:cb:fd:f8:9d:38:5c:fa:52:58:4b: 1d:2e:be:cb:7e:55:ee:2a:1a:62:16:a7:c5:2f:24:eb:d4:cc: fd:1d:58:40:19:f4:89:e3:1a:9a:9d:7d:4c:92:f2:3b:03:98: d9:10:1d:99 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUSHzxISN0zLn9rkFh+N/dBDue7ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy MzQ0QkE2QzAeFw0yNjAxMjAwMjE3NDNaFw0yNzAxMTkwMjIyNDNaMDMxMTAvBgNV BAMTKEQ4M0E4RTZGQUJENDhFNUY3N0Y1NEE5RUQwQkQ1MDkyNzIzNkEzMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdKqjlj8b7VN7q0yYSoFaT7C8w CPHTH3CFMNFUoyg/TKv+FM9tz4jZJsQAvDRFhG8p1fiYDX68I3cmQUJF1UFMzK6u pkZ09gJzPBaAdaaLhROuQN98hcR2XOzZE4AOxvX2VmeKlXmDUrgGMg+YpymT2rd5 6jyD2IaTW8KnPwZfEabFAMlpZmnvGYzjS8jEDc0v1yvPp0OhpTe22wgmuYh7qrlJ lywWc+1ZaHCj3F2JmfoWsbi6JBveoerWwo0bb+J9RygAq+IuBULMOc0IFv1pQyFx qap1GZOlfSJYlt4i4YbIz7lSwKLY5AiXBO1Adf88x5bi9Xluq4vyjmuRE+lfAgMB AAGjggISMIICDjAdBgNVHQ4EFgQU2DqOb6vUjl939Uqe0L1QknI2ozUwHwYDVR0j BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5 MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNjI1MDkwLzAvMzIzNDMwMzEzYTMy MzczODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMzM3MzEzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBJ4AwDQYJKoZIhvcNAQELBQADggEBAEGuctZ1L1dYTkEw7U+9apkcBKi/ aw4ULy6bswM6tGrup91a+syI12oR7RstSJVjK6Rsf1N6Ugf/RWeHeRM0kfqZAtTY sD4mSmdH8+90TsQtL7ZzrUoZ3hqz2ls8nUDkWN9mD5sENsOZBZ9rY4QGfYVGy2+I KwBLRpxqyYwZGbEAPLfCorbYjrAsuFkb0MEIC3VHIo/7yoZ67jYsmyC1gon67/48 3wmn2A3xL2wZBY98ABShAdEi/hi6GBpz68rMiZ2L1UzOUgl9fMy27ltRy/34nThc +lJYSx0uvst+Ve4qGmIWp8UvJOvUzP0dWEAZ9InjGpqdfUyS8jsDmNkQHZk= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:25 2026 by rpki-client