This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e203132303736.roa File: 323430323a376438303a383838383a3a2f34382d3438203d3e203132303736.roa (raw, json) Hash identifier: +pIRtQvx+sA0ede34l1H8aNbRFbyx9hK+q/+HYNo3bk= Subject key identifier: F8:70:81:F7:16:62:E3:0A:58:67:C0:15:EC:4C:A2:95:2B:D0:F3:3C Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 0B12406C639F201279947E3D71D183929A9A7AAC Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e203132303736.roa Signing time: Tue 20 Jan 2026 02:15:39 +0000 ROA not before: Tue 20 Jan 2026 02:10:39 +0000 ROA not after: Tue 19 Jan 2027 02:15:39 +0000 asID: 12076 IP address blocks: 2402:7d80:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:12:40:6c:63:9f:20:12:79:94:7e:3d:71:d1:83:92:9a:9a:7a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:39 2026 GMT Not After : Jan 19 02:15:39 2027 GMT Subject: CN=F87081F71662E30A5867C015EC4CA2952BD0F33C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:65:c8:34:a6:0a:11:04:86:3d:d2:66:ba: 78:43:f6:8a:0f:8e:3a:77:b6:a0:09:d2:ff:5c:c1: 11:dd:e4:75:31:c2:81:a2:6c:fa:8c:f7:dd:20:5f: 9b:8e:c4:b4:bd:67:5a:d6:02:a5:6d:80:80:61:1d: a8:d1:ba:8f:e6:62:bc:5b:2c:f3:95:34:37:c4:c7: 95:56:9f:7e:b5:ea:92:7d:9b:c5:cd:dd:e3:ca:7e: 50:bd:33:0c:d1:dc:21:5b:13:e5:28:80:56:f0:62: 50:e9:b4:3b:69:5e:78:95:3c:a0:a4:15:7a:69:1c: 89:d8:a8:c3:37:30:dd:c7:42:08:5c:0b:94:75:59: ab:db:26:79:d4:75:26:14:4e:44:95:bd:14:e1:74: dd:a1:5e:83:b9:11:43:3c:b7:9a:d3:08:37:48:8a: d9:8c:eb:e1:02:a3:9e:c7:06:65:2a:39:44:bc:4f: 5b:9c:68:35:10:ff:b7:73:3e:7a:80:be:69:83:f7: 4c:62:34:d3:a4:11:d3:0d:e4:e2:e5:00:8a:a5:70: 46:03:f5:10:c5:15:8e:ca:8c:f7:fd:02:a8:36:b6: 1e:c1:ac:bd:c8:67:6e:3e:cc:ea:36:80:42:79:9c: 4f:a4:b0:fb:70:ef:a4:27:da:3c:2b:81:5b:bf:93: 1b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:70:81:F7:16:62:E3:0A:58:67:C0:15:EC:4C:A2:95:2B:D0:F3:3C X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e203132303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7d80:8888::/48 Signature Algorithm: sha256WithRSAEncryption 6e:39:4c:06:54:ea:55:98:b9:de:a9:60:66:c4:9b:ac:68:08: 32:7c:40:0e:5f:b5:0d:71:1e:a6:9a:90:33:4b:40:79:3a:e8: 16:ad:22:ab:f4:da:83:25:b9:26:11:09:6e:31:b8:ec:18:5b: ba:42:e0:99:55:bb:f4:06:6c:3d:7f:e6:e2:f7:27:71:e4:17: 58:e9:69:9f:ed:ce:35:00:21:c4:0f:23:41:5c:54:30:cb:b4: 3f:aa:19:ac:9c:48:b1:4c:8c:0e:db:33:f5:a7:33:9f:f1:a3: c6:24:31:97:f2:67:8c:be:eb:26:cc:ee:ed:8f:b1:a9:b5:3b: 38:33:e9:64:9a:1e:fb:d9:51:fd:f7:47:f8:b2:ef:35:95:6c: 5a:b9:28:9b:da:58:aa:ed:5e:76:4d:e3:f9:0c:41:d4:a6:72: 76:19:85:28:39:bf:27:21:76:76:9a:b2:07:d4:e4:00:71:09: 66:b3:96:b8:d4:f0:34:58:c5:6f:9d:f4:d6:17:0e:bb:6a:1f: 35:9d:2d:60:ad:31:94:7a:2e:e9:45:75:00:22:de:10:64:93: 39:3b:3e:c7:81:e7:a9:f4:fd:ac:2d:93:78:87:56:dd:49:77: 71:32:f8:ca:94:cb:2c:72:63:d4:bf:ba:be:33:bb:cd:d3:82: 0a:5b:01:c2 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUCxJAbGOfIBJ5lH49cdGDkpqaeqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzlaFw0yNzAxMTkwMjE1MzlaMDMxMTAvBgNV BAMTKEY4NzA4MUY3MTY2MkUzMEE1ODY3QzAxNUVDNENBMjk1MkJEMEYzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOu2XINKYKEQSGPdJmunhD9ooP jjp3tqAJ0v9cwRHd5HUxwoGibPqM990gX5uOxLS9Z1rWAqVtgIBhHajRuo/mYrxb LPOVNDfEx5VWn3616pJ9m8XN3ePKflC9MwzR3CFbE+UogFbwYlDptDtpXniVPKCk FXppHInYqMM3MN3HQghcC5R1WavbJnnUdSYUTkSVvRThdN2hXoO5EUM8t5rTCDdI itmM6+ECo57HBmUqOUS8T1ucaDUQ/7dzPnqAvmmD90xiNNOkEdMN5OLlAIqlcEYD 9RDFFY7KjPf9Aqg2th7BrL3IZ24+zOo2gEJ5nE+ksPtw76Qn2jwrgVu/kxtnAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQU+HCB9xZi4wpYZ8AV7EyilSvQ8zwwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNzU2MTYyLzAvMzIzNDMwMzIz YTM3NjQzODMwM2EzODM4MzgzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzIz MDM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAn2AiIgwDQYJKoZIhvcNAQELBQADggEBAG45TAZU 6lWYud6pYGbEm6xoCDJ8QA5ftQ1xHqaakDNLQHk66BatIqv02oMluSYRCW4xuOwY W7pC4JlVu/QGbD1/5uL3J3HkF1jpaZ/tzjUAIcQPI0FcVDDLtD+qGaycSLFMjA7b M/WnM5/xo8YkMZfyZ4y+6ybM7u2Psam1Ozgz6WSaHvvZUf33R/iy7zWVbFq5KJva WKrtXnZN4/kMQdSmcnYZhSg5vychdnaasgfU5ABxCWazlrjU8DRYxW+d9NYXDrtq HzWdLWCtMZR6LulFdQAi3hBkkzk7PseB56n0/awtk3iHVt1Jd3Ey+MqUyyxyY9S/ ur4zu83TggpbAcI= -----END CERTIFICATE-----Generated at Sun Jan 25 15:53:25 2026 by rpki-client