This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e20313338343537.roa File: 323430323a376438303a383838383a3a2f34382d3438203d3e20313338343537.roa (raw, json) Hash identifier: QIMPOhnPbXBB6e13SoAdqm6DB9OyUBj30abrj9+MSc4= Subject key identifier: F3:E3:82:E2:F4:20:00:47:92:3D:B4:63:3B:3A:74:45:B9:CF:98:5F Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 71B8096596B5D9CCC44D382861F981966D1F5BA3 Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e20313338343537.roa Signing time: Tue 20 Jan 2026 02:15:40 +0000 ROA not before: Tue 20 Jan 2026 02:10:40 +0000 ROA not after: Tue 19 Jan 2027 02:15:40 +0000 asID: 138457 IP address blocks: 2402:7d80:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b8:09:65:96:b5:d9:cc:c4:4d:38:28:61:f9:81:96:6d:1f:5b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:40 2026 GMT Not After : Jan 19 02:15:40 2027 GMT Subject: CN=F3E382E2F4200047923DB4633B3A7445B9CF985F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8f:5f:8e:2d:91:0f:af:3b:f5:11:dd:2e:82: d9:a5:4b:8f:54:18:db:6c:73:4f:f1:b3:63:49:5a: ed:aa:f8:28:94:6c:58:01:67:5d:c2:67:98:72:44: 6d:48:19:67:3f:b2:1a:0f:37:7e:7d:ab:09:b4:32: 45:41:0e:04:d0:ab:3f:1d:24:21:64:39:1e:20:d0: c5:36:6c:f4:ef:8a:88:45:a4:4c:18:e4:05:97:2e: a3:40:d3:bc:49:f4:17:8c:46:1e:69:d8:50:b5:b6: 7b:cf:36:8f:e8:d6:9b:32:02:f9:5f:4f:6e:9b:4a: a7:2f:f7:6d:8e:04:3e:83:06:d3:4f:e6:db:17:12: 88:0e:37:83:a3:51:37:fc:fa:18:41:63:7a:f1:4a: 4e:14:d7:19:1e:b4:cb:c0:78:d5:22:e1:70:fa:cf: f4:f2:85:e0:50:e7:e3:5b:a8:f9:b9:af:84:80:c0: 5c:2e:cb:88:f2:22:41:14:28:f9:03:fd:4f:5c:b2: b4:96:a3:3d:34:2f:e4:3c:99:10:c5:a7:2f:f7:61: 6f:68:2b:95:87:d5:72:06:39:e6:99:25:6b:7b:c2: fa:1d:57:7f:62:32:8d:eb:ca:c6:c9:54:10:f8:6c: d6:10:ea:dd:a4:a3:e4:9d:aa:2f:b8:c9:6d:3e:d3: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E3:82:E2:F4:20:00:47:92:3D:B4:63:3B:3A:74:45:B9:CF:98:5F X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e20313338343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7d80:8888::/48 Signature Algorithm: sha256WithRSAEncryption 68:85:29:c9:db:5a:53:0b:2c:4b:6b:eb:59:bc:10:a6:2c:98: 64:de:66:be:b2:90:ca:43:ff:4d:8a:b6:67:e1:55:a7:d0:e1: 68:ec:4c:32:68:c8:93:32:b1:35:43:76:af:4c:78:38:53:f9: 48:aa:dd:d5:aa:45:11:f6:22:e6:4e:ee:60:41:f0:30:9b:6e: cb:b9:d4:4f:59:29:c2:53:df:e6:4c:5a:50:8f:9f:60:20:ff: 97:8b:52:60:69:70:0f:37:f5:ec:51:14:16:dc:86:37:86:f6: 41:32:da:ee:b0:de:a7:03:49:fa:50:28:3b:ca:78:74:ae:b4: 6d:2a:8d:54:84:9d:3f:15:6e:76:1b:22:d3:50:d9:76:f5:08: 75:7d:1d:73:da:3b:a9:bd:3e:77:99:cb:0f:7e:62:de:bc:75: eb:1c:a8:26:28:4a:67:84:89:22:d9:34:9d:18:0c:b8:a8:6d: 71:b9:ad:44:13:a3:26:a5:d0:c1:d3:7c:1b:45:bd:ac:d1:21: f8:7c:e0:04:59:49:3e:f1:9e:0c:4c:e1:16:92:1c:64:45:2b: 57:d4:53:17:46:b8:85:06:f5:84:91:2b:fb:0c:f7:cd:03:74: f6:5e:3f:58:a1:16:ce:62:46:02:a1:33:d1:a5:32:e8:9b:6d: cf:cc:5a:17 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUcbgJZZa12czETTgoYfmBlm0fW6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwNDBaFw0yNzAxMTkwMjE1NDBaMDMxMTAvBgNV BAMTKEYzRTM4MkUyRjQyMDAwNDc5MjNEQjQ2MzNCM0E3NDQ1QjlDRjk4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGj1+OLZEPrzv1Ed0ugtmlS49U GNtsc0/xs2NJWu2q+CiUbFgBZ13CZ5hyRG1IGWc/shoPN359qwm0MkVBDgTQqz8d JCFkOR4g0MU2bPTviohFpEwY5AWXLqNA07xJ9BeMRh5p2FC1tnvPNo/o1psyAvlf T26bSqcv922OBD6DBtNP5tsXEogON4OjUTf8+hhBY3rxSk4U1xketMvAeNUi4XD6 z/TyheBQ5+NbqPm5r4SAwFwuy4jyIkEUKPkD/U9csrSWoz00L+Q8mRDFpy/3YW9o K5WH1XIGOeaZJWt7wvodV39iMo3rysbJVBD4bNYQ6t2ko+Sdqi+4yW0+0wD1AgMB AAGjggIjMIICHzAdBgNVHQ4EFgQU8+OC4vQgAEeSPbRjOzp0RbnPmF8wHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNzU2MTYyLzAvMzIzNDMwMzIz YTM3NjQzODMwM2EzODM4MzgzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz ODM0MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQCfYCIiDANBgkqhkiG9w0BAQsFAAOCAQEAaIUp ydtaUwssS2vrWbwQpiyYZN5mvrKQykP/TYq2Z+FVp9DhaOxMMmjIkzKxNUN2r0x4 OFP5SKrd1apFEfYi5k7uYEHwMJtuy7nUT1kpwlPf5kxaUI+fYCD/l4tSYGlwDzf1 7FEUFtyGN4b2QTLa7rDepwNJ+lAoO8p4dK60bSqNVISdPxVudhsi01DZdvUIdX0d c9o7qb0+d5nLD35i3rx16xyoJihKZ4SJItk0nRgMuKhtcbmtRBOjJqXQwdN8G0W9 rNEh+HzgBFlJPvGeDEzhFpIcZEUrV9RTF0a4hQb1hJEr+wz3zQN09l4/WKEWzmJG AqEz0aUy6Jttz8xaFw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:53:18 2026 by rpki-client