This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e20313339313337.roa File: 323430323a376438303a383838383a3a2f34382d3438203d3e20313339313337.roa (raw, json) Hash identifier: TrS8RzW4qESkVQ14Eotg+A5KiVrG45k7a6TwCvYK6xw= Subject key identifier: 42:BA:E2:FC:58:95:49:AB:DB:00:4B:EB:DD:45:F5:A0:D1:6E:36:8D Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 0FB5CF66A804D18300416DB3B82192EC80B9CF23 Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e20313339313337.roa Signing time: Tue 20 Jan 2026 02:15:38 +0000 ROA not before: Tue 20 Jan 2026 02:10:38 +0000 ROA not after: Tue 19 Jan 2027 02:15:38 +0000 asID: 139137 IP address blocks: 2402:7d80:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b5:cf:66:a8:04:d1:83:00:41:6d:b3:b8:21:92:ec:80:b9:cf:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:38 2026 GMT Not After : Jan 19 02:15:38 2027 GMT Subject: CN=42BAE2FC589549ABDB004BEBDD45F5A0D16E368D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:ac:e6:df:a7:3e:3e:27:03:bd:d5:d8:9b: c0:49:61:37:a9:63:dd:eb:26:9e:6a:bd:25:3f:6f: 83:9a:91:65:78:10:4f:03:3f:5f:97:37:70:40:dc: 11:15:14:e5:7e:0f:aa:fe:a5:df:de:9a:f4:79:3a: 9b:68:a5:a4:d1:08:41:46:31:35:21:eb:7b:ab:16: 1a:f3:8a:53:f7:4c:c8:65:c8:d1:8e:52:7d:2b:50: 37:9c:03:64:2a:d1:90:47:c9:2f:21:aa:bd:b9:0f: 14:f0:ea:97:ac:e6:ea:98:3b:7e:07:21:7b:c1:38: 01:4b:0c:3d:37:20:ea:4a:60:2d:93:b9:13:45:7f: 8a:88:63:b8:aa:37:6b:66:3d:1d:9d:c0:26:7d:c3: 3c:10:ab:4c:83:e4:d0:d4:23:60:81:3e:04:d7:0f: 41:28:ee:70:fe:50:74:0d:0a:e9:66:25:89:38:37: b8:c2:da:70:08:9d:c0:5a:31:d6:6f:09:9d:a8:13: 0a:be:50:2a:1e:26:25:fb:71:68:5b:0f:ae:a8:94: 74:5e:bd:fb:6b:57:4e:f8:51:5e:c0:bc:34:52:39: bb:59:fc:26:21:6b:8d:94:17:06:de:c3:45:c8:39: 26:fa:7f:88:72:eb:9d:c7:cf:19:3d:9d:80:ae:f7: 0a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BA:E2:FC:58:95:49:AB:DB:00:4B:EB:DD:45:F5:A0:D1:6E:36:8D X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e20313339313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7d80:8888::/48 Signature Algorithm: sha256WithRSAEncryption 8e:71:9a:a2:4b:c1:60:c1:1b:c7:d9:7c:3b:a7:48:99:d0:f9: 0d:f7:75:9c:27:93:4d:93:96:4a:27:0a:ec:a9:1d:a5:39:9f: 70:13:d2:6d:7d:11:11:43:3d:05:c9:46:20:d0:1b:59:cc:f9: f1:ed:83:41:e6:fa:e4:ed:c6:7e:57:be:5f:b8:a2:76:a1:2d: 3c:33:0d:24:c4:24:ce:2d:92:8d:d3:4e:02:b9:e4:f9:d1:2a: ef:60:e1:0c:93:07:75:d5:23:25:57:5a:3f:b8:03:af:9e:29: fb:ce:75:40:c5:fd:f3:99:1f:77:82:cc:9b:ee:5c:ad:0e:26: 2d:25:3e:e4:5c:b3:54:c1:74:82:ff:f3:dd:d3:6e:f1:90:ac: 5e:b9:eb:df:73:2b:fa:d5:8e:29:53:59:f5:99:ef:8c:2e:8a: 6c:d7:b0:e5:59:65:49:cd:2f:d7:08:d2:17:86:57:a9:25:c5: 4b:38:b7:81:f8:4f:f5:77:b6:a8:cb:78:0f:2b:60:e6:dd:40: 1c:50:af:90:54:ca:16:9d:4d:99:9d:77:97:3b:55:98:d8:1d: 6d:c2:66:6a:31:6b:53:54:04:4a:a8:30:f5:42:c5:99:f1:30: af:a1:ca:0b:52:cd:22:cc:d5:60:c6:20:56:4a:d7:92:6a:00: bf:d2:b8:6e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUD7XPZqgE0YMAQW2zuCGS7IC5zyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzhaFw0yNzAxMTkwMjE1MzhaMDMxMTAvBgNV BAMTKDQyQkFFMkZDNTg5NTQ5QUJEQjAwNEJFQkRENDVGNUEwRDE2RTM2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHazm36c+PicDvdXYm8BJYTep Y93rJp5qvSU/b4OakWV4EE8DP1+XN3BA3BEVFOV+D6r+pd/emvR5OptopaTRCEFG MTUh63urFhrzilP3TMhlyNGOUn0rUDecA2Qq0ZBHyS8hqr25DxTw6pes5uqYO34H IXvBOAFLDD03IOpKYC2TuRNFf4qIY7iqN2tmPR2dwCZ9wzwQq0yD5NDUI2CBPgTX D0Eo7nD+UHQNCulmJYk4N7jC2nAIncBaMdZvCZ2oEwq+UCoeJiX7cWhbD66olHRe vftrV074UV7AvDRSObtZ/CYha42UFwbew0XIOSb6f4hy653Hzxk9nYCu9wpnAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQUQrri/FiVSavbAEvr3UX1oNFuNo0wHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNzU2MTYyLzAvMzIzNDMwMzIz YTM3NjQzODMwM2EzODM4MzgzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz OTMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQCfYCIiDANBgkqhkiG9w0BAQsFAAOCAQEAjnGa okvBYMEbx9l8O6dImdD5Dfd1nCeTTZOWSicK7KkdpTmfcBPSbX0REUM9BclGINAb Wcz58e2DQeb65O3Gfle+X7iidqEtPDMNJMQkzi2SjdNOArnk+dEq72DhDJMHddUj JVdaP7gDr54p+851QMX985kfd4LMm+5crQ4mLSU+5FyzVMF0gv/z3dNu8ZCsXrnr 33Mr+tWOKVNZ9ZnvjC6KbNew5VllSc0v1wjSF4ZXqSXFSzi3gfhP9Xe2qMt4Dytg 5t1AHFCvkFTKFp1NmZ13lztVmNgdbcJmajFrU1QESqgw9ULFmfEwr6HKC1LNIszV YMYgVkrXkmoAv9K4bg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:53:21 2026 by rpki-client