This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e203633353832.roa File: 323430323a376438303a383838383a3a2f34382d3438203d3e203633353832.roa (raw, json) Hash identifier: LHGN/tTR5aq6wS3Hra8BNGEyoVCcyWKI9KG3slZQimY= Subject key identifier: E6:D5:CB:D6:E5:48:90:3C:AB:32:BF:EC:48:CB:AE:6F:6D:56:2D:F0 Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 65C9A5485657E498315578DB730198DF045F7F04 Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e203633353832.roa Signing time: Tue 20 Jan 2026 02:15:39 +0000 ROA not before: Tue 20 Jan 2026 02:10:39 +0000 ROA not after: Tue 19 Jan 2027 02:15:39 +0000 asID: 63582 IP address blocks: 2402:7d80:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c9:a5:48:56:57:e4:98:31:55:78:db:73:01:98:df:04:5f:7f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:39 2026 GMT Not After : Jan 19 02:15:39 2027 GMT Subject: CN=E6D5CBD6E548903CAB32BFEC48CBAE6F6D562DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:5a:93:40:a8:cf:c8:82:82:52:8a:65:14: d4:f4:b9:13:97:2b:3f:ff:e0:cc:64:b7:e8:a0:55: 59:a1:41:6f:cf:d4:23:ea:42:17:f3:f1:a3:d2:b4: 0c:21:5a:d7:54:69:2c:85:87:a6:8b:72:68:92:af: 2a:2f:58:75:8d:cc:e5:7a:77:b8:c5:d1:17:9c:d5: dc:63:08:cf:85:c9:a3:c2:cc:78:53:3e:70:cb:57: 41:d1:66:0f:03:fb:c1:52:24:49:8d:5d:16:61:06: bc:26:5a:d1:76:36:5b:16:89:ff:cc:7c:c6:5e:7d: 80:8d:6a:e5:77:58:4a:2a:b8:d9:b4:44:1d:44:38: 82:2d:8a:7b:75:25:af:a8:06:b4:78:23:ef:25:27: 74:28:b6:3f:66:99:6d:c8:d8:2f:51:09:5a:c0:95: 5a:62:70:6b:f6:b1:8f:7c:d3:e5:3a:f3:34:77:c8: b3:56:88:05:a7:37:a1:be:e5:ec:e7:dd:fb:11:04: 95:77:3f:63:4e:a0:51:6d:46:a8:29:98:e1:f4:05: 15:6e:51:89:91:cf:ba:7d:b5:1e:cc:cf:ed:2f:14: 1d:ab:96:cb:7b:1f:7a:20:62:ed:37:06:e6:65:1a: 91:8e:6e:58:3b:61:d5:6c:87:50:27:e4:5c:b4:82: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D5:CB:D6:E5:48:90:3C:AB:32:BF:EC:48:CB:AE:6F:6D:56:2D:F0 X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e203633353832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7d80:8888::/48 Signature Algorithm: sha256WithRSAEncryption 68:1c:33:69:5b:29:20:04:e2:06:5a:df:66:3e:44:99:4f:37: 29:18:0c:8c:7e:1d:02:35:b6:34:86:de:3f:fd:7d:1b:3d:65: 70:92:6b:18:89:03:84:c9:ee:ab:f4:c3:a8:6a:eb:9f:a7:ca: 4d:c0:7d:e2:25:58:bd:02:3e:bc:55:a0:db:b6:38:04:2e:ef: d0:16:8a:b8:c3:98:22:5e:f4:58:72:62:99:da:8e:df:13:d5: dd:9b:32:fb:58:a1:26:11:37:e6:71:bb:2d:af:cc:b5:9d:99: c2:36:f0:5c:06:a4:56:41:ef:11:eb:a5:bb:b7:dd:da:95:42: 45:3d:49:8c:10:2d:7e:64:96:b4:31:60:62:b1:f2:5e:7b:3f: 0f:8a:ef:b5:bb:90:1b:35:da:a3:5b:59:19:8b:ba:75:8f:8e: 41:14:cd:78:a6:be:58:39:58:c7:e3:2d:bb:68:46:56:4a:aa: 83:60:84:67:d2:d7:09:91:58:b4:11:d4:d7:00:4f:33:50:5d: 4e:e9:56:26:83:15:89:d3:79:c7:e2:23:dc:6c:8e:4b:19:33: df:1e:c5:d2:81:84:14:c2:05:a4:15:bc:f8:28:90:90:2b:85: 96:94:bc:39:20:ee:6c:93:8b:d9:77:a3:17:e0:5f:7a:20:bb: b5:c0:56:9f -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUZcmlSFZX5JgxVXjbcwGY3wRffwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzlaFw0yNzAxMTkwMjE1MzlaMDMxMTAvBgNV BAMTKEU2RDVDQkQ2RTU0ODkwM0NBQjMyQkZFQzQ4Q0JBRTZGNkQ1NjJERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWFqTQKjPyIKCUoplFNT0uROX Kz//4Mxkt+igVVmhQW/P1CPqQhfz8aPStAwhWtdUaSyFh6aLcmiSryovWHWNzOV6 d7jF0Rec1dxjCM+FyaPCzHhTPnDLV0HRZg8D+8FSJEmNXRZhBrwmWtF2NlsWif/M fMZefYCNauV3WEoquNm0RB1EOIItint1Ja+oBrR4I+8lJ3Qotj9mmW3I2C9RCVrA lVpicGv2sY980+U68zR3yLNWiAWnN6G+5ezn3fsRBJV3P2NOoFFtRqgpmOH0BRVu UYmRz7p9tR7Mz+0vFB2rlst7H3ogYu03BuZlGpGOblg7YdVsh1An5Fy0glAFAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQU5tXL1uVIkDyrMr/sSMuub21WLfAwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNzU2MTYyLzAvMzIzNDMwMzIz YTM3NjQzODMwM2EzODM4MzgzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzMz NTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAn2AiIgwDQYJKoZIhvcNAQELBQADggEBAGgcM2lb KSAE4gZa32Y+RJlPNykYDIx+HQI1tjSG3j/9fRs9ZXCSaxiJA4TJ7qv0w6hq65+n yk3AfeIlWL0CPrxVoNu2OAQu79AWirjDmCJe9FhyYpnajt8T1d2bMvtYoSYRN+Zx uy2vzLWdmcI28FwGpFZB7xHrpbu33dqVQkU9SYwQLX5klrQxYGKx8l57Pw+K77W7 kBs12qNbWRmLunWPjkEUzXimvlg5WMfjLbtoRlZKqoNghGfS1wmRWLQR1NcATzNQ XU7pViaDFYnTecfiI9xsjksZM98exdKBhBTCBaQVvPgokJArhZaUvDkg7myTi9l3 oxfgX3ogu7XAVp8= -----END CERTIFICATE-----Generated at Sun Jan 25 15:52:26 2026 by rpki-client