This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e20313338343537.roa File: 323430323a376438303a3a2f34382d3438203d3e20313338343537.roa (raw, json) Hash identifier: liIX8MTFu+mFL+KdO2mNGim/jnMP7pIKA20QZK2b/0U= Subject key identifier: FE:66:18:D8:5D:ED:9E:44:C9:CD:E9:2C:F9:77:F5:29:73:B1:87:5F Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 65D85B4F18A5D77DA6D4DAB5C8BB3B91E6D5C82A Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e20313338343537.roa Signing time: Tue 20 Jan 2026 02:15:39 +0000 ROA not before: Tue 20 Jan 2026 02:10:39 +0000 ROA not after: Tue 19 Jan 2027 02:15:39 +0000 asID: 138457 IP address blocks: 2402:7d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d8:5b:4f:18:a5:d7:7d:a6:d4:da:b5:c8:bb:3b:91:e6:d5:c8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:39 2026 GMT Not After : Jan 19 02:15:39 2027 GMT Subject: CN=FE6618D85DED9E44C9CDE92CF977F52973B1875F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:35:ed:1c:6b:de:51:89:85:6c:59:2e:35: b0:92:cf:76:49:a7:ad:c8:90:98:c7:f8:e8:90:74: c1:3e:b3:56:30:16:aa:7d:c0:84:01:54:9a:d4:7b: 84:32:dc:0c:2b:3b:fd:69:46:82:ce:2d:d4:9e:cd: e6:f6:1f:ba:9e:bb:3e:53:71:ef:17:fa:61:b6:2e: 69:8e:b0:21:4a:76:70:72:60:71:ba:1e:69:07:64: 82:6f:60:9b:17:72:e3:2b:ae:86:bd:ca:b4:1c:05: cc:5e:d9:7a:2f:c7:ba:08:bb:b9:f2:7d:7a:c0:6d: 37:af:ef:71:ec:98:c2:fa:15:ac:6a:11:2c:f5:3d: 9c:36:f8:20:7d:47:24:a6:c4:5d:8f:57:94:33:6c: 4d:ad:b8:62:a3:67:35:b1:40:53:b2:75:d9:2b:66: fd:f0:a9:cc:af:30:a5:65:d8:83:38:f2:f7:60:37: 4e:c3:7d:0a:1d:bf:12:19:d1:69:ce:6d:62:4a:c0: b5:ed:10:30:33:3d:7a:76:50:f7:6d:6d:4b:52:35: f0:01:34:e9:f8:d6:45:74:86:8c:58:5a:e0:1c:39: 72:48:e8:f7:15:92:d0:07:b5:7e:4d:ea:fa:f3:25: b8:6d:3a:b5:8b:b7:04:c8:04:8e:4a:e0:79:9a:ab: e7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:66:18:D8:5D:ED:9E:44:C9:CD:E9:2C:F9:77:F5:29:73:B1:87:5F X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e20313338343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7d80::/48 Signature Algorithm: sha256WithRSAEncryption 17:cb:32:ad:5e:3f:5d:63:07:1a:fa:07:bf:d7:50:cf:63:52: de:b7:f8:43:50:8b:7d:6b:5a:10:81:ec:78:8b:ba:52:6e:f0: 66:0d:d9:85:23:bf:ca:94:1a:60:bf:ce:bd:28:61:0f:fb:90: ee:20:90:70:1b:37:de:16:1d:5e:9b:9e:a0:f3:f0:8e:f4:09: 8d:8b:7a:12:b7:78:f2:27:94:ef:32:a3:82:af:c7:db:05:03: 62:7f:5d:84:1d:f9:59:0b:ad:57:1e:bc:01:fb:20:1c:f2:0b: cf:18:8c:c4:3e:cc:64:98:bf:b0:f4:46:fe:76:13:50:15:d3: e1:d9:6f:d9:d5:79:14:83:53:94:ef:11:50:bf:13:78:d6:9c: a4:e7:94:48:d6:81:af:c0:7a:c7:6c:d0:6c:25:5e:2e:cd:7c: 51:76:f7:f7:60:38:89:f2:83:cc:10:9e:53:66:94:8b:86:cb: 14:a5:3a:f8:60:d2:af:e8:f6:ed:24:26:c7:7b:19:bd:8f:88: 61:f6:f8:51:bf:f4:25:01:ca:07:51:e1:e7:07:08:43:03:fe: 8a:af:31:25:98:f8:83:d4:1b:55:4e:51:03:7b:d5:17:6e:15: 50:c9:b9:a9:50:52:5e:bb:42:d6:2c:d9:25:79:67:9d:41:fa: 0c:07:63:d5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZdhbTxil132m1Nq1yLs7kebVyCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzlaFw0yNzAxMTkwMjE1MzlaMDMxMTAvBgNV BAMTKEZFNjYxOEQ4NURFRDlFNDRDOUNERTkyQ0Y5NzdGNTI5NzNCMTg3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9zXtHGveUYmFbFkuNbCSz3ZJ p63IkJjH+OiQdME+s1YwFqp9wIQBVJrUe4Qy3AwrO/1pRoLOLdSezeb2H7qeuz5T ce8X+mG2LmmOsCFKdnByYHG6HmkHZIJvYJsXcuMrroa9yrQcBcxe2Xovx7oIu7ny fXrAbTev73HsmML6FaxqESz1PZw2+CB9RySmxF2PV5QzbE2tuGKjZzWxQFOyddkr Zv3wqcyvMKVl2IM48vdgN07DfQodvxIZ0WnObWJKwLXtEDAzPXp2UPdtbUtSNfAB NOn41kV0hoxYWuAcOXJI6PcVktAHtX5N6vrzJbhtOrWLtwTIBI5K4Hmaq+ffAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU/mYY2F3tnkTJzeks+Xf1KXOxh18wHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTc1NjE2Mi8wLzMyMzQzMDMyM2Ez NzY0MzgzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzODM0MzUzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQCfYAAADANBgkqhkiG9w0BAQsFAAOCAQEAF8syrV4/XWMHGvoHv9dQ z2NS3rf4Q1CLfWtaEIHseIu6Um7wZg3ZhSO/ypQaYL/OvShhD/uQ7iCQcBs33hYd XpueoPPwjvQJjYt6Erd48ieU7zKjgq/H2wUDYn9dhB35WQutVx68AfsgHPILzxiM xD7MZJi/sPRG/nYTUBXT4dlv2dV5FINTlO8RUL8TeNacpOeUSNaBr8B6x2zQbCVe Ls18UXb392A4ifKDzBCeU2aUi4bLFKU6+GDSr+j27SQmx3sZvY+IYfb4Ub/0JQHK B1Hh5wcIQwP+iq8xJZj4g9QbVU5RA3vVF24VUMm5qVBSXrtC1izZJXlnnUH6DAdj 1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:52:46 2026 by rpki-client