This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e2038303735.roa File: 323430323a376438303a3a2f34382d3438203d3e2038303735.roa (raw, json) Hash identifier: qiTo3JKLFqTuDeRXFWkTZjz/jS3DSVGOtAwJBLjFgSY= Subject key identifier: CB:DE:DF:08:09:CA:02:EA:5D:94:DB:BE:EE:DA:D5:86:A6:B2:25:E4 Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 75D9DB4B7CC4D7B0DA93776B12F1DE99A13CAFBC Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e2038303735.roa Signing time: Tue 20 Jan 2026 02:15:39 +0000 ROA not before: Tue 20 Jan 2026 02:10:39 +0000 ROA not after: Tue 19 Jan 2027 02:15:39 +0000 asID: 8075 IP address blocks: 2402:7d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d9:db:4b:7c:c4:d7:b0:da:93:77:6b:12:f1:de:99:a1:3c:af:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:39 2026 GMT Not After : Jan 19 02:15:39 2027 GMT Subject: CN=CBDEDF0809CA02EA5D94DBBEEEDAD586A6B225E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:13:e9:8c:d1:0d:ac:54:be:30:6b:97:96: 05:80:19:6a:95:a6:19:06:f8:84:9d:a7:74:30:39: f4:55:8e:18:73:9e:93:6f:3b:21:f7:90:0b:0a:a4: 5d:d0:75:2f:c0:5e:17:ca:fc:9f:00:fc:2a:8f:21: df:3b:be:fd:c3:2b:2b:d4:74:ff:a0:fb:95:8d:d2: 2f:f6:76:88:69:c5:63:8b:24:8b:55:f0:8f:55:b0: b3:e4:6a:e1:32:db:57:53:e1:ea:bc:e8:8e:fb:4c: e9:14:62:09:d4:31:af:0f:09:be:3f:a8:da:0f:08: 2c:30:5c:87:44:4d:1a:47:7f:80:18:87:2d:6f:06: 93:71:21:23:1e:92:e7:f5:b8:06:6d:68:ce:d3:55: b4:79:0f:3b:3c:e5:7d:df:5d:9e:af:a2:32:65:f1: 7b:64:d2:71:01:0b:1e:9c:7a:4a:5c:d5:87:e1:72: 20:c9:4a:96:73:ce:1e:f2:f9:22:4e:2a:4f:c4:93: 84:e4:a3:58:fb:c4:71:90:ad:9c:26:74:57:fa:a4: b2:87:4c:64:ec:a9:5c:3d:81:5d:68:dc:cd:ab:02: 04:1c:76:11:7b:25:22:7f:d0:f6:a2:9f:18:70:59: 88:c9:04:97:10:97:e3:3c:7e:89:5d:4e:13:38:50: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DE:DF:08:09:CA:02:EA:5D:94:DB:BE:EE:DA:D5:86:A6:B2:25:E4 X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7d80::/48 Signature Algorithm: sha256WithRSAEncryption 01:31:c6:8b:fd:e0:1e:2c:59:f2:d1:a8:a5:ca:e3:00:a4:ab: 3d:14:27:a8:2d:ff:ed:4b:10:0e:7d:5a:92:b5:2a:88:b8:04: 38:1f:eb:ad:d8:bc:69:f3:3c:80:74:ca:ab:15:48:f7:70:ab: fe:44:31:5f:6e:00:fa:51:64:10:3d:2d:9b:8d:e6:73:16:0f: 2d:61:a1:99:ad:8b:89:7e:77:57:76:ae:d8:cc:07:1d:38:57: ef:1b:46:6b:ea:18:9e:df:8b:8f:94:14:ba:52:a2:62:8e:87: f3:92:ba:4c:88:6b:5e:33:3f:c0:98:25:aa:02:c2:49:70:84: e4:a7:b9:95:c7:02:36:c0:1b:db:fc:79:7f:9b:da:56:03:fb: bb:f0:f2:ee:f4:7c:9a:a8:ea:11:83:4e:85:81:4b:2e:b4:42: 70:5c:d1:db:c5:fd:a6:98:42:35:fb:03:58:7c:a6:4e:d6:14: 85:29:cc:28:2e:03:fd:fb:1b:1c:b5:33:41:61:9d:2a:5c:e0: 38:73:ad:5d:da:d7:0a:d7:74:07:34:1d:9a:df:4e:fd:d5:7e: be:6c:04:14:97:17:86:d0:57:bd:06:9b:91:a6:0a:69:97:0a: 6b:d1:79:5f:ca:bc:80:d1:f6:6d:76:9b:b8:94:c0:ba:94:38: 72:54:43:c9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUddnbS3zE17Dak3drEvHemaE8r7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzlaFw0yNzAxMTkwMjE1MzlaMDMxMTAvBgNV BAMTKENCREVERjA4MDlDQTAyRUE1RDk0REJCRUVFREFENTg2QTZCMjI1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX5hPpjNENrFS+MGuXlgWAGWqV phkG+ISdp3QwOfRVjhhznpNvOyH3kAsKpF3QdS/AXhfK/J8A/CqPId87vv3DKyvU dP+g+5WN0i/2dohpxWOLJItV8I9VsLPkauEy21dT4eq86I77TOkUYgnUMa8PCb4/ qNoPCCwwXIdETRpHf4AYhy1vBpNxISMekuf1uAZtaM7TVbR5Dzs85X3fXZ6vojJl 8Xtk0nEBCx6cekpc1YfhciDJSpZzzh7y+SJOKk/Ek4Tko1j7xHGQrZwmdFf6pLKH TGTsqVw9gV1o3M2rAgQcdhF7JSJ/0PainxhwWYjJBJcQl+M8foldThM4UAwDAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUy97fCAnKAupdlNu+7trVhqayJeQwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNzU2MTYyLzAvMzIzNDMwMzIzYTM3 NjQzODMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzgzMDM3MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkAn2AAAAwDQYJKoZIhvcNAQELBQADggEBAAExxov94B4sWfLRqKXK4wCkqz0U J6gt/+1LEA59WpK1Koi4BDgf663YvGnzPIB0yqsVSPdwq/5EMV9uAPpRZBA9LZuN 5nMWDy1hoZmti4l+d1d2rtjMBx04V+8bRmvqGJ7fi4+UFLpSomKOh/OSukyIa14z P8CYJaoCwklwhOSnuZXHAjbAG9v8eX+b2lYD+7vw8u70fJqo6hGDToWBSy60QnBc 0dvF/aaYQjX7A1h8pk7WFIUpzCguA/37Gxy1M0FhnSpc4DhzrV3a1wrXdAc0HZrf Tv3Vfr5sBBSXF4bQV70Gm5GmCmmXCmvReV/KvIDR9m12m7iUwLqUOHJUQ8k= -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:43 2026 by rpki-client