This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a666666653a3a2f34382d3438203d3e20313338343537.roa File: 323430323a376438303a666666653a3a2f34382d3438203d3e20313338343537.roa (raw, json) Hash identifier: Bm+07M/uN7X+aTM9if5IcXJqoIX0nStfnBtXw6zRRhk= Subject key identifier: E8:63:E0:96:5D:15:38:75:9D:AF:A4:DB:E8:79:4F:83:D1:79:F2:7D Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 0FF3A030CAA87C262B7DE045982220DC9E6029EC Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a666666653a3a2f34382d3438203d3e20313338343537.roa Signing time: Tue 20 Jan 2026 02:15:40 +0000 ROA not before: Tue 20 Jan 2026 02:10:40 +0000 ROA not after: Tue 19 Jan 2027 02:15:40 +0000 asID: 138457 IP address blocks: 2402:7d80:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f3:a0:30:ca:a8:7c:26:2b:7d:e0:45:98:22:20:dc:9e:60:29:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:40 2026 GMT Not After : Jan 19 02:15:40 2027 GMT Subject: CN=E863E0965D1538759DAFA4DBE8794F83D179F27D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cc:e1:ff:ca:66:4a:1e:7c:72:73:d7:b2:3f: 7d:12:0b:39:eb:3e:bf:16:79:55:03:59:92:2d:74: 80:d4:84:c5:c2:e5:82:4a:97:94:ef:a0:4f:d0:7c: ee:84:9e:96:6e:93:dc:91:8a:f3:68:24:d5:53:9e: 1d:ca:31:33:de:11:0c:83:88:7f:30:f2:f5:b1:00: fb:cd:6c:78:4d:d9:b3:4c:75:71:16:95:55:b7:f3: 38:7b:09:16:14:a6:9c:4d:db:cf:64:0b:22:d7:3b: 53:37:62:93:f0:4f:dd:c8:05:1c:cf:37:d4:d5:20: 11:92:4d:b5:a6:af:90:4b:66:05:5e:56:79:2f:34: 3b:3c:9e:84:2d:62:36:4d:d0:2b:0c:f4:7d:10:43: be:97:7a:01:db:cc:ae:20:db:12:ee:35:9f:3d:78: a6:bf:9d:5f:7e:62:1e:be:5b:63:66:65:fc:6d:70: 74:6e:4b:25:0b:32:d5:8c:4d:80:9c:92:1d:9b:43: eb:69:f0:d8:be:f9:d3:3d:fc:b0:b5:6b:5a:a6:8a: e1:2b:cf:cc:4d:d3:5e:80:0c:52:cb:94:ef:b3:f4: bf:0d:14:a2:49:cf:b9:8c:ed:61:58:98:14:52:bb: ae:b6:91:5a:2b:93:a7:b1:d5:d0:4f:cf:7e:7f:c9: 60:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:63:E0:96:5D:15:38:75:9D:AF:A4:DB:E8:79:4F:83:D1:79:F2:7D X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a666666653a3a2f34382d3438203d3e20313338343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7d80:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 0e:c9:ad:42:ef:29:dd:d5:d0:82:c3:eb:3d:90:42:1b:79:bb: 5f:23:28:f8:dd:a4:b5:8c:3c:54:53:93:bc:90:35:af:88:58: 7b:b7:ae:bd:e9:b7:b4:6e:11:d0:5f:84:42:9f:be:48:5c:c7: 0a:32:52:17:08:08:50:da:f2:02:52:43:1c:34:68:20:47:33: 58:27:46:89:3c:03:07:d7:c5:b5:05:53:61:c8:ba:1f:15:25: a3:39:41:b3:6e:16:ec:fb:7e:00:c6:7e:b2:5b:7b:79:7e:1e: 0a:5c:54:2c:da:ba:3c:08:40:89:d4:50:4e:99:ab:b5:70:92: 5b:cb:12:b1:04:93:02:3f:6b:7b:a8:0d:1f:53:89:04:1b:fc: b6:1d:39:7c:16:13:f5:0c:f2:ea:00:0d:91:98:d0:63:6a:77: 34:e1:25:91:75:71:59:39:74:0f:92:7e:12:24:65:49:9a:88: cd:c1:91:78:3f:64:f3:e3:9f:0d:18:f2:8e:ad:77:67:01:10: cc:e9:3e:27:c7:11:d2:98:fb:22:fc:31:5b:50:a0:96:f2:72: 4b:41:55:8f:4b:41:bc:d8:4b:0b:47:65:c9:a4:92:b5:f1:99: aa:fb:08:e0:f7:b2:cd:11:d5:64:e6:5f:c9:60:66:79:42:51: 22:39:b8:0a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUD/OgMMqofCYrfeBFmCIg3J5gKewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwNDBaFw0yNzAxMTkwMjE1NDBaMDMxMTAvBgNV BAMTKEU4NjNFMDk2NUQxNTM4NzU5REFGQTREQkU4Nzk0RjgzRDE3OUYyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhzOH/ymZKHnxyc9eyP30SCznr Pr8WeVUDWZItdIDUhMXC5YJKl5TvoE/QfO6EnpZuk9yRivNoJNVTnh3KMTPeEQyD iH8w8vWxAPvNbHhN2bNMdXEWlVW38zh7CRYUppxN289kCyLXO1M3YpPwT93IBRzP N9TVIBGSTbWmr5BLZgVeVnkvNDs8noQtYjZN0CsM9H0QQ76XegHbzK4g2xLuNZ89 eKa/nV9+Yh6+W2NmZfxtcHRuSyULMtWMTYCckh2bQ+tp8Ni++dM9/LC1a1qmiuEr z8xN016ADFLLlO+z9L8NFKJJz7mM7WFYmBRSu662kVork6ex1dBPz35/yWBzAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQU6GPgll0VOHWdr6Tb6HlPg9F58n0wHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNzU2MTYyLzAvMzIzNDMwMzIz YTM3NjQzODMwM2E2NjY2NjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz ODM0MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQCfYD//jANBgkqhkiG9w0BAQsFAAOCAQEADsmt Qu8p3dXQgsPrPZBCG3m7XyMo+N2ktYw8VFOTvJA1r4hYe7euvem3tG4R0F+EQp++ SFzHCjJSFwgIUNryAlJDHDRoIEczWCdGiTwDB9fFtQVTYci6HxUlozlBs24W7Pt+ AMZ+slt7eX4eClxULNq6PAhAidRQTpmrtXCSW8sSsQSTAj9re6gNH1OJBBv8th05 fBYT9Qzy6gANkZjQY2p3NOElkXVxWTl0D5J+EiRlSZqIzcGReD9k8+OfDRjyjq13 ZwEQzOk+J8cR0pj7IvwxW1CglvJyS0FVj0tBvNhLC0dlyaSStfGZqvsI4PeyzRHV ZOZfyWBmeUJRIjm4Cg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:53:11 2026 by rpki-client