This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a666666653a3a2f34382d3438203d3e20313339313337.roa File: 323430323a376438303a666666653a3a2f34382d3438203d3e20313339313337.roa (raw, json) Hash identifier: LzVLimfSv9nNdEprENDS4D8/CJT2oTlt8SEEkKpQ1dY= Subject key identifier: 32:20:DE:7F:47:BA:07:22:28:4A:F5:48:66:86:AE:44:5D:B7:EA:4D Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 3430AED324B8A2A158EE273B1043014DC28D20A9 Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a666666653a3a2f34382d3438203d3e20313339313337.roa Signing time: Tue 20 Jan 2026 02:15:39 +0000 ROA not before: Tue 20 Jan 2026 02:10:39 +0000 ROA not after: Tue 19 Jan 2027 02:15:39 +0000 asID: 139137 IP address blocks: 2402:7d80:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:30:ae:d3:24:b8:a2:a1:58:ee:27:3b:10:43:01:4d:c2:8d:20:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:39 2026 GMT Not After : Jan 19 02:15:39 2027 GMT Subject: CN=3220DE7F47BA0722284AF5486686AE445DB7EA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ee:55:7b:3f:ba:9c:39:f2:91:0a:91:b1:40: e7:b2:32:9a:67:3a:5f:2b:99:58:3f:0d:a6:2e:dc: 64:60:7d:7f:0f:09:9b:fa:04:13:29:02:6a:9a:58: f1:75:99:00:dc:d4:1c:05:ce:90:91:d7:4c:5f:45: 84:de:87:af:45:22:fa:4b:8d:29:e6:b6:c0:48:06: 56:45:88:ce:eb:2d:c8:89:ad:26:0c:8f:1d:21:a6: 65:b6:0a:0b:71:dd:ae:b2:af:1e:1d:2f:7c:b1:d2: 09:54:f7:50:05:09:8b:0f:f9:c2:2c:9d:73:9f:86: 2f:01:28:03:1e:c2:40:cf:9b:0a:e5:fb:ee:0d:09: dd:44:10:a3:0f:fe:6f:5c:be:3a:95:46:cf:27:57: 0a:5e:7b:d7:05:56:69:09:7c:ed:99:d8:76:3e:19: 03:d1:0e:27:ea:4b:b8:35:c1:4e:f5:1f:24:9f:6d: a9:e8:c4:33:ec:69:0b:54:80:27:c4:01:f4:62:a0: 71:0b:2b:73:a7:7d:60:4e:e3:06:e1:6a:ae:7c:32: 53:1b:7e:73:4c:36:bb:e4:6e:ac:7b:bb:d0:d3:06: 87:48:c8:cd:0c:a4:f1:9f:d0:9b:e4:e1:c1:10:56: f6:45:62:c3:50:53:98:4e:b8:77:34:ea:56:07:4f: 1a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:20:DE:7F:47:BA:07:22:28:4A:F5:48:66:86:AE:44:5D:B7:EA:4D X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a666666653a3a2f34382d3438203d3e20313339313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7d80:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 1a:76:2a:9d:ba:02:9f:07:50:8d:a7:57:08:f4:e8:1f:be:c5: e0:05:d4:9f:94:a9:ad:6b:58:e1:e7:ce:ee:37:a1:78:00:eb: e2:3b:ad:60:c9:1e:e8:a2:df:ab:c5:78:9b:de:fa:a8:0c:65: 60:dd:1f:26:09:05:72:5a:55:ff:17:2f:4d:d6:e7:6c:76:c3: 75:ad:b3:71:b8:71:7c:7b:c4:c3:64:4d:14:f3:b6:59:f7:1f: 52:d0:7b:ae:80:a8:58:10:45:89:ab:2c:f6:55:c7:9a:61:f2: 7a:0d:b3:c3:1d:b3:53:61:b7:f3:26:4c:30:63:1f:0b:ee:8b: 87:f9:33:00:4f:e5:3b:c9:26:c2:38:cb:1e:ca:ee:49:28:d9: ef:28:02:7c:9d:f9:73:79:ce:36:83:eb:dc:b4:d1:a7:27:20: 66:e4:0a:f6:be:c9:d8:44:e3:97:b1:82:bd:26:2a:cd:d9:7f: 73:b5:60:7e:49:77:23:cb:be:3d:be:ba:18:7e:a0:73:76:54: fc:c2:03:25:72:cc:f9:3a:f8:35:96:2b:5c:d8:55:50:34:e3: 20:15:75:62:42:4a:16:49:47:3e:76:a9:8b:37:af:c8:4b:3e: d6:a8:43:34:05:0f:d9:33:9d:a0:a0:15:48:3c:95:b0:87:d6: 31:54:57:02 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUNDCu0yS4oqFY7ic7EEMBTcKNIKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzlaFw0yNzAxMTkwMjE1MzlaMDMxMTAvBgNV BAMTKDMyMjBERTdGNDdCQTA3MjIyODRBRjU0ODY2ODZBRTQ0NURCN0VBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM7lV7P7qcOfKRCpGxQOeyMppn Ol8rmVg/DaYu3GRgfX8PCZv6BBMpAmqaWPF1mQDc1BwFzpCR10xfRYTeh69FIvpL jSnmtsBIBlZFiM7rLciJrSYMjx0hpmW2Cgtx3a6yrx4dL3yx0glU91AFCYsP+cIs nXOfhi8BKAMewkDPmwrl++4NCd1EEKMP/m9cvjqVRs8nVwpee9cFVmkJfO2Z2HY+ GQPRDifqS7g1wU71HySfbanoxDPsaQtUgCfEAfRioHELK3OnfWBO4wbhaq58MlMb fnNMNrvkbqx7u9DTBodIyM0MpPGf0Jvk4cEQVvZFYsNQU5hOuHc06lYHTxoLAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQUMiDef0e6ByIoSvVIZoauRF236k0wHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNzU2MTYyLzAvMzIzNDMwMzIz YTM3NjQzODMwM2E2NjY2NjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz OTMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQCfYD//jANBgkqhkiG9w0BAQsFAAOCAQEAGnYq nboCnwdQjadXCPToH77F4AXUn5SprWtY4efO7jeheADr4jutYMke6KLfq8V4m976 qAxlYN0fJgkFclpV/xcvTdbnbHbDda2zcbhxfHvEw2RNFPO2WfcfUtB7roCoWBBF iass9lXHmmHyeg2zwx2zU2G38yZMMGMfC+6Lh/kzAE/lO8kmwjjLHsruSSjZ7ygC fJ35c3nONoPr3LTRpycgZuQK9r7J2ETjl7GCvSYqzdl/c7Vgfkl3I8u+Pb66GH6g c3ZU/MIDJXLM+Tr4NZYrXNhVUDTjIBV1YkJKFklHPnapizevyEs+1qhDNAUP2TOd oKAVSDyVsIfWMVRXAg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:53:13 2026 by rpki-client