This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a666666653a3a2f34382d3438203d3e203633353832.roa File: 323430323a376438303a666666653a3a2f34382d3438203d3e203633353832.roa (raw, json) Hash identifier: OWK+t32dajXcDz21gf3HQVyWcGH8GUwAd9RqvqkIHtE= Subject key identifier: 47:70:A9:1B:30:76:B5:AE:86:58:5E:F7:B7:15:79:21:FA:03:C2:86 Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Certificate serial: 1C4309BF0BB5113B42E652EEEF71E03777422375 Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a666666653a3a2f34382d3438203d3e203633353832.roa Signing time: Tue 20 Jan 2026 02:15:38 +0000 ROA not before: Tue 20 Jan 2026 02:10:38 +0000 ROA not after: Tue 19 Jan 2027 02:15:38 +0000 asID: 63582 IP address blocks: 2402:7d80:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:43:09:bf:0b:b5:11:3b:42:e6:52:ee:ef:71:e0:37:77:42:23:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Validity Not Before: Jan 20 02:10:38 2026 GMT Not After : Jan 19 02:15:38 2027 GMT Subject: CN=4770A91B3076B5AE86585EF7B7157921FA03C286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:02:39:90:d0:96:2f:52:1f:17:52:0a:22:e4: 35:48:93:6f:1d:02:22:68:42:3a:fd:b9:88:50:2f: 7f:ec:6e:1d:15:73:17:44:24:a8:59:ef:60:89:cf: 3e:6e:7b:ba:d8:0c:7e:8e:eb:9f:16:5f:e5:11:38: 75:02:6c:be:ea:b6:00:df:ed:03:d8:4f:36:48:60: 01:bd:9d:6f:74:cb:0b:b1:d8:cc:2c:f3:3c:18:f2: 20:a2:29:a6:8e:bd:ae:70:ce:26:d2:b8:69:fb:6f: 3e:9a:c4:cf:2b:d2:3c:c8:98:a8:02:2d:0d:af:18: e0:f2:e5:3c:7d:d6:c6:30:ff:6c:a0:9b:b8:85:0e: e6:80:35:dd:d8:52:fc:4c:33:47:68:69:dc:d5:41: 0f:89:c5:fe:7b:7b:26:04:e9:e7:e8:2c:9a:12:eb: 05:ff:81:24:7d:35:1a:34:a6:47:26:1c:fd:24:ed: 09:83:70:71:69:25:b0:21:46:be:d4:8c:85:ea:68: ec:fa:7a:5b:57:85:55:35:ea:c8:8c:af:b9:e4:d5: c1:2d:d2:3f:63:d9:bb:06:47:da:71:4a:57:0d:46: b2:36:7b:cf:97:3a:25:c9:65:bd:27:b0:f3:21:60: 3d:f7:75:f5:96:54:89:63:2b:95:7d:71:2b:05:a5: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:70:A9:1B:30:76:B5:AE:86:58:5E:F7:B7:15:79:21:FA:03:C2:86 X509v3 Authority Key Identifier: keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a666666653a3a2f34382d3438203d3e203633353832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7d80:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 2d:00:75:70:a5:fd:25:ad:e9:4c:dc:74:54:6e:b7:92:e4:af: 4a:51:2e:82:2c:8c:a7:d7:fb:b3:ca:6d:86:78:12:ef:e2:bb: ee:94:3b:d8:10:02:49:a1:0c:06:68:97:17:f2:b8:cc:be:49: 11:ae:1b:cc:12:38:3e:1a:9b:f3:32:9f:23:49:64:aa:52:81: c9:68:fa:14:53:37:20:18:9e:19:cc:a7:f0:b2:c1:e2:46:da: 5d:ec:18:e1:7b:be:94:6b:a5:ab:c9:da:93:f2:a1:69:36:9a: 42:fb:71:58:ee:cd:92:7a:d7:1d:83:3d:ed:6d:66:f1:c1:89: 3c:9e:1c:cc:f3:34:cb:33:e7:2b:fb:8e:c7:7d:39:a3:b6:ee: c4:86:9c:f1:11:56:5d:97:10:10:0f:d5:b0:f1:ec:e1:af:97: 32:f1:5c:34:28:dd:c5:34:89:ef:53:f0:51:f4:3e:d6:d0:b2: a2:0f:04:41:98:a5:95:5f:e0:22:9c:2a:56:f0:80:99:29:05: 4a:51:f5:d7:75:89:71:8b:3e:51:4d:7b:d8:4a:7a:6c:95:34: a9:7f:7f:92:fc:cf:95:b4:6a:16:45:fc:65:12:a1:d9:3c:bb: 81:43:14:56:56:12:d3:f1:71:2e:53:ee:7b:4f:b6:15:6b:27: 33:fa:16:62 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUHEMJvwu1ETtC5lLu73HgN3dCI3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzhaFw0yNzAxMTkwMjE1MzhaMDMxMTAvBgNV BAMTKDQ3NzBBOTFCMzA3NkI1QUU4NjU4NUVGN0I3MTU3OTIxRkEwM0MyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmAjmQ0JYvUh8XUgoi5DVIk28d AiJoQjr9uYhQL3/sbh0VcxdEJKhZ72CJzz5ue7rYDH6O658WX+UROHUCbL7qtgDf 7QPYTzZIYAG9nW90ywux2Mws8zwY8iCiKaaOva5wzibSuGn7bz6axM8r0jzImKgC LQ2vGODy5Tx91sYw/2ygm7iFDuaANd3YUvxMM0doadzVQQ+Jxf57eyYE6efoLJoS 6wX/gSR9NRo0pkcmHP0k7QmDcHFpJbAhRr7UjIXqaOz6eltXhVU16siMr7nk1cEt 0j9j2bsGR9pxSlcNRrI2e8+XOiXJZb0nsPMhYD33dfWWVIljK5V9cSsFpWRnAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUR3CpGzB2ta6GWF73txV5IfoDwoYwHwYDVR0j BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNzU2MTYyLzAvMzIzNDMwMzIz YTM3NjQzODMwM2E2NjY2NjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzMz NTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAn2A//4wDQYJKoZIhvcNAQELBQADggEBAC0AdXCl /SWt6UzcdFRut5Lkr0pRLoIsjKfX+7PKbYZ4Eu/iu+6UO9gQAkmhDAZolxfyuMy+ SRGuG8wSOD4am/MynyNJZKpSgclo+hRTNyAYnhnMp/CyweJG2l3sGOF7vpRrpavJ 2pPyoWk2mkL7cVjuzZJ61x2DPe1tZvHBiTyeHMzzNMsz5yv7jsd9OaO27sSGnPER Vl2XEBAP1bDx7OGvlzLxXDQo3cU0ie9T8FH0PtbQsqIPBEGYpZVf4CKcKlbwgJkp BUpR9dd1iXGLPlFNe9hKemyVNKl/f5L8z5W0ahZF/GUSodk8u4FDFFZWEtPxcS5T 7ntPthVrJzP6FmI= -----END CERTIFICATE-----Generated at Sun Jan 25 15:53:25 2026 by rpki-client