This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/323430373a393038303a3a2f33322d3634203d3e203633363331.roa File: 323430373a393038303a3a2f33322d3634203d3e203633363331.roa (raw, json) Hash identifier: RtOoe4RmLFL3YbHfpUMA6V286a2QhifPZV7nvutl6kg= Subject key identifier: 16:0C:82:F1:BF:FD:08:12:08:E1:41:1C:3D:D3:46:77:DD:8D:03:C0 Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 4B1D47455F9570689E32A51026C48ADA085E6AA0 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/323430373a393038303a3a2f33322d3634203d3e203633363331.roa Signing time: Tue 20 Jan 2026 02:24:52 +0000 ROA not before: Tue 20 Jan 2026 02:19:52 +0000 ROA not after: Tue 19 Jan 2027 02:24:52 +0000 asID: 63631 IP address blocks: 2407:9080::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1d:47:45:5f:95:70:68:9e:32:a5:10:26:c4:8a:da:08:5e:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Jan 20 02:19:52 2026 GMT Not After : Jan 19 02:24:52 2027 GMT Subject: CN=160C82F1BFFD081208E1411C3DD34677DD8D03C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:05:2d:a5:49:ec:2a:ca:6c:d2:c9:f5:f6: 7c:2e:5e:0f:f5:54:ff:4f:61:37:2f:aa:e0:70:a4: d6:34:14:6d:2c:86:c4:5d:6e:2a:e5:67:6b:b5:cb: b5:ec:21:08:43:2b:77:34:56:ef:64:18:2b:02:65: ec:51:f6:5a:6e:13:dc:a2:19:98:4d:a5:37:60:e3: ec:ce:43:4c:ff:e6:50:35:0b:44:0f:8c:6b:c1:38: 5d:f0:11:7b:36:fb:69:67:ce:8a:3a:43:8e:b9:ab: fe:7c:3f:01:ec:64:c7:11:18:68:5e:9b:e5:ba:97: 11:67:0b:2b:e4:05:de:90:3c:fb:70:21:32:e4:8a: 05:52:7b:43:b7:98:33:df:19:ef:1e:29:01:4a:78: 3f:24:cc:9b:89:b8:8e:a1:48:58:62:fe:f6:a9:ed: ec:7d:3f:bb:e2:22:c1:45:6e:79:6f:a2:03:a4:fb: 08:67:2d:16:81:c5:31:b5:a5:55:04:a5:8a:d5:9a: 80:1c:e6:05:c2:e5:6b:47:6a:07:a1:b3:06:2e:f8: 4c:eb:2c:a1:27:cd:d6:d1:dd:ad:ce:bb:e4:f7:33: 59:d9:80:c4:d0:77:c3:a9:8e:7a:eb:bb:05:15:99: c4:8c:bf:82:e9:6b:cd:cc:ff:d7:d3:2f:6d:3f:b8: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0C:82:F1:BF:FD:08:12:08:E1:41:1C:3D:D3:46:77:DD:8D:03:C0 X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/323430373a393038303a3a2f33322d3634203d3e203633363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9080::/32 Signature Algorithm: sha256WithRSAEncryption 36:31:5e:60:8a:8d:93:00:6a:fb:60:c6:a0:52:28:f7:04:df: b3:12:d2:0f:c1:32:c9:28:fb:7e:5a:93:93:4f:34:95:87:7a: 13:33:1a:61:d1:87:f1:7e:1f:ba:20:b9:8f:bb:a8:7a:f0:fd: a5:c2:94:ea:c9:07:e5:19:91:6a:25:00:9c:64:10:55:65:58: 8e:0c:de:ca:fa:33:52:8a:bd:7c:27:bf:4c:26:58:03:30:fd: c8:95:66:ab:6e:8c:bd:4f:96:f3:28:5e:31:df:ce:08:9f:09: 7f:a1:54:10:c8:19:3e:a8:54:76:32:2b:44:3c:7b:73:f1:0c: b8:02:d5:1e:46:1c:76:b5:d4:1e:b6:f7:6c:06:a0:79:16:d5: aa:d4:b6:ed:d7:13:24:3b:4a:60:ce:64:b2:c6:b1:63:ea:cf: 3b:c6:2c:e0:03:c1:78:87:29:d4:98:66:94:97:66:d5:45:ed: fd:e5:9b:b2:fb:56:c9:b3:c2:12:5d:8e:71:6e:80:72:eb:d7: d5:7d:92:13:42:ee:40:00:12:53:5c:fc:4b:b4:72:ad:6a:52: 8e:d7:1e:d6:a0:a8:97:f4:b7:d3:17:d1:27:0e:8e:d4:93:f2: 58:80:60:79:44:35:2b:33:1d:82:80:f5:26:72:9f:cb:d7:e6: 06:e8:41:b0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUSx1HRV+VcGieMqUQJsSK2gheaqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjAxMjAwMjE5NTJaFw0yNzAxMTkwMjI0NTJaMDMxMTAvBgNV BAMTKDE2MEM4MkYxQkZGRDA4MTIwOEUxNDExQzNERDM0Njc3REQ4RDAzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0wUtpUnsKsps0sn19nwuXg/1 VP9PYTcvquBwpNY0FG0shsRdbirlZ2u1y7XsIQhDK3c0Vu9kGCsCZexR9lpuE9yi GZhNpTdg4+zOQ0z/5lA1C0QPjGvBOF3wEXs2+2lnzoo6Q465q/58PwHsZMcRGGhe m+W6lxFnCyvkBd6QPPtwITLkigVSe0O3mDPfGe8eKQFKeD8kzJuJuI6hSFhi/vap 7ex9P7viIsFFbnlvogOk+whnLRaBxTG1pVUEpYrVmoAc5gXC5WtHagehswYu+Ezr LKEnzdbR3a3Ou+T3M1nZgMTQd8OpjnrruwUVmcSMv4Lpa83M/9fTL20/uJObAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUFgyC8b/9CBII4UEcPdNGd92NA8AwHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2ODY0NjQxLzAvMzIzNDMwMzczYTM5 MzAzODMwM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzYzMzM2MzMzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHkIAwDQYJKoZIhvcNAQELBQADggEBADYxXmCKjZMAavtgxqBSKPcE37MS 0g/BMsko+35ak5NPNJWHehMzGmHRh/F+H7oguY+7qHrw/aXClOrJB+UZkWolAJxk EFVlWI4M3sr6M1KKvXwnv0wmWAMw/ciVZqtujL1PlvMoXjHfzgifCX+hVBDIGT6o VHYyK0Q8e3PxDLgC1R5GHHa11B6292wGoHkW1arUtu3XEyQ7SmDOZLLGsWPqzzvG LOADwXiHKdSYZpSXZtVF7f3lm7L7VsmzwhJdjnFugHLr19V9khNC7kAAElNc/Eu0 cq1qUo7XHtagqJf0t9MX0ScOjtST8liAYHlENSszHYKA9SZyn8vX5gboQbA= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:48 2026 by rpki-client