This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/323430343a363338303a3a2f33322d3438203d3e20313338393530.roa File: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (raw, json) Hash identifier: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI= Subject key identifier: 42:5E:1E:BD:D7:87:B4:C3:7D:4B:0B:22:B1:E9:C8:5D:BA:38:FC:8A Certificate issuer: /CN=50A5171941F715FACDCF9DD46FA674046AC02D04 Certificate serial: 7D7826093353CC54BF25D57171E659D8965A28F3 Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/323430343a363338303a3a2f33322d3438203d3e20313338393530.roa Signing time: Tue 20 Jan 2026 02:19:12 +0000 ROA not before: Tue 20 Jan 2026 02:14:12 +0000 ROA not after: Tue 19 Jan 2027 02:19:12 +0000 asID: 138950 IP address blocks: 2404:6380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:78:26:09:33:53:cc:54:bf:25:d5:71:71:e6:59:d8:96:5a:28:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04 Validity Not Before: Jan 20 02:14:12 2026 GMT Not After : Jan 19 02:19:12 2027 GMT Subject: CN=425E1EBDD787B4C37D4B0B22B1E9C85DBA38FC8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:e0:38:82:2c:f4:65:78:08:20:82:ce:b3: bc:53:0f:3d:20:9d:48:b3:c4:f2:07:57:ed:29:7e: 15:f5:8c:9d:95:81:ab:21:af:bb:2f:91:29:8d:6c: 7e:4a:98:bb:8b:cb:32:58:8e:23:0e:9a:65:f9:06: 0f:cc:94:5d:14:4f:fe:2d:62:af:5e:80:9d:05:41: 8c:0e:6c:86:35:21:52:2e:54:03:26:4d:be:e1:e0: ae:60:7d:59:fe:45:bd:00:b7:0f:c4:d0:48:c5:ac: 49:9f:5a:1b:bc:45:35:62:22:4b:07:b9:60:6a:dc: f8:3c:65:10:b5:0d:1c:b5:68:e8:fe:4f:33:97:9e: a4:e0:10:a9:98:1d:ca:95:df:42:37:32:ac:4b:bd: 85:de:d5:c5:5b:45:a6:59:57:ca:99:8b:7d:16:3a: 4f:84:2c:4e:f3:fc:95:80:64:6c:2a:ed:8c:87:56: 8a:d0:f7:5c:85:d0:3d:a2:d8:7b:02:37:c4:bf:13: b4:d6:ac:8f:c0:8f:7c:27:a0:cf:be:e2:fe:7e:df: 45:a1:1c:99:77:a0:16:9d:d1:d3:f0:49:c4:83:7f: 44:43:81:b2:e6:c7:55:80:5e:ee:39:35:9d:d7:b1: aa:5c:18:6b:e8:ee:f5:68:6b:91:c7:6a:08:83:ff: 1a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5E:1E:BD:D7:87:B4:C3:7D:4B:0B:22:B1:E9:C8:5D:BA:38:FC:8A X509v3 Authority Key Identifier: keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/323430343a363338303a3a2f33322d3438203d3e20313338393530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:6380::/32 Signature Algorithm: sha256WithRSAEncryption 21:ca:1d:24:85:24:54:e0:a8:53:59:20:07:48:b4:81:56:58: 08:c3:7b:d1:3d:44:5d:0d:a9:a9:fd:7a:e3:4f:1f:0b:61:9b: d7:41:64:a1:5a:f9:7d:bf:dd:38:78:cd:a7:bd:54:ea:1b:54: 8d:e5:31:ce:42:03:ea:a3:0f:85:c6:3b:6a:61:55:5f:a0:8a: bc:c8:05:9d:74:00:c0:8e:e3:86:d8:a9:ec:f9:62:91:b1:89: 81:56:81:6e:36:26:e2:d2:20:ee:22:87:4e:c5:c5:6b:74:4e: 4a:c2:d3:8d:d3:b5:61:94:e2:10:8a:a3:b4:e9:56:a7:41:93: 03:38:c0:34:ec:0b:00:9c:26:8d:39:56:e6:4e:fa:2a:e5:bb: 9a:03:2e:b4:7c:58:0b:ad:f3:52:78:d8:59:f7:a2:ae:74:9c: 29:ff:1a:af:fb:7e:01:5e:35:6d:8b:5c:ce:a8:bb:14:3c:fc: b1:25:53:3b:ff:ae:30:59:87:41:ac:b7:a2:4a:27:a0:3b:a7: b5:09:18:fc:ff:55:68:6d:ee:db:c3:7b:e4:af:1b:1a:c6:2a: 9f:d2:3a:3b:2b:23:c6:b7:a2:6a:91:82:84:60:50:83:ef:7b: d7:d7:0a:74:f1:27:35:12:ab:4c:0d:c3:a9:8b:fc:4f:38:d6: 85:a4:78:c9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUfXgmCTNTzFS/JdVxceZZ2JZaKPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBBNTE3MTk0MUY3MTVGQUNEQ0Y5REQ0NkZBNjc0MDQ2 QUMwMkQwNDAeFw0yNjAxMjAwMjE0MTJaFw0yNzAxMTkwMjE5MTJaMDMxMTAvBgNV BAMTKDQyNUUxRUJERDc4N0I0QzM3RDRCMEIyMkIxRTlDODVEQkEzOEZDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EuA4giz0ZXgIIILOs7xTDz0g nUizxPIHV+0pfhX1jJ2Vgashr7svkSmNbH5KmLuLyzJYjiMOmmX5Bg/MlF0UT/4t Yq9egJ0FQYwObIY1IVIuVAMmTb7h4K5gfVn+Rb0Atw/E0EjFrEmfWhu8RTViIksH uWBq3Pg8ZRC1DRy1aOj+TzOXnqTgEKmYHcqV30I3MqxLvYXe1cVbRaZZV8qZi30W Ok+ELE7z/JWAZGwq7YyHVorQ91yF0D2i2HsCN8S/E7TWrI/Aj3wnoM++4v5+30Wh HJl3oBad0dPwScSDf0RDgbLmx1WAXu45NZ3XsapcGGvo7vVoa5HHagiD/xqRAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUQl4evdeHtMN9SwsisenIXbo4/IowHwYDVR0j BBgwFoAUUKUXGUH3FfrNz53Ub6Z0BGrALQQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njk5NTcxMy8wLzUwQTUxNzE5NDFGNzE1RkFDRENGOURENDZGQTY3 NDA0NkFDMDJEMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTBBNTE3MTk0MUY3MTVGQUNEQ0Y5REQ0NkZBNjc0MDQ2QUMwMkQwNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njk5NTcxMy8wLzMyMzQzMDM0M2Ez NjMzMzgzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzMzODM5MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQEY4AwDQYJKoZIhvcNAQELBQADggEBACHKHSSFJFTgqFNZIAdItIFW WAjDe9E9RF0Nqan9euNPHwthm9dBZKFa+X2/3Th4zae9VOobVI3lMc5CA+qjD4XG O2phVV+girzIBZ10AMCO44bYqez5YpGxiYFWgW42JuLSIO4ih07FxWt0TkrC043T tWGU4hCKo7TpVqdBkwM4wDTsCwCcJo05VuZO+irlu5oDLrR8WAut81J42Fn3oq50 nCn/Gq/7fgFeNW2LXM6ouxQ8/LElUzv/rjBZh0Gst6JKJ6A7p7UJGPz/VWht7tvD e+SvGxrGKp/SOjsrI8a3omqRgoRgUIPve9fXCnTxJzUSq0wNw6mL/E841oWkeMk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:50 2026 by rpki-client