This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/323430343a363338303a3a2f33322d3438203d3e203138323537.roa File: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (raw, json) Hash identifier: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto= Subject key identifier: B6:76:D5:53:86:11:57:85:07:EF:33:F1:14:80:C5:AC:F6:AC:BC:F2 Certificate issuer: /CN=50A5171941F715FACDCF9DD46FA674046AC02D04 Certificate serial: 2CD7643C16C240091CD7B490177FF35F6D71369F Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/323430343a363338303a3a2f33322d3438203d3e203138323537.roa Signing time: Tue 20 Jan 2026 02:19:12 +0000 ROA not before: Tue 20 Jan 2026 02:14:12 +0000 ROA not after: Tue 19 Jan 2027 02:19:12 +0000 asID: 18257 IP address blocks: 2404:6380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d7:64:3c:16:c2:40:09:1c:d7:b4:90:17:7f:f3:5f:6d:71:36:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04 Validity Not Before: Jan 20 02:14:12 2026 GMT Not After : Jan 19 02:19:12 2027 GMT Subject: CN=B676D5538611578507EF33F11480C5ACF6ACBCF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:28:1e:92:13:80:72:dc:06:67:6c:4f:2b: 53:e0:62:20:a0:48:1c:f8:8e:d9:bb:63:8a:b4:c9: 97:70:89:6c:9e:d9:91:9e:18:51:63:e5:75:62:c6: cc:5a:2a:71:68:16:6d:79:13:9b:a3:2d:6e:aa:24: 62:71:6e:b1:40:a4:5f:77:1f:c2:0e:c9:aa:95:8c: 45:65:34:c5:df:52:4d:48:84:69:cf:89:e0:cf:66: 54:c0:30:1e:38:6e:e9:94:d0:db:6f:83:33:e8:2c: d5:c9:ea:14:5f:3b:c6:fd:48:65:23:9a:c8:e7:72: ca:06:e8:30:08:c7:2d:0a:54:d1:2a:64:10:27:63: 8e:09:3f:70:b3:39:c0:81:ca:e6:31:4f:72:e3:33: be:63:90:00:2c:cd:d6:cf:c4:b9:f7:61:28:94:13: b8:87:67:9f:17:30:22:5c:48:e3:82:4c:be:0d:63: a8:2d:86:35:17:61:cb:e3:2b:64:50:13:e6:59:c3: c9:0f:55:aa:59:b4:0a:cb:90:48:68:92:32:04:3b: e5:d0:b1:ca:01:49:b1:5f:4b:27:c1:22:32:9f:73: 7e:94:29:8f:0e:3a:71:57:8f:14:3a:b7:66:2c:a0: 99:ce:8f:e0:f1:92:d2:5f:bb:07:10:cd:ff:8c:c5: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:76:D5:53:86:11:57:85:07:EF:33:F1:14:80:C5:AC:F6:AC:BC:F2 X509v3 Authority Key Identifier: keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/323430343a363338303a3a2f33322d3438203d3e203138323537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:6380::/32 Signature Algorithm: sha256WithRSAEncryption b2:09:e1:09:f6:16:e5:ff:00:37:c2:58:92:bf:ab:de:df:5a: 66:7d:5a:4c:87:c9:ed:53:4f:9c:d0:08:cb:40:72:ca:85:55: be:e2:53:d8:cb:7f:3c:71:a3:c8:85:f9:7f:3f:82:1f:1a:78: a5:b0:94:6f:c9:30:eb:04:0a:cb:09:47:ba:71:04:29:01:08: dc:f9:b6:da:56:bf:db:be:71:01:38:23:9a:89:45:b6:03:94: ca:3d:1b:b6:cd:93:d4:af:b8:99:54:a8:84:26:67:55:73:38: 67:40:aa:05:a6:45:1b:b5:e8:7c:44:9f:bb:c9:72:cf:c5:31: 9b:d8:23:59:9a:ed:b5:2e:f5:e4:c4:fe:f4:ac:60:8e:49:c0: 7a:69:e8:ee:6e:e0:7d:7b:03:88:52:ff:94:cf:2b:71:4e:38: 05:6f:85:f2:4c:ba:1c:13:35:8b:59:e5:fc:6a:ee:10:40:81: ad:7a:a6:f3:01:ad:f9:f8:bf:f9:cc:48:e3:78:3f:94:f9:d7: 2f:0d:17:8e:76:70:28:f1:54:37:8d:7a:f4:20:a5:77:7c:c2: 48:ff:5a:7d:54:38:b0:d7:e3:c6:07:c5:9a:ad:44:2c:95:2d: 20:a8:66:8d:1e:5c:4a:fa:51:40:5c:e9:72:a5:0e:cd:8e:5e: 9c:60:52:99 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIULNdkPBbCQAkc17SQF3/zX21xNp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBBNTE3MTk0MUY3MTVGQUNEQ0Y5REQ0NkZBNjc0MDQ2 QUMwMkQwNDAeFw0yNjAxMjAwMjE0MTJaFw0yNzAxMTkwMjE5MTJaMDMxMTAvBgNV BAMTKEI2NzZENTUzODYxMTU3ODUwN0VGMzNGMTE0ODBDNUFDRjZBQ0JDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtlygekhOActwGZ2xPK1PgYiCg SBz4jtm7Y4q0yZdwiWye2ZGeGFFj5XVixsxaKnFoFm15E5ujLW6qJGJxbrFApF93 H8IOyaqVjEVlNMXfUk1IhGnPieDPZlTAMB44bumU0NtvgzPoLNXJ6hRfO8b9SGUj msjncsoG6DAIxy0KVNEqZBAnY44JP3CzOcCByuYxT3LjM75jkAAszdbPxLn3YSiU E7iHZ58XMCJcSOOCTL4NY6gthjUXYcvjK2RQE+ZZw8kPVapZtArLkEhokjIEO+XQ scoBSbFfSyfBIjKfc36UKY8OOnFXjxQ6t2YsoJnOj+DxktJfuwcQzf+Mxa/FAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUtnbVU4YRV4UH7zPxFIDFrPasvPIwHwYDVR0j BBgwFoAUUKUXGUH3FfrNz53Ub6Z0BGrALQQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njk5NTcxMy8wLzUwQTUxNzE5NDFGNzE1RkFDRENGOURENDZGQTY3 NDA0NkFDMDJEMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTBBNTE3MTk0MUY3MTVGQUNEQ0Y5REQ0NkZBNjc0MDQ2QUMwMkQwNC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2OTk1NzEzLzAvMzIzNDMwMzQzYTM2 MzMzODMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzEzODMyMzUzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQEY4AwDQYJKoZIhvcNAQELBQADggEBALIJ4Qn2FuX/ADfCWJK/q97fWmZ9 WkyHye1TT5zQCMtAcsqFVb7iU9jLfzxxo8iF+X8/gh8aeKWwlG/JMOsECssJR7px BCkBCNz5ttpWv9u+cQE4I5qJRbYDlMo9G7bNk9SvuJlUqIQmZ1VzOGdAqgWmRRu1 6HxEn7vJcs/FMZvYI1ma7bUu9eTE/vSsYI5JwHpp6O5u4H17A4hS/5TPK3FOOAVv hfJMuhwTNYtZ5fxq7hBAga16pvMBrfn4v/nMSON4P5T51y8NF452cCjxVDeNevQg pXd8wkj/Wn1UOLDX48YHxZqtRCyVLSCoZo0eXEr6UUBc6XKlDs2OXpxgUpk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:58 2026 by rpki-client