This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/323430323a663963303a3a2f34382d3438203d3e20313337373937.roa File: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (raw, json) Hash identifier: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA= Subject key identifier: 27:60:35:3D:2A:E7:57:DB:EB:10:23:82:5C:13:81:8F:BD:FD:01:C4 Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Certificate serial: 09985AF6DE2742C44BFEA10A94B751ADEC3C0D84 Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/323430323a663963303a3a2f34382d3438203d3e20313337373937.roa Signing time: Tue 20 Jan 2026 02:13:09 +0000 ROA not before: Tue 20 Jan 2026 02:08:09 +0000 ROA not after: Tue 19 Jan 2027 02:13:09 +0000 asID: 137797 IP address blocks: 2402:f9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:98:5a:f6:de:27:42:c4:4b:fe:a1:0a:94:b7:51:ad:ec:3c:0d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Validity Not Before: Jan 20 02:08:09 2026 GMT Not After : Jan 19 02:13:09 2027 GMT Subject: CN=2760353D2AE757DBEB1023825C13818FBDFD01C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:c1:17:de:35:30:3c:76:2a:b2:9d:d9:45: f1:18:60:4d:5f:6f:11:9b:fa:32:57:24:b0:1f:68: 40:26:ba:5b:a0:b7:18:b8:72:9d:b8:a6:5f:b8:2d: d6:f9:3e:f2:9c:77:55:09:3a:f7:18:47:23:c5:bc: 1b:bb:e1:b2:64:c0:7f:43:c4:90:d9:54:45:5e:68: 77:9b:05:19:ca:41:51:58:3b:1e:a0:ee:9a:07:7c: 53:03:8d:c9:ad:4a:e4:fc:3c:19:7c:de:c0:58:f6: 9c:e9:f9:5b:67:26:10:fe:32:6c:fd:64:75:8c:3d: de:88:2f:52:82:10:26:1f:c3:f4:6a:ce:4b:22:02: f3:24:0a:97:2f:df:98:34:19:cc:3c:c8:33:58:a4: f6:aa:ef:df:bb:ea:42:d4:20:63:5a:c6:05:19:30: 9d:f0:4e:ec:7f:3e:73:e3:7c:0a:2f:43:69:71:90: a2:6a:43:91:20:0c:2d:79:fc:9c:ec:61:97:46:e7: e0:31:29:40:38:3a:80:29:9d:4c:b6:a0:19:77:43: fa:61:d1:80:c6:59:c4:03:ac:70:a5:b2:84:0b:93: 5f:ae:e1:68:d5:fe:11:89:e1:34:3e:f0:aa:d5:d1: 99:d3:de:da:98:52:39:71:fc:e5:5b:d6:73:5e:b1: 63:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:60:35:3D:2A:E7:57:DB:EB:10:23:82:5C:13:81:8F:BD:FD:01:C4 X509v3 Authority Key Identifier: keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/323430323a663963303a3a2f34382d3438203d3e20313337373937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:f9c0::/48 Signature Algorithm: sha256WithRSAEncryption 37:0b:0e:ea:25:2a:ed:5e:aa:c6:c8:64:4b:00:5d:84:7f:3d: 71:8e:ba:f5:8e:a2:9a:5f:18:5b:86:0e:43:e7:58:e3:72:57: 9a:a0:04:78:68:31:ff:f6:32:1f:be:a7:32:b4:ae:05:a6:cb: 8b:d8:6b:f0:8a:81:60:f4:df:de:15:92:34:53:5c:dc:ce:26: 49:c6:f2:b6:ed:c8:7e:59:13:64:22:47:86:6c:d3:4e:fc:ac: f5:a3:98:2a:9c:a5:7d:af:fb:69:d4:77:e7:ed:1a:61:de:73: f0:e9:f8:20:78:a4:c2:98:19:97:9c:42:45:b1:ca:ab:3a:88: 98:bb:b0:f5:0c:29:89:b5:eb:a1:de:8c:44:32:13:0e:56:0b: 8c:f8:e6:cc:95:f8:6d:42:d4:43:90:47:ae:a3:25:0d:fb:50: 94:64:fd:8d:a2:e9:fe:34:a6:0b:0b:bf:aa:9e:e7:86:d2:f3: 7a:4c:82:bd:f0:20:fc:5d:c3:dc:de:fd:0d:88:99:a8:43:dc: 8c:91:e8:e3:c9:de:87:41:6e:f2:3d:99:69:b3:43:11:c9:03: 47:db:65:cb:ca:26:a1:ba:72:0c:fe:04:fc:b4:57:ee:7f:35: 99:73:dd:8d:ef:23:2a:1c:94:70:8f:82:b8:78:e0:c7:ae:d3: fd:56:11:6d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCZha9t4nQsRL/qEKlLdRrew8DYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3 RkFEMjVGOTAeFw0yNjAxMjAwMjA4MDlaFw0yNzAxMTkwMjEzMDlaMDMxMTAvBgNV BAMTKDI3NjAzNTNEMkFFNzU3REJFQjEwMjM4MjVDMTM4MThGQkRGRDAxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpP8EX3jUwPHYqsp3ZRfEYYE1f bxGb+jJXJLAfaEAmulugtxi4cp24pl+4Ldb5PvKcd1UJOvcYRyPFvBu74bJkwH9D xJDZVEVeaHebBRnKQVFYOx6g7poHfFMDjcmtSuT8PBl83sBY9pzp+VtnJhD+Mmz9 ZHWMPd6IL1KCECYfw/RqzksiAvMkCpcv35g0Gcw8yDNYpPaq79+76kLUIGNaxgUZ MJ3wTux/PnPjfAovQ2lxkKJqQ5EgDC15/JzsYZdG5+AxKUA4OoApnUy2oBl3Q/ph 0YDGWcQDrHClsoQLk1+u4WjV/hGJ4TQ+8KrV0ZnT3tqYUjlx/OVb1nNesWMrAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJ2A1PSrnV9vrECOCXBOBj739AcQwHwYDVR0j BBgwFoAUGR5210QhFItC+ip/ZjJwrn+tJfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzEyNjc4NS8wLzE5MUU3NkQ3NDQyMTE0OEI0MkZBMkE3RjY2MzI3 MEFFN0ZBRDI1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3RkFEMjVGOS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0NzEyNjc4NS8wLzMyMzQzMDMyM2E2 NjM5NjMzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzM3MzkzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQC+cAAADANBgkqhkiG9w0BAQsFAAOCAQEANwsO6iUq7V6qxshkSwBd hH89cY669Y6iml8YW4YOQ+dY43JXmqAEeGgx//YyH76nMrSuBabLi9hr8IqBYPTf 3hWSNFNc3M4mScbytu3IflkTZCJHhmzTTvys9aOYKpylfa/7adR35+0aYd5z8On4 IHikwpgZl5xCRbHKqzqImLuw9QwpibXrod6MRDITDlYLjPjmzJX4bULUQ5BHrqMl DftQlGT9jaLp/jSmCwu/qp7nhtLzekyCvfAg/F3D3N79DYiZqEPcjJHo48neh0Fu 8j2ZabNDEckDR9tly8omobpyDP4E/LRX7n81mXPdje8jKhyUcI+CuHjgx67T/VYR bQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:35 2026 by rpki-client