This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/323430333a643963303a3a2f34382d3438203d3e20313337373330.roa File: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (raw, json) Hash identifier: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY= Subject key identifier: 64:37:80:8B:41:F1:F4:60:D3:80:8E:05:D8:A8:E9:C4:F2:7D:8C:3B Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD Certificate serial: 78EA9EE7E7F8483A808FE815B88E9113576E5B1A Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/323430333a643963303a3a2f34382d3438203d3e20313337373330.roa Signing time: Tue 20 Jan 2026 02:27:12 +0000 ROA not before: Tue 20 Jan 2026 02:22:12 +0000 ROA not after: Tue 19 Jan 2027 02:27:12 +0000 asID: 137730 IP address blocks: 2403:d9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 03:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ea:9e:e7:e7:f8:48:3a:80:8f:e8:15:b8:8e:91:13:57:6e:5b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Validity Not Before: Jan 20 02:22:12 2026 GMT Not After : Jan 19 02:27:12 2027 GMT Subject: CN=6437808B41F1F460D3808E05D8A8E9C4F27D8C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:c6:0a:dc:51:2e:ce:55:ae:7f:c1:8e:5b: 57:52:e5:fc:b5:1d:e2:7a:b7:7b:cd:6f:98:34:d4: c4:23:21:6b:67:11:67:41:0e:6e:11:2a:2b:27:ba: 31:bd:c2:35:c2:4f:f6:3a:57:56:f7:e0:b2:f2:3f: 9f:82:31:1f:7c:4e:1b:8f:25:73:19:f4:b1:50:aa: 4c:ea:1b:4c:03:59:11:56:c1:fd:7e:54:55:fc:bd: 07:c7:b3:43:d9:be:b1:86:46:7b:2a:2d:1f:4c:8d: b4:3c:d4:8c:2c:c1:e7:17:6a:5c:8a:d6:0b:57:3b: 2c:1c:7f:b8:e5:31:11:5d:9a:80:e2:cb:3e:8b:e3: 41:ae:83:38:c1:39:17:81:ef:a8:db:1f:d5:29:b9: 52:59:cf:28:19:06:c8:1a:64:98:e6:7e:3a:e3:3d: 92:c8:a2:a4:fb:b4:cb:e5:61:ac:21:af:0b:62:1b: 11:69:0e:00:78:ed:93:5f:66:c5:33:6a:2c:75:91: 61:9f:43:e1:ce:a8:d3:95:52:99:dc:a4:a0:90:e8: 11:e0:e3:74:ec:7b:6f:82:a9:b9:98:41:40:fb:48: 0d:d2:76:91:37:7f:53:ee:89:34:5f:be:9c:0e:29: 3e:68:bc:1a:f9:01:47:59:55:2d:8a:ad:e9:60:c9: b7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:37:80:8B:41:F1:F4:60:D3:80:8E:05:D8:A8:E9:C4:F2:7D:8C:3B X509v3 Authority Key Identifier: keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/323430333a643963303a3a2f34382d3438203d3e20313337373330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:d9c0::/48 Signature Algorithm: sha256WithRSAEncryption 4b:aa:6e:f4:16:93:bf:fe:3d:23:30:79:c3:55:31:3a:3c:30: 51:1b:17:a1:db:b3:67:f1:49:bd:77:17:5f:35:86:28:f9:10: ae:29:09:b9:d5:e8:59:30:f1:8d:86:46:48:d5:8f:08:74:b5: 23:a7:03:31:0a:b5:21:88:54:67:10:14:45:fa:1c:34:3b:36: 6e:e9:7b:97:b4:27:32:6b:d2:e3:3f:06:d4:fe:06:05:0a:22: f7:99:32:bd:af:3f:f8:1f:1c:e2:fe:6c:e4:94:86:a2:35:20: f3:75:6b:04:ef:ed:e1:0f:6b:6e:ed:84:4a:1e:7d:ee:b2:ce: fb:34:11:d3:85:9e:d7:81:e7:f7:24:c2:3f:26:89:77:4f:ac: 7d:43:2c:b4:f8:58:e7:f8:26:21:ec:ce:0a:7a:93:9f:fb:bb: 64:5e:33:e0:3b:fb:c1:e3:47:35:80:9f:78:08:3c:08:40:e3: 16:f6:c9:d9:fc:27:0e:70:aa:e3:ac:9c:c9:e7:67:61:39:c1: 2d:b2:02:3c:60:ab:de:41:e5:d5:9d:c9:ef:d8:f1:f3:04:91: 83:01:05:ef:c4:fe:e0:db:d4:b4:5a:15:b2:91:b0:ad:d0:cc: e6:99:a3:94:6e:49:b4:7b:88:40:14:9b:eb:15:6e:33:29:2a: 72:f0:14:84 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUeOqe5+f4SDqAj+gVuI6RE1duWxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5 NzdFRDFBRDAeFw0yNjAxMjAwMjIyMTJaFw0yNzAxMTkwMjI3MTJaMDMxMTAvBgNV BAMTKDY0Mzc4MDhCNDFGMUY0NjBEMzgwOEUwNUQ4QThFOUM0RjI3RDhDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJcYK3FEuzlWuf8GOW1dS5fy1 HeJ6t3vNb5g01MQjIWtnEWdBDm4RKisnujG9wjXCT/Y6V1b34LLyP5+CMR98ThuP JXMZ9LFQqkzqG0wDWRFWwf1+VFX8vQfHs0PZvrGGRnsqLR9MjbQ81IwswecXalyK 1gtXOywcf7jlMRFdmoDiyz6L40GugzjBOReB76jbH9UpuVJZzygZBsgaZJjmfjrj PZLIoqT7tMvlYawhrwtiGxFpDgB47ZNfZsUzaix1kWGfQ+HOqNOVUpncpKCQ6BHg 43Tse2+CqbmYQUD7SA3SdpE3f1PuiTRfvpwOKT5ovBr5AUdZVS2KrelgybfTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUZDeAi0Hx9GDTgI4F2KjpxPJ9jDswHwYDVR0j BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0NzMyMzM5My8wLzMyMzQzMDMzM2E2 NDM5NjMzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzM3MzMzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQD2cAAADANBgkqhkiG9w0BAQsFAAOCAQEAS6pu9BaTv/49IzB5w1Ux OjwwURsXoduzZ/FJvXcXXzWGKPkQrikJudXoWTDxjYZGSNWPCHS1I6cDMQq1IYhU ZxAURfocNDs2bul7l7QnMmvS4z8G1P4GBQoi95kyva8/+B8c4v5s5JSGojUg83Vr BO/t4Q9rbu2ESh597rLO+zQR04We14Hn9yTCPyaJd0+sfUMstPhY5/gmIezOCnqT n/u7ZF4z4Dv7weNHNYCfeAg8CEDjFvbJ2fwnDnCq46ycyednYTnBLbICPGCr3kHl 1Z3J79jx8wSRgwEF78T+4NvUtFoVspGwrdDM5pmjlG5JtHuIQBSb6xVuMykqcvAU hA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:21 2026 by rpki-client