This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/323430343a653563303a3a2f33322d3438203d3e20313436383334.roa File: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (raw, json) Hash identifier: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0= Subject key identifier: 73:AB:DE:2F:3D:02:84:60:42:02:9F:D9:C3:9C:D1:42:AE:DC:BB:EF Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232 Certificate serial: 2289FCB708039588A5D9347008FCC327D0304348 Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/323430343a653563303a3a2f33322d3438203d3e20313436383334.roa Signing time: Tue 20 Jan 2026 02:13:08 +0000 ROA not before: Tue 20 Jan 2026 02:08:08 +0000 ROA not after: Tue 19 Jan 2027 02:13:08 +0000 asID: 146834 IP address blocks: 2404:e5c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:89:fc:b7:08:03:95:88:a5:d9:34:70:08:fc:c3:27:d0:30:43:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232 Validity Not Before: Jan 20 02:08:08 2026 GMT Not After : Jan 19 02:13:08 2027 GMT Subject: CN=73ABDE2F3D02846042029FD9C39CD142AEDCBBEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:9a:ca:95:70:e0:e3:a6:47:94:a9:75:2d: c6:7f:9b:5a:4f:e3:39:7e:8d:5e:1a:35:2a:e3:cb: 48:d7:25:5b:58:a3:00:ba:28:9d:32:46:48:ac:41: e7:19:0b:e7:bb:9b:dd:28:45:c0:e6:b8:8e:23:0f: 41:42:dd:d9:68:ec:ba:db:23:63:94:d9:f2:43:99: 7f:c8:0b:0b:f2:9c:63:bd:79:68:0d:3d:d9:0e:22: a7:9c:ca:02:e3:7a:3c:6c:fc:b1:13:20:d5:fb:7a: 57:77:98:31:31:d6:91:47:48:f7:03:4b:86:5b:97: c3:51:bb:86:61:e6:67:d8:44:c1:65:16:8d:76:ff: e7:80:99:70:87:9f:06:c7:22:28:88:18:c1:09:04: 5b:b2:6b:60:ac:e9:18:06:11:da:eb:a3:bb:df:7b: f0:5d:37:90:67:93:36:0e:73:2d:20:70:02:e2:6c: 36:b2:a5:04:1a:e7:df:d5:97:ee:2e:00:f7:1c:26: 5e:56:e3:bd:a1:13:e3:21:b7:dd:7c:90:8f:74:e0: fd:2b:df:0a:aa:8b:2d:d1:6c:65:fd:d9:4b:9b:84: 88:1a:6e:24:bd:9a:37:bd:60:73:95:16:ab:69:9e: 16:bf:ae:ec:bb:23:c6:34:91:ff:eb:68:b2:19:ad: c2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AB:DE:2F:3D:02:84:60:42:02:9F:D9:C3:9C:D1:42:AE:DC:BB:EF X509v3 Authority Key Identifier: keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/323430343a653563303a3a2f33322d3438203d3e20313436383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e5c0::/32 Signature Algorithm: sha256WithRSAEncryption 40:83:59:a2:36:8d:22:28:4d:0e:46:27:e8:17:de:68:6f:47: 9c:ec:c3:be:3c:0d:3f:c3:1e:a3:ed:86:f1:6e:27:4b:e9:ea: 33:90:37:8b:fb:ce:24:27:59:56:28:0a:5f:d5:a8:5c:2c:49: e6:d7:67:ed:04:8c:a1:be:f8:ec:b3:bd:8c:12:8e:3d:25:a1: dd:48:48:12:4e:15:57:1d:bc:19:05:e5:3e:30:d6:c4:09:9e: 19:bc:da:a1:cc:10:1b:96:8c:0c:e8:2c:76:e3:41:52:3b:9d: 67:b0:3a:3e:d6:56:59:93:bf:15:54:43:05:88:0e:ec:29:46: 16:9a:0e:9f:4b:9b:3d:6a:ac:52:a7:12:5c:67:50:0e:d7:e0: f7:1a:71:af:58:7f:86:7c:36:a5:6c:56:d0:fe:aa:a6:6e:ab: a8:1e:94:01:ea:4a:5f:25:c1:42:31:78:f1:69:68:d1:28:e1: e3:e4:c6:77:ef:c3:3c:7f:dd:04:91:4f:8a:59:d6:f1:a3:a0: a8:89:8a:f3:90:88:a9:fb:be:0c:2d:49:f3:5b:5b:75:8f:1b: fd:d4:3a:1c:a2:77:84:12:67:5f:4e:99:3b:86:ec:73:47:66: 4a:d8:5a:55:15:e3:11:b7:c3:83:9a:f0:86:fb:08:4c:50:a8: 15:36:22:10 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUIon8twgDlYil2TRwCPzDJ9AwQ0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz MDgzMDIzMjAeFw0yNjAxMjAwMjA4MDhaFw0yNzAxMTkwMjEzMDhaMDMxMTAvBgNV BAMTKDczQUJERTJGM0QwMjg0NjA0MjAyOUZEOUMzOUNEMTQyQUVEQ0JCRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66prKlXDg46ZHlKl1LcZ/m1pP 4zl+jV4aNSrjy0jXJVtYowC6KJ0yRkisQecZC+e7m90oRcDmuI4jD0FC3dlo7Lrb I2OU2fJDmX/ICwvynGO9eWgNPdkOIqecygLjejxs/LETINX7eld3mDEx1pFHSPcD S4Zbl8NRu4Zh5mfYRMFlFo12/+eAmXCHnwbHIiiIGMEJBFuya2Cs6RgGEdrro7vf e/BdN5BnkzYOcy0gcALibDaypQQa59/Vl+4uAPccJl5W472hE+Mht918kI904P0r 3wqqiy3RbGX92UubhIgabiS9mje9YHOVFqtpnha/ruy7I8Y0kf/raLIZrcJvAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUc6veLz0ChGBCAp/Zw5zRQq7cu+8wHwYDVR0j BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1 NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0NzM4ODkyOS8wLzMyMzQzMDM0M2E2 NTM1NjMzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzQzNjM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQE5cAwDQYJKoZIhvcNAQELBQADggEBAECDWaI2jSIoTQ5GJ+gX3mhv R5zsw748DT/DHqPthvFuJ0vp6jOQN4v7ziQnWVYoCl/VqFwsSebXZ+0EjKG++Oyz vYwSjj0lod1ISBJOFVcdvBkF5T4w1sQJnhm82qHMEBuWjAzoLHbjQVI7nWewOj7W VlmTvxVUQwWIDuwpRhaaDp9Lmz1qrFKnElxnUA7X4Pcaca9Yf4Z8NqVsVtD+qqZu q6gelAHqSl8lwUIxePFpaNEo4ePkxnfvwzx/3QSRT4pZ1vGjoKiJivOQiKn7vgwt SfNbW3WPG/3UOhyid4QSZ19OmTuG7HNHZkrYWlUV4xG3w4Oa8Ib7CExQqBU2IhA= -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:41 2026 by rpki-client