This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/323430313a373234303a3a2f33322d3634203d3e20313331353637.roa File: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (raw, json) Hash identifier: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0= Subject key identifier: 4D:45:07:DA:35:29:D4:3C:37:F3:3F:1E:41:80:4B:D6:37:38:E3:CB Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Certificate serial: 4AB0031014BB10C71455FCC7E3A3481042B7A580 Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/323430313a373234303a3a2f33322d3634203d3e20313331353637.roa Signing time: Tue 20 Jan 2026 02:27:19 +0000 ROA not before: Tue 20 Jan 2026 02:22:19 +0000 ROA not after: Tue 19 Jan 2027 02:27:19 +0000 asID: 131567 IP address blocks: 2401:7240::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 01:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b0:03:10:14:bb:10:c7:14:55:fc:c7:e3:a3:48:10:42:b7:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Validity Not Before: Jan 20 02:22:19 2026 GMT Not After : Jan 19 02:27:19 2027 GMT Subject: CN=4D4507DA3529D43C37F33F1E41804BD63738E3CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:59:38:d9:c3:02:3e:88:3e:eb:7e:3b:49: 80:e4:3f:f8:ac:c1:d4:06:6c:dc:16:90:13:9a:e8: 09:11:11:e9:7f:5b:af:03:43:f0:b0:3a:6a:0d:45: 2c:0e:18:e0:44:2a:2e:ee:4d:87:d8:c5:b8:72:9e: 19:4c:5d:d3:21:33:73:72:9d:21:40:ec:e2:3b:26: b5:7a:eb:43:38:3c:e3:1c:20:02:3b:d0:c0:f8:e2: ed:f3:3c:6b:ae:69:8f:1e:14:0d:88:7c:a3:79:9b: 03:6d:81:89:df:0d:ff:06:37:4d:ca:2e:86:57:f3: 19:cf:dd:a9:1c:2c:34:2f:0f:a0:34:11:a6:a9:2d: 8e:34:4d:82:2f:e1:e2:f1:13:75:24:b3:7e:0a:2e: bb:8b:c0:7c:04:44:19:3f:24:9f:2f:ba:f7:63:5a: 73:8e:10:47:f1:b2:71:d8:ab:1b:02:a9:4f:d2:98: a5:4a:99:ee:83:99:40:64:91:12:cb:60:3b:6c:98: 8b:24:3d:ae:0e:e9:6d:52:ad:c4:35:90:4d:a3:4b: 38:cc:f0:f2:10:66:d8:71:45:b3:6a:a7:e5:9d:2a: a9:4e:84:bd:3f:fc:17:48:36:de:de:fc:ac:c1:72: 63:a7:7b:ce:de:30:06:3b:74:65:a9:c7:df:a0:f9: 8a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:45:07:DA:35:29:D4:3C:37:F3:3F:1E:41:80:4B:D6:37:38:E3:CB X509v3 Authority Key Identifier: keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/323430313a373234303a3a2f33322d3634203d3e20313331353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:7240::/32 Signature Algorithm: sha256WithRSAEncryption 3f:b3:a8:72:db:8a:2b:d4:6b:46:ad:92:a9:b3:87:f6:aa:2f: b8:41:11:db:02:b3:9d:0b:5c:73:ef:fe:0c:b3:a2:f1:88:e5: 0a:8c:50:f8:96:65:c0:a6:fe:82:c5:30:c2:73:ad:b3:c1:e7: 5b:c7:56:fb:d0:c5:e2:4b:2e:50:42:ea:a4:09:1a:a7:bf:05: d7:50:0c:6c:9a:d3:24:89:8d:3b:d6:11:87:0b:13:7a:e4:1f: a1:65:b8:bd:1a:32:e6:48:84:27:cc:14:6e:19:30:7b:40:03: d6:90:45:cf:f5:08:44:a4:e4:f0:c1:0c:ac:3d:2e:25:64:93: ad:08:8f:28:01:12:f5:d9:e0:79:1b:6c:a3:64:fd:84:e6:1b: f3:db:ae:dc:09:61:52:5a:26:37:b9:b5:f0:30:01:2a:2b:23: 33:3a:52:84:97:10:34:b7:ba:44:39:62:87:e3:28:58:58:7d: 49:63:11:dc:f4:28:54:07:5c:be:3c:7b:dc:61:20:a6:94:9b: 51:0b:08:fd:91:a3:48:e9:05:9c:2e:aa:fa:cc:4e:df:93:fa: 5c:3c:bf:1b:a6:02:fc:c6:96:06:65:19:52:39:c9:f6:3e:1c: e5:2f:ed:80:b1:77:ca:ac:5e:77:f1:04:9f:dd:05:8c:8f:1b: 15:f9:bd:74 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUSrADEBS7EMcUVfzH46NIEEK3pYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFB MTY5MUI1QjAeFw0yNjAxMjAwMjIyMTlaFw0yNzAxMTkwMjI3MTlaMDMxMTAvBgNV BAMTKDRENDUwN0RBMzUyOUQ0M0MzN0YzM0YxRTQxODA0QkQ2MzczOEUzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RVk42cMCPog+6347SYDkP/is wdQGbNwWkBOa6AkREel/W68DQ/CwOmoNRSwOGOBEKi7uTYfYxbhynhlMXdMhM3Ny nSFA7OI7JrV660M4POMcIAI70MD44u3zPGuuaY8eFA2IfKN5mwNtgYnfDf8GN03K LoZX8xnP3akcLDQvD6A0EaapLY40TYIv4eLxE3Uks34KLruLwHwERBk/JJ8vuvdj WnOOEEfxsnHYqxsCqU/SmKVKme6DmUBkkRLLYDtsmIskPa4O6W1SrcQ1kE2jSzjM 8PIQZthxRbNqp+WdKqlOhL0//BdINt7e/KzBcmOne87eMAY7dGWpx9+g+YrLAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUTUUH2jUp1Dw38z8eQYBL1jc448swHwYDVR0j BBgwFoAUpZ+1X4s+QGlCeHi9W6f/QaFpG1swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQ2NTg1OC8wL0E1OUZCNTVGOEIzRTQwNjk0Mjc4NzhCRDVCQTdG RjQxQTE2OTFCNUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFBMTY5MUI1Qi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4Mjc0MTU3NzQ2NTg1OC8wLzMyMzQzMDMxM2Ez NzMyMzQzMDNhM2EyZjMzMzIyZDM2MzQyMDNkM2UyMDMxMzMzMTM1MzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQBckAwDQYJKoZIhvcNAQELBQADggEBAD+zqHLbiivUa0atkqmzh/aq L7hBEdsCs50LXHPv/gyzovGI5QqMUPiWZcCm/oLFMMJzrbPB51vHVvvQxeJLLlBC 6qQJGqe/BddQDGya0ySJjTvWEYcLE3rkH6FluL0aMuZIhCfMFG4ZMHtAA9aQRc/1 CESk5PDBDKw9LiVkk60IjygBEvXZ4HkbbKNk/YTmG/PbrtwJYVJaJje5tfAwASor IzM6UoSXEDS3ukQ5YofjKFhYfUljEdz0KFQHXL48e9xhIKaUm1ELCP2Ro0jpBZwu qvrMTt+T+lw8vxumAvzGlgZlGVI5yfY+HOUv7YCxd8qsXnfxBJ/dBYyPGxX5vXQ= -----END CERTIFICATE-----Generated at Sun Jan 25 15:53:14 2026 by rpki-client