This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/323430333a6663303a3a2f33322d3338203d3e20313331353330.roa File: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (raw, json) Hash identifier: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4= Subject key identifier: 31:D6:53:D2:81:37:F5:EA:E1:A9:C1:9E:5B:45:75:F7:5B:7C:81:21 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 701060E3307ABE17B0F25B484CDA98DD6519D71D Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/323430333a6663303a3a2f33322d3338203d3e20313331353330.roa Signing time: Tue 20 Jan 2026 02:21:38 +0000 ROA not before: Tue 20 Jan 2026 02:16:38 +0000 ROA not after: Tue 19 Jan 2027 02:21:38 +0000 asID: 131530 IP address blocks: 2403:fc0::/32 maxlen: 38 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:10:60:e3:30:7a:be:17:b0:f2:5b:48:4c:da:98:dd:65:19:d7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Jan 20 02:16:38 2026 GMT Not After : Jan 19 02:21:38 2027 GMT Subject: CN=31D653D28137F5EAE1A9C19E5B4575F75B7C8121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:e6:75:ef:c2:63:b1:ec:c2:2f:3f:bc:e2: 78:70:5d:a0:72:68:53:e6:e4:22:92:a0:45:7a:ab: 61:e8:f7:39:e7:91:8b:68:6c:de:ae:62:63:3e:22: 03:ee:fd:97:f9:40:37:cb:43:32:16:05:bf:6d:ef: 26:5d:a6:1e:1f:5c:77:0d:b5:62:e5:75:a6:fd:83: 2f:7f:1d:32:34:df:be:69:ad:d9:4d:55:79:6a:74: 84:e2:3d:bc:ed:d8:6d:db:63:45:d4:de:e1:b6:52: 0a:27:01:d3:d8:44:a7:84:ca:54:08:9f:f0:da:02: b6:1d:4f:3c:f1:4c:1d:bb:0a:46:ac:44:bb:d7:7e: 08:1d:1a:0e:e5:af:61:c7:3e:9c:58:08:5b:5c:f1: a9:c5:a5:02:04:38:1d:cf:cf:dd:8a:f6:bb:14:10: 67:06:08:4a:e6:ae:b1:69:fc:e8:0b:2a:6c:ca:2c: b5:cb:63:cc:81:fa:0d:6a:7f:e0:55:9a:a4:6c:d0: 4a:e8:d5:8a:a2:23:8a:b0:83:1e:25:1c:ca:fc:d9: d4:95:c6:af:ee:1d:9d:d8:5e:03:a2:f7:82:ab:17: e9:6e:19:c9:cb:1d:dd:25:a3:cb:5e:3d:d1:7f:43: b2:93:d3:55:67:55:77:e0:0a:62:b4:6f:06:47:03: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D6:53:D2:81:37:F5:EA:E1:A9:C1:9E:5B:45:75:F7:5B:7C:81:21 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/323430333a6663303a3a2f33322d3338203d3e20313331353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fc0::/32 Signature Algorithm: sha256WithRSAEncryption be:4b:23:a7:64:22:0d:65:e8:e7:6f:69:16:62:69:de:2c:76: e9:81:4d:25:e1:c6:ce:cf:38:64:0d:8b:ee:74:f7:e0:59:e6: 6d:83:05:9c:14:ef:cc:a3:a8:21:27:93:18:64:19:1d:6a:19: fe:fb:d1:3e:4a:6c:d7:f9:ee:25:07:b5:44:c7:75:9f:89:07: 3d:0c:0f:bf:d6:41:0f:70:9d:21:a9:23:b4:fc:8d:bb:c1:b2: f1:62:46:2f:b8:df:d3:9f:59:3f:fa:d5:5b:e8:e1:c0:f8:39: 18:15:ac:79:f7:61:18:34:ad:bd:71:95:b9:0d:04:11:bf:48: ef:95:04:d8:33:e1:50:b4:30:a6:7f:41:bf:34:e2:7d:fb:61: 85:a4:75:0a:39:a4:5a:80:92:b3:9b:5d:15:5d:f2:43:bd:f9: 38:7b:4e:e2:ff:30:51:38:3c:75:3a:d8:15:03:81:aa:a9:6f: 6c:3b:33:bd:ad:aa:b5:1b:89:dd:b9:eb:cf:82:7f:24:15:de: 33:4b:d3:28:ec:a2:11:2d:f6:77:91:32:ab:8e:47:c2:29:54: 53:23:b2:8c:dc:4f:45:25:7d:68:47:24:17:2c:8c:30:d4:dc: 85:f9:ab:0e:fb:b5:fc:48:97:77:89:12:cc:7d:af:08:23:07: dc:69:43:b5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUcBBg4zB6vhew8ltITNqY3WUZ1x0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjAxMjAwMjE2MzhaFw0yNzAxMTkwMjIxMzhaMDMxMTAvBgNV BAMTKDMxRDY1M0QyODEzN0Y1RUFFMUE5QzE5RTVCNDU3NUY3NUI3QzgxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IuZ178JjsezCLz+84nhwXaBy aFPm5CKSoEV6q2Ho9znnkYtobN6uYmM+IgPu/Zf5QDfLQzIWBb9t7yZdph4fXHcN tWLldab9gy9/HTI0375prdlNVXlqdITiPbzt2G3bY0XU3uG2UgonAdPYRKeEylQI n/DaArYdTzzxTB27CkasRLvXfggdGg7lr2HHPpxYCFtc8anFpQIEOB3Pz92K9rsU EGcGCErmrrFp/OgLKmzKLLXLY8yB+g1qf+BVmqRs0Ero1YqiI4qwgx4lHMr82dSV xq/uHZ3YXgOi94KrF+luGcnLHd0lo8tePdF/Q7KT01VnVXfgCmK0bwZHAyfJAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUMdZT0oE39erhqcGeW0V191t8gSEwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NTMxMzk0LzAvMzIzNDMwMzMzYTY2 NjMzMDNhM2EyZjMzMzIyZDMzMzgyMDNkM2UyMDMxMzMzMTM1MzMzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQDD8AwDQYJKoZIhvcNAQELBQADggEBAL5LI6dkIg1l6OdvaRZiad4sdumB TSXhxs7POGQNi+509+BZ5m2DBZwU78yjqCEnkxhkGR1qGf770T5KbNf57iUHtUTH dZ+JBz0MD7/WQQ9wnSGpI7T8jbvBsvFiRi+439OfWT/61Vvo4cD4ORgVrHn3YRg0 rb1xlbkNBBG/SO+VBNgz4VC0MKZ/Qb804n37YYWkdQo5pFqAkrObXRVd8kO9+Th7 TuL/MFE4PHU62BUDgaqpb2w7M72tqrUbid2568+CfyQV3jNL0yjsohEt9neRMquO R8IpVFMjsozcT0UlfWhHJBcsjDDU3IX5qw77tfxIl3eJEsx9rwgjB9xpQ7U= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:42 2026 by rpki-client