This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/323430333a6663303a3a2f33382d3338203d3e20313331353330.roa File: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (raw, json) Hash identifier: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE= Subject key identifier: 70:47:0D:18:7B:9C:8E:C1:25:2F:9A:8E:CF:85:2E:CB:EA:47:E1:4F Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 116F8974AB285BB90CCBC9B5589970140351FDCF Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/323430333a6663303a3a2f33382d3338203d3e20313331353330.roa Signing time: Tue 20 Jan 2026 02:21:38 +0000 ROA not before: Tue 20 Jan 2026 02:16:38 +0000 ROA not after: Tue 19 Jan 2027 02:21:38 +0000 asID: 131530 IP address blocks: 2403:fc0::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:6f:89:74:ab:28:5b:b9:0c:cb:c9:b5:58:99:70:14:03:51:fd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Jan 20 02:16:38 2026 GMT Not After : Jan 19 02:21:38 2027 GMT Subject: CN=70470D187B9C8EC1252F9A8ECF852ECBEA47E14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:cf:14:ae:78:61:3f:87:6e:57:08:e6:a5: ab:32:93:e3:c6:7e:22:53:28:70:13:f3:bc:7d:ce: b8:20:19:f8:c4:49:17:25:d0:4b:98:ca:6e:38:2d: d9:cd:d3:94:65:90:08:84:12:0e:cf:52:7b:25:56: 7a:28:fc:cf:a5:52:44:04:64:d7:de:43:78:54:9f: 4a:e2:0c:31:a7:13:69:32:c0:c3:74:d2:f6:44:d1: 14:13:f6:46:9f:79:f8:a1:10:e4:0b:d6:84:57:28: fe:cb:75:e1:80:20:92:fe:d0:a7:09:fb:93:97:17: 1c:ad:32:54:74:e1:79:81:1c:3f:fc:6e:93:43:d4: e8:8b:cf:ff:a0:9c:11:96:5a:a4:68:70:cd:fa:ee: 40:65:56:ee:3a:76:55:c4:c5:97:a9:69:92:9f:8e: 40:8c:36:79:64:48:66:4e:c1:62:db:de:bd:8f:01: cd:96:b7:6b:4e:26:dc:75:a2:bb:52:06:51:87:9e: 19:52:c4:ad:2b:0a:77:e8:cd:19:0b:26:b9:d9:e3: 1d:bd:93:9c:82:1c:07:8a:86:a9:7c:52:e0:98:68: 99:9f:94:37:be:f5:d5:53:ca:22:e0:93:fd:56:75: 31:39:41:53:47:0b:1b:81:0f:59:1c:91:1e:f3:f2: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:47:0D:18:7B:9C:8E:C1:25:2F:9A:8E:CF:85:2E:CB:EA:47:E1:4F X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/323430333a6663303a3a2f33382d3338203d3e20313331353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fc0::/38 Signature Algorithm: sha256WithRSAEncryption 87:3e:d4:52:a6:8d:e3:18:a8:13:09:6f:4d:31:32:d9:5b:7d: 9d:cb:bf:3d:1a:85:85:63:3f:5c:98:1a:3e:9d:84:3a:b0:c9: 94:9b:a5:66:2e:3e:17:64:07:48:c8:b7:56:8d:37:5b:85:70: b1:41:1e:39:cc:c6:b3:cb:79:87:c8:fc:1b:57:b7:78:83:49: 80:da:31:00:ff:8d:ee:ba:55:17:07:90:ca:76:54:ef:83:66: 9c:7a:ad:6b:88:b9:0c:be:60:0c:31:d1:50:14:82:35:73:49: ec:ba:a0:59:b9:c1:d3:41:82:75:e9:c9:ea:52:6f:a1:35:46: ed:43:60:4a:3e:c2:1f:11:e8:48:c9:e4:f7:e1:68:8f:19:56: 0f:d3:67:19:64:36:23:1a:43:83:f8:b3:58:08:68:4a:43:30: 37:40:b5:24:e1:79:9f:e5:b8:67:ae:39:29:fc:23:31:a5:be: 88:d0:de:98:db:a9:de:94:85:2e:48:05:95:cc:a7:c7:8d:90: 9e:d1:60:cf:da:f6:0a:3b:5d:e1:4c:4b:b3:20:2c:92:bc:77: 12:42:8c:d4:60:7d:f3:f6:be:57:f4:3f:eb:4f:b7:89:75:2b: 9a:c7:89:4d:e3:1a:25:c2:b1:1e:e9:3c:09:b6:20:4c:85:6c: 7d:54:56:87 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUEW+JdKsoW7kMy8m1WJlwFANR/c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjAxMjAwMjE2MzhaFw0yNzAxMTkwMjIxMzhaMDMxMTAvBgNV BAMTKDcwNDcwRDE4N0I5QzhFQzEyNTJGOUE4RUNGODUyRUNCRUE0N0UxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7AM8UrnhhP4duVwjmpasyk+PG fiJTKHAT87x9zrggGfjESRcl0EuYym44LdnN05RlkAiEEg7PUnslVnoo/M+lUkQE ZNfeQ3hUn0riDDGnE2kywMN00vZE0RQT9kafefihEOQL1oRXKP7LdeGAIJL+0KcJ +5OXFxytMlR04XmBHD/8bpND1OiLz/+gnBGWWqRocM367kBlVu46dlXExZepaZKf jkCMNnlkSGZOwWLb3r2PAc2Wt2tOJtx1ortSBlGHnhlSxK0rCnfozRkLJrnZ4x29 k5yCHAeKhql8UuCYaJmflDe+9dVTyiLgk/1WdTE5QVNHCxuBD1kckR7z8i3PAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUcEcNGHucjsElL5qOz4Uuy+pH4U8wHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NTMxMzk0LzAvMzIzNDMwMzMzYTY2 NjMzMDNhM2EyZjMzMzgyZDMzMzgyMDNkM2UyMDMxMzMzMTM1MzMzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGAiQDD8AAMA0GCSqGSIb3DQEBCwUAA4IBAQCHPtRSpo3jGKgTCW9NMTLZW32d y789GoWFYz9cmBo+nYQ6sMmUm6VmLj4XZAdIyLdWjTdbhXCxQR45zMazy3mHyPwb V7d4g0mA2jEA/43uulUXB5DKdlTvg2aceq1riLkMvmAMMdFQFII1c0nsuqBZucHT QYJ16cnqUm+hNUbtQ2BKPsIfEehIyeT34WiPGVYP02cZZDYjGkOD+LNYCGhKQzA3 QLUk4Xmf5bhnrjkp/CMxpb6I0N6Y26nelIUuSAWVzKfHjZCe0WDP2vYKO13hTEuz ICySvHcSQozUYH3z9r5X9D/rT7eJdSuax4lN4xolwrEe6TwJtiBMhWx9VFaH -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:49 2026 by rpki-client