This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/323430353a663538303a3a2f33322d3332203d3e20313332303139.roa File: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (raw, json) Hash identifier: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA= Subject key identifier: 3A:5E:52:5D:1D:C1:1B:0D:83:AE:46:5A:D9:C4:51:80:C6:4E:D4:51 Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Certificate serial: 48BEA198BAE32932F2E54C8B5250F2D7FD2BABC1 Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/323430353a663538303a3a2f33322d3332203d3e20313332303139.roa Signing time: Tue 20 Jan 2026 02:19:10 +0000 ROA not before: Tue 20 Jan 2026 02:14:10 +0000 ROA not after: Tue 19 Jan 2027 02:19:10 +0000 asID: 132019 IP address blocks: 2405:f580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:be:a1:98:ba:e3:29:32:f2:e5:4c:8b:52:50:f2:d7:fd:2b:ab:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Validity Not Before: Jan 20 02:14:10 2026 GMT Not After : Jan 19 02:19:10 2027 GMT Subject: CN=3A5E525D1DC11B0D83AE465AD9C45180C64ED451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:da:bd:b7:a0:d2:62:35:e4:00:25:df:ca: 32:e5:3c:ce:15:ed:2c:8c:a3:24:2f:02:c1:dd:02: 75:42:50:ef:06:aa:2b:8b:5a:47:c8:32:ab:cd:56: 93:19:a1:93:f6:e1:c5:9f:91:c1:55:2f:fe:d8:fb: 11:cd:59:ca:ec:b5:00:4e:c7:12:65:30:5c:b2:8b: 1a:40:64:3a:75:1d:bd:e0:87:5d:58:c0:70:67:00: 81:d7:d9:78:fa:71:fc:32:69:5c:a5:1d:2b:eb:b7: 8d:5d:ca:4c:98:21:49:5b:4c:71:57:e4:59:46:d4: 2f:e0:0f:10:13:85:c4:c7:f9:0a:74:df:74:c9:03: 1f:65:01:5e:23:85:7a:00:42:d5:8b:f4:e2:da:c5: ef:ac:c8:c8:5d:77:99:d2:26:8d:ed:47:be:3a:b8: 1e:82:ab:56:20:b4:fe:42:f6:24:fa:2a:60:8f:d1: a6:ef:39:64:94:92:83:30:a5:82:68:b6:c5:f6:94: ce:01:74:a1:e4:e7:e4:d5:98:6a:97:30:25:2f:c5: 27:2c:f9:f3:6e:78:ad:48:29:71:7f:b9:5e:2a:d2: 0c:4e:df:0a:18:c9:b1:78:40:80:b2:12:8a:b6:a8: 31:a2:d7:cb:c0:d7:c4:e8:04:ca:d1:27:37:00:91: 2e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5E:52:5D:1D:C1:1B:0D:83:AE:46:5A:D9:C4:51:80:C6:4E:D4:51 X509v3 Authority Key Identifier: keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/323430353a663538303a3a2f33322d3332203d3e20313332303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:f580::/32 Signature Algorithm: sha256WithRSAEncryption 5c:c6:59:e8:8b:8d:e9:65:91:29:ad:1d:9f:cf:95:7a:03:aa: 33:6d:97:0c:87:16:f4:62:c3:84:2c:8f:5b:cf:da:d8:23:56: ae:58:50:16:86:bb:05:2c:39:cd:a4:73:78:0b:15:58:34:dc: 8f:c8:42:5d:31:22:6c:2e:76:bd:ae:eb:dc:92:4c:b2:34:2c: a1:8c:e0:63:b1:b6:c2:6b:17:60:4d:43:f7:c4:6e:aa:9c:4f: b2:b1:a9:d0:41:fd:57:69:e4:ef:55:5b:6d:40:d8:77:4d:9b: 48:90:9b:9c:1c:f5:84:38:99:3f:9b:42:9a:d1:22:9c:70:46: 84:35:7a:82:7d:25:e5:6f:a3:b9:26:5b:4e:46:66:82:1c:27: 81:3f:f6:a7:00:d3:77:50:bd:56:af:3a:50:33:ac:48:e0:b8: d6:c0:2a:61:d7:85:87:16:ea:a8:30:38:d1:b4:ab:1c:c7:62: 15:d9:be:33:ba:91:37:cf:ae:39:70:22:2c:26:91:f6:32:b6: ab:a1:4a:6a:b6:35:c7:52:fc:40:66:e6:48:87:bd:ca:d3:3e: 69:01:91:43:92:06:8c:a9:04:0f:05:6b:c4:17:0e:c9:35:30: 27:db:6a:6e:ca:d2:fa:01:6c:0e:86:f5:ef:6a:cd:f4:51:41: 5b:5b:39:0b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUSL6hmLrjKTLy5UyLUlDy1/0rq8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEz OTJEM0RGQTAeFw0yNjAxMjAwMjE0MTBaFw0yNzAxMTkwMjE5MTBaMDMxMTAvBgNV BAMTKDNBNUU1MjVEMURDMTFCMEQ4M0FFNDY1QUQ5QzQ1MTgwQzY0RUQ0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9Nq9t6DSYjXkACXfyjLlPM4V 7SyMoyQvAsHdAnVCUO8GqiuLWkfIMqvNVpMZoZP24cWfkcFVL/7Y+xHNWcrstQBO xxJlMFyyixpAZDp1Hb3gh11YwHBnAIHX2Xj6cfwyaVylHSvrt41dykyYIUlbTHFX 5FlG1C/gDxAThcTH+Qp033TJAx9lAV4jhXoAQtWL9OLaxe+syMhdd5nSJo3tR746 uB6Cq1YgtP5C9iT6KmCP0abvOWSUkoMwpYJotsX2lM4BdKHk5+TVmGqXMCUvxScs +fNueK1IKXF/uV4q0gxO3woYybF4QICyEoq2qDGi18vA18ToBMrRJzcAkS5zAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUOl5SXR3BGw2DrkZa2cRRgMZO1FEwHwYDVR0j BBgwFoAUj7kYRk/oHDbAEL5cXGmn+jktPfowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzc5MzUzOC8wLzhGQjkxODQ2NEZFODFDMzZDMDEwQkU1QzVDNjlB N0ZBMzkyRDNERkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEzOTJEM0RGQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4Mjc0MTU3Nzc5MzUzOC8wLzMyMzQzMDM1M2E2 NjM1MzgzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzMzMjMwMzEzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQF9YAwDQYJKoZIhvcNAQELBQADggEBAFzGWeiLjellkSmtHZ/PlXoD qjNtlwyHFvRiw4Qsj1vP2tgjVq5YUBaGuwUsOc2kc3gLFVg03I/IQl0xImwudr2u 69ySTLI0LKGM4GOxtsJrF2BNQ/fEbqqcT7KxqdBB/Vdp5O9VW21A2HdNm0iQm5wc 9YQ4mT+bQprRIpxwRoQ1eoJ9JeVvo7kmW05GZoIcJ4E/9qcA03dQvVavOlAzrEjg uNbAKmHXhYcW6qgwONG0qxzHYhXZvjO6kTfPrjlwIiwmkfYytquhSmq2NcdS/EBm 5kiHvcrTPmkBkUOSBoypBA8Fa8QXDsk1MCfbam7K0voBbA6G9e9qzfRRQVtbOQs= -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:42 2026 by rpki-client