This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/0/323430363a653530303a3a2f33332d3634203d3e203538353933.roa File: 323430363a653530303a3a2f33332d3634203d3e203538353933.roa (raw, json) Hash identifier: hkbFxkf4GUHBy19eBu+H1Gx7pUmj1m//p5LesPw+8qQ= Subject key identifier: BD:71:C4:12:01:02:9F:D8:71:DE:E7:82:1A:2F:F2:8B:80:E0:4A:32 Certificate issuer: /CN=7505D5D0FC8DB66FC48DA4A64839077551466B62 Certificate serial: 01D05263B24AFA29573A31CE8DFF3CB765D16A8B Authority key identifier: 75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/323430363a653530303a3a2f33332d3634203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:22 +0000 ROA not before: Tue 20 Jan 2026 02:03:22 +0000 ROA not after: Tue 19 Jan 2027 02:08:22 +0000 asID: 58593 IP address blocks: 2406:e500::/33 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d0:52:63:b2:4a:fa:29:57:3a:31:ce:8d:ff:3c:b7:65:d1:6a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7505D5D0FC8DB66FC48DA4A64839077551466B62 Validity Not Before: Jan 20 02:03:22 2026 GMT Not After : Jan 19 02:08:22 2027 GMT Subject: CN=BD71C41201029FD871DEE7821A2FF28B80E04A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:87:fa:72:21:67:4d:10:34:59:56:c1:55:8d: 02:a5:8e:1c:0a:4a:e6:dd:1e:d7:39:8f:40:98:50: df:20:37:e0:3b:e4:f5:1e:c1:fd:ef:3b:b7:66:41: 65:91:71:6b:81:37:6d:bd:17:95:3a:bb:7f:56:a0: b0:de:92:2c:31:52:bf:c8:47:e6:39:00:b8:f9:1d: 15:9d:0d:81:88:18:b8:e9:d6:df:e9:64:d4:c7:c5: f9:03:f7:50:08:95:d0:4d:d1:fb:79:e5:40:0b:76: 06:f6:77:25:fd:fa:4e:43:e8:4d:e4:40:c6:a1:21: 83:0c:55:96:53:b3:bb:f9:50:10:7e:18:fb:70:89: db:7f:51:76:c0:81:67:d3:e6:68:6b:92:3f:0b:0e: 31:cf:f4:a6:83:c0:f0:e3:23:34:19:16:a3:30:55: 36:86:33:de:17:6d:46:fe:de:a6:d9:7a:a5:5f:96: e2:e3:7a:88:c0:59:f9:9b:26:7a:b8:df:ff:56:de: 94:3a:71:58:ff:fa:c0:96:53:9f:14:ff:5c:72:e9: 76:da:e9:ce:5a:73:da:0d:47:8c:50:02:1a:3e:91: e3:d6:0e:5a:f9:a6:b1:de:a4:4f:b8:f6:d8:5f:95: b2:0f:5e:9a:b9:19:fa:46:6c:33:4e:21:f9:6b:e4: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:71:C4:12:01:02:9F:D8:71:DE:E7:82:1A:2F:F2:8B:80:E0:4A:32 X509v3 Authority Key Identifier: keyid:75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/323430363a653530303a3a2f33332d3634203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:e500::/33 Signature Algorithm: sha256WithRSAEncryption 55:11:53:a2:9b:14:87:de:d4:c5:c5:54:84:85:9a:e4:dd:77: 6b:49:ed:2a:76:3e:0a:1b:7e:d4:e1:37:96:e3:5e:07:14:1c: f7:ce:16:ee:7a:15:06:78:90:96:b8:9e:88:9c:9b:44:59:11: b2:04:d7:7c:02:ee:0e:bf:c4:66:84:25:78:42:a5:3f:b1:1d: c6:1e:e1:5a:f6:5d:4f:da:7c:6e:21:dd:da:38:56:b7:82:fe: b1:41:ba:a5:03:2c:b5:45:1e:9f:a9:94:d6:a0:dd:ed:fe:85: ee:6e:11:46:b0:40:fc:cb:d5:e8:b4:a1:34:be:f2:15:13:b1: 43:3d:e9:63:5f:92:ac:f9:3b:81:1b:da:e6:78:05:f4:88:c5: b5:70:65:98:56:20:67:43:e0:40:49:ee:c2:49:a2:6c:23:9e: 74:8b:f4:aa:7f:81:51:9f:14:99:b2:66:02:e1:ee:48:a5:00: d1:6d:b7:85:df:bb:34:9f:f8:8c:91:8b:93:c6:55:32:f4:c4: a3:ee:15:5b:15:33:02:3e:09:ed:59:9d:b5:f5:40:4f:f4:ea: 1d:1e:aa:c1:fa:a0:5e:59:d0:52:24:4c:e5:1c:92:85:c9:63: 39:39:9b:a8:f9:cf:0a:d9:20:5e:d5:11:b8:10:75:45:25:f2: a5:6f:ac:be -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUAdBSY7JK+ilXOjHOjf88t2XRaoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUwNUQ1RDBGQzhEQjY2RkM0OERBNEE2NDgzOTA3NzU1 MTQ2NkI2MjAeFw0yNjAxMjAwMjAzMjJaFw0yNzAxMTkwMjA4MjJaMDMxMTAvBgNV BAMTKEJENzFDNDEyMDEwMjlGRDg3MURFRTc4MjFBMkZGMjhCODBFMDRBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9h/pyIWdNEDRZVsFVjQKljhwK SubdHtc5j0CYUN8gN+A75PUewf3vO7dmQWWRcWuBN229F5U6u39WoLDekiwxUr/I R+Y5ALj5HRWdDYGIGLjp1t/pZNTHxfkD91AIldBN0ft55UALdgb2dyX9+k5D6E3k QMahIYMMVZZTs7v5UBB+GPtwidt/UXbAgWfT5mhrkj8LDjHP9KaDwPDjIzQZFqMw VTaGM94XbUb+3qbZeqVfluLjeojAWfmbJnq43/9W3pQ6cVj/+sCWU58U/1xy6Xba 6c5ac9oNR4xQAho+kePWDlr5prHepE+49thflbIPXpq5GfpGbDNOIflr5OCtAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUvXHEEgECn9hx3ueCGi/yi4DgSjIwHwYDVR0j BBgwFoAUdQXV0PyNtm/EjaSmSDkHdVFGa2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8wLzc1MDVENUQwRkM4REI2NkZDNDhEQTRBNjQ4Mzkw Nzc1NTE0NjZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzUwNUQ1RDBGQzhEQjY2RkM0OERBNEE2NDgzOTA3NzU1MTQ2NkI2Mi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzAvMzIzNDMwMzYzYTY1 MzUzMDMwM2EzYTJmMzMzMzJkMzYzNDIwM2QzZTIwMzUzODM1MzkzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGByQG5QAAMA0GCSqGSIb3DQEBCwUAA4IBAQBVEVOimxSH3tTFxVSEhZrk3Xdr Se0qdj4KG37U4TeW414HFBz3zhbuehUGeJCWuJ6InJtEWRGyBNd8Au4Ov8RmhCV4 QqU/sR3GHuFa9l1P2nxuId3aOFa3gv6xQbqlAyy1RR6fqZTWoN3t/oXubhFGsED8 y9XotKE0vvIVE7FDPeljX5Ks+TuBG9rmeAX0iMW1cGWYViBnQ+BASe7CSaJsI550 i/Sqf4FRnxSZsmYC4e5IpQDRbbeF37s0n/iMkYuTxlUy9MSj7hVbFTMCPgntWZ21 9UBP9OodHqrB+qBeWdBSJEzlHJKFyWM5OZuo+c8K2SBe1RG4EHVFJfKlb6y+ -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:33 2026 by rpki-client