This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/323430323a373734303a3a2f33322d3332203d3e20313531323532.roa File: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (raw, json) Hash identifier: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU= Subject key identifier: 12:AE:F7:13:2B:A4:91:B5:9F:23:64:56:35:57:ED:7F:F1:A4:0C:8A Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 39DB7E9FD7EF6B677E911CF6319976AFC3473EA8 Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/323430323a373734303a3a2f33322d3332203d3e20313531323532.roa Signing time: Tue 20 Jan 2026 02:09:30 +0000 ROA not before: Tue 20 Jan 2026 02:04:30 +0000 ROA not after: Tue 19 Jan 2027 02:09:30 +0000 asID: 151252 IP address blocks: 2402:7740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:db:7e:9f:d7:ef:6b:67:7e:91:1c:f6:31:99:76:af:c3:47:3e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Jan 20 02:04:30 2026 GMT Not After : Jan 19 02:09:30 2027 GMT Subject: CN=12AEF7132BA491B59F2364563557ED7FF1A40C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:cb:fc:81:b5:d5:2c:35:e1:95:d1:96:dc: cc:ba:ac:57:72:ea:a0:ab:75:e7:e4:d0:49:fe:47: 8c:13:a7:0a:82:47:d7:ce:20:cb:d6:4c:bc:cf:58: 29:61:af:2c:78:8e:79:b7:7e:8c:70:98:d8:b9:82: 71:80:4f:0f:85:35:9d:09:12:87:b8:f0:25:c6:f7: 93:b4:36:5d:ea:a3:ea:68:d8:7d:28:9c:15:02:e4: 51:df:16:a9:90:12:d7:98:73:54:27:80:1b:fe:e2: b2:07:b3:6a:43:3e:75:3b:33:cb:46:61:30:45:ec: 4f:da:3a:cf:93:d1:ca:4f:bc:76:b6:dc:89:1d:24: 09:a6:13:25:04:15:40:e7:a2:28:2d:09:06:79:c4: f0:22:a9:4b:a9:92:72:d2:26:43:8d:1c:49:c1:92: f8:72:e0:5d:07:71:f6:51:f9:8a:5b:94:f3:ec:62: 8c:67:aa:97:20:ac:ca:d1:e6:7c:61:f2:2e:12:e3: 8d:db:a1:3a:81:57:9c:01:3f:0b:8c:2d:39:9d:a8: bf:c9:0f:62:e3:76:0e:9c:ba:54:9f:e6:b7:f7:00: ca:41:0c:9b:46:7f:e6:8c:a5:b3:12:d5:91:e7:d2: cc:bd:e0:e2:f5:6d:5d:4a:85:cc:5b:d4:30:d8:4d: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AE:F7:13:2B:A4:91:B5:9F:23:64:56:35:57:ED:7F:F1:A4:0C:8A X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/323430323a373734303a3a2f33322d3332203d3e20313531323532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7740::/32 Signature Algorithm: sha256WithRSAEncryption 06:51:9f:65:52:54:3e:27:68:d4:64:ee:6e:0f:96:4d:c2:b8: b2:3b:bc:43:d8:ca:32:62:f9:22:a1:f7:6a:6e:89:45:38:dd: b1:82:a1:1d:bc:8b:36:59:59:46:6c:3b:42:27:05:38:9d:99: 8f:21:2d:4e:a5:8c:cb:34:54:8b:5e:1c:a4:90:e2:d5:6c:9c: 19:33:08:a4:2a:4b:55:8d:d9:96:49:75:1b:8f:1a:2d:64:be: d4:cd:8e:07:5f:50:11:a3:1f:55:d1:15:b4:66:06:43:18:60: e7:19:66:4c:c3:f1:ca:6a:8e:d2:da:f6:ec:ea:08:d6:ce:ca: 51:44:2a:c6:fa:29:49:88:90:3d:91:64:05:c4:84:4d:b8:60: c3:53:c8:84:85:68:44:63:bc:31:22:58:f4:47:bc:cb:b2:0e: a1:75:d2:a6:4b:2f:58:e1:cc:f2:af:37:8e:05:06:87:3f:6e: c5:bc:68:d8:74:d5:ec:af:57:a7:bf:7e:a9:a6:1d:e3:d9:b8: 6e:ee:e4:9d:93:a8:16:29:16:bf:21:22:1d:16:f4:a7:68:41: 43:d5:3d:ec:76:fd:75:38:d7:55:ad:13:89:d7:ec:cb:d9:d7: c2:a6:32:ce:37:53:ea:fc:1a:5a:77:81:9e:d1:69:39:b1:08: eb:96:cd:21 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUOdt+n9fva2d+kRz2MZl2r8NHPqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjAxMjAwMjA0MzBaFw0yNzAxMTkwMjA5MzBaMDMxMTAvBgNV BAMTKDEyQUVGNzEzMkJBNDkxQjU5RjIzNjQ1NjM1NTdFRDdGRjFBNDBDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsl8v8gbXVLDXhldGW3My6rFdy 6qCrdefk0En+R4wTpwqCR9fOIMvWTLzPWClhryx4jnm3foxwmNi5gnGATw+FNZ0J Eoe48CXG95O0Nl3qo+po2H0onBUC5FHfFqmQEteYc1QngBv+4rIHs2pDPnU7M8tG YTBF7E/aOs+T0cpPvHa23IkdJAmmEyUEFUDnoigtCQZ5xPAiqUupknLSJkONHEnB kvhy4F0HcfZR+YpblPPsYoxnqpcgrMrR5nxh8i4S443boTqBV5wBPwuMLTmdqL/J D2Ljdg6culSf5rf3AMpBDJtGf+aMpbMS1ZHn0sy94OL1bV1Khcxb1DDYTWybAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUEq73EyukkbWfI2RWNVftf/GkDIowHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MzIyMTk3MjA3NDQ5OS8wLzMyMzQzMDMyM2Ez NzM3MzQzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzUzMTMyMzUzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQCd0AwDQYJKoZIhvcNAQELBQADggEBAAZRn2VSVD4naNRk7m4Plk3C uLI7vEPYyjJi+SKh92puiUU43bGCoR28izZZWUZsO0InBTidmY8hLU6ljMs0VIte HKSQ4tVsnBkzCKQqS1WN2ZZJdRuPGi1kvtTNjgdfUBGjH1XRFbRmBkMYYOcZZkzD 8cpqjtLa9uzqCNbOylFEKsb6KUmIkD2RZAXEhE24YMNTyISFaERjvDEiWPRHvMuy DqF10qZLL1jhzPKvN44FBoc/bsW8aNh01eyvV6e/fqmmHePZuG7u5J2TqBYpFr8h Ih0W9KdoQUPVPex2/XU411WtE4nX7MvZ18KmMs43U+r8Glp3gZ7RaTmxCOuWzSE= -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:31 2026 by rpki-client