This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/323430323a386263303a3a2f33322d3332203d3e203539303132.roa File: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (raw, json) Hash identifier: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU= Subject key identifier: 97:7A:0B:8E:15:AD:E1:73:C5:11:4A:F4:17:E8:8B:9E:C4:F9:41:9C Certificate issuer: /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9 Certificate serial: 4765528B9AF80E56B3E8CFF10A4FD64093460907 Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/323430323a386263303a3a2f33322d3332203d3e203539303132.roa Signing time: Tue 20 Jan 2026 02:08:26 +0000 ROA not before: Tue 20 Jan 2026 02:03:26 +0000 ROA not after: Tue 19 Jan 2027 02:08:26 +0000 asID: 59012 IP address blocks: 2402:8bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:65:52:8b:9a:f8:0e:56:b3:e8:cf:f1:0a:4f:d6:40:93:46:09:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9 Validity Not Before: Jan 20 02:03:26 2026 GMT Not After : Jan 19 02:08:26 2027 GMT Subject: CN=977A0B8E15ADE173C5114AF417E88B9EC4F9419C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:51:e3:a9:bb:0e:d6:8b:be:89:05:0b:8d: 1a:aa:4b:11:e8:99:0e:cb:99:8a:0f:a1:71:d4:20: 7c:97:65:7c:d5:a8:4c:15:38:1f:8e:b3:d7:8c:9f: b5:8c:c0:55:0c:fb:7f:19:2a:08:13:33:7a:22:0e: 14:84:72:28:ef:c4:ee:52:b8:87:52:40:95:0d:34: 08:93:5e:7d:23:fb:6e:da:ec:9b:65:0b:73:08:3a: 6c:87:89:c7:8c:0c:0d:c2:08:24:24:ee:83:c5:59: 9c:6d:54:29:e2:fd:6c:c3:71:1b:ea:fe:49:a5:e2: 3a:81:2a:6e:35:2e:9d:cd:92:36:9b:17:cc:a8:81: 73:4f:bb:35:ba:fd:19:cf:b3:f6:71:a3:6c:ef:7a: 09:da:2a:bb:3f:f4:99:7e:cb:3a:af:5e:e1:e8:67: ca:09:50:6f:2b:6a:a2:26:1d:44:29:4f:b2:cd:f0: fc:b3:fc:83:5f:82:b7:7f:35:e7:c2:b8:d7:cd:ad: ad:3b:87:66:ca:12:ec:d9:27:8b:78:03:47:41:1f: a4:0d:a6:a6:86:c8:08:3f:f3:ff:7c:3e:53:95:98: 18:9b:6d:35:f8:d4:78:7e:84:40:2a:9b:76:8c:33: bc:fa:f6:22:6a:ee:a2:fd:92:cd:b5:70:29:1b:a9: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7A:0B:8E:15:AD:E1:73:C5:11:4A:F4:17:E8:8B:9E:C4:F9:41:9C X509v3 Authority Key Identifier: keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/323430323a386263303a3a2f33322d3332203d3e203539303132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:8bc0::/32 Signature Algorithm: sha256WithRSAEncryption a5:4d:17:ce:1c:f8:ca:b4:7e:1b:df:b6:49:d1:07:ec:51:5b: 69:40:23:44:d5:fb:b6:03:37:c8:a7:a6:b5:07:07:ab:8f:f2: 4d:08:de:82:18:8c:66:4b:32:65:f3:fa:ce:7f:b5:8c:e8:33: 6a:61:08:14:64:88:48:38:b2:85:7f:92:ab:61:f0:ad:42:f0: 92:12:64:07:a9:c7:18:21:41:11:68:d9:dc:01:69:ab:03:fe: c6:65:61:b2:af:a2:54:68:aa:dd:51:1c:49:b9:d5:ed:c1:f3: 91:a8:13:32:72:44:15:3e:ec:3c:83:b2:8e:6f:1a:27:bb:64: 31:28:e4:c1:20:5e:c4:9b:03:ac:86:15:78:91:2e:bb:ba:5c: 08:27:0b:56:14:c5:bd:93:4f:e5:ac:01:35:db:0f:e0:4e:f6: df:9d:8d:dc:25:ca:f6:2e:73:13:86:cf:d1:c3:12:a8:97:ab: 86:83:b1:b6:17:fe:f3:82:5d:ec:6f:bd:fc:72:78:4d:ed:4b: 19:ef:d9:e1:c6:a8:dc:19:e6:56:ed:54:cd:6d:3d:be:98:1b: d4:7e:71:e9:70:41:86:e4:dd:ab:a2:1a:0f:32:ab:fa:74:2b: 9d:b9:97:6d:5d:5a:50:67:fe:22:6d:40:b4:f5:7b:78:cd:6d: b1:c5:52:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUR2VSi5r4Dlaz6M/xCk/WQJNGCQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJF MTgwODVGOTAeFw0yNjAxMjAwMjAzMjZaFw0yNzAxMTkwMjA4MjZaMDMxMTAvBgNV BAMTKDk3N0EwQjhFMTVBREUxNzNDNTExNEFGNDE3RTg4QjlFQzRGOTQxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHlHjqbsO1ou+iQULjRqqSxHo mQ7LmYoPoXHUIHyXZXzVqEwVOB+Os9eMn7WMwFUM+38ZKggTM3oiDhSEcijvxO5S uIdSQJUNNAiTXn0j+27a7JtlC3MIOmyHiceMDA3CCCQk7oPFWZxtVCni/WzDcRvq /kml4jqBKm41Lp3NkjabF8yogXNPuzW6/RnPs/Zxo2zvegnaKrs/9Jl+yzqvXuHo Z8oJUG8raqImHUQpT7LN8Pyz/INfgrd/NefCuNfNra07h2bKEuzZJ4t4A0dBH6QN pqaGyAg/8/98PlOVmBibbTX41Hh+hEAqm3aMM7z69iJq7qL9ks21cCkbqa8dAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUl3oLjhWt4XPFEUr0F+iLnsT5QZwwHwYDVR0j BBgwFoAUpu9Oonqm3Trt5/gqvxGA2+GAhfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjE0MDAzNS8wL0E2RUY0RUEyN0FBNkREM0FFREU3RjgyQUJGMTE4 MERCRTE4MDg1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJFMTgwODVGOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMTQwMDM1LzAvMzIzNDMwMzIzYTM4 NjI2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzOTMwMzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQCi8AwDQYJKoZIhvcNAQELBQADggEBAKVNF84c+Mq0fhvftknRB+xRW2lA I0TV+7YDN8inprUHB6uP8k0I3oIYjGZLMmXz+s5/tYzoM2phCBRkiEg4soV/kqth 8K1C8JISZAepxxghQRFo2dwBaasD/sZlYbKvolRoqt1RHEm51e3B85GoEzJyRBU+ 7DyDso5vGie7ZDEo5MEgXsSbA6yGFXiRLru6XAgnC1YUxb2TT+WsATXbD+BO9t+d jdwlyvYucxOGz9HDEqiXq4aDsbYX/vOCXexvvfxyeE3tSxnv2eHGqNwZ5lbtVM1t Pb6YG9R+celwQYbk3auiGg8yq/p0K525l21dWlBn/iJtQLT1e3jNbbHFUuA= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:17 2026 by rpki-client