This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/323430353a373863303a3a2f33322d3438203d3e20313339313438.roa File: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (raw, json) Hash identifier: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM= Subject key identifier: 87:73:81:EC:B9:30:9B:2C:27:F2:F8:3C:02:39:4C:4B:4A:39:43:7E Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 7461C91995E166D94FDA699F1FC763EA24169389 Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/323430353a373863303a3a2f33322d3438203d3e20313339313438.roa Signing time: Tue 20 Jan 2026 02:10:54 +0000 ROA not before: Tue 20 Jan 2026 02:05:54 +0000 ROA not after: Tue 19 Jan 2027 02:10:54 +0000 asID: 139148 IP address blocks: 2405:78c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:61:c9:19:95:e1:66:d9:4f:da:69:9f:1f:c7:63:ea:24:16:93:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Jan 20 02:05:54 2026 GMT Not After : Jan 19 02:10:54 2027 GMT Subject: CN=877381ECB9309B2C27F2F83C02394C4B4A39437E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:81:da:60:9d:6f:aa:20:56:9d:a7:b4:60:9f: 9d:b4:15:8d:7d:3a:40:78:2b:b8:a0:04:fd:d2:5d: 52:bb:e5:20:7b:3a:a4:7d:de:e1:1a:8b:ac:e6:6b: 34:e0:be:af:fe:a0:e6:f5:4a:ac:0e:0c:2e:8a:2e: 56:33:4a:da:82:1c:25:61:1b:88:eb:ee:35:23:2b: e5:24:d9:b4:fc:23:d7:19:84:bf:4c:fa:11:be:58: bc:0a:d6:7b:d4:b7:9b:5b:a6:14:85:f8:9c:39:a5: d9:c9:90:7c:9d:93:73:c5:0c:df:90:f8:59:cb:79: 8e:ed:bf:ed:a2:55:c9:ae:bf:9c:06:44:97:63:59: e3:b1:5a:66:65:18:82:2d:0c:61:8d:e1:9b:86:d3: ba:50:cb:88:f4:66:8e:45:2c:6a:d2:0e:83:f3:3a: 07:1f:49:df:17:34:2e:ac:9e:72:b4:c5:03:26:c9: 83:d6:f4:ae:fe:ca:07:bf:80:7a:e8:4c:b1:ff:39: e9:6e:98:ec:f5:6d:e2:8a:ec:dd:9c:e5:7c:56:9d: 8f:74:9c:38:d5:d9:8f:3c:2e:06:cc:05:a8:d7:df: bd:b8:ea:7e:4a:13:54:f6:c7:65:65:f2:7d:91:47: 9a:7d:bf:6b:32:fe:7b:76:82:a0:81:f2:ed:ae:e4: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:73:81:EC:B9:30:9B:2C:27:F2:F8:3C:02:39:4C:4B:4A:39:43:7E X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/323430353a373863303a3a2f33322d3438203d3e20313339313438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:78c0::/32 Signature Algorithm: sha256WithRSAEncryption 17:ec:c7:09:bf:f2:21:90:aa:98:c2:65:1a:07:bd:ea:13:65: 40:fa:3a:84:74:dd:4f:3c:b9:f5:09:9c:22:1d:3b:9f:0c:e0: 03:02:83:ac:76:7a:43:f0:c7:34:6c:46:f1:79:3c:86:08:94: 04:c2:b1:52:44:e5:8c:6a:b2:02:09:b7:1d:e5:17:6c:95:c9: 4a:b8:82:7a:54:c1:d1:5d:ef:6b:6c:5f:9f:10:4f:92:a6:db: 0d:8b:40:ab:06:12:4b:d5:64:bb:95:9f:9b:3f:b7:d7:65:a8: a1:e1:2c:e1:cb:9c:3e:5f:80:06:60:4b:58:1e:71:c3:03:05: 72:bd:dd:2b:5b:58:71:02:61:01:34:5d:91:fb:40:21:b8:84: c2:8d:ff:ba:91:29:a2:8e:c6:3d:23:cc:77:d1:15:8a:76:bb: 0c:b7:56:0c:6c:9e:66:8f:46:b5:81:7c:6f:7d:a5:93:f0:51: 53:d8:54:8a:15:36:a9:3b:c5:64:19:0d:5c:25:95:45:97:9a: cf:4a:49:16:64:cf:e9:d7:f3:ec:24:a8:44:2d:ad:ea:2c:a5: 5a:f2:69:28:ba:83:a3:af:da:52:0a:46:52:dd:a1:5e:12:f4: f1:b4:f0:a6:e1:c0:2d:1d:fc:11:38:c6:dd:51:92:74:00:43: 76:fd:a3:f2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUdGHJGZXhZtlP2mmfH8dj6iQWk4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjAxMjAwMjA1NTRaFw0yNzAxMTkwMjEwNTRaMDMxMTAvBgNV BAMTKDg3NzM4MUVDQjkzMDlCMkMyN0YyRjgzQzAyMzk0QzRCNEEzOTQzN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZgdpgnW+qIFadp7Rgn520FY19 OkB4K7igBP3SXVK75SB7OqR93uEai6zmazTgvq/+oOb1SqwODC6KLlYzStqCHCVh G4jr7jUjK+Uk2bT8I9cZhL9M+hG+WLwK1nvUt5tbphSF+Jw5pdnJkHydk3PFDN+Q +FnLeY7tv+2iVcmuv5wGRJdjWeOxWmZlGIItDGGN4ZuG07pQy4j0Zo5FLGrSDoPz OgcfSd8XNC6snnK0xQMmyYPW9K7+yge/gHroTLH/OelumOz1beKK7N2c5XxWnY90 nDjV2Y88LgbMBajX37246n5KE1T2x2Vl8n2RR5p9v2sy/nt2gqCB8u2u5PfZAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUh3OB7Lkwmywn8vg8AjlMS0o5Q34wHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MzIyMTk3MjI3MTEwNy8wLzMyMzQzMDM1M2Ez NzM4NjMzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzMzOTMxMzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQFeMAwDQYJKoZIhvcNAQELBQADggEBABfsxwm/8iGQqpjCZRoHveoT ZUD6OoR03U88ufUJnCIdO58M4AMCg6x2ekPwxzRsRvF5PIYIlATCsVJE5YxqsgIJ tx3lF2yVyUq4gnpUwdFd72tsX58QT5Km2w2LQKsGEkvVZLuVn5s/t9dlqKHhLOHL nD5fgAZgS1geccMDBXK93StbWHECYQE0XZH7QCG4hMKN/7qRKaKOxj0jzHfRFYp2 uwy3VgxsnmaPRrWBfG99pZPwUVPYVIoVNqk7xWQZDVwllUWXms9KSRZkz+nX8+wk qEQtreospVryaSi6g6Ov2lIKRlLdoV4S9PG08KbhwC0d/BE4xt1RknQAQ3b9o/I= -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:12 2026 by rpki-client