This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa File: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (raw, json) Hash identifier: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ= Subject key identifier: 62:CB:86:A8:E5:8C:2A:98:6B:AA:CA:40:01:7C:5A:80:9A:AF:53:B5 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 10BC301F0A94D4BF32FB0FD0CD2F1357AA0B8CB4 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa Signing time: Tue 20 Jan 2026 02:10:56 +0000 ROA not before: Tue 20 Jan 2026 02:05:56 +0000 ROA not after: Tue 19 Jan 2027 02:10:56 +0000 asID: 139138 IP address blocks: 2406:b640:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bc:30:1f:0a:94:d4:bf:32:fb:0f:d0:cd:2f:13:57:aa:0b:8c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Jan 20 02:05:56 2026 GMT Not After : Jan 19 02:10:56 2027 GMT Subject: CN=62CB86A8E58C2A986BAACA40017C5A809AAF53B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:11:43:be:1c:18:46:fa:6e:69:4c:43:81: 59:f9:e7:21:00:1f:57:8e:49:e1:ee:c4:ab:c1:36: a9:a5:4f:9d:51:70:79:fb:69:5c:70:c6:2d:a4:0a: e6:cf:97:cd:e1:af:fe:75:7b:6c:3e:3d:df:7c:ee: 06:bb:98:30:7d:a4:a7:f5:9f:9f:28:71:9f:63:9b: 78:49:1c:b8:92:89:c8:60:36:be:a3:ed:aa:7e:76: a3:4d:15:e4:28:1a:d7:50:04:ff:32:38:74:4f:01: 71:e1:2c:88:bc:cd:08:ab:fb:0c:77:7d:07:59:c8: c3:bd:db:49:ba:a0:04:20:56:15:7e:e3:dc:f8:68: a0:47:80:9b:49:6c:50:57:93:4b:8a:66:81:d7:7b: 56:56:cb:31:91:72:30:a1:d5:d7:0e:5e:28:9f:04: d2:f6:ff:04:47:6b:71:41:1a:27:2a:ef:89:8d:a1: fd:14:4d:70:52:66:01:52:52:60:d6:cd:89:1a:3a: 08:22:81:a9:33:a3:25:dd:0d:02:8f:d0:b2:ef:66: 93:46:a2:6d:13:ef:cb:0f:9a:f0:c6:f2:50:2e:59: d1:f2:0b:a7:3f:b0:86:78:f5:3a:0d:e1:c0:66:29: e2:ca:da:fb:d7:dc:95:72:72:e8:0b:c4:12:71:cd: 34:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CB:86:A8:E5:8C:2A:98:6B:AA:CA:40:01:7C:5A:80:9A:AF:53:B5 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:b640:100::/48 Signature Algorithm: sha256WithRSAEncryption 56:f9:0d:c5:13:30:c6:3f:57:9f:f8:74:fd:66:74:73:59:8e: d3:d2:a9:df:14:b7:94:9b:36:d8:05:a1:f0:05:5d:a1:2e:bc: a3:47:b7:e6:fb:d9:a7:b0:3e:a5:29:d0:c8:d6:cc:1d:af:d7: 61:f4:22:30:49:15:7e:74:b1:91:9b:f5:42:c7:73:db:0e:54: 06:cf:95:bf:ba:dc:bc:07:d0:bb:b0:8d:2d:82:f8:4d:cc:d4: 6e:7f:59:37:5b:1f:5d:a8:cd:a2:b0:a1:66:a7:d4:9a:05:b8: 63:1d:e2:8d:59:74:8b:7f:30:cd:37:27:a2:6c:c5:37:12:a4: 3c:54:4d:6a:da:78:1a:94:4f:8f:6a:26:bb:ee:76:8e:58:b2: 5a:8f:31:d2:71:af:ba:7f:6b:7b:e2:c9:98:b6:bf:fb:31:7f: 41:4e:8e:7e:3d:45:f9:58:bf:eb:1f:6c:bc:43:25:e4:ca:8d: 20:90:b0:0b:13:52:19:41:c1:08:a0:af:9d:2f:98:57:69:fd: 62:8b:bf:73:d0:7c:c0:97:b9:47:bc:35:7b:cb:b2:d9:87:1a: 73:b1:01:65:f7:1c:5f:10:81:df:1b:f9:4a:93:15:30:44:41: cc:22:b2:8e:56:f6:99:61:0a:18:b0:43:43:e9:1a:2a:80:5a: 6f:dc:a3:66 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUELwwHwqU1L8y+w/QzS8TV6oLjLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjAxMjAwMjA1NTZaFw0yNzAxMTkwMjEwNTZaMDMxMTAvBgNV BAMTKDYyQ0I4NkE4RTU4QzJBOTg2QkFBQ0E0MDAxN0M1QTgwOUFBRjUzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTBFDvhwYRvpuaUxDgVn55yEA H1eOSeHuxKvBNqmlT51RcHn7aVxwxi2kCubPl83hr/51e2w+Pd987ga7mDB9pKf1 n58ocZ9jm3hJHLiSichgNr6j7ap+dqNNFeQoGtdQBP8yOHRPAXHhLIi8zQir+wx3 fQdZyMO920m6oAQgVhV+49z4aKBHgJtJbFBXk0uKZoHXe1ZWyzGRcjCh1dcOXiif BNL2/wRHa3FBGicq74mNof0UTXBSZgFSUmDWzYkaOggigakzoyXdDQKP0LLvZpNG om0T78sPmvDG8lAuWdHyC6c/sIZ49ToN4cBmKeLK2vvX3JVycugLxBJxzTQPAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUYsuGqOWMKphrqspAAXxagJqvU7UwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMzM2NjQzLzAvMzIzNDMwMzYz YTYyMzYzNDMwM2EzMTMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkz MTMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkBrZAAQAwDQYJKoZIhvcNAQELBQADggEBAFb5DcUT MMY/V5/4dP1mdHNZjtPSqd8Ut5SbNtgFofAFXaEuvKNHt+b72aewPqUp0MjWzB2v 12H0IjBJFX50sZGb9ULHc9sOVAbPlb+63LwH0LuwjS2C+E3M1G5/WTdbH12ozaKw oWan1JoFuGMd4o1ZdIt/MM03J6JsxTcSpDxUTWraeBqUT49qJrvudo5YslqPMdJx r7p/a3viyZi2v/sxf0FOjn49RflYv+sfbLxDJeTKjSCQsAsTUhlBwQigr50vmFdp /WKLv3PQfMCXuUe8NXvLstmHGnOxAWX3HF8Qgd8b+UqTFTBEQcwiso5W9plhChiw Q0PpGiqAWm/co2Y= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:24 2026 by rpki-client