This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa File: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (raw, json) Hash identifier: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I= Subject key identifier: 5F:E2:20:58:55:3F:12:FB:28:99:65:43:7D:97:28:BE:EA:E5:72:AB Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 74C589B883344D87CB29F6BEB2B086FA9640D62F Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa Signing time: Tue 20 Jan 2026 02:10:56 +0000 ROA not before: Tue 20 Jan 2026 02:05:56 +0000 ROA not after: Tue 19 Jan 2027 02:10:56 +0000 asID: 139138 IP address blocks: 2406:b640:4100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c5:89:b8:83:34:4d:87:cb:29:f6:be:b2:b0:86:fa:96:40:d6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Jan 20 02:05:56 2026 GMT Not After : Jan 19 02:10:56 2027 GMT Subject: CN=5FE22058553F12FB289965437D9728BEEAE572AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:fe:1f:7d:41:48:6c:f1:c3:08:ce:64:01: bd:04:a1:a1:ef:c7:26:b5:af:82:4d:23:49:4c:22: 3a:00:68:f1:5a:f8:59:89:08:67:f7:6b:81:5f:ec: 9a:41:a5:5f:37:0b:c0:15:49:9d:36:0e:0c:bb:da: 92:03:f5:81:b9:e7:df:6c:d4:db:98:98:22:3e:8e: c8:b7:24:15:69:0b:35:a7:e3:7a:15:25:73:d4:78: 1a:b6:24:59:cd:6f:b6:04:ec:25:11:77:bd:9e:fa: 92:f8:de:a3:94:9a:9a:c1:76:ba:e3:ec:d5:55:17: f8:86:df:79:b9:54:75:5d:66:36:95:bc:af:3c:38: 17:6e:54:dd:fe:2a:b8:02:0b:23:34:7f:5b:2f:42: 1d:3d:d8:97:ae:33:b3:38:a0:f9:8a:9c:1b:35:14: ea:8d:fb:51:1b:d3:94:14:4b:f0:89:05:e4:57:ce: eb:1f:78:23:f4:ba:f1:d3:8f:8c:a0:76:26:7f:2b: b3:30:a5:35:c5:b3:bb:8e:7c:ef:f4:ae:2d:1e:5b: a2:b2:20:5d:bc:89:42:2b:95:98:88:b5:87:f4:67: 8b:5d:fc:65:34:de:05:90:52:24:12:a9:a1:75:14: 66:88:2f:f1:c1:cc:95:b3:29:f8:95:c5:91:e9:be: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E2:20:58:55:3F:12:FB:28:99:65:43:7D:97:28:BE:EA:E5:72:AB X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:b640:4100::/48 Signature Algorithm: sha256WithRSAEncryption 64:2b:27:6b:17:51:00:17:4f:62:0f:e7:83:32:97:af:79:a6: 1e:95:b5:f9:0a:17:43:bc:7c:5b:62:a5:be:2c:3c:df:59:78: 95:8b:4c:76:1f:67:75:35:24:c6:87:0c:42:43:a7:86:50:8d: 6b:8e:1c:3d:e2:f3:b9:5c:31:ae:5d:13:4d:ce:52:43:50:94: c5:4d:fc:74:5f:43:c8:da:c1:93:98:1c:6a:cd:42:79:19:f7: fc:97:d7:2d:e6:b3:f4:b8:b3:da:d2:ab:fc:ef:f9:27:6c:32: b0:51:b5:1c:09:a1:5a:5d:99:da:ed:6a:03:6e:81:5e:36:3a: 46:73:33:49:92:73:3d:99:05:e0:35:43:27:bb:e9:ad:49:7b: ab:64:9b:bc:5c:07:c4:b5:60:b1:f3:f0:66:9c:da:38:14:97: 6a:40:2c:27:17:0c:7b:4d:e2:8a:76:a3:40:ac:f8:b3:3e:b1: 0f:fc:50:10:73:da:04:5d:a0:3e:d3:17:f7:e0:be:3e:9f:9d: b0:80:8b:9e:46:88:e7:ba:df:6d:4c:d4:0c:06:c9:02:a3:b6: c2:1f:0e:3a:c1:67:c8:ac:0a:c4:fc:a9:7e:b9:bf:c0:b7:99: 14:31:16:d8:58:d5:74:6b:12:65:ac:60:b7:82:b5:cc:19:c4: 07:35:fa:db -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUdMWJuIM0TYfLKfa+srCG+pZA1i8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjAxMjAwMjA1NTZaFw0yNzAxMTkwMjEwNTZaMDMxMTAvBgNV BAMTKDVGRTIyMDU4NTUzRjEyRkIyODk5NjU0MzdEOTcyOEJFRUFFNTcyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqf4ffUFIbPHDCM5kAb0EoaHv xya1r4JNI0lMIjoAaPFa+FmJCGf3a4Ff7JpBpV83C8AVSZ02Dgy72pID9YG5599s 1NuYmCI+jsi3JBVpCzWn43oVJXPUeBq2JFnNb7YE7CURd72e+pL43qOUmprBdrrj 7NVVF/iG33m5VHVdZjaVvK88OBduVN3+KrgCCyM0f1svQh092JeuM7M4oPmKnBs1 FOqN+1Eb05QUS/CJBeRXzusfeCP0uvHTj4ygdiZ/K7MwpTXFs7uOfO/0ri0eW6Ky IF28iUIrlZiItYf0Z4td/GU03gWQUiQSqaF1FGaIL/HBzJWzKfiVxZHpvozLAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQUX+IgWFU/EvsomWVDfZcovurlcqswHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMzM2NjQzLzAvMzIzNDMwMzYz YTYyMzYzNDMwM2EzNDMxMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz OTMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQGtkBBADANBgkqhkiG9w0BAQsFAAOCAQEAZCsn axdRABdPYg/ngzKXr3mmHpW1+QoXQ7x8W2Klviw831l4lYtMdh9ndTUkxocMQkOn hlCNa44cPeLzuVwxrl0TTc5SQ1CUxU38dF9DyNrBk5gcas1CeRn3/JfXLeaz9Liz 2tKr/O/5J2wysFG1HAmhWl2Z2u1qA26BXjY6RnMzSZJzPZkF4DVDJ7vprUl7q2Sb vFwHxLVgsfPwZpzaOBSXakAsJxcMe03iinajQKz4sz6xD/xQEHPaBF2gPtMX9+C+ Pp+dsICLnkaI57rfbUzUDAbJAqO2wh8OOsFnyKwKxPypfrm/wLeZFDEW2FjVdGsS Zaxgt4K1zBnEBzX62w== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:20 2026 by rpki-client