This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a313030303a3a2f33362d3336203d3e20313339313339.roa File: 323430363a333334303a313030303a3a2f33362d3336203d3e20313339313339.roa (raw, json) Hash identifier: h4mGUiNpYZm69q/o4Nt9VWgzDNZVcdRzU5IuWw9VVtU= Subject key identifier: 90:81:CD:6D:DD:A8:C2:CE:1A:10:A2:71:6D:83:7E:93:71:7F:D9:EF Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 4153C433D643A12C85ECA3EC128C62135DB83FAF Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a313030303a3a2f33362d3336203d3e20313339313339.roa Signing time: Tue 20 Jan 2026 02:18:07 +0000 ROA not before: Tue 20 Jan 2026 02:13:07 +0000 ROA not after: Tue 19 Jan 2027 02:18:07 +0000 asID: 139139 IP address blocks: 2406:3340:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:53:c4:33:d6:43:a1:2c:85:ec:a3:ec:12:8c:62:13:5d:b8:3f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:07 2026 GMT Not After : Jan 19 02:18:07 2027 GMT Subject: CN=9081CD6DDDA8C2CE1A10A2716D837E93717FD9EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6d:e1:9d:a5:18:6c:f5:d1:b7:94:40:2d:b8: 62:1f:ef:14:a3:a5:f5:47:02:52:de:cc:1e:0d:7e: 50:7e:c7:4f:f1:b2:79:03:70:09:63:7b:13:d2:44: 7f:13:97:84:ff:75:21:5a:30:3c:fe:d6:c1:b8:10: 68:24:9b:94:9b:63:df:55:a8:94:12:1d:d3:89:f7: a8:93:6b:16:37:dd:b9:38:ad:d4:d1:67:7a:3c:f6: d2:8b:01:fa:35:02:74:bb:97:95:8c:ec:40:e4:56: ff:d2:d6:85:bb:fc:ed:d0:02:6a:2e:e9:80:6b:f5: c3:c8:7a:ab:03:dc:74:92:a0:59:fa:e4:00:25:66: ed:a5:65:ba:8d:83:97:62:4a:54:ec:51:29:7f:69: 81:b8:b2:58:79:2b:21:dc:f4:6e:5f:3c:27:ef:55: 02:76:35:fc:0d:56:f4:de:a1:39:15:ce:d2:58:1f: ae:2d:ae:79:bc:42:12:32:01:df:82:e2:2f:a0:91: ac:3b:81:94:e3:39:10:e7:f1:79:28:25:c4:26:44: 6c:7e:7b:9a:6f:b1:f2:36:63:85:2e:d4:8d:52:f6: 61:bf:24:25:e1:34:2f:7a:e1:9d:36:e1:0c:0f:b1: 22:8c:88:8c:b8:33:d3:c6:41:ed:b8:ea:83:83:54: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:81:CD:6D:DD:A8:C2:CE:1A:10:A2:71:6D:83:7E:93:71:7F:D9:EF X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a313030303a3a2f33362d3336203d3e20313339313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340:1000::/36 Signature Algorithm: sha256WithRSAEncryption b6:8c:3c:13:be:51:7a:d2:75:42:90:78:14:58:a1:63:9d:bb: 65:63:70:45:5d:e0:d8:b1:b7:31:3a:94:74:b6:e4:5c:ab:de: a7:90:d7:95:97:da:63:e4:78:c9:fe:8f:78:5b:2c:fe:3a:35: 05:0e:af:a7:a7:f6:2e:0b:a6:d8:13:92:03:c7:57:90:47:df: f2:7a:df:0b:7d:8d:b6:42:c7:59:9b:d5:d1:5b:4a:c4:bd:fe: fc:1f:ca:f6:42:ba:c9:45:37:a2:6d:40:6b:5b:80:8f:26:b3: f8:d7:be:ff:6f:05:de:13:58:4e:80:ad:c5:12:92:82:67:82: 35:d0:06:2b:23:b1:38:78:dc:2d:fd:f3:d3:7f:9b:bf:a7:51: 77:26:54:69:dc:ee:c4:f3:b3:72:52:57:35:92:9e:7f:8d:a7: 82:1f:22:bf:38:19:d0:e1:2a:32:57:3a:16:38:7a:bd:c9:39: 16:9a:e4:09:0b:81:60:98:4f:fe:5f:e4:ae:55:a9:cd:28:9e: a9:85:6a:3d:80:33:ed:2d:fd:a1:f5:37:d1:93:5a:83:38:9d: 82:6f:35:64:1e:e7:2f:2d:6c:f4:b2:ba:90:a1:6e:f0:d0:29: 50:e9:bf:3d:f5:55:3e:f8:7a:f2:93:ca:df:24:fe:a6:7b:a1: 8c:3c:07:9e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUQVPEM9ZDoSyF7KPsEoxiE124P68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDdaFw0yNzAxMTkwMjE4MDdaMDMxMTAvBgNV BAMTKDkwODFDRDZERERBOEMyQ0UxQTEwQTI3MTZEODM3RTkzNzE3RkQ5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjbeGdpRhs9dG3lEAtuGIf7xSj pfVHAlLezB4NflB+x0/xsnkDcAljexPSRH8Tl4T/dSFaMDz+1sG4EGgkm5SbY99V qJQSHdOJ96iTaxY33bk4rdTRZ3o89tKLAfo1AnS7l5WM7EDkVv/S1oW7/O3QAmou 6YBr9cPIeqsD3HSSoFn65AAlZu2lZbqNg5diSlTsUSl/aYG4slh5KyHc9G5fPCfv VQJ2NfwNVvTeoTkVztJYH64trnm8QhIyAd+C4i+gkaw7gZTjORDn8XkoJcQmRGx+ e5pvsfI2Y4Uu1I1S9mG/JCXhNC964Z024QwPsSKMiIy4M9PGQe246oODVBMbAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUkIHNbd2ows4aEKJxbYN+k3F/2e8wHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzIzNDMwMzYz YTMzMzMzNDMwM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzMz OTMxMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGBCQGM0AQMA0GCSqGSIb3DQEBCwUAA4IBAQC2jDwT vlF60nVCkHgUWKFjnbtlY3BFXeDYsbcxOpR0tuRcq96nkNeVl9pj5HjJ/o94Wyz+ OjUFDq+np/YuC6bYE5IDx1eQR9/yet8LfY22QsdZm9XRW0rEvf78H8r2QrrJRTei bUBrW4CPJrP4177/bwXeE1hOgK3FEpKCZ4I10AYrI7E4eNwt/fPTf5u/p1F3JlRp 3O7E87NyUlc1kp5/jaeCHyK/OBnQ4SoyVzoWOHq9yTkWmuQJC4FgmE/+X+SuVanN KJ6phWo9gDPtLf2h9TfRk1qDOJ2CbzVkHucvLWz0srqQoW7w0ClQ6b899VU++Hry k8rfJP6me6GMPAee -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:50 2026 by rpki-client