This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a313030303a3a2f33362d3336203d3e2034353338.roa File: 323430363a333334303a313030303a3a2f33362d3336203d3e2034353338.roa (raw, json) Hash identifier: KYM3ELbMCKp+6MUPgs/9MWB4zCPRVhg9ZZ/E+9boX90= Subject key identifier: D1:0B:6A:BA:F4:49:CD:25:76:38:86:C6:56:64:93:27:A8:BF:CB:E2 Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 6A48BA11B8E17446F5EA1F713BAB7794EBAF7F3F Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a313030303a3a2f33362d3336203d3e2034353338.roa Signing time: Tue 20 Jan 2026 02:18:07 +0000 ROA not before: Tue 20 Jan 2026 02:13:07 +0000 ROA not after: Tue 19 Jan 2027 02:18:07 +0000 asID: 4538 IP address blocks: 2406:3340:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:48:ba:11:b8:e1:74:46:f5:ea:1f:71:3b:ab:77:94:eb:af:7f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:07 2026 GMT Not After : Jan 19 02:18:07 2027 GMT Subject: CN=D10B6ABAF449CD25763886C656649327A8BFCBE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:32:a0:17:c8:d2:30:76:11:d6:58:74:d6: 2a:93:4d:fa:14:40:44:6b:bb:1c:4a:1a:f9:a5:a6: 90:6b:4a:6e:30:69:b4:7e:21:cb:1a:7d:41:82:96: 69:8f:91:39:42:a5:46:e0:ea:72:e9:17:e1:cb:98: f4:e1:05:88:89:ad:2b:1e:64:c8:03:5f:12:cb:e8: e8:3d:3b:c4:3e:1c:7f:35:89:56:60:e0:0c:d1:2d: a8:ca:ff:45:d9:7c:eb:3c:3e:b3:5c:5c:34:f4:40: db:b1:d1:61:45:97:aa:7d:97:04:36:59:ca:45:9b: bd:17:2a:4c:b1:c2:50:f0:4f:76:e3:0a:33:38:5f: 8f:61:07:dc:25:bc:36:1e:dd:ef:db:a7:5b:40:6e: 6c:6d:1c:a8:78:55:81:90:e6:0e:13:a5:50:e7:1c: 2e:88:3d:ff:3e:4e:25:89:ab:4d:2e:34:1b:70:4d: 32:c0:9a:46:46:68:ea:00:1b:8b:04:8b:1f:6d:68: b8:9f:08:f8:11:4d:ac:e7:cc:5d:9a:08:bf:8f:8b: 93:43:76:61:6e:4a:4b:66:b2:28:2f:17:b0:68:34: 37:5a:82:db:2d:3f:df:21:be:85:01:3c:23:65:92: 30:08:39:26:15:68:02:05:57:39:cb:5c:e2:9e:9b: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0B:6A:BA:F4:49:CD:25:76:38:86:C6:56:64:93:27:A8:BF:CB:E2 X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a313030303a3a2f33362d3336203d3e2034353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340:1000::/36 Signature Algorithm: sha256WithRSAEncryption 2e:b0:bb:f7:bf:51:70:00:d0:57:48:ea:62:ff:b5:52:f4:ee: 80:f6:69:34:4a:62:33:b6:f3:9a:d0:7a:a3:d8:6e:37:b0:ba: 92:71:67:d1:b8:bb:25:fc:07:65:ac:a8:3c:f9:da:7c:d6:0c: d5:a2:47:9b:b8:38:c7:7d:57:04:71:37:4b:44:60:fc:9c:04: 39:e4:53:4f:14:fa:fc:54:f5:67:fa:c1:ff:47:58:09:22:ad: 45:0c:90:cb:3e:bf:06:3e:1c:74:d5:c8:a8:6f:ea:9f:f6:f1: de:e4:62:fd:c6:bb:89:0c:7c:34:2a:53:4a:a6:d0:33:29:ae: 32:72:c6:4d:55:53:56:f1:70:f8:68:b9:5e:55:6c:30:cc:23: 4a:1a:5a:7e:7c:ea:2f:9f:52:c0:9c:1c:39:e4:2d:34:45:15: e2:90:29:99:59:d8:60:00:8a:78:97:6f:90:69:b8:5b:a5:0b: 8d:74:8f:b9:98:f7:82:92:5f:d6:b9:e6:8b:86:f0:7f:a6:55: aa:eb:1c:7f:8a:e6:e9:e6:6e:e6:a3:01:80:dc:a9:93:fa:de: 9d:bd:51:f8:d3:f5:97:47:9a:d2:bb:4b:92:a7:58:31:31:66: 61:8e:54:4c:ff:f8:92:de:ac:49:1c:7b:82:0b:59:e2:64:2d: ea:cb:09:c1 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUaki6EbjhdEb16h9xO6t3lOuvfz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDdaFw0yNzAxMTkwMjE4MDdaMDMxMTAvBgNV BAMTKEQxMEI2QUJBRjQ0OUNEMjU3NjM4ODZDNjU2NjQ5MzI3QThCRkNCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARTKgF8jSMHYR1lh01iqTTfoU QERruxxKGvmlppBrSm4wabR+IcsafUGClmmPkTlCpUbg6nLpF+HLmPThBYiJrSse ZMgDXxLL6Og9O8Q+HH81iVZg4AzRLajK/0XZfOs8PrNcXDT0QNux0WFFl6p9lwQ2 WcpFm70XKkyxwlDwT3bjCjM4X49hB9wlvDYe3e/bp1tAbmxtHKh4VYGQ5g4TpVDn HC6IPf8+TiWJq00uNBtwTTLAmkZGaOoAG4sEix9taLifCPgRTaznzF2aCL+Pi5ND dmFuSktmsigvF7BoNDdagtstP98hvoUBPCNlkjAIOSYVaAIFVznLXOKem4yXAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQU0QtquvRJzSV2OIbGVmSTJ6i/y+IwHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzIzNDMwMzYz YTMzMzMzNDMwM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDM0MzUz MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYEJAYzQBAwDQYJKoZIhvcNAQELBQADggEBAC6wu/e/UXAA 0FdI6mL/tVL07oD2aTRKYjO285rQeqPYbjewupJxZ9G4uyX8B2WsqDz52nzWDNWi R5u4OMd9VwRxN0tEYPycBDnkU08U+vxU9Wf6wf9HWAkirUUMkMs+vwY+HHTVyKhv 6p/28d7kYv3Gu4kMfDQqU0qm0DMprjJyxk1VU1bxcPhouV5VbDDMI0oaWn586i+f UsCcHDnkLTRFFeKQKZlZ2GAAiniXb5BpuFulC410j7mY94KSX9a55ouG8H+mVarr HH+K5unmbuajAYDcqZP63p29UfjT9ZdHmtK7S5KnWDExZmGOVEz/+JLerEkce4IL WeJkLerLCcE= -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:55 2026 by rpki-client