This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a323030303a3a2f33362d3336203d3e20313339313339.roa File: 323430363a333334303a323030303a3a2f33362d3336203d3e20313339313339.roa (raw, json) Hash identifier: ad+vPi3e/8acQcmHeQylpwQ95x3uDgPYwNvetYcyS8c= Subject key identifier: 69:14:B3:C5:FF:3F:92:BD:98:D9:82:A6:4E:B4:99:96:35:83:2B:29 Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 1AA1DC7B47D00BE5F2847BCCA617340C0CCA7FF7 Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a323030303a3a2f33362d3336203d3e20313339313339.roa Signing time: Tue 20 Jan 2026 02:18:06 +0000 ROA not before: Tue 20 Jan 2026 02:13:06 +0000 ROA not after: Tue 19 Jan 2027 02:18:06 +0000 asID: 139139 IP address blocks: 2406:3340:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a1:dc:7b:47:d0:0b:e5:f2:84:7b:cc:a6:17:34:0c:0c:ca:7f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:06 2026 GMT Not After : Jan 19 02:18:06 2027 GMT Subject: CN=6914B3C5FF3F92BD98D982A64EB4999635832B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:ee:04:35:c7:00:d0:93:0b:a7:b6:02:79: 09:96:ff:47:4c:29:19:39:fb:b4:54:2c:67:83:d6: a7:44:3d:f9:f0:d7:8d:e8:c8:5e:db:5f:d2:41:50: 9d:ca:61:d2:3a:80:6d:3e:97:77:a2:f1:b5:80:32: 7d:bc:8d:24:49:14:7f:93:2c:02:ef:c7:b1:8b:3e: 57:9e:6b:2a:d4:70:ba:87:d2:4e:3d:4a:28:05:bd: 86:7f:7e:26:c0:e7:cd:34:51:6f:11:36:e8:f6:76: da:7a:5d:0d:b4:06:11:e1:14:49:ba:9a:72:0b:1b: 65:32:fa:ba:4a:56:cc:2f:70:b2:73:ba:8e:a7:e5: d5:85:82:dd:96:f4:96:cb:0f:91:09:34:f9:b1:83: ea:f6:58:b6:29:82:5d:31:c7:ee:46:a1:c5:98:b9: 2e:44:8f:51:7a:c5:59:a1:50:dc:b8:fe:c8:25:c2: 4e:bb:fe:fa:64:22:cf:42:f6:46:3b:3e:4e:b5:ab: 11:4b:f9:f9:4d:22:69:96:90:3e:59:2c:d4:ae:c5: d4:fa:f9:8d:01:63:95:30:2a:52:69:a3:26:cd:ae: b7:8e:c5:81:f5:a9:95:ac:78:12:ea:ff:f4:b3:1b: 64:97:f7:20:e8:64:8e:fe:f4:db:ff:dd:91:08:40: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:14:B3:C5:FF:3F:92:BD:98:D9:82:A6:4E:B4:99:96:35:83:2B:29 X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a323030303a3a2f33362d3336203d3e20313339313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340:2000::/36 Signature Algorithm: sha256WithRSAEncryption da:81:fb:18:70:ea:a8:92:e0:b3:e1:e4:f7:4a:ee:0c:3a:38: 9e:96:0d:34:aa:01:b2:e8:55:98:e1:eb:c9:77:75:78:1c:b1: c3:9e:39:69:28:ea:fd:02:27:a8:70:68:6a:cd:99:6f:72:de: 0a:27:84:3a:5f:64:87:aa:60:a6:33:a1:cc:b7:60:22:8d:71: f0:10:77:f8:45:cc:df:54:25:13:64:f5:d2:6c:02:c2:a6:d2: 30:ec:d5:1b:e6:3e:3a:1a:80:24:49:86:08:74:c9:52:e5:e6: 12:a7:47:23:2f:04:33:8c:2c:2a:0e:96:6b:9c:9e:89:be:f0: 34:60:7b:49:19:fe:9f:2c:fd:46:46:7c:f9:94:3f:92:b8:a3: 36:1f:d3:23:02:ca:33:9e:e4:aa:e1:5b:07:8e:cf:ce:c0:17: 6b:c7:e8:26:c6:56:01:74:7b:0f:35:85:2d:d7:04:10:e8:c4: 0b:ab:3b:63:5c:36:28:3e:70:77:09:bd:fa:fb:54:f7:c9:02: bc:72:e9:c2:05:25:0e:83:29:cf:45:e0:b7:40:8f:23:d0:e5: 9a:9a:7e:d3:49:33:5f:75:76:88:09:8a:e7:a4:52:71:12:ce: 40:0e:3b:76:00:37:af:1f:d6:ae:5a:7a:10:49:ab:81:43:4b: c5:16:08:4f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUGqHce0fQC+XyhHvMphc0DAzKf/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDZaFw0yNzAxMTkwMjE4MDZaMDMxMTAvBgNV BAMTKDY5MTRCM0M1RkYzRjkyQkQ5OEQ5ODJBNjRFQjQ5OTk2MzU4MzJCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYu4ENccA0JMLp7YCeQmW/0dM KRk5+7RULGeD1qdEPfnw143oyF7bX9JBUJ3KYdI6gG0+l3ei8bWAMn28jSRJFH+T LALvx7GLPleeayrUcLqH0k49SigFvYZ/fibA5800UW8RNuj2dtp6XQ20BhHhFEm6 mnILG2Uy+rpKVswvcLJzuo6n5dWFgt2W9JbLD5EJNPmxg+r2WLYpgl0xx+5GocWY uS5Ej1F6xVmhUNy4/sglwk67/vpkIs9C9kY7Pk61qxFL+flNImmWkD5ZLNSuxdT6 +Y0BY5UwKlJpoybNrreOxYH1qZWseBLq//SzG2SX9yDoZI7+9Nv/3ZEIQDb9AgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUaRSzxf8/kr2Y2YKmTrSZljWDKykwHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzIzNDMwMzYz YTMzMzMzNDMwM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzMz OTMxMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGBCQGM0AgMA0GCSqGSIb3DQEBCwUAA4IBAQDagfsY cOqokuCz4eT3Su4MOjielg00qgGy6FWY4evJd3V4HLHDnjlpKOr9AieocGhqzZlv ct4KJ4Q6X2SHqmCmM6HMt2AijXHwEHf4RczfVCUTZPXSbALCptIw7NUb5j46GoAk SYYIdMlS5eYSp0cjLwQzjCwqDpZrnJ6JvvA0YHtJGf6fLP1GRnz5lD+SuKM2H9Mj AsoznuSq4VsHjs/OwBdrx+gmxlYBdHsPNYUt1wQQ6MQLqztjXDYoPnB3Cb36+1T3 yQK8cunCBSUOgynPReC3QI8j0OWamn7TSTNfdXaICYrnpFJxEs5ADjt2ADevH9au WnoQSauBQ0vFFghP -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:50 2026 by rpki-client