This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a323030303a3a2f33362d3336203d3e2034353338.roa File: 323430363a333334303a323030303a3a2f33362d3336203d3e2034353338.roa (raw, json) Hash identifier: CmBU2dVpvyOIsoMAXXmFLRqr0wKbUAQ+/Vctfk/YPDs= Subject key identifier: E5:9B:45:DA:A9:B1:31:A9:87:8F:5C:CA:46:85:61:63:96:A1:04:4A Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 42F60BA210A3B9599DF49265799B065E3C0D7E03 Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a323030303a3a2f33362d3336203d3e2034353338.roa Signing time: Tue 20 Jan 2026 02:18:08 +0000 ROA not before: Tue 20 Jan 2026 02:13:08 +0000 ROA not after: Tue 19 Jan 2027 02:18:08 +0000 asID: 4538 IP address blocks: 2406:3340:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f6:0b:a2:10:a3:b9:59:9d:f4:92:65:79:9b:06:5e:3c:0d:7e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:08 2026 GMT Not After : Jan 19 02:18:08 2027 GMT Subject: CN=E59B45DAA9B131A9878F5CCA4685616396A1044A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:c5:8d:e7:f6:dd:d5:01:d9:59:ce:45:fa: 12:33:76:83:4f:e8:85:6c:0d:d9:55:74:fe:b7:97: 19:c7:3d:c0:73:91:2c:47:de:e1:d8:02:1e:3c:3b: f1:df:9e:5e:b0:84:48:c7:93:39:4b:3d:41:10:49: fe:00:9d:83:7a:11:23:d5:f6:80:0e:d3:e4:c3:36: 40:78:6e:89:75:39:96:c1:4e:30:22:4b:c8:f6:cf: 94:d8:5f:6c:67:75:61:08:9f:7e:96:8c:f6:c8:82: 03:93:6e:82:0a:68:a2:b6:cc:5b:23:03:00:b6:ee: 45:66:d3:92:cc:e5:d8:91:31:df:3c:09:ca:72:5c: d2:74:73:7b:2a:c5:74:d3:9a:89:bc:6d:2d:5b:05: a7:fa:68:f8:d1:e6:fa:58:a7:15:47:d7:b7:a6:13: 22:f5:be:3e:09:18:32:23:a7:2c:9e:a9:ac:54:90: a0:58:1e:39:70:11:7f:0a:eb:3b:bb:92:07:22:1a: 62:78:b9:6d:37:0a:6c:a2:e6:9b:0f:80:d8:f4:67: 9d:4a:68:45:92:d2:85:07:aa:71:34:88:a2:69:f6: f6:cd:83:82:b8:ed:b0:49:8f:b4:b3:5f:a2:1f:b9: f4:84:bf:ce:43:32:6c:b5:da:0f:e2:3a:1f:b7:2e: 6f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9B:45:DA:A9:B1:31:A9:87:8F:5C:CA:46:85:61:63:96:A1:04:4A X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a323030303a3a2f33362d3336203d3e2034353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340:2000::/36 Signature Algorithm: sha256WithRSAEncryption 72:b1:19:a3:fc:ed:9b:78:b8:d0:9a:62:d2:42:c1:ad:0f:46: 3b:8a:a8:05:ba:a1:e4:58:83:50:4d:80:e4:6e:2d:40:94:c5: 80:ea:f9:cd:10:08:7d:92:c2:30:61:af:34:c7:fa:ea:87:54: 4d:92:33:20:64:b0:8f:9e:f9:83:ee:9a:dc:18:80:20:1d:cb: 71:81:ca:ac:e3:b7:f7:38:85:6e:44:9b:01:be:f1:fe:3e:6c: 11:8a:5c:11:fe:af:43:02:66:96:24:2d:18:52:1c:5f:81:a0: 9d:a1:2b:8b:fa:e3:56:44:0a:4f:75:aa:a6:3d:14:4f:89:62: 08:24:98:a3:d4:13:1a:57:41:14:94:67:3f:39:0e:60:8d:fd: 91:c1:3b:3c:98:10:aa:3f:4d:29:25:17:80:07:a2:d9:b6:fe: 3f:1f:f1:03:88:20:6f:b0:7c:84:03:53:ea:11:bb:66:fd:2d: 86:d2:7a:dc:69:7e:1c:44:ea:20:b7:5b:4a:84:ce:4e:bd:ac: b6:4c:e4:fc:6b:99:32:9a:4e:81:36:4a:c5:82:90:bc:9c:46: 2f:1d:a0:24:4c:62:a4:7c:3b:7e:e1:00:ce:88:db:23:74:0c: f8:0e:13:03:cc:29:56:4a:97:1d:ed:09:92:c8:03:01:f0:89: 14:97:ca:01 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUQvYLohCjuVmd9JJleZsGXjwNfgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDhaFw0yNzAxMTkwMjE4MDhaMDMxMTAvBgNV BAMTKEU1OUI0NURBQTlCMTMxQTk4NzhGNUNDQTQ2ODU2MTYzOTZBMTA0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMsWN5/bd1QHZWc5F+hIzdoNP 6IVsDdlVdP63lxnHPcBzkSxH3uHYAh48O/Hfnl6whEjHkzlLPUEQSf4AnYN6ESPV 9oAO0+TDNkB4bol1OZbBTjAiS8j2z5TYX2xndWEIn36WjPbIggOTboIKaKK2zFsj AwC27kVm05LM5diRMd88CcpyXNJ0c3sqxXTTmom8bS1bBaf6aPjR5vpYpxVH17em EyL1vj4JGDIjpyyeqaxUkKBYHjlwEX8K6zu7kgciGmJ4uW03Cmyi5psPgNj0Z51K aEWS0oUHqnE0iKJp9vbNg4K47bBJj7SzX6IfufSEv85DMmy12g/iOh+3Lm97AgMB AAGjggIeMIICGjAdBgNVHQ4EFgQU5ZtF2qmxMamHj1zKRoVhY5ahBEowHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzIzNDMwMzYz YTMzMzMzNDMwM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDM0MzUz MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYEJAYzQCAwDQYJKoZIhvcNAQELBQADggEBAHKxGaP87Zt4 uNCaYtJCwa0PRjuKqAW6oeRYg1BNgORuLUCUxYDq+c0QCH2SwjBhrzTH+uqHVE2S MyBksI+e+YPumtwYgCAdy3GByqzjt/c4hW5EmwG+8f4+bBGKXBH+r0MCZpYkLRhS HF+BoJ2hK4v641ZECk91qqY9FE+JYggkmKPUExpXQRSUZz85DmCN/ZHBOzyYEKo/ TSklF4AHotm2/j8f8QOIIG+wfIQDU+oRu2b9LYbSetxpfhxE6iC3W0qEzk69rLZM 5PxrmTKaToE2SsWCkLycRi8doCRMYqR8O37hAM6I2yN0DPgOEwPMKVZKlx3tCZLI AwHwiRSXygE= -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:00 2026 by rpki-client