This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a333030303a3a2f33362d3336203d3e20313339313339.roa File: 323430363a333334303a333030303a3a2f33362d3336203d3e20313339313339.roa (raw, json) Hash identifier: jCyBYSMp8ykpKE+LeC/9B1hTZ/yh1mvHQn0Z7VAq+x4= Subject key identifier: 59:E0:29:3F:42:C5:87:83:7D:74:A3:56:D2:5B:1D:3C:6F:0D:2D:F8 Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 7982BC0F5948E6273ABAC593638E90E62D19B726 Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a333030303a3a2f33362d3336203d3e20313339313339.roa Signing time: Tue 20 Jan 2026 02:18:07 +0000 ROA not before: Tue 20 Jan 2026 02:13:07 +0000 ROA not after: Tue 19 Jan 2027 02:18:07 +0000 asID: 139139 IP address blocks: 2406:3340:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:82:bc:0f:59:48:e6:27:3a:ba:c5:93:63:8e:90:e6:2d:19:b7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:07 2026 GMT Not After : Jan 19 02:18:07 2027 GMT Subject: CN=59E0293F42C587837D74A356D25B1D3C6F0D2DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:76:b5:d0:5f:db:24:ce:1b:5b:a2:84:57:05: 4a:45:61:ab:24:65:c7:87:94:d7:1f:60:1d:91:8d: 92:29:6c:d5:ac:cf:b3:65:1f:14:9e:8f:a2:d8:51: 6a:28:97:80:62:e0:ca:08:c5:20:3c:a5:29:52:82: de:2f:1a:27:97:d9:1d:8a:25:30:5d:2d:40:e9:8f: 42:1d:ce:dc:61:66:cd:a1:75:5b:85:d0:65:c7:fd: 44:01:e6:f4:36:7e:03:4a:d3:0f:20:99:fb:9e:67: a4:f8:26:8e:de:a2:17:31:55:2b:2f:db:3b:d3:34: bb:47:af:a6:f5:2a:11:29:b8:75:45:9d:75:1d:54: 73:e2:ae:87:de:57:0d:d6:3e:36:9a:d4:15:3d:63: 97:65:db:90:20:75:35:d7:68:fd:7a:d9:b6:8e:e5: 71:d0:a0:cd:91:e3:8f:37:dc:4c:2a:90:84:b7:b4: 8c:fe:67:b2:70:83:ba:ff:8f:76:03:a7:01:f7:0e: 74:f8:b5:c6:6d:d6:cb:7c:42:b7:03:0a:e9:c2:fc: 60:f2:ca:36:56:0d:3e:03:54:31:67:e5:81:9e:84: 9d:8a:5f:f3:2f:64:7a:09:b0:97:a5:5a:a6:6a:c2: 2a:ec:10:da:49:6e:a4:78:8b:74:91:5e:22:4e:67: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E0:29:3F:42:C5:87:83:7D:74:A3:56:D2:5B:1D:3C:6F:0D:2D:F8 X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a333030303a3a2f33362d3336203d3e20313339313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340:3000::/36 Signature Algorithm: sha256WithRSAEncryption dc:3a:4c:9c:ce:8f:16:e4:6a:9b:31:a5:ad:c0:17:97:5e:81: f9:c8:58:ba:3b:05:c6:31:ac:32:d7:f6:a2:2b:b8:2b:d9:29: 3a:56:ec:6b:6c:68:99:cf:fe:44:9c:bf:39:0f:b5:d0:9a:56: c6:e0:f5:85:98:b6:dc:87:21:63:47:1d:40:04:21:b2:36:6d: f4:22:fa:5e:13:92:0a:fa:7a:16:ff:f7:86:b5:db:60:f7:9b: 03:08:e4:24:f4:d9:98:d7:dc:44:7d:22:f3:ed:ea:1d:54:ef: 6c:9a:82:89:2c:01:3d:6c:09:8d:29:5c:cf:a1:f2:42:1d:09: 24:ca:11:9f:6d:c1:84:75:83:94:10:9f:9e:58:d2:7b:7e:33: 1d:2f:ad:f7:3f:87:4f:e1:32:c4:8e:4a:bb:f4:c5:95:34:d3: d1:0c:09:26:0b:ea:fb:1b:0e:11:d3:88:cc:c0:53:cd:f8:11: 7d:5e:16:a2:16:3b:90:ad:49:54:95:a0:7e:da:40:02:79:66: d0:77:72:72:17:61:75:e8:32:c8:88:95:4e:2a:a1:2e:ff:df: f6:e4:67:67:86:60:a9:cf:cf:c4:ca:f9:a8:ac:c4:49:5e:b0: 47:9e:5c:f2:7e:27:ed:17:ad:a2:ca:a9:9b:a2:7c:0b:0b:da: ee:b8:cc:1f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUeYK8D1lI5ic6usWTY46Q5i0ZtyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDdaFw0yNzAxMTkwMjE4MDdaMDMxMTAvBgNV BAMTKDU5RTAyOTNGNDJDNTg3ODM3RDc0QTM1NkQyNUIxRDNDNkYwRDJERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7drXQX9skzhtbooRXBUpFYask ZceHlNcfYB2RjZIpbNWsz7NlHxSej6LYUWool4Bi4MoIxSA8pSlSgt4vGieX2R2K JTBdLUDpj0IdztxhZs2hdVuF0GXH/UQB5vQ2fgNK0w8gmfueZ6T4Jo7eohcxVSsv 2zvTNLtHr6b1KhEpuHVFnXUdVHPirofeVw3WPjaa1BU9Y5dl25AgdTXXaP162baO 5XHQoM2R44833EwqkIS3tIz+Z7Jwg7r/j3YDpwH3DnT4tcZt1st8QrcDCunC/GDy yjZWDT4DVDFn5YGehJ2KX/MvZHoJsJelWqZqwirsENpJbqR4i3SRXiJOZy3/AgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUWeApP0LFh4N9dKNW0lsdPG8NLfgwHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzIzNDMwMzYz YTMzMzMzNDMwM2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzMz OTMxMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGBCQGM0AwMA0GCSqGSIb3DQEBCwUAA4IBAQDcOkyc zo8W5GqbMaWtwBeXXoH5yFi6OwXGMawy1/aiK7gr2Sk6VuxrbGiZz/5EnL85D7XQ mlbG4PWFmLbchyFjRx1ABCGyNm30IvpeE5IK+noW//eGtdtg95sDCOQk9NmY19xE fSLz7eodVO9smoKJLAE9bAmNKVzPofJCHQkkyhGfbcGEdYOUEJ+eWNJ7fjMdL633 P4dP4TLEjkq79MWVNNPRDAkmC+r7Gw4R04jMwFPN+BF9XhaiFjuQrUlUlaB+2kAC eWbQd3JyF2F16DLIiJVOKqEu/9/25GdnhmCpz8/EyvmorMRJXrBHnlzyfiftF62i yqmbonwLC9ruuMwf -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:50 2026 by rpki-client