This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a333030303a3a2f33362d3336203d3e2034353338.roa File: 323430363a333334303a333030303a3a2f33362d3336203d3e2034353338.roa (raw, json) Hash identifier: KxqFA71jX/1SUTQx/ZIiBO0VMLglxVE7YKNkj5UtMa0= Subject key identifier: 95:4F:45:D4:66:6E:7D:65:3B:5A:D3:FC:FF:27:8E:21:C5:A6:FF:C6 Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 462DB27D23436541F9B269D42D477057E891582A Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a333030303a3a2f33362d3336203d3e2034353338.roa Signing time: Tue 20 Jan 2026 02:18:06 +0000 ROA not before: Tue 20 Jan 2026 02:13:06 +0000 ROA not after: Tue 19 Jan 2027 02:18:06 +0000 asID: 4538 IP address blocks: 2406:3340:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2d:b2:7d:23:43:65:41:f9:b2:69:d4:2d:47:70:57:e8:91:58:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:06 2026 GMT Not After : Jan 19 02:18:06 2027 GMT Subject: CN=954F45D4666E7D653B5AD3FCFF278E21C5A6FFC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:1d:c8:17:33:28:46:bb:67:bd:11:17:39: 8f:b5:01:63:7b:d7:5b:3f:de:2e:48:2b:05:20:62: b6:c2:fc:eb:ea:1d:c8:88:dc:a2:49:3b:6b:34:33: 3e:6a:2f:ee:94:f1:6c:d4:13:a0:5c:ef:89:54:de: f3:b6:2f:34:36:6f:5c:f0:7a:cb:b4:86:6c:e2:94: 52:39:b0:b8:f8:22:ba:c4:db:ac:87:34:60:97:82: 31:5d:e8:d4:8a:05:75:7d:07:73:72:94:9c:8d:12: ab:a3:b9:e7:b8:ad:83:a1:14:93:d7:44:fc:21:85: c4:57:f8:2b:b8:1a:32:f4:77:be:72:fa:cf:39:19: 83:d0:a1:7b:7d:01:4b:eb:ef:12:2d:dc:24:eb:26: 5a:23:62:43:9a:1a:7e:ed:5e:c8:b7:6c:db:da:61: 0d:04:af:27:1d:4d:e2:b5:3b:3c:aa:f3:9a:87:dd: 47:12:3f:ec:b9:2c:01:18:97:6b:54:0a:de:6a:10: 70:fc:27:d6:d9:5e:61:95:b0:7a:d7:94:2c:4e:18: d2:2e:f3:07:a5:35:54:e8:f2:77:e4:18:85:7b:83: 3a:db:97:94:d6:3f:2a:dc:e2:db:c9:53:27:a3:7c: f0:0a:2b:f0:3a:fd:9e:fa:d9:68:a5:ad:ea:72:cf: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4F:45:D4:66:6E:7D:65:3B:5A:D3:FC:FF:27:8E:21:C5:A6:FF:C6 X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a333030303a3a2f33362d3336203d3e2034353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340:3000::/36 Signature Algorithm: sha256WithRSAEncryption a1:50:83:97:77:3b:8e:20:b8:e2:13:34:7e:32:4f:6e:c1:e4: 80:4e:35:69:1a:67:30:57:40:ec:ab:42:71:4a:c0:3d:56:99: b6:d8:ac:d0:b1:ff:d9:b4:80:88:3b:8f:de:1b:a8:4a:3a:6f: bc:b3:5a:25:e4:7c:c7:73:77:33:43:b0:5a:dc:d0:e1:41:de: 67:bd:f5:89:f6:93:d9:3e:08:4e:98:23:5c:7a:ee:b4:88:ce: 36:7e:ef:b2:f2:48:90:9f:bc:57:f1:a4:5f:f3:ce:c3:f3:eb: f9:2f:b5:61:32:0c:35:07:b7:b5:c7:dc:2d:49:d7:e1:45:51: ec:6f:33:3c:51:71:76:9c:59:6a:34:52:33:0e:ef:dc:7a:75: 5b:45:5a:14:0c:c2:1e:b1:07:3e:f5:84:6e:a4:6f:a7:ce:c3: bd:3b:19:05:c9:82:2d:7e:1d:79:6c:8d:5d:08:21:dd:21:8d: 6d:9d:89:43:21:50:49:60:47:a2:0d:ca:14:87:c7:ae:67:d7: 90:0b:29:3d:f4:d3:3b:ae:ff:9a:42:f8:eb:53:ee:e0:79:fd: da:68:b2:95:3e:cd:e5:76:37:82:77:f1:9b:64:43:e7:80:b6: ff:e3:2d:fe:71:c8:92:1e:8f:78:0c:a4:ac:33:cb:5c:f6:cf: 0c:bd:6c:eb -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIURi2yfSNDZUH5smnULUdwV+iRWCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDZaFw0yNzAxMTkwMjE4MDZaMDMxMTAvBgNV BAMTKDk1NEY0NUQ0NjY2RTdENjUzQjVBRDNGQ0ZGMjc4RTIxQzVBNkZGQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtB3IFzMoRrtnvREXOY+1AWN7 11s/3i5IKwUgYrbC/OvqHciI3KJJO2s0Mz5qL+6U8WzUE6Bc74lU3vO2LzQ2b1zw esu0hmzilFI5sLj4IrrE26yHNGCXgjFd6NSKBXV9B3NylJyNEqujuee4rYOhFJPX RPwhhcRX+Cu4GjL0d75y+s85GYPQoXt9AUvr7xIt3CTrJlojYkOaGn7tXsi3bNva YQ0ErycdTeK1Ozyq85qH3UcSP+y5LAEYl2tUCt5qEHD8J9bZXmGVsHrXlCxOGNIu 8welNVTo8nfkGIV7gzrbl5TWPyrc4tvJUyejfPAKK/A6/Z762Wilrepyz4QLAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUlU9F1GZufWU7WtP8/yeOIcWm/8YwHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzIzNDMwMzYz YTMzMzMzNDMwM2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDM0MzUz MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYEJAYzQDAwDQYJKoZIhvcNAQELBQADggEBAKFQg5d3O44g uOITNH4yT27B5IBONWkaZzBXQOyrQnFKwD1WmbbYrNCx/9m0gIg7j94bqEo6b7yz WiXkfMdzdzNDsFrc0OFB3me99Yn2k9k+CE6YI1x67rSIzjZ+77LySJCfvFfxpF/z zsPz6/kvtWEyDDUHt7XH3C1J1+FFUexvMzxRcXacWWo0UjMO79x6dVtFWhQMwh6x Bz71hG6kb6fOw707GQXJgi1+HXlsjV0IId0hjW2diUMhUElgR6INyhSHx65n15AL KT300zuu/5pC+OtT7uB5/dpospU+zeV2N4J38ZtkQ+eAtv/jLf5xyJIej3gMpKwz y1z2zwy9bOs= -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:58 2026 by rpki-client