This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a343030303a3a2f33362d3336203d3e20313339313339.roa File: 323430363a333334303a343030303a3a2f33362d3336203d3e20313339313339.roa (raw, json) Hash identifier: 8HnFFqnjIHJZkWlM0QDdPbdL83oIu9lm4vlp+eYmuzw= Subject key identifier: D9:7E:78:AC:1F:20:EF:A1:D6:E1:E4:99:1A:47:CA:6D:BC:11:F9:5F Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 59921D282DF99256639D48DEC73DBE848DD1351C Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a343030303a3a2f33362d3336203d3e20313339313339.roa Signing time: Tue 20 Jan 2026 02:18:07 +0000 ROA not before: Tue 20 Jan 2026 02:13:07 +0000 ROA not after: Tue 19 Jan 2027 02:18:07 +0000 asID: 139139 IP address blocks: 2406:3340:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:92:1d:28:2d:f9:92:56:63:9d:48:de:c7:3d:be:84:8d:d1:35:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:07 2026 GMT Not After : Jan 19 02:18:07 2027 GMT Subject: CN=D97E78AC1F20EFA1D6E1E4991A47CA6DBC11F95F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:00:93:e2:57:16:09:b8:1c:35:40:b8:3c:9c: f1:cb:62:d4:47:64:b1:3d:15:75:a1:63:be:95:51: 60:17:a0:13:3c:ee:61:2c:e6:53:fa:20:49:f8:5a: 2b:e3:12:9a:fb:fa:42:5a:20:3c:4f:c3:72:05:42: 45:ac:51:41:95:c4:c9:db:a1:80:17:a4:06:67:02: 19:0a:70:4d:1e:15:01:1a:62:da:ce:bd:2a:09:60: 03:dc:b8:62:ea:98:53:03:29:29:4d:90:53:28:d8: 83:f4:e7:4c:01:19:82:16:2e:ba:23:6c:fa:98:24: 11:d8:d1:cd:ac:77:e8:6b:11:1e:8f:57:bf:06:e0: 76:77:cc:0d:cc:f0:40:7b:e3:51:39:16:70:11:2f: 58:6f:d3:9d:c0:c6:93:8c:f6:39:56:3d:ed:56:9f: bc:3a:75:5c:00:4a:3a:30:83:87:82:99:e4:c2:ab: 28:d8:41:02:47:60:bf:da:bb:ba:ce:0f:10:04:48: 80:af:ce:84:b4:99:8a:75:d5:1e:f9:fa:71:68:7a: 81:3f:66:a5:28:4e:77:4c:af:18:16:5b:60:01:dd: c2:c9:99:4b:75:a1:a8:25:64:aa:4d:6b:07:37:9f: af:85:02:5b:cd:c6:fe:21:e1:ef:6a:49:e2:c7:f7: 67:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7E:78:AC:1F:20:EF:A1:D6:E1:E4:99:1A:47:CA:6D:BC:11:F9:5F X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a343030303a3a2f33362d3336203d3e20313339313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340:4000::/36 Signature Algorithm: sha256WithRSAEncryption 60:64:29:4c:a5:26:81:a6:4b:41:ca:4a:b1:4d:27:d1:19:51: dc:1b:bc:8d:b7:25:ae:a0:89:6b:94:43:d8:c2:fb:63:35:00: 6e:fe:ef:8b:49:b6:24:03:02:16:1c:3b:7a:9f:1e:b3:61:31: a2:df:97:1d:6e:1c:16:89:9d:bb:15:d3:61:d7:db:dd:86:f8: 19:51:10:71:3a:a8:7a:77:2d:47:c0:32:6a:29:9d:47:57:38: 6a:a0:20:4b:ab:04:e4:ad:da:72:46:49:7e:d2:28:41:fe:3d: c1:2e:0e:4b:04:78:93:ff:80:e6:e5:4b:23:2e:9d:ea:9a:c1: c3:73:bf:a4:a2:e0:6b:3d:36:a3:9f:5c:3a:b3:2b:bc:d0:b5: b3:e6:5e:34:94:3b:48:84:55:e8:c7:84:44:2d:0b:eb:74:0a: bf:56:29:86:fd:4f:81:23:e2:22:37:1b:cf:de:e0:19:ad:0e: 0b:0e:6d:4f:38:a4:4b:4e:e1:cc:a7:0e:ce:b6:69:4b:ab:62: 38:22:68:2a:a4:37:a7:68:76:6d:a0:36:22:9d:c3:b9:ce:fa: d4:53:a8:fa:7e:a0:dc:54:38:fd:3d:2e:fc:a2:bd:29:0a:df: d1:ce:20:05:56:a3:8b:4d:1a:f3:80:dd:58:a1:ee:13:c7:02: 9f:48:d3:12 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUWZIdKC35klZjnUjexz2+hI3RNRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDdaFw0yNzAxMTkwMjE4MDdaMDMxMTAvBgNV BAMTKEQ5N0U3OEFDMUYyMEVGQTFENkUxRTQ5OTFBNDdDQTZEQkMxMUY5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgAJPiVxYJuBw1QLg8nPHLYtRH ZLE9FXWhY76VUWAXoBM87mEs5lP6IEn4WivjEpr7+kJaIDxPw3IFQkWsUUGVxMnb oYAXpAZnAhkKcE0eFQEaYtrOvSoJYAPcuGLqmFMDKSlNkFMo2IP050wBGYIWLroj bPqYJBHY0c2sd+hrER6PV78G4HZ3zA3M8EB741E5FnARL1hv053AxpOM9jlWPe1W n7w6dVwASjowg4eCmeTCqyjYQQJHYL/au7rODxAESICvzoS0mYp11R75+nFoeoE/ ZqUoTndMrxgWW2AB3cLJmUt1oaglZKpNawc3n6+FAlvNxv4h4e9qSeLH92edAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQU2X54rB8g76HW4eSZGkfKbbwR+V8wHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzIzNDMwMzYz YTMzMzMzNDMwM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzMz OTMxMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGBCQGM0BAMA0GCSqGSIb3DQEBCwUAA4IBAQBgZClM pSaBpktBykqxTSfRGVHcG7yNtyWuoIlrlEPYwvtjNQBu/u+LSbYkAwIWHDt6nx6z YTGi35cdbhwWiZ27FdNh19vdhvgZURBxOqh6dy1HwDJqKZ1HVzhqoCBLqwTkrdpy Rkl+0ihB/j3BLg5LBHiT/4Dm5UsjLp3qmsHDc7+kouBrPTajn1w6syu80LWz5l40 lDtIhFXox4RELQvrdAq/VimG/U+BI+IiNxvP3uAZrQ4LDm1POKRLTuHMpw7OtmlL q2I4ImgqpDenaHZtoDYincO5zvrUU6j6fqDcVDj9PS78or0pCt/RziAFVqOLTRrz gN1Yoe4TxwKfSNMS -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:50 2026 by rpki-client