This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a353030303a3a2f33362d3336203d3e20313339313339.roa File: 323430363a333334303a353030303a3a2f33362d3336203d3e20313339313339.roa (raw, json) Hash identifier: 5rfMn5eyEOjI7bM2Czawl9qh/Q2r3dk7Vnfnov19ExY= Subject key identifier: 20:D9:26:F0:7F:D1:9E:4F:61:E6:84:4E:B1:13:DD:C9:0A:AF:E9:25 Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 2BEDC8B412084035CBF756BCC9D328C93E0DC226 Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a353030303a3a2f33362d3336203d3e20313339313339.roa Signing time: Tue 20 Jan 2026 02:18:06 +0000 ROA not before: Tue 20 Jan 2026 02:13:06 +0000 ROA not after: Tue 19 Jan 2027 02:18:06 +0000 asID: 139139 IP address blocks: 2406:3340:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ed:c8:b4:12:08:40:35:cb:f7:56:bc:c9:d3:28:c9:3e:0d:c2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:06 2026 GMT Not After : Jan 19 02:18:06 2027 GMT Subject: CN=20D926F07FD19E4F61E6844EB113DDC90AAFE925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:77:36:ef:d6:b1:77:1f:c2:4b:32:ef:94: 66:73:d5:47:7f:92:13:dc:57:ca:1c:be:93:9c:5d: 72:cf:18:38:c4:56:f2:24:b6:6d:3b:8c:49:91:13: f6:e5:c5:0a:cf:ad:56:97:ea:c2:05:df:7d:ef:8b: 5d:7c:02:40:3b:9d:2e:02:5d:5e:3a:80:a8:8e:c3: 87:7e:1e:55:3e:29:ac:75:dc:58:ab:f6:c7:93:8f: e3:ee:35:86:ca:c0:53:8f:fb:16:67:41:ea:49:f5: c1:53:fc:b8:8c:9d:6b:f1:26:f1:d2:88:67:8c:56: fd:7f:cd:6f:e1:66:50:e3:69:bf:1c:9c:cf:57:9c: 60:fe:df:ee:fe:25:a8:0a:2d:0e:16:18:bc:6d:20: 75:e4:23:11:c2:e8:d9:8a:c2:80:73:57:66:1b:29: 1f:cc:38:11:92:a1:35:30:cd:e8:88:8d:ec:30:ff: c7:3c:68:93:b0:5d:46:0a:66:f9:cb:2d:6d:0e:d5: 04:22:c5:0f:39:b9:0d:29:5a:14:61:d0:55:21:56: 5f:c3:69:45:60:6e:42:fa:9d:28:59:c6:ec:9c:1b: 68:5c:a5:27:2b:93:68:94:31:20:d9:24:5e:62:46: 26:1b:4b:80:2b:77:a0:29:b3:2f:58:62:42:4f:d8: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D9:26:F0:7F:D1:9E:4F:61:E6:84:4E:B1:13:DD:C9:0A:AF:E9:25 X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a353030303a3a2f33362d3336203d3e20313339313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340:5000::/36 Signature Algorithm: sha256WithRSAEncryption e2:33:12:dd:01:f8:b3:e9:c6:4a:6e:f9:ab:7c:2a:15:d7:aa: 03:bd:ac:67:6d:ff:b3:96:87:c0:d1:4c:f5:7f:4d:17:9f:c3: 7e:1b:85:2c:d4:4f:07:5f:a8:75:18:2d:fc:92:07:e5:bf:b3: 06:b1:8a:4a:39:54:29:cc:ea:48:a5:98:91:3a:f6:41:09:9b: 19:fe:88:11:b3:f1:93:f0:4f:07:a9:dd:28:1c:c4:30:02:1b: c1:e0:83:ba:b3:e0:f0:bf:b3:1a:ab:d5:5f:bf:07:f2:bc:0a: 3f:5c:c1:be:ca:1e:45:74:a4:53:4d:dd:f7:a7:6a:85:c7:f7: 7e:6a:3e:ed:89:0f:2f:57:b9:cb:4a:46:24:74:e4:a3:42:d4: 64:61:4b:10:4d:02:40:5c:f0:ca:81:b6:c6:5d:5c:01:8f:8c: 4b:03:bb:d3:b1:16:30:f7:31:22:63:17:34:8c:5b:0b:97:9d: e4:f0:83:df:82:69:a3:2a:48:d1:bd:ee:bc:60:9e:cc:db:a6: 47:7c:8a:85:d4:35:cd:76:08:37:14:82:a1:99:7e:1e:d1:b3: e1:32:41:32:f5:9d:a5:1d:52:f8:04:8c:99:0e:51:ec:1c:56: 20:3f:ee:c3:a4:95:59:b6:26:70:e0:82:c9:e3:cd:eb:71:ec: 72:8e:9e:dc -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUK+3ItBIIQDXL91a8ydMoyT4NwiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDZaFw0yNzAxMTkwMjE4MDZaMDMxMTAvBgNV BAMTKDIwRDkyNkYwN0ZEMTlFNEY2MUU2ODQ0RUIxMTNEREM5MEFBRkU5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8snc279axdx/CSzLvlGZz1Ud/ khPcV8ocvpOcXXLPGDjEVvIktm07jEmRE/blxQrPrVaX6sIF333vi118AkA7nS4C XV46gKiOw4d+HlU+Kax13Fir9seTj+PuNYbKwFOP+xZnQepJ9cFT/LiMnWvxJvHS iGeMVv1/zW/hZlDjab8cnM9XnGD+3+7+JagKLQ4WGLxtIHXkIxHC6NmKwoBzV2Yb KR/MOBGSoTUwzeiIjeww/8c8aJOwXUYKZvnLLW0O1QQixQ85uQ0pWhRh0FUhVl/D aUVgbkL6nShZxuycG2hcpScrk2iUMSDZJF5iRiYbS4Ard6Apsy9YYkJP2HMBAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUINkm8H/Rnk9h5oROsRPdyQqv6SUwHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzIzNDMwMzYz YTMzMzMzNDMwM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzMz OTMxMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGBCQGM0BQMA0GCSqGSIb3DQEBCwUAA4IBAQDiMxLd Afiz6cZKbvmrfCoV16oDvaxnbf+zlofA0Uz1f00Xn8N+G4Us1E8HX6h1GC38kgfl v7MGsYpKOVQpzOpIpZiROvZBCZsZ/ogRs/GT8E8Hqd0oHMQwAhvB4IO6s+Dwv7Ma q9VfvwfyvAo/XMG+yh5FdKRTTd33p2qFx/d+aj7tiQ8vV7nLSkYkdOSjQtRkYUsQ TQJAXPDKgbbGXVwBj4xLA7vTsRYw9zEiYxc0jFsLl53k8IPfgmmjKkjRve68YJ7M 26ZHfIqF1DXNdgg3FIKhmX4e0bPhMkEy9Z2lHVL4BIyZDlHsHFYgP+7DpJVZtiZw 4ILJ483rcexyjp7c -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:50 2026 by rpki-client