This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a363030303a3a2f33362d3336203d3e20313339313339.roa File: 323430363a333334303a363030303a3a2f33362d3336203d3e20313339313339.roa (raw, json) Hash identifier: jbqqfi/egeAOL6DVld2ACO8m9pxSY6LZ4MiH2qtF6ug= Subject key identifier: 7B:11:D0:8F:73:05:26:C3:99:25:02:6C:DD:08:48:6C:76:11:4B:C9 Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 55D815DF6703973162D4272C071761BBB31E628C Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a363030303a3a2f33362d3336203d3e20313339313339.roa Signing time: Tue 20 Jan 2026 02:18:07 +0000 ROA not before: Tue 20 Jan 2026 02:13:07 +0000 ROA not after: Tue 19 Jan 2027 02:18:07 +0000 asID: 139139 IP address blocks: 2406:3340:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d8:15:df:67:03:97:31:62:d4:27:2c:07:17:61:bb:b3:1e:62:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:07 2026 GMT Not After : Jan 19 02:18:07 2027 GMT Subject: CN=7B11D08F730526C39925026CDD08486C76114BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:0a:80:5a:fd:45:c8:84:0d:0f:2c:ff:e3: 67:b8:d3:bf:10:98:68:98:6b:55:c5:fa:92:6b:96: bf:67:b0:90:e2:03:26:10:18:81:e7:d2:1b:c7:a5: d5:f2:c0:41:30:68:cb:b6:6b:5d:84:65:0a:bf:00: c2:60:e8:ab:c8:e2:f7:ec:39:a1:48:9e:19:fe:99: 35:d7:dc:7c:64:9e:80:81:2e:93:0a:e6:14:99:84: f2:bd:8d:bf:8a:0d:f9:f6:42:3b:59:43:41:5b:a5: 2b:5d:25:91:40:1b:4a:af:6c:ce:43:eb:9a:80:7b: 12:bc:9c:16:c1:f2:08:65:a0:72:a3:55:d2:5e:f1: de:cf:7b:93:b1:27:41:99:5f:ff:db:45:c4:3d:b3: d9:c6:71:c6:c4:d7:36:37:1c:ff:4d:89:13:8a:3f: 27:cf:21:8d:31:cb:f3:bf:3c:1f:cb:b8:15:81:0f: 9d:1d:05:94:df:7d:6c:dd:7a:d7:b0:f6:02:c3:83: 1b:f9:5a:a3:65:d3:a9:e2:6c:00:ae:24:e9:87:aa: 9c:f5:17:0f:26:2a:a5:ed:cc:0e:3d:0e:eb:cc:ba: cb:52:a7:c6:95:16:b4:29:6b:64:d0:4f:39:63:72: 04:3c:63:2d:44:ec:ca:15:87:bb:35:32:3e:30:ef: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:11:D0:8F:73:05:26:C3:99:25:02:6C:DD:08:48:6C:76:11:4B:C9 X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a363030303a3a2f33362d3336203d3e20313339313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340:6000::/36 Signature Algorithm: sha256WithRSAEncryption 9a:dd:94:91:bf:52:c0:86:c4:a1:18:85:2d:27:d0:ce:6a:18: 89:cf:e6:6b:ee:39:4e:a9:e3:b4:63:4a:ec:66:29:4a:23:88: c7:e9:05:78:bc:d7:84:92:9a:2f:10:0f:89:34:65:f8:c4:ac: b1:82:64:79:17:80:58:53:a4:3e:b0:eb:07:6b:9e:70:9d:d8: 13:2b:66:ad:c3:e5:91:60:04:b0:93:ea:75:a4:2b:1e:9f:c9: 97:46:1b:67:0d:5f:94:7a:53:d5:1f:34:b1:26:59:6d:09:57: 2e:e6:32:03:84:57:8e:5d:94:45:d4:fc:1e:1f:7b:cc:41:96: 43:c8:d1:e3:ba:16:ca:e8:56:ba:5c:81:e0:09:8e:ef:de:ae: 60:e5:bc:f6:f4:ee:03:be:bc:f9:0d:0e:94:50:01:ae:fe:36: ac:93:1b:28:c2:58:92:78:dc:c3:36:5d:96:86:97:84:c8:1d: 6c:f1:8f:b1:96:cf:13:7d:7c:84:68:3b:35:c5:13:35:8e:c3: cf:39:6d:ef:65:2e:bf:9d:28:f5:d1:a1:67:a5:ef:f2:70:2d: b7:77:b9:64:20:d4:c5:cf:97:8b:a9:ef:af:17:c1:3b:46:ee: 76:c9:28:06:3b:45:ef:65:4f:7a:ce:2d:a3:3f:24:43:d6:cd: 00:1f:cd:26 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUVdgV32cDlzFi1CcsBxdhu7MeYowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDdaFw0yNzAxMTkwMjE4MDdaMDMxMTAvBgNV BAMTKDdCMTFEMDhGNzMwNTI2QzM5OTI1MDI2Q0REMDg0ODZDNzYxMTRCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGwqAWv1FyIQNDyz/42e4078Q mGiYa1XF+pJrlr9nsJDiAyYQGIHn0hvHpdXywEEwaMu2a12EZQq/AMJg6KvI4vfs OaFInhn+mTXX3HxknoCBLpMK5hSZhPK9jb+KDfn2QjtZQ0FbpStdJZFAG0qvbM5D 65qAexK8nBbB8ghloHKjVdJe8d7Pe5OxJ0GZX//bRcQ9s9nGccbE1zY3HP9NiROK PyfPIY0xy/O/PB/LuBWBD50dBZTffWzdetew9gLDgxv5WqNl06nibACuJOmHqpz1 Fw8mKqXtzA49DuvMustSp8aVFrQpa2TQTzljcgQ8Yy1E7MoVh7s1Mj4w7waHAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUexHQj3MFJsOZJQJs3QhIbHYRS8kwHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzIzNDMwMzYz YTMzMzMzNDMwM2EzNjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzMz OTMxMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGBCQGM0BgMA0GCSqGSIb3DQEBCwUAA4IBAQCa3ZSR v1LAhsShGIUtJ9DOahiJz+Zr7jlOqeO0Y0rsZilKI4jH6QV4vNeEkpovEA+JNGX4 xKyxgmR5F4BYU6Q+sOsHa55wndgTK2atw+WRYASwk+p1pCsen8mXRhtnDV+UelPV HzSxJlltCVcu5jIDhFeOXZRF1PweH3vMQZZDyNHjuhbK6Fa6XIHgCY7v3q5g5bz2 9O4Dvrz5DQ6UUAGu/jaskxsowliSeNzDNl2WhpeEyB1s8Y+xls8TfXyEaDs1xRM1 jsPPOW3vZS6/nSj10aFnpe/ycC23d7lkINTFz5eLqe+vF8E7Ru52ySgGO0XvZU96 zi2jPyRD1s0AH80m -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:50 2026 by rpki-client