This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a373030303a3a2f33362d3336203d3e20313339313339.roa File: 323430363a333334303a373030303a3a2f33362d3336203d3e20313339313339.roa (raw, json) Hash identifier: zvRH+HDqvliXXIdWjNbLwD9LGWMiAjyuoh0tmg3Erc8= Subject key identifier: 18:D5:6F:A1:63:C2:8C:70:48:82:7C:C5:A8:36:F9:FD:E9:92:18:BF Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 14668E20C2E08133783D6B63052E96B463505573 Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a373030303a3a2f33362d3336203d3e20313339313339.roa Signing time: Tue 20 Jan 2026 02:18:07 +0000 ROA not before: Tue 20 Jan 2026 02:13:07 +0000 ROA not after: Tue 19 Jan 2027 02:18:07 +0000 asID: 139139 IP address blocks: 2406:3340:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:66:8e:20:c2:e0:81:33:78:3d:6b:63:05:2e:96:b4:63:50:55:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:07 2026 GMT Not After : Jan 19 02:18:07 2027 GMT Subject: CN=18D56FA163C28C7048827CC5A836F9FDE99218BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:7b:77:12:ca:fa:a6:d2:c3:6f:40:73:24: 37:48:40:3a:93:46:2b:9c:8b:b6:8b:4f:8f:1c:c3: 59:0f:6f:d4:eb:dc:0c:2d:43:4c:fc:f0:e9:27:4f: 80:82:3b:ef:63:8d:5c:0e:e9:54:ba:ce:d7:95:4e: 61:d0:e6:05:75:5d:3d:dd:6f:fc:2f:f9:89:ff:40: 98:27:c1:5d:a7:c6:a8:21:e9:b5:bd:0f:f5:26:ae: d6:c4:1c:df:e4:4f:2b:e1:d9:77:6c:13:93:5e:00: fa:77:f9:91:eb:1c:6f:f0:91:21:e9:44:e8:2f:93: 46:2e:49:fe:2d:cf:26:96:6c:cf:ae:8b:81:d2:c4: f0:13:ed:82:90:91:73:7d:64:fb:b3:7a:00:aa:b8: 94:8c:9a:8a:7e:4d:80:22:2c:0a:79:d0:f6:75:a2: ed:ce:b4:ad:67:c6:e5:da:20:70:f5:4c:2d:7c:7f: 1b:bf:6d:2c:7d:10:6f:27:82:05:3b:32:35:57:f8: dd:d1:77:06:3b:ab:a8:8e:e4:a4:73:ec:97:f6:92: 30:7c:90:9b:ae:ed:e5:2a:7a:1a:2b:08:ec:7e:86: b5:d3:7a:da:71:14:89:a3:e7:7e:45:8d:ba:c8:3f: d9:4a:1a:af:c4:45:6a:e4:d9:aa:e1:4f:73:c0:29: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D5:6F:A1:63:C2:8C:70:48:82:7C:C5:A8:36:F9:FD:E9:92:18:BF X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a373030303a3a2f33362d3336203d3e20313339313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340:7000::/36 Signature Algorithm: sha256WithRSAEncryption 89:2b:23:56:59:6e:ed:c5:a9:69:37:98:0a:83:ad:85:a1:d5: 83:de:92:fd:cb:91:37:a8:28:32:9b:3c:c6:27:24:96:d7:9c: 70:44:44:fe:48:33:ce:87:db:17:9e:26:98:e2:0b:ca:3a:71: ce:ef:71:05:37:e2:4e:08:c6:b4:e5:b1:43:de:10:40:56:84: 4d:b1:b1:d4:70:64:e1:85:05:09:4d:bb:21:d5:3b:04:2e:fc: 99:d9:f2:e3:f7:19:1d:52:13:21:42:f2:3d:80:c2:1e:95:db: 85:07:2c:f1:53:86:05:e7:e0:10:d2:34:97:dc:cd:87:f9:fe: 56:00:f7:e2:c5:ba:52:b9:e0:12:6e:02:f9:62:e4:22:7d:f8: 9a:19:bb:0d:74:af:0e:96:94:b4:4c:c9:00:ae:e6:85:35:26: 8d:e0:96:55:bf:73:aa:29:21:36:a3:72:61:8c:de:23:21:96: b7:fc:52:0d:f0:3d:22:75:da:f5:cb:a9:c4:ac:4d:a2:b1:61: 33:a1:96:6d:e0:04:44:34:2a:5e:d8:24:15:aa:3a:05:d5:25: 00:45:46:00:b7:a7:48:26:20:4d:77:3d:8b:df:ed:5c:de:2f: 51:91:d1:d6:1e:b4:67:f3:66:34:dc:4f:b4:9b:a2:10:6e:5a: 28:62:7d:40 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUFGaOIMLggTN4PWtjBS6WtGNQVXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDdaFw0yNzAxMTkwMjE4MDdaMDMxMTAvBgNV BAMTKDE4RDU2RkExNjNDMjhDNzA0ODgyN0NDNUE4MzZGOUZERTk5MjE4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnDHt3Esr6ptLDb0BzJDdIQDqT Riuci7aLT48cw1kPb9Tr3AwtQ0z88OknT4CCO+9jjVwO6VS6zteVTmHQ5gV1XT3d b/wv+Yn/QJgnwV2nxqgh6bW9D/UmrtbEHN/kTyvh2XdsE5NeAPp3+ZHrHG/wkSHp ROgvk0YuSf4tzyaWbM+ui4HSxPAT7YKQkXN9ZPuzegCquJSMmop+TYAiLAp50PZ1 ou3OtK1nxuXaIHD1TC18fxu/bSx9EG8nggU7MjVX+N3RdwY7q6iO5KRz7Jf2kjB8 kJuu7eUqehorCOx+hrXTetpxFImj535FjbrIP9lKGq/ERWrk2arhT3PAKbEpAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUGNVvoWPCjHBIgnzFqDb5/emSGL8wHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5LzAvMzIzNDMwMzYz YTMzMzMzNDMwM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzMz OTMxMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGBCQGM0BwMA0GCSqGSIb3DQEBCwUAA4IBAQCJKyNW WW7txalpN5gKg62FodWD3pL9y5E3qCgymzzGJySW15xwRET+SDPOh9sXniaY4gvK OnHO73EFN+JOCMa05bFD3hBAVoRNsbHUcGThhQUJTbsh1TsELvyZ2fLj9xkdUhMh QvI9gMIelduFByzxU4YF5+AQ0jSX3M2H+f5WAPfixbpSueASbgL5YuQiffiaGbsN dK8OlpS0TMkAruaFNSaN4JZVv3OqKSE2o3JhjN4jIZa3/FIN8D0iddr1y6nErE2i sWEzoZZt4ARENCpe2CQVqjoF1SUARUYAt6dIJiBNdz2L3+1c3i9RkdHWHrRn82Y0 3E+0m6IQblooYn1A -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:50 2026 by rpki-client