This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a3a2f33362d3336203d3e20313339313339.roa File: 323430363a333334303a3a2f33362d3336203d3e20313339313339.roa (raw, json) Hash identifier: Lst/83lDIO0N/N2Nq/2F8sv1uj1hMNrfV1g3Bwz6W5o= Subject key identifier: 32:82:8C:7B:C0:56:78:8A:31:DE:75:5E:2F:F2:E9:3B:1F:3F:3A:52 Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Certificate serial: 7F5C7FE18DB7F02B14780B7F3443246F2CA9E3E8 Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a3a2f33362d3336203d3e20313339313339.roa Signing time: Tue 20 Jan 2026 02:18:07 +0000 ROA not before: Tue 20 Jan 2026 02:13:07 +0000 ROA not after: Tue 19 Jan 2027 02:18:07 +0000 asID: 139139 IP address blocks: 2406:3340::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5c:7f:e1:8d:b7:f0:2b:14:78:0b:7f:34:43:24:6f:2c:a9:e3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Validity Not Before: Jan 20 02:13:07 2026 GMT Not After : Jan 19 02:18:07 2027 GMT Subject: CN=32828C7BC056788A31DE755E2FF2E93B1F3F3A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f6:33:17:2e:c1:48:eb:a3:71:93:b5:66:46: 64:56:1d:79:c4:6b:7a:6e:fe:2f:94:fa:24:8f:f2: 91:ea:5a:39:42:7f:61:b4:57:35:d1:ba:e6:68:43: db:81:11:62:99:09:eb:3e:83:93:36:5d:a3:dc:d7: 8f:ab:99:d8:c1:3d:8e:90:64:36:c3:92:c2:42:52: c6:19:28:1a:42:e2:ae:2c:bd:db:c8:1f:c0:ec:29: aa:78:b7:c2:63:3e:39:42:11:da:d9:dc:a5:23:38: d0:b6:2a:89:60:11:d8:fc:35:40:f0:5a:6a:15:27: 1d:78:04:60:5c:72:8e:21:de:ef:84:d0:8a:ad:e9: ce:f7:af:f2:52:b8:9d:77:1b:3f:9e:bc:e4:02:1d: 16:40:ae:9a:d5:3f:57:27:1d:34:89:5b:e9:93:54: 99:b4:59:09:8b:b4:2c:87:df:d7:a6:24:ee:d1:00: 7d:71:8b:51:00:24:19:2a:44:d3:d4:fa:3f:5f:ac: a8:86:a2:23:6d:de:8e:76:b0:99:d0:66:df:38:e3: 39:04:65:6f:4f:fc:be:72:60:4a:3a:f6:55:0c:05: f8:a5:4a:d6:8b:d3:c0:d9:e4:44:19:89:ae:20:c3: 2e:db:89:3b:08:63:51:b0:5a:5f:75:b3:14:bb:e0: c4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:82:8C:7B:C0:56:78:8A:31:DE:75:5E:2F:F2:E9:3B:1F:3F:3A:52 X509v3 Authority Key Identifier: keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a3a2f33362d3336203d3e20313339313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3340::/36 Signature Algorithm: sha256WithRSAEncryption 4a:9b:e0:b1:38:5e:00:fe:f8:0d:31:dd:02:3a:c3:11:aa:61: aa:17:b9:9a:db:fb:7d:bb:b8:69:70:06:fd:42:02:3a:16:75: ba:5b:19:a5:fd:18:b1:b9:2b:7b:cf:62:51:1a:1d:6b:16:54: ee:06:11:e4:8b:3c:b7:ad:dd:68:27:cb:80:54:10:09:bd:7f: a5:8d:37:d4:a0:42:9c:7c:15:d4:6e:5b:77:5a:f3:f0:d0:6b: d0:b6:6c:55:33:05:7d:7e:96:35:21:d3:e2:7c:ee:79:01:cb: 02:c1:f8:ef:3a:5f:18:70:b0:7e:78:be:00:6d:d4:1b:8c:ea: 16:e0:d4:5d:d4:1b:92:8b:d7:c4:96:9a:8d:01:03:f2:92:f6: 8d:10:ec:fd:a4:68:fc:81:b6:b7:95:83:d9:27:38:30:a2:b4: cc:4b:ef:45:b3:69:bc:76:ad:d0:37:65:21:c9:73:81:bc:d0: 46:fa:ca:f5:56:2c:b4:df:0e:91:73:c9:87:b1:24:75:35:b6: 19:20:08:82:1d:ff:4c:a8:49:7b:e7:82:dd:55:02:b8:21:2e: 6d:19:cf:8e:81:c2:e2:cd:e1:8e:a1:b3:0e:ef:33:97:17:5c: c3:bb:79:48:1f:7f:09:fc:af:9f:6b:51:c0:10:a9:4b:a9:d0: ee:33:80:8c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUf1x/4Y238CsUeAt/NEMkbyyp4+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE RUI4RjI2MDAeFw0yNjAxMjAwMjEzMDdaFw0yNzAxMTkwMjE4MDdaMDMxMTAvBgNV BAMTKDMyODI4QzdCQzA1Njc4OEEzMURFNzU1RTJGRjJFOTNCMUYzRjNBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ9jMXLsFI66Nxk7VmRmRWHXnE a3pu/i+U+iSP8pHqWjlCf2G0VzXRuuZoQ9uBEWKZCes+g5M2XaPc14+rmdjBPY6Q ZDbDksJCUsYZKBpC4q4svdvIH8DsKap4t8JjPjlCEdrZ3KUjONC2KolgEdj8NUDw WmoVJx14BGBcco4h3u+E0Iqt6c73r/JSuJ13Gz+evOQCHRZArprVP1cnHTSJW+mT VJm0WQmLtCyH39emJO7RAH1xi1EAJBkqRNPU+j9frKiGoiNt3o52sJnQZt844zkE ZW9P/L5yYEo69lUMBfilStaL08DZ5EQZia4gwy7biTsIY1GwWl91sxS74MS1AgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUMoKMe8BWeIox3nVeL/LpOx8/OlIwHwYDVR0j BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MzIyMTk3MjQwMjE3OS8wLzMyMzQzMDM2M2Ez MzMzMzQzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzMzOTMxMzMzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQC AAIwCAMGBCQGM0AAMA0GCSqGSIb3DQEBCwUAA4IBAQBKm+CxOF4A/vgNMd0COsMR qmGqF7ma2/t9u7hpcAb9QgI6FnW6Wxml/RixuSt7z2JRGh1rFlTuBhHkizy3rd1o J8uAVBAJvX+ljTfUoEKcfBXUblt3WvPw0GvQtmxVMwV9fpY1IdPifO55AcsCwfjv Ol8YcLB+eL4AbdQbjOoW4NRd1BuSi9fElpqNAQPykvaNEOz9pGj8gba3lYPZJzgw orTMS+9Fs2m8dq3QN2UhyXOBvNBG+sr1Viy03w6Rc8mHsSR1NbYZIAiCHf9MqEl7 54LdVQK4IS5tGc+OgcLizeGOobMO7zOXF1zDu3lIH38J/K+fa1HAEKlLqdDuM4CM -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:06 2026 by rpki-client