This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265551361/0/323430623a613030303a6663333a3a2f34382d3438203d3e20313531333033.roa File: 323430623a613030303a6663333a3a2f34382d3438203d3e20313531333033.roa (raw, json) Hash identifier: TiSdjmUDUZ7Io/2Ke/Pu2qkV+pzBX0aVcs8lYCtTick= Subject key identifier: FA:51:D2:EA:5C:61:07:4F:AD:31:77:F9:90:06:1B:34:D0:9E:02:4C Certificate issuer: /CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Certificate serial: 0985D71672934955D2D34DDA8649BE39E2548FA2 Authority key identifier: D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/323430623a613030303a6663333a3a2f34382d3438203d3e20313531333033.roa Signing time: Tue 20 Jan 2026 02:21:37 +0000 ROA not before: Tue 20 Jan 2026 02:16:37 +0000 ROA not after: Tue 19 Jan 2027 02:21:37 +0000 asID: 151303 IP address blocks: 240b:a000:fc3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:85:d7:16:72:93:49:55:d2:d3:4d:da:86:49:be:39:e2:54:8f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Validity Not Before: Jan 20 02:16:37 2026 GMT Not After : Jan 19 02:21:37 2027 GMT Subject: CN=FA51D2EA5C61074FAD3177F990061B34D09E024C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:c4:59:52:ed:ef:35:f6:ad:40:8b:d2:d8: 1c:cc:27:48:81:73:d4:a1:bb:37:26:f4:68:38:f4: ff:02:8c:b9:ec:2b:84:f7:da:a5:b0:82:f4:58:f9: d6:31:fe:67:21:43:e0:63:72:75:40:30:b1:f0:4c: d8:12:8c:69:46:e8:6e:61:12:dc:cc:94:15:24:6b: b5:96:25:8f:54:cb:b5:ca:5a:3f:6e:47:70:99:11: 08:0b:30:60:15:0b:95:b1:33:59:17:64:ca:ca:92: b9:54:91:f9:57:58:49:95:ea:b6:46:69:22:e3:34: 96:48:f9:e0:e2:d5:02:82:26:38:6a:4b:e6:76:1a: 6a:83:69:35:d9:af:89:52:89:c9:d4:a6:c7:09:1d: e3:2a:29:db:95:d4:ee:70:3e:0a:4d:b6:d5:04:46: 9e:c8:64:c9:62:ba:ac:3c:5f:63:df:15:4d:f3:c9: d2:fe:37:72:2f:36:fc:e6:d6:9a:0b:65:63:4a:aa: ba:cd:32:4c:2e:ff:76:dd:f5:12:a0:71:df:4c:d8: 05:57:26:f7:7b:d6:b5:b5:be:4f:5d:ff:17:53:fa: 5f:3d:91:c2:5c:ce:79:cf:87:f4:b7:5e:ed:95:41: 1e:ef:d4:ce:32:11:41:8a:4d:ff:1b:ea:d0:67:77: 16:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:51:D2:EA:5C:61:07:4F:AD:31:77:F9:90:06:1B:34:D0:9E:02:4C X509v3 Authority Key Identifier: keyid:D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/323430623a613030303a6663333a3a2f34382d3438203d3e20313531333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240b:a000:fc3::/48 Signature Algorithm: sha256WithRSAEncryption 41:72:8f:be:5e:38:e6:af:b4:3f:a7:d6:b7:05:1e:58:f2:24: 2b:dd:02:44:a2:f0:fa:09:bb:b2:cd:88:88:1e:92:b6:07:74: 02:a3:72:65:96:81:61:41:b8:dd:68:db:d5:85:58:44:9b:e0: 94:d1:9d:a5:0d:dc:a9:65:cd:b4:ba:e3:fc:c9:78:83:98:24: 0f:1e:8c:3d:41:25:9d:89:4c:d7:5a:0c:2e:38:42:2f:5a:4c: 9d:51:1d:cd:ed:7c:4f:6c:44:4f:2a:4d:4a:19:bc:03:f7:e1: 25:b4:54:86:f9:32:94:0d:e8:8a:c9:c9:28:b5:83:3a:4c:e0: 51:2f:08:02:10:e0:33:6e:3d:25:64:0a:ed:a5:20:6d:40:16: 87:0f:13:f2:b5:58:db:8f:c9:8d:99:51:d2:51:c5:40:cf:7a: dd:6b:8c:83:90:2b:8a:1c:f6:74:63:c2:8f:f6:59:f0:09:5a: 99:f6:a8:9a:ad:49:ec:09:b1:ed:a6:d8:12:8c:c4:08:df:0c: 32:de:0d:8d:e6:10:b4:d3:48:d7:69:1a:8e:09:cc:d7:47:c4: 45:cf:dc:e0:91:69:a1:15:24:4a:3c:7f:27:49:44:f5:9a:d1: 13:ba:94:1c:ad:ec:8c:e6:8d:77:3e:7f:5f:51:c0:64:83:ea: 0b:b2:03:45 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUCYXXFnKTSVXS003ahkm+OeJUj6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRC Q0FEMTk0MzAeFw0yNjAxMjAwMjE2MzdaFw0yNzAxMTkwMjIxMzdaMDMxMTAvBgNV BAMTKEZBNTFEMkVBNUM2MTA3NEZBRDMxNzdGOTkwMDYxQjM0RDA5RTAyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRJMRZUu3vNfatQIvS2BzMJ0iB c9Shuzcm9Gg49P8CjLnsK4T32qWwgvRY+dYx/mchQ+BjcnVAMLHwTNgSjGlG6G5h EtzMlBUka7WWJY9Uy7XKWj9uR3CZEQgLMGAVC5WxM1kXZMrKkrlUkflXWEmV6rZG aSLjNJZI+eDi1QKCJjhqS+Z2GmqDaTXZr4lSicnUpscJHeMqKduV1O5wPgpNttUE Rp7IZMliuqw8X2PfFU3zydL+N3IvNvzm1poLZWNKqrrNMkwu/3bd9RKgcd9M2AVX Jvd71rW1vk9d/xdT+l89kcJcznnPh/S3Xu2VQR7v1M4yEUGKTf8b6tBndxZpAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQU+lHS6lxhB0+tMXf5kAYbNNCeAkwwHwYDVR0j BBgwFoAU0v8dfG3x3XdaYQaXDQX/RLytGUMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTU1MTM2MS8wL0QyRkYxRDdDNkRGMURENzc1QTYxMDY5NzBEMDVG RjQ0QkNBRDE5NDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRCQ0FEMTk0My5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NTUxMzYxLzAvMzIzNDMwNjIz YTYxMzAzMDMwM2E2NjYzMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzEz MzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkC6AAD8MwDQYJKoZIhvcNAQELBQADggEBAEFyj75e OOavtD+n1rcFHljyJCvdAkSi8PoJu7LNiIgekrYHdAKjcmWWgWFBuN1o29WFWESb 4JTRnaUN3KllzbS64/zJeIOYJA8ejD1BJZ2JTNdaDC44Qi9aTJ1RHc3tfE9sRE8q TUoZvAP34SW0VIb5MpQN6IrJySi1gzpM4FEvCAIQ4DNuPSVkCu2lIG1AFocPE/K1 WNuPyY2ZUdJRxUDPet1rjIOQK4oc9nRjwo/2WfAJWpn2qJqtSewJse2m2BKMxAjf DDLeDY3mELTTSNdpGo4JzNdHxEXP3OCRaaEVJEo8fydJRPWa0RO6lByt7IzmjXc+ f19RwGSD6guyA0U= -----END CERTIFICATE-----Generated at Sun Jan 25 14:09:21 2026 by rpki-client