This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/323430313a373636303a3a2f33322d3332203d3e20313531323935.roa File: 323430313a373636303a3a2f33322d3332203d3e20313531323935.roa (raw, json) Hash identifier: RfpY9li0VVA1/HvZlShR6hjAgfxjacrdKsj5MrW4eNw= Subject key identifier: BA:D3:65:80:D0:57:07:97:6D:2D:49:E4:D1:01:C7:A4:CE:69:0D:34 Certificate issuer: /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5 Certificate serial: 61D9A8FC787D989FAB7CA7EC426EA6E7661568F7 Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/323430313a373636303a3a2f33322d3332203d3e20313531323935.roa Signing time: Tue 20 Jan 2026 02:23:50 +0000 ROA not before: Tue 20 Jan 2026 02:18:50 +0000 ROA not after: Tue 19 Jan 2027 02:23:50 +0000 asID: 151295 IP address blocks: 2401:7660::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d9:a8:fc:78:7d:98:9f:ab:7c:a7:ec:42:6e:a6:e7:66:15:68:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5 Validity Not Before: Jan 20 02:18:50 2026 GMT Not After : Jan 19 02:23:50 2027 GMT Subject: CN=BAD36580D05707976D2D49E4D101C7A4CE690D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3a:cf:92:c3:af:17:91:d6:ab:51:54:81:78: cc:2e:57:0c:2b:e3:5b:ea:69:46:36:ee:60:0f:61: d5:2b:b2:e9:a3:b3:04:e0:d6:9f:bb:27:89:56:41: 71:a6:24:9e:46:17:5d:88:81:32:b7:08:fc:39:e3: 96:13:e0:0f:03:67:ae:01:69:3f:ee:b6:c1:23:82: 99:49:16:9c:fa:54:f0:46:f8:72:38:39:e7:9e:b5: 16:06:06:1b:d8:84:dc:15:75:cf:aa:e1:bd:f3:03: 09:47:c2:1f:b3:b8:00:41:c6:7e:c8:cf:f0:69:cb: 87:29:c6:58:fd:90:39:32:38:19:ca:30:33:d0:1e: d5:4b:3d:53:a2:e6:ca:10:dc:a8:f0:85:88:23:ef: 00:60:d2:b0:fd:be:d8:c0:3b:40:fd:45:a1:73:d9: a4:cb:1f:ec:48:87:8d:05:2c:a6:ee:8f:3f:a0:8f: fe:78:64:2d:44:71:a4:95:5a:fb:a4:89:6c:6f:89: 17:bb:6f:74:50:c6:55:87:35:5b:11:fb:35:2d:d4: 5c:80:31:3a:81:a3:ac:45:59:8b:79:83:9f:4e:ce: 73:d8:7d:6c:b5:e5:cd:02:2a:f1:1b:fc:9b:c8:e3: d6:7e:5e:c7:18:0b:fb:4a:bf:45:57:e2:3c:23:d3: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D3:65:80:D0:57:07:97:6D:2D:49:E4:D1:01:C7:A4:CE:69:0D:34 X509v3 Authority Key Identifier: keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/323430313a373636303a3a2f33322d3332203d3e20313531323935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:7660::/32 Signature Algorithm: sha256WithRSAEncryption db:c7:a9:56:a9:75:a1:15:00:1b:34:2a:6a:f9:d0:3c:54:94: 8f:ab:45:48:2f:3f:90:84:f4:4f:ef:a5:ee:91:8e:b2:44:3f: c4:40:59:27:20:2c:b5:63:05:e7:70:14:14:e6:f8:d3:69:42: 51:3a:38:a2:ab:6e:32:52:f0:69:b3:33:7e:08:9d:35:08:23: f8:6b:01:14:34:a5:51:7b:dd:a0:82:05:dd:f0:9e:b5:f3:26: 68:8e:80:bb:d7:b0:1b:99:d9:03:8f:df:04:d5:26:cc:03:6d: f7:87:99:64:01:ac:f0:ea:17:9b:63:00:3b:4e:9e:c9:ea:bb: bf:4e:9f:61:1d:f0:55:48:be:79:ba:84:c1:04:8a:66:a0:db: 62:67:89:8a:a3:35:6d:f5:a3:f0:99:72:e6:ae:92:f3:5b:d5: c7:28:36:4a:43:68:df:7e:84:71:50:10:1f:a9:1b:28:28:bf: bf:4d:f2:2a:52:67:06:a5:23:69:e0:40:2a:22:cf:1b:4f:24: 88:4f:47:bb:8d:18:46:38:76:16:ad:97:da:5d:3b:73:9d:af: 64:7c:0d:18:f5:98:e2:a7:ea:91:2a:59:d6:f3:23:da:cb:4c: c0:31:75:85:5b:b2:7b:c5:80:aa:a6:94:22:f3:ae:fd:47:a9: 0b:9f:ce:ff -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUYdmo/Hh9mJ+rfKfsQm6m52YVaPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3MTgwQkJDRkVFNkE0N0NGQzQyOUMxRjYxQkY0QzI2 OUY4MTlENTAeFw0yNjAxMjAwMjE4NTBaFw0yNzAxMTkwMjIzNTBaMDMxMTAvBgNV BAMTKEJBRDM2NTgwRDA1NzA3OTc2RDJENDlFNEQxMDFDN0E0Q0U2OTBEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzOs+Sw68XkdarUVSBeMwuVwwr 41vqaUY27mAPYdUrsumjswTg1p+7J4lWQXGmJJ5GF12IgTK3CPw545YT4A8DZ64B aT/utsEjgplJFpz6VPBG+HI4OeeetRYGBhvYhNwVdc+q4b3zAwlHwh+zuABBxn7I z/Bpy4cpxlj9kDkyOBnKMDPQHtVLPVOi5soQ3KjwhYgj7wBg0rD9vtjAO0D9RaFz 2aTLH+xIh40FLKbujz+gj/54ZC1EcaSVWvukiWxviRe7b3RQxlWHNVsR+zUt1FyA MTqBo6xFWYt5g59OznPYfWy15c0CKvEb/JvI49Z+XscYC/tKv0VX4jwj05XjAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUutNlgNBXB5dtLUnk0QHHpM5pDTQwHwYDVR0j BBgwFoAU73GAu8/uakfPxCnB9hv0wmn4GdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTY4MjQzMy8wL0VGNzE4MEJCQ0ZFRTZBNDdDRkM0MjlDMUY2MUJG NEMyNjlGODE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY3MTgwQkJDRkVFNkE0N0NGQzQyOUMxRjYxQkY0QzI2OUY4MTlENS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTM4OTI2NTY4MjQzMy8wLzMyMzQzMDMxM2Ez NzM2MzYzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzUzMTMyMzkzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQBdmAwDQYJKoZIhvcNAQELBQADggEBANvHqVapdaEVABs0Kmr50DxU lI+rRUgvP5CE9E/vpe6RjrJEP8RAWScgLLVjBedwFBTm+NNpQlE6OKKrbjJS8Gmz M34InTUII/hrARQ0pVF73aCCBd3wnrXzJmiOgLvXsBuZ2QOP3wTVJswDbfeHmWQB rPDqF5tjADtOnsnqu79On2Ed8FVIvnm6hMEEimag22JniYqjNW31o/CZcuaukvNb 1ccoNkpDaN9+hHFQEB+pGygov79N8ipSZwalI2ngQCoizxtPJIhPR7uNGEY4dhat l9pdO3Odr2R8DRj1mOKn6pEqWdbzI9rLTMAxdYVbsnvFgKqmlCLzrv1HqQufzv8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:48 2026 by rpki-client