This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa File: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (raw, json) Hash identifier: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0= Subject key identifier: F5:2F:FF:72:81:DD:EA:D1:11:C6:D7:65:DB:61:0F:D2:0C:A8:0D:67 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 0553006B0700A75AF1454A808B62E80B4FB2CB2A Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa Signing time: Tue 20 Jan 2026 02:07:17 +0000 ROA not before: Tue 20 Jan 2026 02:02:17 +0000 ROA not after: Tue 19 Jan 2027 02:07:17 +0000 asID: 131484 IP address blocks: 2406:d140:8000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:53:00:6b:07:00:a7:5a:f1:45:4a:80:8b:62:e8:0b:4f:b2:cb:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Jan 20 02:02:17 2026 GMT Not After : Jan 19 02:07:17 2027 GMT Subject: CN=F52FFF7281DDEAD111C6D765DB610FD20CA80D67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:49:21:06:bc:80:97:33:68:a2:5b:c3:6d: 36:bc:1b:46:c5:21:b9:b1:ab:db:94:2a:40:e4:fb: 27:44:72:31:5e:d1:82:e5:57:ee:84:cf:f5:8f:19: aa:f4:2b:78:87:2b:4a:b3:8a:5d:2c:7e:1f:74:80: 0c:40:55:ad:fe:7e:d2:a1:2b:1f:60:70:9a:56:cd: c1:36:d4:f4:01:50:33:e7:6d:cd:8d:ac:19:63:11: b9:df:0c:11:86:54:b9:db:89:9f:1e:b9:bf:26:35: ea:6f:87:e6:99:66:10:bf:98:06:a8:67:20:1d:f4: 86:3d:0b:f2:86:7b:b4:b1:cf:13:d1:7a:f1:ec:47: 00:b5:89:1d:04:01:55:9b:f7:c7:23:9b:40:bd:82: 1d:16:fc:a0:40:f4:7b:ee:75:22:05:4f:c0:66:6c: 20:d6:65:aa:73:62:02:8c:b7:55:dc:5a:17:d5:43: e8:22:13:38:93:0f:1c:11:44:56:12:67:84:35:fa: cb:b1:77:c8:56:02:d9:eb:c1:cd:37:9a:f2:2c:b1: 0a:5e:db:5a:25:bd:73:e1:01:de:fb:2d:f1:28:ab: b5:45:ae:db:4b:ae:32:53:c6:fc:ff:7b:64:db:aa: 90:24:15:3f:1c:40:99:22:0e:ff:93:0b:21:e6:ea: 70:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2F:FF:72:81:DD:EA:D1:11:C6:D7:65:DB:61:0F:D2:0C:A8:0D:67 X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:d140:8000::/34 Signature Algorithm: sha256WithRSAEncryption 85:d0:d8:b0:59:ee:1f:ae:c2:53:f2:07:d0:8c:0b:2a:f2:58: ba:d1:17:51:38:08:b2:88:54:4f:3c:28:e0:0d:50:d9:c5:49: 46:fd:8f:7c:26:57:37:a1:e8:9f:8a:4c:3c:b1:e4:1b:d3:18: 52:cb:d2:54:5a:b4:bf:11:7e:b2:7c:6e:83:e3:80:43:8e:47: c8:86:d3:73:28:29:33:70:17:3e:41:93:06:6d:14:79:a0:f3: 92:39:34:64:3a:52:f3:72:5f:a1:2c:31:e0:36:cd:6d:2b:3a: b3:7e:cd:7e:3c:69:d9:15:8e:4c:26:bb:61:c6:fa:71:43:e0: 0f:e0:0c:62:4f:50:56:68:f1:d1:3d:94:eb:eb:20:91:8f:88: b9:08:9f:00:e8:a8:8b:1a:26:ce:9c:43:cd:e7:f0:0f:f4:f4: 8c:fa:fe:41:13:45:dc:1a:53:3d:a9:5f:11:c2:5d:15:be:57: d1:b0:56:84:f5:f5:99:a7:95:55:b0:5a:f5:56:2e:80:32:2d: ad:7a:04:85:fc:18:ca:0a:74:3f:b5:a1:b7:4f:ae:d7:f5:3f: e4:8d:47:e3:2f:12:57:5b:03:fa:79:07:89:62:66:d6:76:24: 26:b7:73:57:b7:f2:4d:1b:11:e6:de:f3:e9:31:81:fe:04:db: 75:b0:ad:d6 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUBVMAawcAp1rxRUqAi2LoC0+yyyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjAxMjAwMjAyMTdaFw0yNzAxMTkwMjA3MTdaMDMxMTAvBgNV BAMTKEY1MkZGRjcyODFEREVBRDExMUM2RDc2NURCNjEwRkQyMENBODBENjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnokkhBryAlzNoolvDbTa8G0bF Ibmxq9uUKkDk+ydEcjFe0YLlV+6Ez/WPGar0K3iHK0qzil0sfh90gAxAVa3+ftKh Kx9gcJpWzcE21PQBUDPnbc2NrBljEbnfDBGGVLnbiZ8eub8mNepvh+aZZhC/mAao ZyAd9IY9C/KGe7SxzxPRevHsRwC1iR0EAVWb98cjm0C9gh0W/KBA9HvudSIFT8Bm bCDWZapzYgKMt1XcWhfVQ+giEziTDxwRRFYSZ4Q1+suxd8hWAtnrwc03mvIssQpe 21olvXPhAd77LfEoq7VFrttLrjJTxvz/e2TbqpAkFT8cQJkiDv+TCyHm6nDHAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQU9S//coHd6tERxtdl22EP0gyoDWcwHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjI2MTE0LzAvMzIzNDMwMzYz YTY0MzEzNDMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDM0MzgyMDNkM2UyMDMxMzMz MTM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGBiQG0UCAMA0GCSqGSIb3DQEBCwUAA4IBAQCF0Niw We4frsJT8gfQjAsq8li60RdROAiyiFRPPCjgDVDZxUlG/Y98Jlc3oeifikw8seQb 0xhSy9JUWrS/EX6yfG6D44BDjkfIhtNzKCkzcBc+QZMGbRR5oPOSOTRkOlLzcl+h LDHgNs1tKzqzfs1+PGnZFY5MJrthxvpxQ+AP4AxiT1BWaPHRPZTr6yCRj4i5CJ8A 6KiLGibOnEPN5/AP9PSM+v5BE0XcGlM9qV8Rwl0VvlfRsFaE9fWZp5VVsFr1Vi6A Mi2tegSF/BjKCnQ/taG3T67X9T/kjUfjLxJXWwP6eQeJYmbWdiQmt3NXt/JNGxHm 3vPpMYH+BNt1sK3W -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:48 2026 by rpki-client