This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa File: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (raw, json) Hash identifier: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE= Subject key identifier: 82:F1:A4:5A:18:E4:7C:CE:85:D1:1F:9A:04:29:BB:04:29:16:D6:57 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 693DA08FE8F8AA33562A61626F92AF9A332B4B47 Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa Signing time: Tue 20 Jan 2026 02:07:17 +0000 ROA not before: Tue 20 Jan 2026 02:02:17 +0000 ROA not after: Tue 19 Jan 2027 02:07:17 +0000 asID: 49544 IP address blocks: 2406:d140:8000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3d:a0:8f:e8:f8:aa:33:56:2a:61:62:6f:92:af:9a:33:2b:4b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Jan 20 02:02:17 2026 GMT Not After : Jan 19 02:07:17 2027 GMT Subject: CN=82F1A45A18E47CCE85D11F9A0429BB042916D657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:b8:54:00:24:02:27:97:3c:21:65:d9:4f: 5f:33:68:cf:ba:44:f4:a3:ec:b0:49:a2:83:45:0d: 23:b9:22:b6:3d:3c:28:49:81:53:bb:a0:aa:30:59: c5:ae:85:66:7e:57:ee:43:ec:73:0d:99:91:7d:f3: e1:39:c7:a2:1d:96:22:c4:94:ab:7a:c6:d5:98:b3: 03:d0:8d:6f:5f:55:b7:00:1f:05:33:59:9e:8e:78: ef:1a:99:2e:74:6c:2d:cd:02:95:7c:54:e9:68:4e: b9:7c:08:ee:42:49:9c:9b:81:5c:90:df:1a:43:29: 53:b3:14:42:5e:a1:e3:65:c8:ab:83:51:f6:a7:73: a8:f2:a4:44:e8:3e:81:d2:ce:20:3a:43:77:63:25: 0b:6b:f0:a7:3b:05:c9:c8:85:66:8e:80:fa:9d:3d: 9a:d8:59:17:80:bd:e0:4d:b9:30:cb:5b:17:49:87: d5:10:cb:f6:39:58:70:5a:05:70:00:74:86:31:a2: db:4e:07:78:df:3a:75:19:37:3b:95:ef:33:d2:d3: 78:00:9b:04:24:4a:d0:71:23:81:4e:a3:e8:77:62: 7b:fa:18:98:ac:96:04:18:f1:bf:84:13:e9:20:b4: 50:2d:b1:77:90:7d:e1:52:27:73:aa:e5:dc:73:14: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:A4:5A:18:E4:7C:CE:85:D1:1F:9A:04:29:BB:04:29:16:D6:57 X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:d140:8000::/34 Signature Algorithm: sha256WithRSAEncryption 3e:e3:52:e8:93:e5:db:84:a6:88:09:6c:1e:bd:f7:59:22:ee: eb:aa:dc:85:5c:18:17:7f:7e:ac:24:86:3d:68:60:4d:a9:16: 1f:83:89:bc:4d:88:ea:4e:55:31:5a:d2:92:b5:5c:58:54:c8: c5:e2:7b:e8:f7:44:8b:1f:f1:25:15:b1:52:5b:92:16:f2:77: 6f:3d:1a:bf:13:98:ee:94:c3:ce:c7:16:73:e5:ba:b4:c3:da: 1e:a7:24:d9:1a:e4:15:17:23:e7:db:9e:57:0e:70:9b:88:7f: 10:38:de:46:be:14:f0:b6:bf:6c:f7:45:a8:6e:f3:13:31:54: 15:cb:2b:4c:db:6f:d4:78:18:13:37:33:88:d9:ff:7b:94:0d: a3:c1:1a:a9:d1:13:36:5b:71:fd:94:37:64:07:0b:96:85:7b: e5:f9:2b:a1:01:1b:48:1d:f2:05:85:47:ec:e0:77:d3:b7:2a: de:8f:5c:93:0e:41:5d:64:d0:2e:8e:16:ee:8c:e7:00:8b:5f: 56:8a:38:4c:77:37:2c:5e:c5:55:6f:84:65:ad:cd:9b:1d:50: 01:5b:1a:cd:59:05:0a:79:b1:ff:92:ae:4d:c1:f1:06:35:75: a7:d3:b4:d9:62:7b:ac:7a:15:e7:d1:56:85:0a:f3:8a:a9:c5: f1:40:1a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUaT2gj+j4qjNWKmFib5KvmjMrS0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjAxMjAwMjAyMTdaFw0yNzAxMTkwMjA3MTdaMDMxMTAvBgNV BAMTKDgyRjFBNDVBMThFNDdDQ0U4NUQxMUY5QTA0MjlCQjA0MjkxNkQ2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0r7hUACQCJ5c8IWXZT18zaM+6 RPSj7LBJooNFDSO5IrY9PChJgVO7oKowWcWuhWZ+V+5D7HMNmZF98+E5x6IdliLE lKt6xtWYswPQjW9fVbcAHwUzWZ6OeO8amS50bC3NApV8VOloTrl8CO5CSZybgVyQ 3xpDKVOzFEJeoeNlyKuDUfanc6jypEToPoHSziA6Q3djJQtr8Kc7BcnIhWaOgPqd PZrYWReAveBNuTDLWxdJh9UQy/Y5WHBaBXAAdIYxottOB3jfOnUZNzuV7zPS03gA mwQkStBxI4FOo+h3Ynv6GJislgQY8b+EE+kgtFAtsXeQfeFSJ3Oq5dxzFA2BAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUgvGkWhjkfM6F0R+aBCm7BCkW1lcwHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjI2MTE0LzAvMzIzNDMwMzYz YTY0MzEzNDMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDM0MzgyMDNkM2UyMDM0Mzkz NTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgYkBtFAgDANBgkqhkiG9w0BAQsFAAOCAQEAPuNS6JPl 24SmiAlsHr33WSLu66rchVwYF39+rCSGPWhgTakWH4OJvE2I6k5VMVrSkrVcWFTI xeJ76PdEix/xJRWxUluSFvJ3bz0avxOY7pTDzscWc+W6tMPaHqck2RrkFRcj59ue Vw5wm4h/EDjeRr4U8La/bPdFqG7zEzFUFcsrTNtv1HgYEzcziNn/e5QNo8EaqdET Nltx/ZQ3ZAcLloV75fkroQEbSB3yBYVH7OB307cq3o9ckw5BXWTQLo4W7oznAItf Voo4THc3LF7FVW+EZa3Nmx1QAVsazVkFCnmx/5KuTcHxBjV1p9O02WJ7rHoV59FW hQrziqnF8UAaPg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:25 2026 by rpki-client