This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/323430363a643134303a3a2f33322d3438203d3e20313331343834.roa File: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (raw, json) Hash identifier: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U= Subject key identifier: E6:25:69:58:C4:CD:D4:CA:A7:9A:98:30:22:6B:79:1D:2D:DC:F0:A7 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 166D0F1EEDFC425CD9C77172EED2EE9BA50A2DF6 Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/323430363a643134303a3a2f33322d3438203d3e20313331343834.roa Signing time: Tue 20 Jan 2026 02:07:17 +0000 ROA not before: Tue 20 Jan 2026 02:02:17 +0000 ROA not after: Tue 19 Jan 2027 02:07:17 +0000 asID: 131484 IP address blocks: 2406:d140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6d:0f:1e:ed:fc:42:5c:d9:c7:71:72:ee:d2:ee:9b:a5:0a:2d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Jan 20 02:02:17 2026 GMT Not After : Jan 19 02:07:17 2027 GMT Subject: CN=E6256958C4CDD4CAA79A9830226B791D2DDCF0A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:69:db:28:2d:26:99:f6:4a:d9:37:52:28: c9:5a:f7:c1:54:1c:68:f8:21:02:d1:80:c0:d7:04: a6:6b:18:52:03:ef:8e:32:f8:8b:9c:cc:7d:8f:d8: 47:e3:43:e6:48:cc:a5:a6:21:ed:58:cb:39:4d:07: f2:db:6c:ed:f0:53:3c:56:1c:be:33:81:ef:6e:bf: 24:94:74:e2:fa:72:c6:06:49:ef:2a:d7:22:78:9b: 06:ff:15:75:e9:92:3e:21:cb:2e:70:64:18:44:bf: de:0f:00:1e:c8:3d:4f:ea:74:82:83:1f:c4:37:86: 44:f4:5b:b2:2a:7e:72:3d:97:a5:36:bd:b8:49:e7: f2:06:b6:4f:2c:9d:71:16:c4:2e:c2:84:45:7a:8a: 9e:57:4e:d0:5c:b4:97:4c:24:b2:d4:eb:7a:22:07: a1:ad:1b:62:93:8d:17:c3:e6:3d:b6:ac:d2:16:ef: a0:a4:f4:05:cd:ea:ab:db:32:4f:49:f8:13:86:32: e2:47:b1:18:4b:f8:e3:cd:9e:9c:60:5f:76:1e:98: 90:60:30:3e:d2:c6:f4:45:d6:d6:60:5d:a4:1f:b6: 6b:55:26:13:33:17:ef:61:9d:62:42:0c:58:45:b6: 9f:71:9f:ed:9f:b9:90:f6:f5:5f:14:a3:54:11:98: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:25:69:58:C4:CD:D4:CA:A7:9A:98:30:22:6B:79:1D:2D:DC:F0:A7 X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/323430363a643134303a3a2f33322d3438203d3e20313331343834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:d140::/32 Signature Algorithm: sha256WithRSAEncryption 1b:71:7b:ab:1d:bd:cc:e9:87:cf:de:0c:a2:aa:a7:37:00:88: b9:0c:33:49:bc:c5:15:d3:22:45:a0:6d:53:37:54:fd:86:6e: af:b9:34:3f:9d:35:e2:46:5d:23:82:35:fb:77:72:8c:21:b1: 09:6d:83:9a:f7:2a:3b:e8:d1:e9:08:3d:7f:b5:ec:33:ed:3d: 6c:dd:f0:57:b2:88:fb:6b:fb:ec:f7:9c:b9:63:b8:78:cf:70: a3:39:38:43:39:19:60:bc:67:c8:65:d9:1e:77:e3:8d:73:e6: 31:01:b4:2b:30:fd:c6:79:f5:b8:2c:7e:68:db:c0:ba:8a:bf: 7f:67:2c:f3:2f:2b:78:b2:48:83:2b:2a:f5:a9:96:ed:8a:66: 43:cf:85:f2:1d:49:4e:a1:8e:98:27:39:95:ce:9c:81:d4:f6: 9e:65:7c:35:7d:a7:75:d5:0d:66:70:70:86:27:b4:8b:3b:53: 98:cc:38:d2:db:44:f9:d7:cf:1f:de:7d:2e:56:fe:ab:57:e8: 63:1f:ce:31:e1:58:2c:f1:82:ea:3c:7b:aa:93:e4:18:e1:f9: 1e:39:60:fd:1b:e2:1f:44:3d:53:9b:6f:0e:5c:f4:c2:c5:1b: 11:1a:ad:c7:04:ce:1e:5c:d5:b0:cf:62:5d:00:8d:4d:a6:58: c9:24:cd:7e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUFm0PHu38QlzZx3Fy7tLum6UKLfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjAxMjAwMjAyMTdaFw0yNzAxMTkwMjA3MTdaMDMxMTAvBgNV BAMTKEU2MjU2OTU4QzRDREQ0Q0FBNzlBOTgzMDIyNkI3OTFEMkREQ0YwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc12nbKC0mmfZK2TdSKMla98FU HGj4IQLRgMDXBKZrGFID744y+IuczH2P2EfjQ+ZIzKWmIe1YyzlNB/LbbO3wUzxW HL4zge9uvySUdOL6csYGSe8q1yJ4mwb/FXXpkj4hyy5wZBhEv94PAB7IPU/qdIKD H8Q3hkT0W7IqfnI9l6U2vbhJ5/IGtk8snXEWxC7ChEV6ip5XTtBctJdMJLLU63oi B6GtG2KTjRfD5j22rNIW76Ck9AXN6qvbMk9J+BOGMuJHsRhL+OPNnpxgX3YemJBg MD7SxvRF1tZgXaQftmtVJhMzF+9hnWJCDFhFtp9xn+2fuZD29V8Uo1QRmORJAgMB AAGjggIVMIICETAdBgNVHQ4EFgQU5iVpWMTN1MqnmpgwImt5HS3c8KcwHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTYyNjExNC8wLzMyMzQzMDM2M2E2 NDMxMzQzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzMzMTM0MzgzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQG0UAwDQYJKoZIhvcNAQELBQADggEBABtxe6sdvczph8/eDKKqpzcA iLkMM0m8xRXTIkWgbVM3VP2Gbq+5ND+dNeJGXSOCNft3cowhsQltg5r3Kjvo0ekI PX+17DPtPWzd8FeyiPtr++z3nLljuHjPcKM5OEM5GWC8Z8hl2R53441z5jEBtCsw /cZ59bgsfmjbwLqKv39nLPMvK3iySIMrKvWplu2KZkPPhfIdSU6hjpgnOZXOnIHU 9p5lfDV9p3XVDWZwcIYntIs7U5jMONLbRPnXzx/efS5W/qtX6GMfzjHhWCzxguo8 e6qT5Bjh+R45YP0b4h9EPVObbw5c9MLFGxEarccEzh5c1bDPYl0AjU2mWMkkzX4= -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:58 2026 by rpki-client