This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a3131303a3a2f34342d3438203d3e2034383131.roa File: 323430363a643434303a3131303a3a2f34342d3438203d3e2034383131.roa (raw, json) Hash identifier: L6L4GQF0W/PoAFY7y5VE2GSoffFV0KWBZ4A2M+eEgk8= Subject key identifier: 76:D6:D3:30:10:F5:C2:B0:86:A3:BC:6C:88:E0:F7:90:43:50:CF:97 Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 3E155DE8F6DB4B24B8C8B2C45AE8168E0536C26E Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a3131303a3a2f34342d3438203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:09:41 +0000 ROA not before: Tue 20 Jan 2026 02:04:41 +0000 ROA not after: Tue 19 Jan 2027 02:09:41 +0000 asID: 4811 IP address blocks: 2406:d440:110::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:15:5d:e8:f6:db:4b:24:b8:c8:b2:c4:5a:e8:16:8e:05:36:c2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:41 2026 GMT Not After : Jan 19 02:09:41 2027 GMT Subject: CN=76D6D33010F5C2B086A3BC6C88E0F7904350CF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:64:e0:b4:9f:ce:ee:a4:84:b0:a5:f5:68: 36:e8:00:12:11:51:d0:55:f3:07:56:bc:f1:68:e6: c4:53:f0:e2:90:15:b9:72:e2:6e:4c:10:bb:63:1b: 7a:60:77:9e:e5:d7:6b:3d:6d:6f:44:48:b8:57:91: e5:61:5d:4f:95:6e:ab:0a:d9:d1:00:4a:92:ae:f3: 13:0d:5e:9e:39:57:ed:4c:19:fd:46:a3:bd:67:54: c4:19:be:6c:94:96:58:b9:36:de:f1:8a:1b:df:ef: 24:4d:8d:65:1d:d1:02:09:e1:ed:75:55:0b:52:2f: 8f:e7:9f:95:f7:67:5d:48:7d:3c:05:b6:aa:8c:4a: 13:d4:2c:7e:d5:10:d3:f4:2e:29:25:d7:a3:4a:27: ae:4b:8e:28:19:df:5f:49:4b:48:62:4d:ad:2c:67: fb:38:36:da:20:59:cd:23:aa:f5:95:31:3e:04:bd: 66:4a:ab:a4:dd:96:23:58:d2:be:2b:cb:f3:cf:4a: b7:bd:3a:6e:ad:b3:78:05:b0:85:fd:3e:0e:fd:7d: 55:54:41:83:78:d9:28:d9:c2:33:c0:cc:76:75:55: 50:34:35:04:1e:0b:f4:0a:6a:33:55:d5:df:c8:f7: 15:38:b5:c9:91:bd:20:1d:ff:cd:2e:de:ca:5e:fd: 16:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D6:D3:30:10:F5:C2:B0:86:A3:BC:6C:88:E0:F7:90:43:50:CF:97 X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a3131303a3a2f34342d3438203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:d440:110::/44 Signature Algorithm: sha256WithRSAEncryption 0e:65:ef:fa:37:56:76:f5:3e:af:fd:f6:99:40:58:c8:99:04: 2a:27:88:54:35:0d:a1:3e:4b:f9:7d:b1:37:e8:5b:a1:5f:ea: bb:4c:3d:1b:b8:26:15:9c:7d:59:6b:7f:c6:4b:35:b8:fe:84: 0e:e4:04:d2:27:f0:a9:56:e6:4e:8e:78:68:a1:3e:e5:97:84: 2b:fe:5d:80:26:94:e8:3e:47:c8:d0:57:7c:bc:d0:e9:06:72: 0a:6f:3c:08:a5:e7:86:d8:c9:c5:dd:68:0c:87:b6:44:d2:82: d2:ed:c5:63:fb:c0:61:a8:f6:aa:22:da:83:c6:fc:e5:77:87: 60:21:66:1d:01:ca:3a:b7:21:09:3f:cb:17:98:be:f5:dd:6d: 0f:67:4e:7a:7c:dc:f6:79:72:2d:52:a6:a7:3e:fa:a3:85:05: bf:f7:ec:90:29:42:b9:0e:bc:ab:88:21:9e:85:ac:cd:6a:0d: 40:46:9b:18:ff:7b:61:b4:c0:bb:28:97:29:c5:3e:c0:a2:03: d9:b6:66:fa:cd:e5:8e:b8:ff:83:30:e0:02:08:da:87:6a:15: 58:4f:65:32:8a:2d:06:d0:72:3e:65:76:e6:fc:26:1b:f3:63: f0:60:e3:ed:32:f1:b8:ce:ff:f5:a3:6b:a4:cc:03:6d:43:41: 63:1e:9e:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPhVd6PbbSyS4yLLEWugWjgU2wm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDFaFw0yNzAxMTkwMjA5NDFaMDMxMTAvBgNV BAMTKDc2RDZEMzMwMTBGNUMyQjA4NkEzQkM2Qzg4RTBGNzkwNDM1MENGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AmTgtJ/O7qSEsKX1aDboABIR UdBV8wdWvPFo5sRT8OKQFbly4m5MELtjG3pgd57l12s9bW9ESLhXkeVhXU+VbqsK 2dEASpKu8xMNXp45V+1MGf1Go71nVMQZvmyUlli5Nt7xihvf7yRNjWUd0QIJ4e11 VQtSL4/nn5X3Z11IfTwFtqqMShPULH7VENP0Likl16NKJ65LjigZ319JS0hiTa0s Z/s4NtogWc0jqvWVMT4EvWZKq6TdliNY0r4ry/PPSre9Om6ts3gFsIX9Pg79fVVU QYN42SjZwjPAzHZ1VVA0NQQeC/QKajNV1d/I9xU4tcmRvSAd/80u3spe/RbrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdtbTMBD1wrCGo7xsiOD3kENQz5cwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzIzNDMwMzYz YTY0MzQzNDMwM2EzMTMxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNDM4MzEz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHBCQG1EABEDANBgkqhkiG9w0BAQsFAAOCAQEADmXv+jdWdvU+ r/32mUBYyJkEKieIVDUNoT5L+X2xN+hboV/qu0w9G7gmFZx9WWt/xks1uP6EDuQE 0ifwqVbmTo54aKE+5ZeEK/5dgCaU6D5HyNBXfLzQ6QZyCm88CKXnhtjJxd1oDIe2 RNKC0u3FY/vAYaj2qiLag8b85XeHYCFmHQHKOrchCT/LF5i+9d1tD2dOenzc9nly LVKmpz76o4UFv/fskClCuQ68q4ghnoWszWoNQEabGP97YbTAuyiXKcU+wKID2bZm +s3ljrj/gzDgAgjah2oVWE9lMootBtByPmV25vwmG/Nj8GDj7TLxuM7/9aNrpMwD bUNBYx6eGA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:11 2026 by rpki-client