This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a3231303a3a2f34342d3438203d3e2034383131.roa File: 323430363a643434303a3231303a3a2f34342d3438203d3e2034383131.roa (raw, json) Hash identifier: p07QOSp4zP+U6v1GoFhtWGoAvLa3hzmWN77pGDPhHHQ= Subject key identifier: 7B:BD:D7:AB:E2:B3:9B:2D:67:A4:72:8F:3D:C3:71:AE:8B:EC:16:57 Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 08944CC84A17258CE557875D3CF2D3E28C70891F Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a3231303a3a2f34342d3438203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:09:43 +0000 ROA not before: Tue 20 Jan 2026 02:04:43 +0000 ROA not after: Tue 19 Jan 2027 02:09:43 +0000 asID: 4811 IP address blocks: 2406:d440:210::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:94:4c:c8:4a:17:25:8c:e5:57:87:5d:3c:f2:d3:e2:8c:70:89:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:43 2026 GMT Not After : Jan 19 02:09:43 2027 GMT Subject: CN=7BBDD7ABE2B39B2D67A4728F3DC371AE8BEC1657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5b:1e:a3:14:30:55:1a:b8:b7:07:eb:21:9b: 56:88:08:1c:a8:9e:ab:a2:59:e6:83:98:58:3b:82: a9:81:aa:7f:08:24:19:36:e0:6e:17:5d:90:35:c1: 45:bc:a6:f9:70:09:91:77:41:cd:95:54:22:7b:18: f8:8d:59:7e:e9:6d:b8:6d:9b:63:fb:99:e9:7f:0e: 78:e4:44:4b:92:2d:02:aa:bc:5d:94:74:b3:52:75: db:0d:39:ad:7b:65:6d:79:1b:f1:9b:85:94:2b:4f: f3:f3:cf:97:14:c2:fd:24:3b:9e:a5:ce:0c:28:44: 92:bd:b8:f7:b5:ff:fe:19:3d:17:03:20:33:ac:72: f2:fd:0c:68:97:7c:30:12:f4:b4:23:68:23:54:fc: 92:e4:34:d5:45:0a:04:db:82:0c:79:f3:16:9a:84: d8:5b:a0:33:31:90:5b:d7:09:2a:f0:a6:a2:54:e2: 89:20:c8:bf:d0:0f:bb:71:7b:8a:35:6e:c8:07:92: f2:69:9d:f5:93:80:ec:d5:a5:02:e3:84:28:d6:18: d9:80:87:72:e7:94:1a:0e:31:da:6f:1b:87:23:81: 75:df:f0:99:31:2b:1d:d5:1b:ff:42:56:4f:71:0b: bd:0d:61:4f:d4:ae:87:6e:24:33:2d:4e:31:58:8e: 7d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BD:D7:AB:E2:B3:9B:2D:67:A4:72:8F:3D:C3:71:AE:8B:EC:16:57 X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a3231303a3a2f34342d3438203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:d440:210::/44 Signature Algorithm: sha256WithRSAEncryption 09:58:fe:a4:55:a2:2f:8e:33:10:5d:67:d3:63:ef:85:c3:90: 19:d2:b6:07:0f:10:70:4a:b3:77:70:31:c3:fe:c3:29:cc:c3: 0c:ee:56:e1:5a:57:e8:51:d8:b5:53:f2:6a:c4:a1:45:bb:71: bb:9f:b2:81:e0:74:fd:8d:c8:9f:7d:c8:fe:c4:57:54:78:fe: 6a:62:4c:9b:ea:3b:86:12:5f:05:8d:68:c6:4e:87:4a:82:b4: c6:37:6c:42:91:5e:24:e3:fc:38:e6:4d:27:4b:36:77:ef:f4: 1f:89:2b:a7:f2:d2:1c:9b:d9:20:ae:79:22:15:d6:36:d9:d4: 09:5c:b9:4a:33:3b:29:a8:d6:40:86:cb:e2:fe:f1:d7:d6:24: 22:0e:00:09:48:bd:09:f8:7b:4c:4c:30:59:37:e8:b5:c6:47: f2:70:7d:be:34:27:6a:63:28:13:74:c6:b2:57:1f:df:98:9d: cb:b6:0c:c5:46:f6:91:ae:c9:cd:be:13:66:ae:f2:6b:ac:f5: 0c:25:4d:f8:d9:09:a3:b6:aa:13:3b:69:f5:8c:da:d5:d5:c7: 4e:c5:8e:70:14:53:d9:5b:c0:92:a7:63:b9:dc:02:85:37:aa: 56:f4:f6:60:24:d7:5a:27:c8:0a:db:4d:17:26:88:0c:9d:30: ac:74:b3:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCJRMyEoXJYzlV4ddPPLT4oxwiR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDNaFw0yNzAxMTkwMjA5NDNaMDMxMTAvBgNV BAMTKDdCQkREN0FCRTJCMzlCMkQ2N0E0NzI4RjNEQzM3MUFFOEJFQzE2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSWx6jFDBVGri3B+shm1aICByo nquiWeaDmFg7gqmBqn8IJBk24G4XXZA1wUW8pvlwCZF3Qc2VVCJ7GPiNWX7pbbht m2P7mel/DnjkREuSLQKqvF2UdLNSddsNOa17ZW15G/GbhZQrT/Pzz5cUwv0kO56l zgwoRJK9uPe1//4ZPRcDIDOscvL9DGiXfDAS9LQjaCNU/JLkNNVFCgTbggx58xaa hNhboDMxkFvXCSrwpqJU4okgyL/QD7txe4o1bsgHkvJpnfWTgOzVpQLjhCjWGNmA h3LnlBoOMdpvG4cjgXXf8JkxKx3VG/9CVk9xC70NYU/UroduJDMtTjFYjn0DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe73Xq+Kzmy1npHKPPcNxrovsFlcwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzIzNDMwMzYz YTY0MzQzNDMwM2EzMjMxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNDM4MzEz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHBCQG1EACEDANBgkqhkiG9w0BAQsFAAOCAQEACVj+pFWiL44z EF1n02PvhcOQGdK2Bw8QcEqzd3Axw/7DKczDDO5W4VpX6FHYtVPyasShRbtxu5+y geB0/Y3In33I/sRXVHj+amJMm+o7hhJfBY1oxk6HSoK0xjdsQpFeJOP8OOZNJ0s2 d+/0H4krp/LSHJvZIK55IhXWNtnUCVy5SjM7KajWQIbL4v7x19YkIg4ACUi9Cfh7 TEwwWTfotcZH8nB9vjQnamMoE3TGslcf35idy7YMxUb2ka7Jzb4TZq7ya6z1DCVN +NkJo7aqEztp9Yza1dXHTsWOcBRT2VvAkqdjudwChTeqVvT2YCTXWifICttNFyaI DJ0wrHSzVg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:56 2026 by rpki-client