This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a3331303a3a2f34342d3438203d3e2034383131.roa File: 323430363a643434303a3331303a3a2f34342d3438203d3e2034383131.roa (raw, json) Hash identifier: ua5B6g2jdk6Nka9toVhpiaJvNbGrf3/Y+GrTWW7cCik= Subject key identifier: 6F:77:C9:8C:B4:DE:7D:21:52:B6:65:58:A4:7E:2B:76:1E:F1:7E:3C Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 259D3D14967BF2E687CD3BACC32517763E0AD852 Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a3331303a3a2f34342d3438203d3e2034383131.roa Signing time: Tue 20 Jan 2026 02:09:46 +0000 ROA not before: Tue 20 Jan 2026 02:04:46 +0000 ROA not after: Tue 19 Jan 2027 02:09:46 +0000 asID: 4811 IP address blocks: 2406:d440:310::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9d:3d:14:96:7b:f2:e6:87:cd:3b:ac:c3:25:17:76:3e:0a:d8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 20 02:04:46 2026 GMT Not After : Jan 19 02:09:46 2027 GMT Subject: CN=6F77C98CB4DE7D2152B66558A47E2B761EF17E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:b2:ef:ac:44:94:7c:7f:0a:fc:23:ca:ac: 40:36:6b:78:02:10:4e:39:d0:48:b6:d3:21:d8:41: e3:75:b5:eb:13:41:c5:20:ad:be:92:1c:ec:49:e2: 7b:d0:a9:ce:d1:e3:8d:ff:d1:df:a6:78:fc:3c:57: a3:78:61:ef:dd:e1:f2:8b:d5:69:d8:78:c6:db:7b: 99:f1:8c:1f:4e:6a:cf:51:ff:e8:32:37:98:0d:5b: aa:a4:ce:e7:31:b3:60:ad:65:a7:94:01:8a:bb:c4: d5:af:69:66:28:ca:10:30:b0:57:a6:e0:22:d1:81: 9b:61:29:07:16:88:1a:b6:1f:d2:8e:da:c4:b4:4e: d8:0c:bd:6b:c7:00:30:61:08:b3:ee:ed:aa:c5:df: e2:c9:aa:0a:4c:43:97:6b:9d:32:a2:99:b2:30:59: 3b:48:2d:62:54:dd:f4:be:7f:ac:6d:c5:fa:fa:2a: ec:8a:0e:7c:09:4f:f3:cc:3e:1e:89:c4:6d:80:31: 26:12:30:36:f6:1f:d5:22:c3:2e:29:2a:1d:0e:0e: f8:85:13:35:0b:bf:16:a5:70:82:12:82:9c:a8:02: dc:3b:23:4f:0a:21:7c:a1:74:e7:e9:63:bd:79:cc: db:37:a1:48:74:81:22:78:ce:d2:70:79:38:6a:f9: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:77:C9:8C:B4:DE:7D:21:52:B6:65:58:A4:7E:2B:76:1E:F1:7E:3C X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a3331303a3a2f34342d3438203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:d440:310::/44 Signature Algorithm: sha256WithRSAEncryption 06:f4:26:67:b1:d1:17:35:43:0f:3d:82:e5:00:78:1b:94:8e: 11:86:be:d0:0b:09:9a:57:4b:04:16:a9:69:f1:1a:00:84:9c: de:0b:63:52:fe:8c:7f:0b:48:cf:1d:b4:57:3b:f8:2e:4a:4a: b7:f9:67:3e:9b:84:48:71:65:19:1f:59:3b:50:b3:ab:bd:3e: 3b:95:a7:60:6c:c0:30:13:bb:42:87:9b:40:95:f6:73:3c:ce: 6e:91:71:a7:32:bb:cd:06:91:2a:58:a5:69:26:c6:2f:21:38: a8:5b:eb:6b:1d:fd:38:fa:15:86:95:4c:6a:11:6d:58:f7:34: 68:24:aa:e7:9e:e8:50:01:80:46:60:55:25:71:fd:a0:82:d4: 17:5f:00:a2:62:c1:2f:97:9a:5e:92:b4:8b:53:b6:e9:23:9b: 89:c7:2f:10:7c:fa:25:40:b9:2d:45:5e:79:0b:87:32:b6:61: d4:59:66:44:f7:10:1d:f2:98:45:6c:6d:24:49:62:48:c5:3d: ad:1a:19:ae:eb:53:27:92:27:e3:bc:14:7e:b9:06:63:29:78: 5f:4f:90:b9:76:80:61:12:aa:d9:ba:ef:43:24:2c:66:6b:3f: c3:f5:f4:d0:d7:0d:04:0c:26:8a:d7:63:35:83:86:66:ce:46: 18:f7:55:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJZ09FJZ78uaHzTuswyUXdj4K2FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDZaFw0yNzAxMTkwMjA5NDZaMDMxMTAvBgNV BAMTKDZGNzdDOThDQjRERTdEMjE1MkI2NjU1OEE0N0UyQjc2MUVGMTdFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gLLvrESUfH8K/CPKrEA2a3gC EE450Ei20yHYQeN1tesTQcUgrb6SHOxJ4nvQqc7R443/0d+mePw8V6N4Ye/d4fKL 1WnYeMbbe5nxjB9Oas9R/+gyN5gNW6qkzucxs2CtZaeUAYq7xNWvaWYoyhAwsFem 4CLRgZthKQcWiBq2H9KO2sS0TtgMvWvHADBhCLPu7arF3+LJqgpMQ5drnTKimbIw WTtILWJU3fS+f6xtxfr6KuyKDnwJT/PMPh6JxG2AMSYSMDb2H9Uiwy4pKh0ODviF EzULvxalcIISgpyoAtw7I08KIXyhdOfpY715zNs3oUh0gSJ4ztJweThq+TslAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb3fJjLTefSFStmVYpH4rdh7xfjwwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzIzNDMwMzYz YTY0MzQzNDMwM2EzMzMxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNDM4MzEz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHBCQG1EADEDANBgkqhkiG9w0BAQsFAAOCAQEABvQmZ7HRFzVD Dz2C5QB4G5SOEYa+0AsJmldLBBapafEaAISc3gtjUv6MfwtIzx20Vzv4LkpKt/ln PpuESHFlGR9ZO1Czq70+O5WnYGzAMBO7QoebQJX2czzObpFxpzK7zQaRKlilaSbG LyE4qFvrax39OPoVhpVMahFtWPc0aCSq557oUAGARmBVJXH9oILUF18AomLBL5ea XpK0i1O26SObiccvEHz6JUC5LUVeeQuHMrZh1FlmRPcQHfKYRWxtJEliSMU9rRoZ rutTJ5In47wUfrkGYyl4X0+QuXaAYRKq2brvQyQsZms/w/X00NcNBAwmitdjNYOG Zs5GGPdVvA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:21 2026 by rpki-client