This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a666666663a3a2f34382d3438203d3e20313338343231.roa File: 323430363a643434303a666666663a3a2f34382d3438203d3e20313338343231.roa (raw, json) Hash identifier: h1wPReaG1sPTOr/9gfuzMdCH7mI5BU1ybIXIIzTGYkQ= Subject key identifier: 3F:C1:EA:F5:0A:C8:74:A3:DB:5A:B2:D1:A9:B7:B2:36:8F:E0:B6:C0 Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 2C96AFC3577DA943440496B71DC25E30444F25F2 Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a666666663a3a2f34382d3438203d3e20313338343231.roa Signing time: Thu 22 Jan 2026 08:25:04 +0000 ROA not before: Thu 22 Jan 2026 08:20:04 +0000 ROA not after: Thu 21 Jan 2027 08:25:04 +0000 asID: 138421 IP address blocks: 2406:d440:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:96:af:c3:57:7d:a9:43:44:04:96:b7:1d:c2:5e:30:44:4f:25:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jan 22 08:20:04 2026 GMT Not After : Jan 21 08:25:04 2027 GMT Subject: CN=3FC1EAF50AC874A3DB5AB2D1A9B7B2368FE0B6C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:29:bf:84:b8:93:c6:d4:90:ae:6b:b6:f7: 83:18:bf:21:6c:12:d0:4f:de:27:35:72:a0:01:b7: 82:55:63:7b:bf:9c:bf:97:79:31:1f:2d:15:21:6f: 41:ba:30:23:de:94:d4:b6:ff:d5:a3:61:8f:8e:12: a5:56:28:99:4e:da:ff:d4:26:c2:ea:8b:71:f5:cf: 2f:0c:b6:02:c8:ea:ce:03:08:21:ff:2b:b4:03:b3: d1:c0:90:01:18:d0:ca:9e:a2:61:10:c6:cb:79:34: e5:ef:4a:4c:4c:8e:f2:19:75:53:b6:47:2d:95:93: ce:02:54:4f:2f:da:26:d5:d3:92:f8:6c:a8:fe:ac: 9f:84:e0:5d:c3:c4:c9:c0:b1:34:10:c1:27:df:47: 6d:b3:ff:33:f4:e4:45:ce:25:69:1f:02:ad:e4:ec: a9:e1:8d:d8:c4:41:fd:3c:ce:6a:8a:5b:45:4c:27: 56:ce:1e:a4:74:10:52:61:9f:89:63:ce:f7:f9:f9: 33:f1:3e:d7:12:5d:04:8f:02:71:1c:5c:8d:2e:d5: 44:48:e3:62:18:79:23:b2:5d:c5:56:98:7f:52:84: 0d:77:84:2c:f0:e2:13:d9:0c:84:15:a3:ea:2a:6c: bf:af:e9:64:db:6a:f3:90:ae:b2:84:d5:a2:47:14: 8a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C1:EA:F5:0A:C8:74:A3:DB:5A:B2:D1:A9:B7:B2:36:8F:E0:B6:C0 X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/323430363a643434303a666666663a3a2f34382d3438203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:d440:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 36:35:24:ee:b9:ad:4c:90:a9:9c:2b:36:e4:3b:b4:0f:8b:ab: f5:9e:c3:2f:bb:94:53:29:2f:ca:bd:03:d1:aa:cd:ef:04:6e: 0e:9d:5f:18:da:e0:9d:ce:bc:0b:03:03:35:6d:53:51:0c:32: 5a:74:28:c5:99:f2:fd:d9:f9:91:32:27:15:2d:3e:fd:c3:c4: f4:99:38:0e:39:63:89:03:39:41:c8:5f:3e:c5:e1:94:81:d8: 1b:18:df:6f:02:d0:d0:50:fc:30:55:00:f1:ce:11:75:75:4a: 6b:1c:7b:6c:63:4d:f0:67:1e:b0:4f:0f:48:af:30:db:b3:d9: 48:45:62:ff:2d:a9:9e:18:6a:4d:cc:c8:03:e1:4a:40:6c:33: 95:ea:6d:44:4f:3f:90:30:26:75:d8:df:42:a8:fc:ff:02:33: 6e:c5:ab:9a:ca:89:9a:d6:ed:28:38:ea:46:fa:d6:0e:e0:a0: 2b:b6:04:4e:32:4b:95:9a:94:42:7a:d4:fa:f9:6c:92:f3:72: 7b:57:c4:94:26:f8:bb:a9:a0:83:f1:85:a5:08:aa:46:f0:1e: 71:80:fd:09:a5:14:aa:8e:a3:55:24:a3:a2:20:f5:17:16:2b: c8:48:df:ca:df:c3:76:f3:19:b4:38:ad:6b:81:52:35:9b:14: 47:16:c1:86 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIULJavw1d9qUNEBJa3HcJeMERPJfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjAxMjIwODIwMDRaFw0yNzAxMjEwODI1MDRaMDMxMTAvBgNV BAMTKDNGQzFFQUY1MEFDODc0QTNEQjVBQjJEMUE5QjdCMjM2OEZFMEI2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkRym/hLiTxtSQrmu294MYvyFs EtBP3ic1cqABt4JVY3u/nL+XeTEfLRUhb0G6MCPelNS2/9WjYY+OEqVWKJlO2v/U JsLqi3H1zy8MtgLI6s4DCCH/K7QDs9HAkAEY0MqeomEQxst5NOXvSkxMjvIZdVO2 Ry2Vk84CVE8v2ibV05L4bKj+rJ+E4F3DxMnAsTQQwSffR22z/zP05EXOJWkfAq3k 7KnhjdjEQf08zmqKW0VMJ1bOHqR0EFJhn4ljzvf5+TPxPtcSXQSPAnEcXI0u1URI 42IYeSOyXcVWmH9ShA13hCzw4hPZDIQVo+oqbL+v6WTbavOQrrKE1aJHFIpFAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQUP8Hq9QrIdKPbWrLRqbeyNo/gtsAwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzIzNDMwMzYz YTY0MzQzNDMwM2E2NjY2NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz ODM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQG1ED//zANBgkqhkiG9w0BAQsFAAOCAQEANjUk 7rmtTJCpnCs25Du0D4ur9Z7DL7uUUykvyr0D0arN7wRuDp1fGNrgnc68CwMDNW1T UQwyWnQoxZny/dn5kTInFS0+/cPE9Jk4DjljiQM5QchfPsXhlIHYGxjfbwLQ0FD8 MFUA8c4RdXVKaxx7bGNN8GcesE8PSK8w27PZSEVi/y2pnhhqTczIA+FKQGwzlept RE8/kDAmddjfQqj8/wIzbsWrmsqJmtbtKDjqRvrWDuCgK7YETjJLlZqUQnrU+vls kvNye1fElCb4u6mgg/GFpQiqRvAecYD9CaUUqo6jVSSjoiD1FxYryEjfyt/DdvMZ tDita4FSNZsURxbBhg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:11:38 2026 by rpki-client