This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/323430303a663836303a3a2f33322d3332203d3e20313436373838.roa File: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (raw, json) Hash identifier: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k= Subject key identifier: 87:AC:D4:09:CD:A7:A6:75:65:CB:C7:10:16:FA:5E:B3:C9:8C:41:6D Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 15F383291CEE1F14D648E91B80728CDF1CFBD420 Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/323430303a663836303a3a2f33322d3332203d3e20313436373838.roa Signing time: Tue 20 Jan 2026 02:19:10 +0000 ROA not before: Tue 20 Jan 2026 02:14:10 +0000 ROA not after: Tue 19 Jan 2027 02:19:10 +0000 asID: 146788 IP address blocks: 2400:f860::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 08:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f3:83:29:1c:ee:1f:14:d6:48:e9:1b:80:72:8c:df:1c:fb:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: Jan 20 02:14:10 2026 GMT Not After : Jan 19 02:19:10 2027 GMT Subject: CN=87ACD409CDA7A67565CBC71016FA5EB3C98C416D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d8:c9:ca:6d:a9:7f:90:33:cf:49:6f:f5:8e: 66:40:84:a2:3f:34:21:94:5b:ba:a7:13:25:26:40: 7c:35:15:bb:f3:cf:56:ec:6a:15:53:ac:dc:b9:47: 83:e9:4f:20:85:b9:9b:a5:7e:56:da:d1:94:33:a8: 34:1d:ed:14:cf:ab:35:20:27:c3:4d:e0:fc:12:ae: 1d:48:87:ac:ab:cb:f4:ec:0a:9a:65:a4:b6:8f:77: bb:c0:b8:e4:3a:63:0b:47:e4:53:cc:41:70:37:b9: 1b:02:c3:5d:a1:72:fe:e4:8b:92:8c:c2:33:18:62: ab:26:c5:9d:dd:7d:bd:30:f6:1d:72:c8:45:8c:89: d5:22:1b:55:39:41:cc:4f:7b:d3:bf:2e:ea:c6:98: 97:4f:24:77:ed:7d:94:be:85:21:0e:b4:45:c8:73: d3:c1:bc:88:5a:dc:82:fb:f8:2c:5c:de:06:7a:8d: 3a:0f:79:8a:ec:eb:f8:78:6e:86:c6:32:b4:b7:3e: ff:e2:19:c2:db:68:69:c4:90:d0:9e:90:31:73:20: b8:0c:95:fd:d0:72:46:de:86:42:ac:42:b6:47:1c: b7:59:a3:b8:ae:d7:41:33:b7:55:4a:4c:5b:80:44: ae:6d:22:d3:cf:51:92:f3:45:92:80:e3:c3:7c:a9: ce:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AC:D4:09:CD:A7:A6:75:65:CB:C7:10:16:FA:5E:B3:C9:8C:41:6D X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/323430303a663836303a3a2f33322d3332203d3e20313436373838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:f860::/32 Signature Algorithm: sha256WithRSAEncryption 4e:63:ca:61:eb:92:4c:ef:96:e6:12:f1:3e:ab:0e:bf:ec:1b: ea:2e:de:3a:6f:17:9f:06:8d:f9:d0:ed:98:db:59:ee:4f:0a: 5e:46:1a:40:56:ac:f3:97:1f:db:59:d2:79:fa:9d:21:0a:b0: 01:a6:fc:31:d4:5d:23:26:96:d7:f5:79:f2:aa:20:a9:55:aa: 51:71:a9:1f:d8:0b:33:b5:66:b2:07:7d:d4:56:c2:6c:57:0d: 03:8a:55:64:cb:55:79:4f:ea:a4:56:9e:23:9a:14:4e:63:ca: 28:7e:5e:db:e7:19:bf:45:a6:e2:5d:33:33:b5:70:c7:cb:16: dd:51:7a:6f:6a:53:f8:95:7f:a8:5f:2f:ba:c7:74:55:db:33: 93:34:3c:6c:26:c2:c2:f8:3a:b8:19:c9:64:51:be:d9:b6:79: 1e:47:40:af:64:0f:de:4b:86:01:3c:70:79:d3:6e:47:31:b6: 43:86:d3:0a:97:70:83:98:7d:1a:f8:b8:ee:02:ab:a0:e5:f8: b7:99:0e:db:70:60:ab:bc:d7:7d:a6:8b:40:6e:ce:d4:a0:22: 09:15:82:b0:99:ab:63:c1:32:48:41:26:de:31:26:ed:c0:d8: 9f:ac:49:5b:46:85:e9:81:99:b5:78:f5:35:e6:d0:ed:3f:4e: 53:17:e9:64 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUFfODKRzuHxTWSOkbgHKM3xz71CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjAxMjAwMjE0MTBaFw0yNzAxMTkwMjE5MTBaMDMxMTAvBgNV BAMTKDg3QUNENDA5Q0RBN0E2NzU2NUNCQzcxMDE2RkE1RUIzQzk4QzQxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2MnKbal/kDPPSW/1jmZAhKI/ NCGUW7qnEyUmQHw1Fbvzz1bsahVTrNy5R4PpTyCFuZulflba0ZQzqDQd7RTPqzUg J8NN4PwSrh1Ih6yry/TsCpplpLaPd7vAuOQ6YwtH5FPMQXA3uRsCw12hcv7ki5KM wjMYYqsmxZ3dfb0w9h1yyEWMidUiG1U5QcxPe9O/LurGmJdPJHftfZS+hSEOtEXI c9PBvIha3IL7+Cxc3gZ6jToPeYrs6/h4bobGMrS3Pv/iGcLbaGnEkNCekDFzILgM lf3QckbehkKsQrZHHLdZo7iu10Ezt1VKTFuARK5tItPPUZLzRZKA48N8qc7vAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUh6zUCc2npnVly8cQFvpes8mMQW0wHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTg4ODI1OC8wLzMyMzQzMDMwM2E2 NjM4MzYzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzQzNjM3MzgzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQA+GAwDQYJKoZIhvcNAQELBQADggEBAE5jymHrkkzvluYS8T6rDr/s G+ou3jpvF58GjfnQ7ZjbWe5PCl5GGkBWrPOXH9tZ0nn6nSEKsAGm/DHUXSMmltf1 efKqIKlVqlFxqR/YCzO1ZrIHfdRWwmxXDQOKVWTLVXlP6qRWniOaFE5jyih+Xtvn Gb9FpuJdMzO1cMfLFt1Rem9qU/iVf6hfL7rHdFXbM5M0PGwmwsL4OrgZyWRRvtm2 eR5HQK9kD95LhgE8cHnTbkcxtkOG0wqXcIOYfRr4uO4Cq6Dl+LeZDttwYKu8132m i0BuztSgIgkVgrCZq2PBMkhBJt4xJu3A2J+sSVtGhemBmbV49TXm0O0/TlMX6WQ= -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:23 2026 by rpki-client