This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa File: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (raw, json) Hash identifier: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q= Subject key identifier: C8:D5:FE:18:40:F9:A0:69:D4:E8:85:17:26:8B:BE:E2:FD:87:E9:9E Certificate issuer: /CN=37E65D3D60B45C142967841513D8E56D4F8E3827 Certificate serial: 7CA19619051291CBA4FC4325418896861F9FD57A Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa Signing time: Tue 20 Jan 2026 02:23:48 +0000 ROA not before: Tue 20 Jan 2026 02:18:48 +0000 ROA not after: Tue 19 Jan 2027 02:23:48 +0000 asID: 37969 IP address blocks: 2400:8fc0:571::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a1:96:19:05:12:91:cb:a4:fc:43:25:41:88:96:86:1f:9f:d5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827 Validity Not Before: Jan 20 02:18:48 2026 GMT Not After : Jan 19 02:23:48 2027 GMT Subject: CN=C8D5FE1840F9A069D4E88517268BBEE2FD87E99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:39:0d:8c:5f:71:ec:f9:63:0a:6a:cf:2d:3a: fe:b7:c0:86:9c:b5:39:f6:0a:35:ed:da:66:2c:2d: 30:78:a1:67:a1:12:0b:d9:13:02:6b:1d:b1:12:b9: 13:1c:65:a9:48:9e:79:3d:d4:52:55:ff:ab:cd:fb: 67:99:12:95:74:83:42:61:b5:ab:d7:f8:0f:41:e8: a7:a9:1d:88:f9:ed:70:c0:56:5b:43:2e:61:84:93: 21:6a:36:8a:35:5f:8d:6b:51:be:84:35:48:ed:9a: e0:eb:dd:9b:86:f5:6b:da:9a:b5:82:fe:85:7f:8a: da:fd:fa:4d:a2:e9:d7:9e:99:a0:98:4c:1c:13:6e: 9c:c7:07:a2:91:45:71:88:38:9e:74:a1:af:d9:cf: 7f:f0:69:be:3c:c5:02:cc:2b:84:d7:f6:4f:c4:4e: 24:33:b8:c1:15:f1:cd:25:43:41:17:bf:c2:5b:42: 1a:a2:dc:8a:5c:11:ba:a7:af:c5:5f:33:8d:da:19: f6:89:b6:96:2a:f5:38:e5:56:fd:6a:6e:51:c6:76: 41:40:d9:40:97:57:52:20:f4:1e:03:ac:b4:3b:e6: 6b:3e:e9:bc:fd:23:f0:c7:d0:8e:1d:49:5f:ae:fc: ad:eb:88:cf:41:6c:89:6c:6b:05:04:fc:3f:ed:67: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D5:FE:18:40:F9:A0:69:D4:E8:85:17:26:8B:BE:E2:FD:87:E9:9E X509v3 Authority Key Identifier: keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:8fc0:571::/48 Signature Algorithm: sha256WithRSAEncryption 1d:a0:67:21:18:16:1c:a3:8a:cb:c1:5c:86:37:83:13:ee:05: 62:7d:61:47:12:ce:18:ee:91:38:ef:50:a4:42:56:f8:e9:3a: 8a:fb:e1:38:74:72:29:72:e7:40:95:60:9b:af:81:8d:d4:84: 22:bd:5b:43:e1:17:50:91:da:6d:25:ac:cc:63:a9:f6:3c:80: 0a:1e:6c:e1:6f:ef:34:71:a1:9f:4b:d0:d0:00:a6:cf:43:9c: 54:fb:97:99:de:e9:ff:cc:0b:44:55:df:38:a3:ec:27:e8:5a: f1:d1:7b:08:d7:02:f5:48:cf:73:b7:7e:03:4b:c2:d3:f4:8e: 8a:ac:d9:88:f3:4e:26:1e:6b:01:6b:db:83:ba:67:b3:5b:d3: 3f:0d:b7:fa:90:e5:4a:a0:a3:6a:45:49:45:50:19:5f:b8:00: b5:74:b3:00:47:c5:45:31:81:d7:ba:78:9f:c0:30:33:80:f4: 64:4c:5a:25:02:1e:a2:c2:20:51:19:35:58:2f:ff:65:fe:1d: cb:f7:c7:f8:af:96:68:22:e4:69:55:09:55:9a:c1:1e:ac:06: 41:73:49:32:ec:d9:ce:d4:e8:0a:12:00:76:e3:97:c2:8d:f8: ba:d4:29:39:f0:4e:8c:36:33:8f:19:6f:34:1c:2b:95:6f:e0: 8a:c5:b8:21 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUfKGWGQUSkcuk/EMlQYiWhh+f1XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0 RjhFMzgyNzAeFw0yNjAxMjAwMjE4NDhaFw0yNzAxMTkwMjIzNDhaMDMxMTAvBgNV BAMTKEM4RDVGRTE4NDBGOUEwNjlENEU4ODUxNzI2OEJCRUUyRkQ4N0U5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwOQ2MX3Hs+WMKas8tOv63wIac tTn2CjXt2mYsLTB4oWehEgvZEwJrHbESuRMcZalInnk91FJV/6vN+2eZEpV0g0Jh tavX+A9B6KepHYj57XDAVltDLmGEkyFqNoo1X41rUb6ENUjtmuDr3ZuG9WvamrWC /oV/itr9+k2i6deemaCYTBwTbpzHB6KRRXGIOJ50oa/Zz3/wab48xQLMK4TX9k/E TiQzuMEV8c0lQ0EXv8JbQhqi3IpcEbqnr8VfM43aGfaJtpYq9TjlVv1qblHGdkFA 2UCXV1Ig9B4DrLQ75ms+6bz9I/DH0I4dSV+u/K3riM9BbIlsawUE/D/tZ2S5AgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUyNX+GED5oGnU6IUXJou+4v2H6Z4wHwYDVR0j BBgwFoAUN+ZdPWC0XBQpZ4QVE9jlbU+OOCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8wLzM3RTY1RDNENjBCNDVDMTQyOTY3ODQxNTEzRDhF NTZENEY4RTM4MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0RjhFMzgyNy5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDg0ODY2LzAvMzIzNDMwMzAz YTM4NjY2MzMwM2EzNTM3MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM3Mzkz NjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJACPwAVxMA0GCSqGSIb3DQEBCwUAA4IBAQAdoGchGBYc o4rLwVyGN4MT7gVifWFHEs4Y7pE471CkQlb46TqK++E4dHIpcudAlWCbr4GN1IQi vVtD4RdQkdptJazMY6n2PIAKHmzhb+80caGfS9DQAKbPQ5xU+5eZ3un/zAtEVd84 o+wn6Frx0XsI1wL1SM9zt34DS8LT9I6KrNmI804mHmsBa9uDumezW9M/Dbf6kOVK oKNqRUlFUBlfuAC1dLMAR8VFMYHXunifwDAzgPRkTFolAh6iwiBRGTVYL/9l/h3L 98f4r5ZoIuRpVQlVmsEerAZBc0ky7NnO1OgKEgB245fCjfi61Ck58E6MNjOPGW80 HCuVb+CKxbgh -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:06 2026 by rpki-client