This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa File: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (raw, json) Hash identifier: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8= Subject key identifier: BF:74:E9:20:01:48:1E:B5:5E:FE:67:93:7D:AB:87:24:6D:88:39:31 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 28D0D700F2BA220F7E989CC3E808529B60A0466A Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa Signing time: Tue 20 Jan 2026 02:15:33 +0000 ROA not before: Tue 20 Jan 2026 02:10:33 +0000 ROA not after: Tue 19 Jan 2027 02:15:33 +0000 asID: 135061 IP address blocks: 2407:8f40:2::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d0:d7:00:f2:ba:22:0f:7e:98:9c:c3:e8:08:52:9b:60:a0:46:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Jan 20 02:10:33 2026 GMT Not After : Jan 19 02:15:33 2027 GMT Subject: CN=BF74E92001481EB55EFE67937DAB87246D883931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:fc:6b:98:37:f0:c7:48:93:c3:b1:0e:48: 94:dc:56:9a:99:7a:94:e3:a1:6c:49:a3:9a:bb:1d: 7b:8e:c2:65:04:9c:ea:87:ab:51:26:6e:fb:2e:24: 22:ea:3f:17:6d:d5:2c:f6:5b:f8:07:f0:82:cb:da: 5a:5a:9f:23:7c:a1:5e:01:c2:1c:37:f8:be:13:d5: 61:ac:71:f2:5a:3c:11:2b:ad:91:fc:b6:9f:8c:a4: bc:04:2b:ef:df:2e:31:41:b4:39:0b:49:73:8e:70: 3c:aa:0e:20:3c:d1:02:40:4d:f9:a1:5c:93:1d:d3: 4a:df:c8:cd:d8:51:9c:50:3a:83:3c:4c:56:9a:99: f4:66:b8:ce:57:24:f9:7c:d3:74:79:b8:66:c9:94: d1:cc:b5:d7:37:08:63:cb:d9:76:7f:6a:72:8f:b5: 15:e0:e7:18:62:d4:a6:46:a5:f4:88:fa:83:79:56: 01:3d:da:40:56:76:98:d6:39:7c:46:48:f6:29:f5: c7:c9:9a:5f:14:25:ec:df:15:43:da:63:16:ad:64: 81:14:01:a2:76:09:8a:22:43:71:c9:b8:4d:39:a2: 7a:21:14:88:fb:07:62:10:3d:4f:87:23:87:6d:e8: 82:61:04:bd:2d:10:66:20:7c:01:18:05:dd:14:2a: 6a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:74:E9:20:01:48:1E:B5:5E:FE:67:93:7D:AB:87:24:6D:88:39:31 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:8f40:2::/48 Signature Algorithm: sha256WithRSAEncryption 9d:db:64:de:25:a2:9c:80:d9:1e:3b:f4:09:ef:5c:5b:e8:d1: d1:e4:af:80:f1:27:4b:57:21:bd:a4:5a:63:2d:9a:bc:c1:3b: c2:67:44:26:fc:52:7c:fc:36:dc:71:8d:72:53:31:9f:53:be: 70:7f:c0:f2:96:9f:0d:06:25:6c:33:ed:a2:f9:66:b6:bf:64: 1e:3a:1c:88:05:cd:24:8b:e2:7d:f5:97:21:39:91:90:c0:34: 76:d8:f2:b6:ad:0e:45:57:2a:ff:b1:75:2a:98:d1:5b:d4:ab: 7a:5d:f5:97:3e:13:de:78:76:6d:65:91:2a:d7:ad:77:b6:23: e4:eb:a4:26:4a:64:4c:dc:1e:f2:28:d2:e7:a0:f1:f1:35:a6: 3a:12:1d:6c:85:7e:ae:2d:15:99:3a:c3:0f:0c:cf:c0:b9:14: 91:62:83:31:3d:7e:76:b6:6a:08:dc:79:6f:87:fa:b9:1f:ce: b0:ef:e2:34:5c:82:e3:5d:fc:e4:cf:a9:8b:6c:7e:de:d1:5e: ed:ab:c8:e7:87:6a:b1:c0:91:5a:68:93:c7:24:30:eb:75:0b: 05:5b:a6:bf:5a:43:38:ab:14:a4:92:8d:c2:de:a9:eb:1b:f0: 1c:97:b2:b9:ad:03:eb:e5:ca:66:94:16:4e:5f:e6:14:c8:c7: d3:d9:89:86 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKNDXAPK6Ig9+mJzD6AhSm2CgRmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjAxMjAwMjEwMzNaFw0yNzAxMTkwMjE1MzNaMDMxMTAvBgNV BAMTKEJGNzRFOTIwMDE0ODFFQjU1RUZFNjc5MzdEQUI4NzI0NkQ4ODM5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4q/xrmDfwx0iTw7EOSJTcVpqZ epTjoWxJo5q7HXuOwmUEnOqHq1EmbvsuJCLqPxdt1Sz2W/gH8ILL2lpanyN8oV4B whw3+L4T1WGscfJaPBErrZH8tp+MpLwEK+/fLjFBtDkLSXOOcDyqDiA80QJATfmh XJMd00rfyM3YUZxQOoM8TFaamfRmuM5XJPl803R5uGbJlNHMtdc3CGPL2XZ/anKP tRXg5xhi1KZGpfSI+oN5VgE92kBWdpjWOXxGSPYp9cfJml8UJezfFUPaYxatZIEU AaJ2CYoiQ3HJuE05onohFIj7B2IQPU+HI4dt6IJhBL0tEGYgfAEYBd0UKmr3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv3TpIAFIHrVe/meTfauHJG2IOTEwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MTkyOTYzLzAvMzIzNDMwMzcz YTM4NjYzNDMwM2EzMjNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMxMzMzNTMwMzYz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQHj0AAAjANBgkqhkiG9w0BAQsFAAOCAQEAndtk3iWinIDZ Hjv0Ce9cW+jR0eSvgPEnS1chvaRaYy2avME7wmdEJvxSfPw23HGNclMxn1O+cH/A 8pafDQYlbDPtovlmtr9kHjociAXNJIviffWXITmRkMA0dtjytq0ORVcq/7F1KpjR W9Srel31lz4T3nh2bWWRKtetd7Yj5OukJkpkTNwe8ijS56Dx8TWmOhIdbIV+ri0V mTrDDwzPwLkUkWKDMT1+drZqCNx5b4f6uR/OsO/iNFyC41385M+pi2x+3tFe7avI 54dqscCRWmiTxyQw63ULBVumv1pDOKsUpJKNwt6p6xvwHJeyua0D6+XKZpQWTl/m FMjH09mJhg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:23 2026 by rpki-client