This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa File: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (raw, json) Hash identifier: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk= Subject key identifier: 10:64:66:6B:06:19:13:14:28:DF:1E:B2:75:98:46:8F:37:7B:2A:BE Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 5C2B9A9E5602D19C03898905461B96F8E053E5F0 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa Signing time: Tue 20 Jan 2026 02:15:32 +0000 ROA not before: Tue 20 Jan 2026 02:10:32 +0000 ROA not after: Tue 19 Jan 2027 02:15:32 +0000 asID: 4816 IP address blocks: 2407:8f40:2::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2b:9a:9e:56:02:d1:9c:03:89:89:05:46:1b:96:f8:e0:53:e5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Jan 20 02:10:32 2026 GMT Not After : Jan 19 02:15:32 2027 GMT Subject: CN=1064666B0619131428DF1EB27598468F377B2ABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:11:57:e0:60:39:86:b6:28:4c:e7:8c:a8: a9:a9:1b:16:41:64:2a:34:06:20:17:34:a9:de:1e: de:89:53:8b:99:b9:10:0f:1e:17:94:1f:1c:8c:22: ba:03:05:1d:60:1e:63:17:6e:52:f0:94:8c:18:79: 0c:3c:7e:54:e3:fb:bb:7b:dc:72:8f:12:d5:99:54: eb:35:36:cc:6c:53:2b:8a:9d:27:46:0c:60:49:be: 18:78:c1:ed:fd:72:8c:78:a0:35:f2:07:90:22:c5: 46:92:cd:fd:dc:43:cb:da:21:e2:b3:12:d2:89:80: 7d:43:34:73:b2:e7:3d:d8:e1:e8:75:28:bc:3a:d5: ee:9a:12:34:50:40:a0:b0:a9:a4:56:06:ce:3a:6d: 5a:5e:4a:9f:ca:79:34:7a:3c:23:78:f6:82:c8:70: 5b:2a:0f:a7:48:a3:20:8f:dc:2c:4f:1f:2a:6b:0c: a2:bb:1d:ac:be:de:9b:34:b5:a2:86:d1:7f:b6:74: 9f:e6:b8:80:15:07:be:92:82:a2:69:56:c5:c5:4c: c8:76:68:41:8f:7c:c2:4c:11:4e:52:0e:d3:4e:8d: 6b:b3:68:5d:e6:7a:e0:7f:4e:5c:07:bd:f1:ea:38: 15:cc:df:9e:c4:3a:76:d3:50:e0:69:e1:9b:32:c5: 8e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:66:6B:06:19:13:14:28:DF:1E:B2:75:98:46:8F:37:7B:2A:BE X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:8f40:2::/48 Signature Algorithm: sha256WithRSAEncryption 9f:5d:24:c8:4d:3d:e4:bf:30:ae:ad:63:84:38:2d:23:ac:a1: ee:e8:8b:cc:58:62:f9:05:bb:21:9c:c4:22:62:21:3d:1f:6a: c8:27:d6:4d:01:2b:23:44:53:78:59:c4:c8:d5:d7:11:06:e0: 89:1f:ad:81:c7:3b:9f:e1:15:49:30:15:5e:ab:75:5a:b5:a4: 86:29:e6:45:70:2c:14:33:54:b4:d8:2e:92:4c:13:f9:1a:89: 95:aa:17:e3:d9:e2:34:89:c6:48:bc:47:ee:f3:24:2b:41:8d: 11:23:fc:68:14:4b:64:07:65:6b:b5:a9:0c:1e:80:e6:f5:7c: b5:0c:7e:bb:45:78:2f:dd:ad:92:11:88:0f:b8:05:80:34:f7: df:4c:d2:5b:37:84:f8:a7:f1:9b:cd:62:9a:a7:5f:16:94:58: 8d:2d:8c:27:32:1a:c2:6a:24:c4:9b:00:55:ed:47:d4:4c:9e: bb:41:08:20:f2:f1:1f:e1:d5:56:fe:7d:a2:0e:35:41:b3:52: 67:1f:cb:a2:43:f9:f5:64:5e:e8:24:c9:26:ce:c1:eb:ef:91: 81:2d:fb:15:39:b1:fb:73:84:81:7b:29:f9:eb:98:27:3e:1f: cf:fd:ab:07:b2:c9:22:53:99:c5:c4:74:9e:ac:95:d9:bd:c0: d9:f4:8e:18 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUXCuanlYC0ZwDiYkFRhuW+OBT5fAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjAxMjAwMjEwMzJaFw0yNzAxMTkwMjE1MzJaMDMxMTAvBgNV BAMTKDEwNjQ2NjZCMDYxOTEzMTQyOERGMUVCMjc1OTg0NjhGMzc3QjJBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDhFX4GA5hrYoTOeMqKmpGxZB ZCo0BiAXNKneHt6JU4uZuRAPHheUHxyMIroDBR1gHmMXblLwlIwYeQw8flTj+7t7 3HKPEtWZVOs1NsxsUyuKnSdGDGBJvhh4we39cox4oDXyB5AixUaSzf3cQ8vaIeKz EtKJgH1DNHOy5z3Y4eh1KLw61e6aEjRQQKCwqaRWBs46bVpeSp/KeTR6PCN49oLI cFsqD6dIoyCP3CxPHyprDKK7Hay+3ps0taKG0X+2dJ/muIAVB76SgqJpVsXFTMh2 aEGPfMJMEU5SDtNOjWuzaF3meuB/TlwHvfHqOBXM357EOnbTUOBp4ZsyxY73AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUEGRmawYZExQo3x6ydZhGjzd7Kr4wHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzE5Mjk2My8wLzMyMzQzMDM3M2Ez ODY2MzQzMDNhMzIzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzNDM4MzEzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQHj0AAAjANBgkqhkiG9w0BAQsFAAOCAQEAn10kyE095L8wrq1jhDgt I6yh7uiLzFhi+QW7IZzEImIhPR9qyCfWTQErI0RTeFnEyNXXEQbgiR+tgcc7n+EV STAVXqt1WrWkhinmRXAsFDNUtNgukkwT+RqJlaoX49niNInGSLxH7vMkK0GNESP8 aBRLZAdla7WpDB6A5vV8tQx+u0V4L92tkhGID7gFgDT330zSWzeE+Kfxm81imqdf FpRYjS2MJzIawmokxJsAVe1H1Eyeu0EIIPLxH+HVVv59og41QbNSZx/LokP59WRe 6CTJJs7B6++RgS37FTmx+3OEgXsp+euYJz4fz/2rB7LJIlOZxcR0nqyV2b3A2fSO GA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:25 2026 by rpki-client