This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa File: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (raw, json) Hash identifier: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs= Subject key identifier: F1:64:48:3F:C8:DD:2C:78:09:A8:27:9B:90:C0:12:86:0E:9F:35:56 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 3E4406093A4FCD85181B3C04BDF0AF65FC8E3E3F Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:15:33 +0000 ROA not before: Tue 20 Jan 2026 02:10:33 +0000 ROA not after: Tue 19 Jan 2027 02:15:33 +0000 asID: 9808 IP address blocks: 2407:8f40:2::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:44:06:09:3a:4f:cd:85:18:1b:3c:04:bd:f0:af:65:fc:8e:3e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Jan 20 02:10:33 2026 GMT Not After : Jan 19 02:15:33 2027 GMT Subject: CN=F164483FC8DD2C7809A8279B90C012860E9F3556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:bf:de:35:af:53:a2:8c:85:d8:12:b1:f5: a2:16:0e:0b:e6:0c:53:61:66:12:69:45:c4:9b:4d: 3d:82:c1:7a:6c:c6:ae:d5:54:7a:7e:2d:e9:d1:a3: 26:78:c0:bc:a1:a9:f5:06:1e:59:eb:dd:a5:60:85: d3:63:cf:1f:d8:c8:11:87:01:16:34:11:2c:bd:8a: 61:1e:e5:ac:b4:6c:f3:40:eb:2b:0a:05:fe:c1:5c: 88:a7:fc:f3:b5:2f:94:cd:0e:b1:ad:a6:1c:43:9c: fd:20:60:60:ae:26:3b:ca:cb:0a:f0:75:d6:12:f0: ac:2a:46:1a:5d:c3:4f:b0:7e:d0:a9:02:f8:49:c9: ec:f2:78:58:6e:dd:eb:db:27:df:03:df:4f:ce:bd: 80:36:56:6c:89:bd:f8:4c:ef:44:8d:ee:33:c8:ab: cf:96:ce:5d:6b:1d:69:3b:53:1a:be:a0:04:ee:15: 14:bf:68:c8:e7:2e:1f:90:8b:35:37:db:87:67:ef: fe:31:30:83:32:ea:55:f6:84:dd:02:a2:90:46:f3: c8:82:41:ef:53:69:07:9f:9e:21:28:bd:4e:3c:d2: f8:4f:d8:bc:26:3a:4d:2c:c4:7d:13:7c:91:19:b2: 4f:10:a7:ca:78:b1:9f:d4:9d:5b:8c:f7:c0:30:93: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:64:48:3F:C8:DD:2C:78:09:A8:27:9B:90:C0:12:86:0E:9F:35:56 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:8f40:2::/48 Signature Algorithm: sha256WithRSAEncryption d0:07:d4:fd:53:72:6c:50:99:aa:cc:f1:30:d9:d5:99:25:9f: c9:6e:fa:ad:f5:9e:a8:a4:79:1f:c6:a8:98:f8:3b:81:2b:f9: 3d:30:21:3b:16:9a:89:ad:ab:b1:f3:bc:42:c8:76:09:21:19: 08:66:0b:10:ef:80:d6:0b:46:aa:a0:6d:05:e2:d1:6a:51:28: 7a:43:aa:30:c3:e7:33:20:75:35:54:91:4c:61:e4:61:5b:22: 6d:ff:f0:34:1e:c1:8e:61:7c:c1:ba:44:f4:c6:90:dd:6c:d1: e3:a8:39:25:0c:f5:0e:f4:41:e6:f1:8f:34:ce:bb:76:5f:4f: 10:85:78:88:f7:4d:dd:19:7c:eb:63:61:ff:13:57:d2:47:13: b0:ed:a1:85:2a:50:2e:b6:58:a2:3f:34:d6:46:d9:a9:0e:4b: 69:7f:cc:27:e4:5a:c7:15:92:52:b7:7d:eb:df:8e:06:3e:29: af:9e:5f:e6:a5:95:15:01:5e:35:96:05:03:1f:33:ab:1f:aa: a2:f4:2c:e4:a0:27:75:97:1e:8e:2b:c3:93:c2:c6:83:14:b3: 00:6f:61:a1:d2:26:20:93:c8:e7:eb:b9:dd:f1:4e:ae:16:8c: 88:9b:2f:fb:3d:6f:16:10:bb:4f:91:97:e9:71:b6:7d:2d:31: 89:82:38:53 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPkQGCTpPzYUYGzwEvfCvZfyOPj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjAxMjAwMjEwMzNaFw0yNzAxMTkwMjE1MzNaMDMxMTAvBgNV BAMTKEYxNjQ0ODNGQzhERDJDNzgwOUE4Mjc5QjkwQzAxMjg2MEU5RjM1NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8wb/eNa9TooyF2BKx9aIWDgvm DFNhZhJpRcSbTT2CwXpsxq7VVHp+LenRoyZ4wLyhqfUGHlnr3aVghdNjzx/YyBGH ARY0ESy9imEe5ay0bPNA6ysKBf7BXIin/PO1L5TNDrGtphxDnP0gYGCuJjvKywrw ddYS8KwqRhpdw0+wftCpAvhJyezyeFhu3evbJ98D30/OvYA2VmyJvfhM70SN7jPI q8+Wzl1rHWk7Uxq+oATuFRS/aMjnLh+QizU324dn7/4xMIMy6lX2hN0CopBG88iC Qe9TaQefniEovU480vhP2LwmOk0sxH0TfJEZsk8Qp8p4sZ/UnVuM98Awk6GdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU8WRIP8jdLHgJqCebkMAShg6fNVYwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzE5Mjk2My8wLzMyMzQzMDM3M2Ez ODY2MzQzMDNhMzIzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQHj0AAAjANBgkqhkiG9w0BAQsFAAOCAQEA0AfU/VNybFCZqszxMNnV mSWfyW76rfWeqKR5H8aomPg7gSv5PTAhOxaaia2rsfO8Qsh2CSEZCGYLEO+A1gtG qqBtBeLRalEoekOqMMPnMyB1NVSRTGHkYVsibf/wNB7BjmF8wbpE9MaQ3WzR46g5 JQz1DvRB5vGPNM67dl9PEIV4iPdN3Rl862Nh/xNX0kcTsO2hhSpQLrZYoj801kbZ qQ5LaX/MJ+RaxxWSUrd969+OBj4pr55f5qWVFQFeNZYFAx8zqx+qovQs5KAndZce jivDk8LGgxSzAG9hodImIJPI5+u53fFOrhaMiJsv+z1vFhC7T5GX6XG2fS0xiYI4 Uw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:29 2026 by rpki-client