This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/323430313a643065303a333a3a2f34382d3438203d3e20313334373638.roa File: 323430313a643065303a333a3a2f34382d3438203d3e20313334373638.roa (raw, json) Hash identifier: TNbj5NXZ3BfRUhxVBRN8SjedKPyEfL0pBmaY01EmYD8= Subject key identifier: D1:C0:39:F6:44:ED:40:D0:BB:46:0E:1F:94:FB:1E:D4:84:4F:46:03 Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 769AE715BD6812D2BEBF149223599145883D32BA Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/323430313a643065303a333a3a2f34382d3438203d3e20313334373638.roa Signing time: Tue 20 Jan 2026 02:21:37 +0000 ROA not before: Tue 20 Jan 2026 02:16:37 +0000 ROA not after: Tue 19 Jan 2027 02:21:37 +0000 asID: 134768 IP address blocks: 2401:d0e0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:9a:e7:15:bd:68:12:d2:be:bf:14:92:23:59:91:45:88:3d:32:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: Jan 20 02:16:37 2026 GMT Not After : Jan 19 02:21:37 2027 GMT Subject: CN=D1C039F644ED40D0BB460E1F94FB1ED4844F4603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:de:a5:64:b2:be:78:c7:dc:fc:9e:9c:48:85: 5d:b4:12:70:22:36:c8:55:76:04:51:c4:6c:1c:36: d1:55:da:e8:ce:e9:36:d1:30:9d:c8:dd:d6:89:74: fd:db:c1:63:4f:4c:9c:8d:55:0e:c0:dd:be:55:a0: 8b:43:01:e7:b6:19:76:00:77:4b:c8:b2:a4:dc:ca: 93:8e:00:80:2e:57:61:2b:92:4d:17:1e:4d:e5:3b: 7b:46:54:66:f7:64:41:df:f4:01:5a:f5:e5:fd:f0: 76:7e:97:16:ca:6c:03:f9:8d:fc:d7:46:18:d4:ba: a1:f4:4f:e1:2c:34:dd:6f:62:4f:7e:2d:27:d9:2e: 2c:a0:fd:73:1f:d3:d5:61:77:56:66:53:10:2a:17: 21:9d:ad:41:ca:77:82:4f:4b:39:74:c4:d6:e8:16: 5b:ea:05:84:15:96:3c:0d:18:f3:3f:f6:87:ed:e7: 6f:b5:de:1b:73:06:0b:5b:dc:87:21:de:2c:ed:4b: ff:c9:87:d1:e5:ec:af:49:77:66:52:81:15:43:79: 0d:10:7f:15:c6:fe:53:fd:ab:d5:05:08:3f:84:18: 86:69:66:29:b5:a5:48:1b:9c:2c:6b:df:ef:bd:be: eb:4b:d6:dc:5e:3d:29:ce:eb:1a:06:04:49:ec:7b: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C0:39:F6:44:ED:40:D0:BB:46:0E:1F:94:FB:1E:D4:84:4F:46:03 X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/323430313a643065303a333a3a2f34382d3438203d3e20313334373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:d0e0:3::/48 Signature Algorithm: sha256WithRSAEncryption 19:ae:c0:bb:43:1e:ce:58:43:90:ff:7e:8c:5c:a0:1c:19:d5: 66:e3:ec:0e:18:0d:dd:1a:55:bc:d8:4f:6f:4c:de:f0:42:f3: e3:14:1f:c1:a3:b6:74:38:04:a8:67:18:8e:f1:d7:86:10:7a: b5:bc:03:96:9a:21:4d:e5:f6:99:bc:9b:20:cf:52:2c:46:1b: 0c:89:66:47:8a:6c:e8:83:3c:63:4c:e9:a7:71:c9:74:f5:b7: a8:4b:a1:e9:aa:52:64:d9:4b:50:09:b2:12:dc:9d:2d:77:f1: a4:fe:39:b0:5c:8e:f9:57:83:42:06:d8:ec:a9:f1:74:e7:a5: b1:38:5f:ea:ce:0d:68:45:49:8a:64:32:dd:81:fb:d7:49:7f: f4:73:61:f2:e3:e5:f4:a7:aa:eb:8f:43:98:a8:c6:2f:c6:9d: a5:7d:cf:f4:5a:a9:eb:b6:ef:d8:28:79:d7:87:12:b4:a9:13: c6:20:16:4c:c3:1e:6d:8d:47:21:2b:c4:4c:a9:5f:d7:b1:e3: bb:59:66:60:01:56:0b:a4:b6:82:f4:ee:34:bc:66:af:fd:e0: 36:9e:8b:d9:3e:f1:c6:12:c9:a2:d9:2c:c9:52:5e:dc:83:15: 3f:fc:ae:2f:1e:f0:7c:45:91:80:b1:1e:29:8a:c3:a1:5b:80: 04:4e:8f:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdprnFb1oEtK+vxSSI1mRRYg9MrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjAxMjAwMjE2MzdaFw0yNzAxMTkwMjIxMzdaMDMxMTAvBgNV BAMTKEQxQzAzOUY2NDRFRDQwRDBCQjQ2MEUxRjk0RkIxRUQ0ODQ0RjQ2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs3qVksr54x9z8npxIhV20EnAi NshVdgRRxGwcNtFV2ujO6TbRMJ3I3daJdP3bwWNPTJyNVQ7A3b5VoItDAee2GXYA d0vIsqTcypOOAIAuV2Erkk0XHk3lO3tGVGb3ZEHf9AFa9eX98HZ+lxbKbAP5jfzX RhjUuqH0T+EsNN1vYk9+LSfZLiyg/XMf09Vhd1ZmUxAqFyGdrUHKd4JPSzl0xNbo FlvqBYQVljwNGPM/9oft52+13htzBgtb3Ich3iztS//Jh9Hl7K9Jd2ZSgRVDeQ0Q fxXG/lP9q9UFCD+EGIZpZim1pUgbnCxr3++9vutL1txePSnO6xoGBEnse0tfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0cA59kTtQNC7Rg4flPse1IRPRgMwHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NDU1MTA3LzAvMzIzNDMwMzEz YTY0MzA2NTMwM2EzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNDM3MzYz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQB0OAAAzANBgkqhkiG9w0BAQsFAAOCAQEAGa7Au0MezlhD kP9+jFygHBnVZuPsDhgN3RpVvNhPb0ze8ELz4xQfwaO2dDgEqGcYjvHXhhB6tbwD lpohTeX2mbybIM9SLEYbDIlmR4ps6IM8Y0zpp3HJdPW3qEuh6apSZNlLUAmyEtyd LXfxpP45sFyO+VeDQgbY7KnxdOelsThf6s4NaEVJimQy3YH710l/9HNh8uPl9Keq 649DmKjGL8adpX3P9Fqp67bv2Ch514cStKkTxiAWTMMebY1HISvETKlf17Hju1lm YAFWC6S2gvTuNLxmr/3gNp6L2T7xxhLJotksyVJe3IMVP/yuLx7wfEWRgLEeKYrD oVuABE6PDg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:41 2026 by rpki-client