This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/323430343a633330303a3a2f33322d3438203d3e2034383539.roa File: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (raw, json) Hash identifier: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I= Subject key identifier: 6D:28:02:F5:35:BF:BA:42:4D:BC:DD:C0:41:93:34:7E:E8:77:25:ED Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 2EEA21622E7290986BB8D2EACF9F787D2E2483D3 Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/323430343a633330303a3a2f33322d3438203d3e2034383539.roa Signing time: Tue 20 Jan 2026 02:14:15 +0000 ROA not before: Tue 20 Jan 2026 02:09:15 +0000 ROA not after: Tue 19 Jan 2027 02:14:15 +0000 asID: 4859 IP address blocks: 2404:c300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ea:21:62:2e:72:90:98:6b:b8:d2:ea:cf:9f:78:7d:2e:24:83:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: Jan 20 02:09:15 2026 GMT Not After : Jan 19 02:14:15 2027 GMT Subject: CN=6D2802F535BFBA424DBCDDC04193347EE87725ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:a9:47:7e:98:7f:93:47:9a:6c:bc:14:83: fe:5c:72:96:73:e4:16:a0:5b:a9:ec:42:2b:ef:bf: d7:67:6f:4c:8c:bf:ea:90:85:c9:94:00:31:ce:67: d1:b6:8e:f9:93:5b:fb:4d:db:48:79:77:39:b0:3f: 2f:4f:91:59:35:86:53:56:3f:c4:6f:d7:9c:f2:97: a1:e1:1f:dd:b2:d1:a7:76:45:63:ca:a2:a8:d7:88: e8:93:8f:bf:99:a9:5a:a5:8f:1c:5d:b5:f2:3e:75: b6:90:04:0e:a3:d5:c8:fb:64:70:18:f6:0d:6e:c8: 07:6f:12:d8:36:54:15:46:e0:77:ef:0a:10:cd:d8: 7d:d2:f5:5d:a9:b5:b2:25:e8:df:85:7d:3e:9a:2b: d7:5c:4e:f5:f0:9d:fb:12:77:8e:f3:29:c0:76:ba: dd:ab:91:c2:d4:94:81:9b:68:c9:be:89:f2:5f:31: 27:68:20:59:16:e4:79:5a:3d:4b:1f:2a:98:d0:41: 21:27:7f:c4:5f:13:eb:80:15:e0:2b:14:70:ca:4a: 93:6e:4e:ca:14:47:84:70:d1:30:3a:13:b2:38:3a: 87:3b:ec:29:a6:4f:11:af:1e:e9:86:a9:b3:70:7f: 8a:26:4f:9c:3d:cc:b1:ba:54:ee:90:3b:4d:ea:3d: df:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:28:02:F5:35:BF:BA:42:4D:BC:DD:C0:41:93:34:7E:E8:77:25:ED X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/323430343a633330303a3a2f33322d3438203d3e2034383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c300::/32 Signature Algorithm: sha256WithRSAEncryption 2b:d6:18:fd:62:d3:17:ce:32:70:39:a9:e8:c7:d0:0a:f0:11: a9:d7:3b:a6:d0:d7:d1:a8:4f:4d:84:db:a2:f7:50:a0:15:68: 76:6c:ae:bc:b9:4d:5a:72:f6:ae:18:9f:85:29:3b:37:9d:af: 0b:21:ef:3a:28:0d:7e:70:50:5c:fd:c7:c5:13:f1:6b:d7:ae: 2b:8a:97:f3:88:38:b9:4b:b7:2c:e3:11:43:2d:3d:ab:9a:79: 63:1e:d3:2a:e2:d0:e0:2a:0b:0e:51:06:29:92:1e:87:cc:d7: 55:eb:ca:45:c3:f1:fc:0b:1c:9b:37:7b:aa:0f:53:bc:cb:4e: 56:92:71:05:51:bc:41:97:95:cf:5d:a2:4e:b0:ac:0c:fe:71: 0f:3d:8e:82:fc:34:fd:ec:11:23:6a:bf:d0:71:9f:43:13:33: 8c:f4:0d:a0:08:25:87:43:a8:a1:31:9c:4b:5b:b8:e3:f4:bd: 3f:f6:30:cc:54:f3:dc:71:55:af:61:89:38:e5:71:32:ee:d1: 5d:de:e8:92:02:77:98:3f:91:00:38:00:cf:00:11:88:57:65: a3:09:0f:2f:07:90:8e:24:87:62:14:7a:88:53:e6:bc:b3:d0: 3d:84:6f:da:b3:ca:c1:e3:75:0d:6c:b1:44:71:0a:95:be:57: fa:fe:39:37 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIULuohYi5ykJhruNLqz594fS4kg9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjAxMjAwMjA5MTVaFw0yNzAxMTkwMjE0MTVaMDMxMTAvBgNV BAMTKDZEMjgwMkY1MzVCRkJBNDI0REJDRERDMDQxOTMzNDdFRTg3NzI1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkalHfph/k0eabLwUg/5ccpZz 5BagW6nsQivvv9dnb0yMv+qQhcmUADHOZ9G2jvmTW/tN20h5dzmwPy9PkVk1hlNW P8Rv15zyl6HhH92y0ad2RWPKoqjXiOiTj7+ZqVqljxxdtfI+dbaQBA6j1cj7ZHAY 9g1uyAdvEtg2VBVG4HfvChDN2H3S9V2ptbIl6N+FfT6aK9dcTvXwnfsSd47zKcB2 ut2rkcLUlIGbaMm+ifJfMSdoIFkW5HlaPUsfKpjQQSEnf8RfE+uAFeArFHDKSpNu TsoUR4Rw0TA6E7I4Ooc77CmmTxGvHumGqbNwf4omT5w9zLG6VO6QO03qPd+XAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUbSgC9TW/ukJNvN3AQZM0fuh3Je0wHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0OTcwNDk3LzAvMzIzNDMwMzQzYTYz MzMzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzQzODM1Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkBMMAMA0GCSqGSIb3DQEBCwUAA4IBAQAr1hj9YtMXzjJwOanox9AK8BGp1zum 0NfRqE9NhNui91CgFWh2bK68uU1acvauGJ+FKTs3na8LIe86KA1+cFBc/cfFE/Fr 164ripfziDi5S7cs4xFDLT2rmnljHtMq4tDgKgsOUQYpkh6HzNdV68pFw/H8Cxyb N3uqD1O8y05WknEFUbxBl5XPXaJOsKwM/nEPPY6C/DT97BEjar/QcZ9DEzOM9A2g CCWHQ6ihMZxLW7jj9L0/9jDMVPPccVWvYYk45XEy7tFd3uiSAneYP5EAOADPABGI V2WjCQ8vB5COJIdiFHqIU+a8s9A9hG/as8rB43UNbLFEcQqVvlf6/jk3 -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:43 2026 by rpki-client