This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/323430303a353238303a336330303a3a2f33382d3338203d3e203633313939.roa File: 323430303a353238303a336330303a3a2f33382d3338203d3e203633313939.roa (raw, json) Hash identifier: vLjzej9BGyHuqC6sUVDGzNiHv3TweGRyRvLEckbizcc= Subject key identifier: 85:D7:61:D2:CD:7E:E5:4A:D2:96:BB:3A:07:F1:3C:A7:61:61:61:4B Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Certificate serial: 47CDF3CF5EA7D8230ABCBC8ED94C0B7C7FECFE41 Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/323430303a353238303a336330303a3a2f33382d3338203d3e203633313939.roa Signing time: Tue 20 Jan 2026 02:23:49 +0000 ROA not before: Tue 20 Jan 2026 02:18:49 +0000 ROA not after: Tue 19 Jan 2027 02:23:49 +0000 asID: 63199 IP address blocks: 2400:5280:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cd:f3:cf:5e:a7:d8:23:0a:bc:bc:8e:d9:4c:0b:7c:7f:ec:fe:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Validity Not Before: Jan 20 02:18:49 2026 GMT Not After : Jan 19 02:23:49 2027 GMT Subject: CN=85D761D2CD7EE54AD296BB3A07F13CA76161614B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:b1:ec:71:2e:ee:43:2a:46:9d:9d:88:d6: 88:1e:c7:9a:8f:e2:11:70:3f:dd:fe:99:3e:03:fc: 78:d9:fa:49:4f:a3:6a:d5:57:5a:fb:f6:1a:6d:21: e9:ef:c7:25:9a:86:f5:08:7e:a2:19:41:0f:6f:5e: 87:f7:5a:92:11:1e:20:54:25:6c:79:88:f0:82:f5: d7:2e:ee:72:14:04:ff:01:56:54:8f:cd:3b:f5:e5: 5d:88:f8:41:ba:d5:b9:c3:ad:5e:8d:59:7a:c1:9c: 31:d2:22:12:3e:05:5c:22:35:cd:58:81:01:c6:d0: 83:4e:f3:c6:a2:cf:9e:13:a3:6e:ba:b0:51:64:c5: 48:ad:14:b8:1f:e3:90:c4:a0:02:4e:46:a9:a6:db: 99:d1:60:3d:eb:c6:2e:26:5f:14:cb:2f:56:43:0c: b1:61:2f:02:46:c6:8f:90:9f:32:ab:77:16:7e:bf: 0e:a7:2b:85:38:35:b6:b4:eb:66:d5:69:ae:9f:1b: 92:2e:95:9c:6a:74:c2:fb:d2:ac:a1:f8:20:d8:cd: ab:ef:af:fe:7a:7c:30:f5:5b:fe:33:34:06:ee:d4: 79:8d:b2:85:54:47:16:1b:93:4d:33:06:ca:44:29: 3f:0b:19:90:97:eb:31:a1:74:da:6b:a0:f8:35:b3: dd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D7:61:D2:CD:7E:E5:4A:D2:96:BB:3A:07:F1:3C:A7:61:61:61:4B X509v3 Authority Key Identifier: keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/323430303a353238303a336330303a3a2f33382d3338203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:5280:3c00::/38 Signature Algorithm: sha256WithRSAEncryption 08:62:9b:d0:65:d0:b3:1c:c1:9a:6b:ac:b7:24:24:05:f4:b8: f3:52:08:8e:fb:65:fb:94:71:52:2c:08:82:1f:52:4a:9e:5e: 33:ed:0a:9a:30:0a:7e:46:4d:15:1c:6a:11:2a:b1:c3:c7:67: 00:39:84:6c:89:07:0b:95:fe:87:f8:8c:3f:d8:36:5c:2f:c1: 95:7f:3a:16:6e:1c:12:8e:20:a6:c0:97:df:46:73:be:31:6c: 06:71:5d:9f:50:94:9a:c2:09:e7:04:1b:29:b9:54:b3:b2:70: 8f:3a:f5:db:01:9b:f0:51:8a:ce:8b:d7:2c:86:18:e0:5f:a8: 77:ff:9c:b6:2c:26:16:40:be:75:54:f9:a5:d3:1b:cc:80:a6: f4:9e:69:c3:52:4a:32:f9:d5:bf:52:fb:59:b5:0b:18:a3:7a: 25:be:19:9f:a1:96:80:2f:16:80:11:48:ba:0f:4a:8c:26:ac: 3d:89:81:e0:2d:74:28:34:fb:13:0a:22:4b:56:53:7b:70:23: 0a:9c:1f:04:3b:4c:6b:b6:12:13:e3:6c:8d:63:56:45:34:6a: 90:eb:80:2c:53:1e:9a:d2:82:da:4b:e9:46:25:ab:b7:e2:31: 7f:1e:d0:58:a5:fc:79:00:c0:3f:1c:70:8f:47:ee:d5:1a:59: 4b:c8:9a:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUR83zz16n2CMKvLyO2UwLfH/s/kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFG RDJDMDExNTAeFw0yNjAxMjAwMjE4NDlaFw0yNzAxMTkwMjIzNDlaMDMxMTAvBgNV BAMTKDg1RDc2MUQyQ0Q3RUU1NEFEMjk2QkIzQTA3RjEzQ0E3NjE2MTYxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwrHscS7uQypGnZ2I1ogex5qP 4hFwP93+mT4D/HjZ+klPo2rVV1r79hptIenvxyWahvUIfqIZQQ9vXof3WpIRHiBU JWx5iPCC9dcu7nIUBP8BVlSPzTv15V2I+EG61bnDrV6NWXrBnDHSIhI+BVwiNc1Y gQHG0INO88aiz54To266sFFkxUitFLgf45DEoAJORqmm25nRYD3rxi4mXxTLL1ZD DLFhLwJGxo+QnzKrdxZ+vw6nK4U4Nba062bVaa6fG5IulZxqdML70qyh+CDYzavv r/56fDD1W/4zNAbu1HmNsoVURxYbk00zBspEKT8LGZCX6zGhdNproPg1s93bAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUhddh0s1+5UrSlrs6B/E8p2FhYUswHwYDVR0j BBgwFoAUngewLvJ04zmzxLIlmFXlKv0sARUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8wLzlFMDdCMDJFRjI3NEUzMzlCM0M0QjIyNTk4NTVF NTJBRkQyQzAxMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFGRDJDMDExNS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MTU2OTMwLzAvMzIzNDMwMzAz YTM1MzIzODMwM2EzMzYzMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNkM2UyMDM2MzMz MTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgIkAFKAPDANBgkqhkiG9w0BAQsFAAOCAQEACGKb0GXQ sxzBmmustyQkBfS481IIjvtl+5RxUiwIgh9SSp5eM+0KmjAKfkZNFRxqESqxw8dn ADmEbIkHC5X+h/iMP9g2XC/BlX86Fm4cEo4gpsCX30ZzvjFsBnFdn1CUmsIJ5wQb KblUs7Jwjzr12wGb8FGKzovXLIYY4F+od/+ctiwmFkC+dVT5pdMbzICm9J5pw1JK MvnVv1L7WbULGKN6Jb4Zn6GWgC8WgBFIug9KjCasPYmB4C10KDT7EwoiS1ZTe3Aj CpwfBDtMa7YSE+NsjWNWRTRqkOuALFMemtKC2kvpRiWrt+Ixfx7QWKX8eQDAPxxw j0fu1RpZS8iaOg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:11:10 2026 by rpki-client