This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/323430303a353238303a343030303a3a2f33382d3338203d3e203633313939.roa File: 323430303a353238303a343030303a3a2f33382d3338203d3e203633313939.roa (raw, json) Hash identifier: VLWs1MOagyRUFeUiUi74U3IkGzuxu68szaETh9T31ns= Subject key identifier: E5:86:65:B6:0F:40:4B:8E:CA:56:BB:59:12:A7:67:67:DC:CB:FC:7E Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Certificate serial: 09FF664642EDBA75E969F04618E33DE710064413 Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/323430303a353238303a343030303a3a2f33382d3338203d3e203633313939.roa Signing time: Tue 20 Jan 2026 02:23:49 +0000 ROA not before: Tue 20 Jan 2026 02:18:49 +0000 ROA not after: Tue 19 Jan 2027 02:23:49 +0000 asID: 63199 IP address blocks: 2400:5280:4000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ff:66:46:42:ed:ba:75:e9:69:f0:46:18:e3:3d:e7:10:06:44:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Validity Not Before: Jan 20 02:18:49 2026 GMT Not After : Jan 19 02:23:49 2027 GMT Subject: CN=E58665B60F404B8ECA56BB5912A76767DCCBFC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:59:19:59:4f:cd:bb:b0:aa:9c:17:ed:6b:4e: 79:28:53:f0:ac:2c:8a:8c:a5:c4:cc:fc:60:59:42: 4c:3e:7f:0a:af:e7:03:23:d6:0c:0e:48:91:b6:61: 4c:a9:23:be:5d:51:80:7d:9f:d1:3f:36:b1:8c:39: c4:11:15:87:1c:ab:57:86:0c:18:ee:38:e5:02:c0: 88:7a:13:04:c2:dd:27:f9:10:07:42:36:55:83:b2: 41:27:57:73:49:a4:db:91:ee:f9:6b:1a:c6:3c:96: 4b:14:22:23:2e:0a:f6:38:e3:98:88:b5:2d:1f:75: 88:a3:25:7a:f6:27:60:b3:d8:35:bb:30:83:5e:63: 44:dd:71:c3:61:1f:b8:07:fe:99:ce:12:02:a4:49: db:2c:a8:d9:25:69:b8:27:e9:2f:9b:d7:20:3b:2a: ca:d0:40:42:c6:fe:09:d0:e4:b1:04:69:a4:9c:7b: e3:82:41:84:1a:ff:32:56:d6:12:9f:46:33:23:ca: 7e:8a:55:fb:9f:70:14:6f:0a:58:4a:7b:ec:65:b6: de:1a:65:2d:e5:74:ba:b9:3f:e5:30:e3:7a:16:f8: 9d:4d:99:58:f7:8e:62:77:83:e6:de:df:82:b5:bb: c5:62:4f:9e:33:73:19:14:00:6c:0c:51:dc:59:67: e7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:86:65:B6:0F:40:4B:8E:CA:56:BB:59:12:A7:67:67:DC:CB:FC:7E X509v3 Authority Key Identifier: keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/323430303a353238303a343030303a3a2f33382d3338203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:5280:4000::/38 Signature Algorithm: sha256WithRSAEncryption 5f:dd:c0:53:ae:22:23:11:cc:7c:28:a7:d1:e3:b8:0f:ae:b0: 6b:06:4e:9c:f7:c5:c1:25:34:f0:00:c1:02:55:51:ae:ea:93: c8:e9:3a:63:b7:c4:ee:46:4c:8b:81:44:d7:29:f6:fd:71:40: e7:e1:91:6b:09:9c:e1:59:fb:d5:d5:f8:ad:aa:30:9d:2f:ed: dd:37:4c:42:97:fb:d8:01:cd:cb:23:ba:f3:66:4c:14:bf:08: 0f:05:8c:f8:cf:03:c4:98:78:7d:44:3f:8e:4d:e1:4c:88:d4: f3:88:44:08:14:16:fc:e0:85:4b:36:2c:96:91:e8:fe:b5:12: 22:5b:fc:9c:88:6e:d3:8e:61:5a:e7:ff:61:7f:8f:1f:3e:61: d6:ab:7b:18:5b:1c:e6:94:c1:d8:51:b8:b6:f1:57:2e:ec:97: c1:17:19:55:73:18:96:73:47:c2:0a:da:48:e1:0a:eb:cf:79: e4:54:95:f2:f5:f4:e2:03:fb:77:6a:33:91:8b:d8:3a:b3:15: 24:ec:ad:37:ea:66:4a:b1:dd:c6:95:f1:70:72:48:b8:81:bb: 3b:99:42:69:b2:e0:4b:7a:43:7b:06:c4:d9:f3:11:d3:c5:09: 78:fd:c8:68:95:7c:0a:46:3a:6e:1a:e5:27:34:f1:a5:f7:13: b5:f5:76:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUCf9mRkLtunXpafBGGOM95xAGRBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFG RDJDMDExNTAeFw0yNjAxMjAwMjE4NDlaFw0yNzAxMTkwMjIzNDlaMDMxMTAvBgNV BAMTKEU1ODY2NUI2MEY0MDRCOEVDQTU2QkI1OTEyQTc2NzY3RENDQkZDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqWRlZT827sKqcF+1rTnkoU/Cs LIqMpcTM/GBZQkw+fwqv5wMj1gwOSJG2YUypI75dUYB9n9E/NrGMOcQRFYccq1eG DBjuOOUCwIh6EwTC3Sf5EAdCNlWDskEnV3NJpNuR7vlrGsY8lksUIiMuCvY445iI tS0fdYijJXr2J2Cz2DW7MINeY0TdccNhH7gH/pnOEgKkSdssqNklabgn6S+b1yA7 KsrQQELG/gnQ5LEEaaSce+OCQYQa/zJW1hKfRjMjyn6KVfufcBRvClhKe+xltt4a ZS3ldLq5P+Uw43oW+J1NmVj3jmJ3g+be34K1u8ViT54zcxkUAGwMUdxZZ+chAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQU5YZltg9AS47KVrtZEqdnZ9zL/H4wHwYDVR0j BBgwFoAUngewLvJ04zmzxLIlmFXlKv0sARUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8wLzlFMDdCMDJFRjI3NEUzMzlCM0M0QjIyNTk4NTVF NTJBRkQyQzAxMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFGRDJDMDExNS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MTU2OTMwLzAvMzIzNDMwMzAz YTM1MzIzODMwM2EzNDMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNkM2UyMDM2MzMz MTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgIkAFKAQDANBgkqhkiG9w0BAQsFAAOCAQEAX93AU64i IxHMfCin0eO4D66wawZOnPfFwSU08ADBAlVRruqTyOk6Y7fE7kZMi4FE1yn2/XFA 5+GRawmc4Vn71dX4raownS/t3TdMQpf72AHNyyO682ZMFL8IDwWM+M8DxJh4fUQ/ jk3hTIjU84hECBQW/OCFSzYslpHo/rUSIlv8nIhu045hWuf/YX+PHz5h1qt7GFsc 5pTB2FG4tvFXLuyXwRcZVXMYlnNHwgraSOEK68955FSV8vX04gP7d2ozkYvYOrMV JOytN+pmSrHdxpXxcHJIuIG7O5lCabLgS3pDewbE2fMR08UJeP3IaJV8CkY6bhrl JzTxpfcTtfV2gg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:11:09 2026 by rpki-client