This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/323430333a323863303a3a2f33322d3438203d3e203337393633.roa File: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (raw, json) Hash identifier: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0= Subject key identifier: 9E:DA:74:11:F5:0D:CE:B1:C6:7F:94:6B:D4:78:CD:52:AF:75:6A:CC Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 546B1B6445A30622D918AEB30ABCD2D327745E2B Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/323430333a323863303a3a2f33322d3438203d3e203337393633.roa Signing time: Tue 20 Jan 2026 02:19:11 +0000 ROA not before: Tue 20 Jan 2026 02:14:11 +0000 ROA not after: Tue 19 Jan 2027 02:19:11 +0000 asID: 37963 IP address blocks: 2403:28c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6b:1b:64:45:a3:06:22:d9:18:ae:b3:0a:bc:d2:d3:27:74:5e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: Jan 20 02:14:11 2026 GMT Not After : Jan 19 02:19:11 2027 GMT Subject: CN=9EDA7411F50DCEB1C67F946BD478CD52AF756ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ee:49:a8:fd:5e:04:3f:20:53:99:ce:6d:20: d0:68:cf:91:5e:9d:15:9d:b1:b4:ea:55:11:2c:74: 30:fd:5b:c9:e0:0a:6b:8e:54:84:1f:4e:1a:02:c8: d1:f0:9b:e2:11:40:fd:10:8f:7c:af:f4:99:32:0f: 82:a1:43:af:a6:96:6d:40:53:fe:ce:30:94:32:24: 2b:9d:d8:cc:87:93:60:e7:77:43:3c:fa:17:18:b5: 91:06:11:20:11:5e:ce:8f:90:7e:23:ee:86:c4:39: 35:36:0d:28:db:57:26:a1:f0:8f:bb:db:d6:33:50: 92:43:a9:16:cf:76:a9:71:74:cd:fa:e0:e7:0b:c5: 88:19:d4:1e:32:74:34:5e:95:e1:e4:f5:aa:5d:48: 15:1f:d2:72:e1:39:1b:72:14:5a:a0:9f:c1:69:07: 10:1d:5a:4e:15:96:46:5b:c3:5a:9b:49:2b:ae:2e: 05:92:52:9b:46:79:03:46:f2:74:d1:40:64:7e:15: 7e:85:d1:93:6d:74:b7:c4:aa:a0:b3:83:c5:11:de: e0:f1:59:a4:97:df:4b:a9:f6:8a:28:86:17:bb:7a: 4e:11:a0:f5:c4:44:d0:13:a6:5e:25:99:e1:0a:b4: 37:56:7f:aa:14:51:0c:f4:89:0e:d9:ea:1e:ce:8d: 10:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DA:74:11:F5:0D:CE:B1:C6:7F:94:6B:D4:78:CD:52:AF:75:6A:CC X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/323430333a323863303a3a2f33322d3438203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:28c0::/32 Signature Algorithm: sha256WithRSAEncryption 41:34:e3:58:90:0c:67:5d:d3:26:01:02:12:47:64:c7:d6:ea: 8c:b7:aa:46:75:32:bd:f4:14:cf:b1:bb:6f:f1:83:51:97:d6: 54:0e:29:7d:01:7b:04:d1:08:e5:ec:58:e9:55:70:2b:ef:eb: 57:07:fc:f4:18:06:2f:8b:6f:4a:71:f5:68:7d:90:5f:98:5c: bd:b0:31:a2:fe:06:7e:0d:b8:6e:cb:5b:61:a1:3f:ea:52:ef: 00:87:09:a3:b1:47:53:44:83:3b:33:e0:e9:d8:38:99:2d:af: ba:7a:b7:96:fc:6a:c0:ab:6c:74:91:2b:e2:ad:0f:6d:1f:63: a4:df:09:37:80:f8:51:a9:53:24:4c:14:a3:e4:57:2e:27:d1: f6:2d:6b:10:ee:d3:33:59:cd:65:df:a4:f6:a9:03:ec:bf:6a: ca:a4:be:35:5b:53:70:76:82:96:1f:ea:20:7e:37:e2:95:c9: db:be:88:05:ff:4c:2e:1f:5a:6a:f1:a1:e2:4c:69:59:4b:21: ba:16:3b:6f:1c:07:86:b5:36:ee:38:dd:5b:63:84:00:1d:29: 09:96:37:5c:61:1b:9c:11:2d:a0:f9:17:ff:a5:ac:c2:68:22: 26:a9:80:67:d3:b1:df:c1:cf:46:8b:93:78:5b:cc:f0:7e:8d: 58:e7:65:6d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUVGsbZEWjBiLZGK6zCrzS0yd0XiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjAxMjAwMjE0MTFaFw0yNzAxMTkwMjE5MTFaMDMxMTAvBgNV BAMTKDlFREE3NDExRjUwRENFQjFDNjdGOTQ2QkQ0NzhDRDUyQUY3NTZBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp7kmo/V4EPyBTmc5tINBoz5Fe nRWdsbTqVREsdDD9W8ngCmuOVIQfThoCyNHwm+IRQP0Qj3yv9JkyD4KhQ6+mlm1A U/7OMJQyJCud2MyHk2Dnd0M8+hcYtZEGESARXs6PkH4j7obEOTU2DSjbVyah8I+7 29YzUJJDqRbPdqlxdM364OcLxYgZ1B4ydDReleHk9apdSBUf0nLhORtyFFqgn8Fp BxAdWk4VlkZbw1qbSSuuLgWSUptGeQNG8nTRQGR+FX6F0ZNtdLfEqqCzg8UR3uDx WaSX30up9ooohhe7ek4RoPXERNATpl4lmeEKtDdWf6oUUQz0iQ7Z6h7OjRC1AgMB AAGjggISMIICDjAdBgNVHQ4EFgQUntp0EfUNzrHGf5Rr1HjNUq91aswwHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MjIyNDY2LzAvMzIzNDMwMzMzYTMy Mzg2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQDKMAwDQYJKoZIhvcNAQELBQADggEBAEE041iQDGdd0yYBAhJHZMfW6oy3 qkZ1Mr30FM+xu2/xg1GX1lQOKX0BewTRCOXsWOlVcCvv61cH/PQYBi+Lb0px9Wh9 kF+YXL2wMaL+Bn4NuG7LW2GhP+pS7wCHCaOxR1NEgzsz4OnYOJktr7p6t5b8asCr bHSRK+KtD20fY6TfCTeA+FGpUyRMFKPkVy4n0fYtaxDu0zNZzWXfpPapA+y/asqk vjVbU3B2gpYf6iB+N+KVydu+iAX/TC4fWmrxoeJMaVlLIboWO28cB4a1Nu443Vtj hAAdKQmWN1xhG5wRLaD5F/+lrMJoIiapgGfTsd/Bz0aLk3hbzPB+jVjnZW0= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:42 2026 by rpki-client