This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/323430323a373234303a3a2f33322d3332203d3e20313337373439.roa File: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (raw, json) Hash identifier: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0= Subject key identifier: 38:53:C8:D9:89:7C:5B:8D:B1:4B:83:DD:28:5D:D5:97:7B:77:B5:95 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 16929E0988E3E7C1362D54B86FDA567547D993AB Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/323430323a373234303a3a2f33322d3332203d3e20313337373439.roa Signing time: Tue 20 Jan 2026 02:14:16 +0000 ROA not before: Tue 20 Jan 2026 02:09:16 +0000 ROA not after: Tue 19 Jan 2027 02:14:16 +0000 asID: 137749 IP address blocks: 2402:7240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:92:9e:09:88:e3:e7:c1:36:2d:54:b8:6f:da:56:75:47:d9:93:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Jan 20 02:09:16 2026 GMT Not After : Jan 19 02:14:16 2027 GMT Subject: CN=3853C8D9897C5B8DB14B83DD285DD5977B77B595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:c7:ac:67:d3:a4:f7:4f:5f:d7:30:14:82: 80:ea:14:05:ad:01:c5:51:16:11:2d:80:60:95:91: bd:04:b0:e8:5a:72:7e:5c:c6:6a:d9:27:b2:a3:8c: 3a:de:56:80:98:33:6e:6c:28:58:c5:cd:71:57:99: 49:9f:d8:aa:d1:ab:98:b5:06:a5:54:c1:43:d6:2b: fd:c3:ff:72:09:af:4c:b8:70:08:cd:13:7a:9c:c6: ca:7a:8e:fb:33:f9:21:65:75:ef:7b:47:c3:8d:b8: 1d:6f:7e:d8:f4:dc:5a:b7:92:fc:9e:21:fe:43:14: 82:b2:25:bf:55:c7:77:9c:90:2b:c6:60:6a:f0:a5: f5:c5:4a:91:49:df:e1:d9:14:e9:fd:a9:db:b4:6d: 7f:1f:6b:f8:37:ce:90:b4:a6:7d:2b:4d:3e:cd:51: 76:c2:bd:4f:16:f0:04:63:29:e3:73:60:53:5a:62: fe:73:ca:df:22:1b:92:1e:64:17:46:8c:99:77:bb: 7c:58:47:20:8a:e0:04:07:8e:7f:3c:de:fa:b7:4a: f9:11:93:8b:47:42:3b:ab:5b:f4:8e:97:12:20:da: 51:2b:69:1d:eb:4f:b2:7a:7b:d4:dc:4e:41:29:28: c0:86:5d:16:f6:0e:6d:4f:b5:1f:a2:b2:31:e2:b6: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:53:C8:D9:89:7C:5B:8D:B1:4B:83:DD:28:5D:D5:97:7B:77:B5:95 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/323430323a373234303a3a2f33322d3332203d3e20313337373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7240::/32 Signature Algorithm: sha256WithRSAEncryption ce:fa:03:a2:c3:90:0b:90:1d:0b:1e:9f:c0:29:99:e4:39:1d: bc:0d:2d:e2:2b:a1:c1:90:03:c8:ff:ea:73:9c:e4:02:46:84: 1b:bf:64:c0:b2:11:3f:ef:66:b3:2a:17:e0:69:53:69:0e:25: 80:af:11:9a:93:81:15:2c:e4:c5:3b:5c:a0:20:22:4b:f0:80: 80:fd:b6:df:a0:e5:69:57:75:5c:2d:fe:55:f9:ff:05:97:4c: ca:92:5d:f4:42:f1:04:76:78:ec:78:eb:6a:2e:e8:e5:7e:a2: 7a:6c:cf:46:d1:52:8e:7f:77:d3:f2:6c:e0:5d:81:d1:4d:df: 6c:17:2c:b1:2c:82:5e:e0:12:91:45:b4:87:9e:18:df:35:15: 8b:fe:14:4d:b5:55:f7:5b:7c:6c:1e:b1:59:31:da:bd:08:da: db:14:71:5f:62:d2:7a:20:bb:00:ca:62:b0:48:fb:2f:d4:d4: ef:32:f5:5b:c0:e1:86:41:18:2b:d3:a6:a0:f8:1c:6d:98:09: 32:97:24:ce:01:e8:30:ad:62:b8:f4:6f:23:81:39:4d:f4:ac: 62:2e:54:33:3c:e7:5b:29:6e:9f:ff:ae:6b:c7:c6:a7:6a:4f: 9d:22:44:87:fa:1f:f5:76:ca:83:a6:19:63:6a:bc:65:7f:9b: 7e:d9:ae:45 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUFpKeCYjj58E2LVS4b9pWdUfZk6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjAxMjAwMjA5MTZaFw0yNzAxMTkwMjE0MTZaMDMxMTAvBgNV BAMTKDM4NTNDOEQ5ODk3QzVCOERCMTRCODNERDI4NURENTk3N0I3N0I1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWMesZ9Ok909f1zAUgoDqFAWt AcVRFhEtgGCVkb0EsOhacn5cxmrZJ7KjjDreVoCYM25sKFjFzXFXmUmf2KrRq5i1 BqVUwUPWK/3D/3IJr0y4cAjNE3qcxsp6jvsz+SFlde97R8ONuB1vftj03Fq3kvye If5DFIKyJb9Vx3eckCvGYGrwpfXFSpFJ3+HZFOn9qdu0bX8fa/g3zpC0pn0rTT7N UXbCvU8W8ARjKeNzYFNaYv5zyt8iG5IeZBdGjJl3u3xYRyCK4AQHjn883vq3SvkR k4tHQjurW/SOlxIg2lEraR3rT7J6e9TcTkEpKMCGXRb2Dm1PtR+isjHitoTLAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUOFPI2Yl8W42xS4PdKF3Vl3t3tZUwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODU1MDE0Ni8wLzMyMzQzMDMyM2Ez NzMyMzQzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM3MzQzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQCckAwDQYJKoZIhvcNAQELBQADggEBAM76A6LDkAuQHQsen8ApmeQ5 HbwNLeIrocGQA8j/6nOc5AJGhBu/ZMCyET/vZrMqF+BpU2kOJYCvEZqTgRUs5MU7 XKAgIkvwgID9tt+g5WlXdVwt/lX5/wWXTMqSXfRC8QR2eOx462ou6OV+onpsz0bR Uo5/d9PybOBdgdFN32wXLLEsgl7gEpFFtIeeGN81FYv+FE21VfdbfGwesVkx2r0I 2tsUcV9i0noguwDKYrBI+y/U1O8y9VvA4YZBGCvTpqD4HG2YCTKXJM4B6DCtYrj0 byOBOU30rGIuVDM851spbp//rmvHxqdqT50iRIf6H/V2yoOmGWNqvGV/m37ZrkU= -----END CERTIFICATE-----Generated at Sun Jan 25 15:53:21 2026 by rpki-client