This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/323430313a353138303a3a2f33322d3332203d3e203331323136.roa File: 323430313a353138303a3a2f33322d3332203d3e203331323136.roa (raw, json) Hash identifier: c2BFIJVN4JIT5LRTdXldbHvwV8Z329mItcC2iWdKyZo= Subject key identifier: AC:72:26:0A:5D:2B:8F:A6:CF:03:52:7D:92:25:5D:BF:73:4D:31:14 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 2F452BB150FB1D8761B9C31A6F8B4FCB1120B0DC Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/323430313a353138303a3a2f33322d3332203d3e203331323136.roa Signing time: Tue 20 Jan 2026 02:23:46 +0000 ROA not before: Tue 20 Jan 2026 02:18:46 +0000 ROA not after: Tue 19 Jan 2027 02:23:46 +0000 asID: 31216 IP address blocks: 2401:5180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:45:2b:b1:50:fb:1d:87:61:b9:c3:1a:6f:8b:4f:cb:11:20:b0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Jan 20 02:18:46 2026 GMT Not After : Jan 19 02:23:46 2027 GMT Subject: CN=AC72260A5D2B8FA6CF03527D92255DBF734D3114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:e8:a9:09:76:76:fd:08:19:0b:3d:ff:fd: 2a:b4:b0:92:e1:67:e6:a4:ad:41:71:e7:2f:36:a4: 81:23:54:5c:82:4d:29:4c:49:43:e5:3c:47:4d:c7: 8d:92:41:e7:e9:24:41:c7:18:fa:c3:aa:6b:ea:85: 7b:ac:58:e2:95:89:87:88:f0:cf:18:ed:be:e4:e1: 48:4a:f5:f5:b2:19:75:00:66:db:b5:22:f7:8e:47: 40:5a:90:56:86:65:85:0e:36:b1:2f:71:93:7e:4c: f4:76:27:1f:81:d6:80:e3:e4:21:8c:b1:66:00:84: 82:eb:c2:91:1b:06:56:aa:22:71:9c:d5:4e:2a:01: bf:b4:5a:97:a6:e2:de:3d:4c:c8:37:3a:d1:ca:8b: bd:ce:b7:73:ba:35:86:c1:bf:52:b2:64:e2:a6:ee: 5d:93:df:53:15:ba:34:e1:5a:61:2b:4d:e4:3b:2a: c5:54:6f:95:8c:f2:f9:ba:6e:3d:dc:89:51:eb:83: 4f:51:c0:8d:99:35:62:67:a0:f4:8a:bb:cf:5e:24: 92:d0:62:3b:04:cc:d0:6b:5c:4d:1c:20:c1:74:cf: a5:96:5d:0a:dc:d7:c1:1b:21:1a:5d:d9:e0:ef:49: d1:1f:6d:db:84:87:49:93:11:e7:c4:24:76:48:38: bd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:72:26:0A:5D:2B:8F:A6:CF:03:52:7D:92:25:5D:BF:73:4D:31:14 X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/323430313a353138303a3a2f33322d3332203d3e203331323136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:5180::/32 Signature Algorithm: sha256WithRSAEncryption b5:df:df:2f:a6:ea:2e:c7:67:ae:32:b0:22:5f:26:35:ac:2b: 92:cd:72:2e:10:5d:78:94:15:3d:60:40:33:53:94:0b:12:e1: 74:62:92:df:38:f8:90:4c:02:ee:ab:d6:8c:bc:e0:b1:02:1f: 81:a8:0e:50:0a:4e:de:1c:84:a4:53:de:22:d0:3f:86:d1:63: c7:74:c9:d6:9e:22:93:a0:49:17:51:c6:fd:36:b9:e9:75:02: f1:00:9e:ca:b9:17:c3:7e:e4:e5:43:cb:84:3d:c0:3d:48:a0: 29:4c:5d:67:51:fa:ed:82:5e:62:23:8e:cf:80:38:b5:db:a6: 40:60:ac:2c:3f:6d:22:98:d8:d8:13:7a:25:69:d9:2e:85:17: 92:81:4f:9b:65:51:70:22:75:a3:b2:9b:7d:10:10:13:5c:cc: fe:3a:7c:1e:e9:0f:2f:1e:50:8b:83:9a:de:a1:a6:b2:3a:24: 53:ff:6b:36:7e:e0:dc:f3:0d:ef:a2:e8:d0:5e:31:06:b0:d6: ff:9e:fd:5a:18:60:fe:8d:b6:ba:c8:eb:7f:b9:d5:1d:af:c2: 1a:6a:0b:80:b6:26:27:d8:dd:52:0d:f1:42:5f:47:5b:19:b2: 98:3e:5a:bd:90:3d:67:18:f9:e2:21:77:c3:fd:07:c9:ca:0f: 46:f7:10:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUL0UrsVD7HYdhucMab4tPyxEgsNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjAxMjAwMjE4NDZaFw0yNzAxMTkwMjIzNDZaMDMxMTAvBgNV BAMTKEFDNzIyNjBBNUQyQjhGQTZDRjAzNTI3RDkyMjU1REJGNzM0RDMxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyA+ipCXZ2/QgZCz3//Sq0sJLh Z+akrUFx5y82pIEjVFyCTSlMSUPlPEdNx42SQefpJEHHGPrDqmvqhXusWOKViYeI 8M8Y7b7k4UhK9fWyGXUAZtu1IveOR0BakFaGZYUONrEvcZN+TPR2Jx+B1oDj5CGM sWYAhILrwpEbBlaqInGc1U4qAb+0Wpem4t49TMg3OtHKi73Ot3O6NYbBv1KyZOKm 7l2T31MVujThWmErTeQ7KsVUb5WM8vm6bj3ciVHrg09RwI2ZNWJnoPSKu89eJJLQ YjsEzNBrXE0cIMF0z6WWXQrc18EbIRpd2eDvSdEfbduEh0mTEefEJHZIOL3VAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUrHImCl0rj6bPA1J9kiVdv3NNMRQwHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNzI4MDAxLzAvMzIzNDMwMzEzYTM1 MzEzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzMzMTMyMzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBUYAwDQYJKoZIhvcNAQELBQADggEBALXf3y+m6i7HZ64ysCJfJjWsK5LN ci4QXXiUFT1gQDNTlAsS4XRikt84+JBMAu6r1oy84LECH4GoDlAKTt4chKRT3iLQ P4bRY8d0ydaeIpOgSRdRxv02uel1AvEAnsq5F8N+5OVDy4Q9wD1IoClMXWdR+u2C XmIjjs+AOLXbpkBgrCw/bSKY2NgTeiVp2S6FF5KBT5tlUXAidaOym30QEBNczP46 fB7pDy8eUIuDmt6hprI6JFP/azZ+4NzzDe+i6NBeMQaw1v+e/VoYYP6NtrrI63+5 1R2vwhpqC4C2JifY3VIN8UJfR1sZspg+Wr2QPWcY+eIhd8P9B8nKD0b3EHM= -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:10 2026 by rpki-client