This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a323030303a3a2f33362d3336203d3e203539303737.roa File: 323430313a333438303a323030303a3a2f33362d3336203d3e203539303737.roa (raw, json) Hash identifier: AhZRbmTrpE/97HYsZW84osNm55SG5//LI2Ou4CQiw+s= Subject key identifier: 2B:47:1C:AE:40:F7:5F:D9:44:C6:0D:56:3D:8C:02:CC:9E:2B:DB:D4 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 399F0A2A69E73FB34C428EE936C1CFF4B21DF44D Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a323030303a3a2f33362d3336203d3e203539303737.roa Signing time: Tue 20 Jan 2026 02:10:48 +0000 ROA not before: Tue 20 Jan 2026 02:05:48 +0000 ROA not after: Tue 19 Jan 2027 02:10:48 +0000 asID: 59077 IP address blocks: 2401:3480:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9f:0a:2a:69:e7:3f:b3:4c:42:8e:e9:36:c1:cf:f4:b2:1d:f4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:48 2026 GMT Not After : Jan 19 02:10:48 2027 GMT Subject: CN=2B471CAE40F75FD944C60D563D8C02CC9E2BDBD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7c:e8:b8:5d:41:69:c8:0b:b9:a9:28:d1:8b: 9f:d8:49:f7:75:ef:ec:52:67:0b:fc:55:5e:71:93: 07:ef:d6:ba:72:25:fe:5d:9f:8c:1c:ef:39:cc:76: 1b:23:99:eb:8b:c5:f7:31:ee:72:7b:0b:38:7b:06: ab:5e:f2:76:6c:ac:d9:31:4b:81:8d:c8:96:c3:f3: dc:6e:3b:72:c3:6d:98:18:46:19:7b:ca:4f:5e:33: 27:7e:21:d1:3a:6e:bf:ab:04:50:9f:5a:06:df:bf: 89:9c:69:b5:4e:8e:b6:49:b3:ff:57:1c:73:77:85: 98:f7:df:fb:be:cf:db:d7:79:15:7f:a2:27:1a:c3: b8:14:ae:2d:9c:bf:aa:fc:e9:56:03:92:7e:e6:27: a9:68:59:38:d8:4d:92:6c:4d:9d:b9:33:12:01:50: d5:e9:2d:a5:d5:22:91:c9:db:35:d7:7a:ab:45:6d: 08:41:20:34:e0:e2:b9:41:cf:fe:c8:c0:92:2c:f4: b5:ef:f4:35:55:53:24:ca:63:73:12:fa:f2:2d:ab: 54:90:d9:65:2a:7a:52:83:a8:21:e0:14:dc:57:b1: fe:f8:4e:b0:f9:41:6a:d0:40:98:08:87:89:1d:95: 81:9e:39:94:eb:6d:4f:0a:07:7d:9f:f1:14:62:7e: e9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:47:1C:AE:40:F7:5F:D9:44:C6:0D:56:3D:8C:02:CC:9E:2B:DB:D4 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a323030303a3a2f33362d3336203d3e203539303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3480:2000::/36 Signature Algorithm: sha256WithRSAEncryption b3:b3:24:50:92:09:e9:59:36:77:bb:1f:7e:b7:3d:65:9a:a1: 8f:bb:5b:01:0e:8e:e8:5b:a0:df:d6:54:20:33:bc:40:ab:bb: 32:81:d5:03:b2:6d:c6:36:7d:c9:4a:48:16:60:9f:f3:6c:03: 4a:e1:d9:7f:ca:02:01:ad:e5:01:b2:f7:47:42:ed:67:eb:04: 75:b3:8a:f5:ee:e8:50:3f:4b:12:19:5d:b3:a7:f3:59:77:ad: 85:cc:4b:ce:a8:d5:b4:10:2a:58:45:a6:04:7e:04:1a:67:06: 88:4f:bb:55:ff:a7:68:94:85:d2:f5:c7:c8:c5:b7:d4:eb:8d: c5:77:b2:46:39:fc:93:8a:8c:cf:8e:fc:82:99:9b:bd:99:a5: a7:2b:20:2a:88:a3:bc:5a:1e:1f:24:33:1f:30:87:17:0f:ca: d0:8f:88:9a:cf:07:fd:8e:43:88:ec:9f:3a:f4:34:99:66:07: 66:aa:af:3c:44:8a:7a:ad:ef:85:7e:d0:fa:88:45:f4:e9:a5: 7f:4c:df:34:2c:5c:44:3c:da:70:7e:85:d1:1d:55:ec:14:9a: 98:08:c7:54:29:9b:f9:42:ae:c6:b5:62:1c:a7:16:79:f4:f5: 40:25:e6:90:da:e8:4b:39:07:8f:df:45:49:c2:f2:7e:77:26: af:86:76:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUOZ8KKmnnP7NMQo7pNsHP9LId9E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDhaFw0yNzAxMTkwMjEwNDhaMDMxMTAvBgNV BAMTKDJCNDcxQ0FFNDBGNzVGRDk0NEM2MEQ1NjNEOEMwMkNDOUUyQkRCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPfOi4XUFpyAu5qSjRi5/YSfd1 7+xSZwv8VV5xkwfv1rpyJf5dn4wc7znMdhsjmeuLxfcx7nJ7Czh7Bqte8nZsrNkx S4GNyJbD89xuO3LDbZgYRhl7yk9eMyd+IdE6br+rBFCfWgbfv4mcabVOjrZJs/9X HHN3hZj33/u+z9vXeRV/oicaw7gUri2cv6r86VYDkn7mJ6loWTjYTZJsTZ25MxIB UNXpLaXVIpHJ2zXXeqtFbQhBIDTg4rlBz/7IwJIs9LXv9DVVUyTKY3MS+vItq1SQ 2WUqelKDqCHgFNxXsf74TrD5QWrQQJgIh4kdlYGeOZTrbU8KB32f8RRiful5AgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUK0ccrkD3X9lExg1WPYwCzJ4r29QwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzIzNDMwMzEz YTMzMzQzODMwM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDM1Mzkz MDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkATSAIDANBgkqhkiG9w0BAQsFAAOCAQEAs7MkUJIJ 6Vk2d7sffrc9ZZqhj7tbAQ6O6Fug39ZUIDO8QKu7MoHVA7JtxjZ9yUpIFmCf82wD SuHZf8oCAa3lAbL3R0LtZ+sEdbOK9e7oUD9LEhlds6fzWXethcxLzqjVtBAqWEWm BH4EGmcGiE+7Vf+naJSF0vXHyMW31OuNxXeyRjn8k4qMz478gpmbvZmlpysgKoij vFoeHyQzHzCHFw/K0I+Ims8H/Y5DiOyfOvQ0mWYHZqqvPESKeq3vhX7Q+ohF9Oml f0zfNCxcRDzacH6F0R1V7BSamAjHVCmb+UKuxrViHKcWefT1QCXmkNroSzkHj99F ScLyfncmr4Z23g== -----END CERTIFICATE-----Generated at Wed Jan 21 04:24:32 2026 by rpki-client