This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a333030303a3a2f33362d3336203d3e203538343636.roa File: 323430313a333438303a333030303a3a2f33362d3336203d3e203538343636.roa (raw, json) Hash identifier: 1yR3dNaUt26D729XehXUd4cPWDaNJ7Ez0eCTuZV3m1k= Subject key identifier: 21:F1:A9:EE:85:85:E1:C2:12:CD:7E:A6:33:31:8E:D9:91:8A:87:60 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 029B3D5B5170255B4C1725408B6DC4F70145987B Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a333030303a3a2f33362d3336203d3e203538343636.roa Signing time: Tue 20 Jan 2026 02:10:49 +0000 ROA not before: Tue 20 Jan 2026 02:05:49 +0000 ROA not after: Tue 19 Jan 2027 02:10:49 +0000 asID: 58466 IP address blocks: 2401:3480:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9b:3d:5b:51:70:25:5b:4c:17:25:40:8b:6d:c4:f7:01:45:98:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:49 2026 GMT Not After : Jan 19 02:10:49 2027 GMT Subject: CN=21F1A9EE8585E1C212CD7EA633318ED9918A8760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5e:fd:b3:7f:32:01:46:e6:6f:28:ce:d6:50: 08:e0:d7:a7:5a:d8:ae:bd:82:bb:7a:6f:82:8d:06: 8d:f8:af:6f:b6:d0:0b:39:ff:91:d1:49:20:ca:44: 66:29:42:7f:2a:84:c5:41:d7:fa:0c:68:f4:d6:cd: dd:73:ab:44:45:16:ed:5e:2d:39:51:a0:1c:c3:4d: 9c:ce:41:26:b4:1f:0a:b7:10:10:e9:59:4d:9a:e4: 15:35:3a:5a:1b:c7:18:76:88:e2:4b:15:17:1a:1f: 14:94:af:78:0c:cf:a0:31:aa:33:2f:c6:0a:ae:5a: a4:e3:06:52:ed:6c:07:85:26:e5:8a:fc:ae:2d:94: 10:70:52:4c:9a:57:94:09:81:11:7c:61:22:f0:30: 18:92:62:0f:75:61:7a:ad:28:92:31:4b:a1:bc:be: 52:5f:f6:0d:66:c7:ca:0c:c6:5e:88:1a:08:5a:27: b7:d4:bd:2f:71:54:e6:64:a2:8c:fb:43:9a:5e:09: 88:80:6d:a0:ed:ba:18:fd:64:8b:96:fe:3c:f3:a2: ac:68:de:4b:89:1d:dd:2f:88:17:d2:0c:49:bb:3c: d8:fb:e5:1b:c9:66:dd:4e:10:79:d5:90:5d:e7:7e: ce:5a:2f:bc:73:01:81:3c:c4:dc:65:20:7d:1a:fb: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F1:A9:EE:85:85:E1:C2:12:CD:7E:A6:33:31:8E:D9:91:8A:87:60 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a333030303a3a2f33362d3336203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3480:3000::/36 Signature Algorithm: sha256WithRSAEncryption 40:3a:d3:f5:34:24:7e:6b:9d:ab:e9:f9:bc:83:68:e4:ac:b8: 01:56:48:92:62:fa:28:e8:a5:4d:f4:bb:fb:d3:75:d0:52:f5: de:a7:b8:61:39:b3:e6:bf:8f:49:56:70:44:3f:f9:b1:2c:a3: 79:ff:ca:28:67:59:15:21:e2:d3:19:2c:17:7f:2d:79:c3:f5: 5c:f5:2e:de:ce:db:e8:87:4f:2c:95:61:6f:35:9e:4c:1e:32: 07:51:a6:af:5f:e2:45:4c:f6:79:10:b0:e1:1a:76:25:70:7b: b6:dd:53:48:95:0d:1b:a5:e2:c7:2f:89:90:04:b0:3a:ea:60: 60:c6:4e:f3:13:f8:cd:d7:02:b1:06:1d:e0:0b:e0:4c:95:83: 6a:ac:e6:2a:07:33:af:2b:88:85:f9:a1:99:dd:56:c0:4f:ba: ed:bb:21:f3:52:28:ae:8a:c6:2b:62:e1:ef:fa:e3:e5:06:23: e5:b6:fe:40:c5:9a:af:50:63:a4:a6:ef:90:15:3b:9d:d7:ed: 49:f9:13:63:ef:63:e5:4b:f9:98:6a:90:90:c6:9c:c2:e3:1f: 83:2a:46:62:54:08:0d:42:42:73:fc:92:c2:42:0c:04:b5:3d: e0:bc:0d:6b:d8:e4:32:de:4a:43:2c:ff:0e:a0:d9:0c:c0:4e: 19:4b:0c:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUAps9W1FwJVtMFyVAi23E9wFFmHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDlaFw0yNzAxMTkwMjEwNDlaMDMxMTAvBgNV BAMTKDIxRjFBOUVFODU4NUUxQzIxMkNEN0VBNjMzMzE4RUQ5OTE4QTg3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXv2zfzIBRuZvKM7WUAjg16da 2K69grt6b4KNBo34r2+20As5/5HRSSDKRGYpQn8qhMVB1/oMaPTWzd1zq0RFFu1e LTlRoBzDTZzOQSa0Hwq3EBDpWU2a5BU1Olobxxh2iOJLFRcaHxSUr3gMz6AxqjMv xgquWqTjBlLtbAeFJuWK/K4tlBBwUkyaV5QJgRF8YSLwMBiSYg91YXqtKJIxS6G8 vlJf9g1mx8oMxl6IGghaJ7fUvS9xVOZkooz7Q5peCYiAbaDtuhj9ZIuW/jzzoqxo 3kuJHd0viBfSDEm7PNj75RvJZt1OEHnVkF3nfs5aL7xzAYE8xNxlIH0a+yUxAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUIfGp7oWF4cISzX6mMzGO2ZGKh2AwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzIzNDMwMzEz YTMzMzQzODMwM2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDM1Mzgz NDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkATSAMDANBgkqhkiG9w0BAQsFAAOCAQEAQDrT9TQk fmudq+n5vINo5Ky4AVZIkmL6KOilTfS7+9N10FL13qe4YTmz5r+PSVZwRD/5sSyj ef/KKGdZFSHi0xksF38tecP1XPUu3s7b6IdPLJVhbzWeTB4yB1Gmr1/iRUz2eRCw 4Rp2JXB7tt1TSJUNG6Xixy+JkASwOupgYMZO8xP4zdcCsQYd4AvgTJWDaqzmKgcz ryuIhfmhmd1WwE+67bsh81IororGK2Lh7/rj5QYj5bb+QMWar1BjpKbvkBU7ndft SfkTY+9j5Uv5mGqQkMacwuMfgypGYlQIDUJCc/ySwkIMBLU94LwNa9jkMt5KQyz/ DqDZDMBOGUsMYA== -----END CERTIFICATE-----Generated at Wed Jan 21 04:24:33 2026 by rpki-client