This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a333030303a3a2f33362d3336203d3e203539303737.roa File: 323430313a333438303a333030303a3a2f33362d3336203d3e203539303737.roa (raw, json) Hash identifier: wHayc1fB4wJcEb8PRaNxLoHoCvMDK8JhtVwa316hScQ= Subject key identifier: C2:DE:B8:08:CE:CF:31:84:D2:BD:72:0B:3B:20:09:2E:72:83:F9:09 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 03318B7BCCC31F50995EA676EC8CC146EACBBCD6 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a333030303a3a2f33362d3336203d3e203539303737.roa Signing time: Tue 20 Jan 2026 02:10:47 +0000 ROA not before: Tue 20 Jan 2026 02:05:47 +0000 ROA not after: Tue 19 Jan 2027 02:10:47 +0000 asID: 59077 IP address blocks: 2401:3480:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:31:8b:7b:cc:c3:1f:50:99:5e:a6:76:ec:8c:c1:46:ea:cb:bc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:47 2026 GMT Not After : Jan 19 02:10:47 2027 GMT Subject: CN=C2DEB808CECF3184D2BD720B3B20092E7283F909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:38:34:2d:e3:73:97:db:33:c6:9e:5e:9b: ca:f8:f4:e4:b3:73:f5:8d:cb:aa:d3:90:46:9f:bf: 2f:68:67:7d:0d:e5:f7:f3:a5:b8:88:83:e4:77:93: 05:7f:60:7e:75:c6:d9:36:bf:d5:18:48:b8:3e:7c: 22:be:e1:68:f5:68:ee:51:6f:a9:99:b0:48:ef:8b: fe:b1:b8:81:e8:e5:7b:54:83:9e:b8:5c:8b:de:1e: 07:ce:b1:6b:3b:72:48:4a:5c:22:a6:79:06:81:c4: bd:af:0e:d8:06:36:0e:8e:ea:52:25:7d:c2:c0:2d: d3:18:ce:b8:4e:e4:54:4c:6f:f3:ad:45:97:af:a6: 41:ea:15:a4:c8:81:4a:c3:6b:2f:4e:77:41:57:5a: 61:ed:7d:c5:0c:ba:2f:fb:06:c1:78:2e:98:95:3d: d5:79:b1:2b:a0:97:47:72:21:2b:43:ae:40:2a:a5: 41:b5:dc:03:95:3d:d5:7a:ef:50:23:02:10:3f:7a: 98:80:51:fb:dc:8c:8a:b5:ef:e7:ca:55:b0:8f:28: 1f:c2:b2:da:fa:26:3e:e9:32:c6:7f:20:d6:9c:4b: 51:90:9b:9a:8b:aa:28:af:b6:eb:de:32:3c:52:09: 5d:78:c7:bc:48:84:15:c5:7c:06:d5:40:77:78:14: 16:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DE:B8:08:CE:CF:31:84:D2:BD:72:0B:3B:20:09:2E:72:83:F9:09 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a333030303a3a2f33362d3336203d3e203539303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3480:3000::/36 Signature Algorithm: sha256WithRSAEncryption cc:e5:33:d7:24:8b:2d:53:a0:11:af:c0:bb:32:40:31:98:8a: 7b:ca:b0:8a:bf:79:67:04:b8:eb:5a:c1:97:fe:b0:0f:f7:a3: 51:6e:02:95:88:23:45:5f:9f:c4:d5:b7:6b:96:33:88:da:01: b7:98:20:ac:13:b9:7b:54:ef:07:86:2f:e6:97:62:30:97:2a: 6f:cf:2c:ad:e4:03:59:dd:1a:07:02:53:2d:77:9b:a5:8d:fb: 51:04:dd:47:89:4f:24:59:a5:45:ca:b6:4d:84:07:d7:ad:6d: b4:cd:33:09:c2:d7:90:22:d8:1d:2e:c5:6d:db:25:3d:36:c1: 92:fb:12:6e:f8:d5:dc:08:98:63:4e:d9:4c:32:ee:6f:09:2a: 01:49:fd:e9:76:83:27:7a:15:d0:ee:98:ed:4e:84:f2:68:c6: b5:77:42:c7:a2:73:d1:23:11:74:2c:aa:59:27:64:b2:07:ec: 57:83:64:70:9c:0e:7e:38:e8:e6:8a:2a:31:e7:f5:b4:be:d9: 0e:cf:c8:7c:b1:a5:30:36:17:23:1b:d0:24:67:7e:ec:9d:f4: fd:b0:2f:15:34:e4:da:a7:16:10:ad:c9:03:d8:64:e1:b4:f2: c8:80:e9:14:9c:c0:2b:4e:56:ff:6a:ef:b6:f9:cc:6e:fd:30: 9e:94:ef:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUAzGLe8zDH1CZXqZ27IzBRurLvNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDdaFw0yNzAxMTkwMjEwNDdaMDMxMTAvBgNV BAMTKEMyREVCODA4Q0VDRjMxODREMkJENzIwQjNCMjAwOTJFNzI4M0Y5MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRzg0LeNzl9szxp5em8r49OSz c/WNy6rTkEafvy9oZ30N5ffzpbiIg+R3kwV/YH51xtk2v9UYSLg+fCK+4Wj1aO5R b6mZsEjvi/6xuIHo5XtUg564XIveHgfOsWs7ckhKXCKmeQaBxL2vDtgGNg6O6lIl fcLALdMYzrhO5FRMb/OtRZevpkHqFaTIgUrDay9Od0FXWmHtfcUMui/7BsF4LpiV PdV5sSugl0dyIStDrkAqpUG13AOVPdV671AjAhA/epiAUfvcjIq17+fKVbCPKB/C str6Jj7pMsZ/INacS1GQm5qLqiivtuveMjxSCV14x7xIhBXFfAbVQHd4FBYDAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUwt64CM7PMYTSvXILOyAJLnKD+QkwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzIzNDMwMzEz YTMzMzQzODMwM2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDM1Mzkz MDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkATSAMDANBgkqhkiG9w0BAQsFAAOCAQEAzOUz1ySL LVOgEa/AuzJAMZiKe8qwir95ZwS461rBl/6wD/ejUW4ClYgjRV+fxNW3a5YziNoB t5ggrBO5e1TvB4Yv5pdiMJcqb88sreQDWd0aBwJTLXebpY37UQTdR4lPJFmlRcq2 TYQH161ttM0zCcLXkCLYHS7FbdslPTbBkvsSbvjV3AiYY07ZTDLubwkqAUn96XaD J3oV0O6Y7U6E8mjGtXdCx6Jz0SMRdCyqWSdksgfsV4NkcJwOfjjo5ooqMef1tL7Z Ds/IfLGlMDYXIxvQJGd+7J30/bAvFTTk2qcWEK3JA9hk4bTyyIDpFJzAK05W/2rv tvnMbv0wnpTvrg== -----END CERTIFICATE-----Generated at Wed Jan 21 04:24:32 2026 by rpki-client