This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a3a2f33362d3336203d3e203233373234.roa File: 323430313a333438303a3a2f33362d3336203d3e203233373234.roa (raw, json) Hash identifier: AFtJPSTZ5P9/R/+Ro6Q7wxsdndY58Dz7BAysdHrz36w= Subject key identifier: AD:31:B6:02:6A:5C:10:DB:DD:1D:A5:7C:0A:9E:92:EB:D1:D3:9B:34 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 25F1BF6C1ACFD6F01294331C0834FEA208A2A26A Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a3a2f33362d3336203d3e203233373234.roa Signing time: Tue 20 Jan 2026 02:10:47 +0000 ROA not before: Tue 20 Jan 2026 02:05:47 +0000 ROA not after: Tue 19 Jan 2027 02:10:47 +0000 asID: 23724 IP address blocks: 2401:3480::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f1:bf:6c:1a:cf:d6:f0:12:94:33:1c:08:34:fe:a2:08:a2:a2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:47 2026 GMT Not After : Jan 19 02:10:47 2027 GMT Subject: CN=AD31B6026A5C10DBDD1DA57C0A9E92EBD1D39B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:a9:44:28:9b:09:4d:7d:43:7e:b6:ac:a3: 55:25:0a:cf:5e:11:d2:4f:8b:41:7c:bc:bf:c6:15: 42:7f:99:1c:ee:b0:de:1b:14:fe:4b:5b:80:e0:4b: f8:71:2a:c3:83:7c:ec:20:e5:d9:16:d1:6e:09:f6: 53:0e:49:e7:32:c2:23:d2:ba:ec:c7:7a:5d:a2:1d: 8b:50:19:4e:17:e9:63:45:5f:73:f0:48:c3:d3:97: ba:83:ad:f2:78:3b:9a:26:a7:ce:25:9b:69:3b:4d: f6:56:55:b5:93:81:7f:be:b5:a3:8a:37:28:27:fc: 6d:92:81:c3:48:b6:55:0f:a4:b3:cd:62:a8:01:87: 48:fb:eb:36:64:54:8b:dc:b6:ae:6d:20:f1:43:89: 50:d5:bc:f1:65:8a:98:de:b4:3e:4f:83:84:17:f9: 75:af:1f:27:1e:c1:3e:f1:76:fc:1f:02:15:d5:41: 8a:f0:54:88:c9:7b:ad:a1:7a:ee:71:a8:10:79:97: 61:9f:21:7a:ed:ec:b5:60:69:77:9c:6b:59:17:87: fa:10:5b:47:b4:09:81:ea:a1:87:22:95:b0:da:21: 12:12:05:c9:e5:07:5f:3b:4d:68:18:7f:8c:7d:7a: 64:3d:f4:67:a2:e3:f0:95:16:79:5b:a2:80:c7:eb: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:31:B6:02:6A:5C:10:DB:DD:1D:A5:7C:0A:9E:92:EB:D1:D3:9B:34 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/323430313a333438303a3a2f33362d3336203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3480::/36 Signature Algorithm: sha256WithRSAEncryption a6:f6:d4:2e:02:f1:5a:9a:bc:33:2c:4d:08:b3:54:62:8e:f5: 74:c0:b7:57:55:50:69:b4:37:60:a8:12:f9:ad:da:45:4b:ea: ec:76:2d:7b:4c:b3:c0:c5:4e:cb:27:24:23:2f:18:b0:30:0e: 80:6b:8b:67:6e:19:36:0c:44:f8:99:a8:a6:6c:f0:e4:64:a9: 71:13:30:d1:e4:66:5b:9d:7a:bd:07:cd:f9:35:5c:1b:d4:83: 54:84:51:86:72:20:05:81:4a:34:f4:08:7a:20:ea:20:ec:1c: 83:a9:ce:8b:8b:f3:62:70:01:9f:37:bf:49:6c:02:29:22:7c: 6c:ee:b0:3f:7d:8a:a8:86:e5:e3:2c:d3:8b:09:06:b2:81:ce: c2:bd:96:87:1c:46:bf:01:8f:6e:7c:5b:be:d1:62:b6:d9:bd: f5:15:3c:1d:df:05:48:41:40:1b:7b:3d:d6:89:63:6c:62:ef: 97:a9:2f:92:30:73:5e:43:a7:cd:3f:c3:8f:cc:33:0b:f2:bf: 50:8a:50:b3:7e:4a:e6:af:bc:35:c0:04:38:8d:54:22:6f:47: 49:10:e3:b1:f2:e5:26:24:b7:6c:e2:4d:e3:33:ec:90:38:7e: 18:b2:32:72:f1:70:92:a0:6f:b0:14:6f:ed:49:30:fc:48:2b: 3e:60:55:1b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUJfG/bBrP1vASlDMcCDT+ogiiomowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDdaFw0yNzAxMTkwMjEwNDdaMDMxMTAvBgNV BAMTKEFEMzFCNjAyNkE1QzEwREJERDFEQTU3QzBBOUU5MkVCRDFEMzlCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RalEKJsJTX1Dfraso1UlCs9e EdJPi0F8vL/GFUJ/mRzusN4bFP5LW4DgS/hxKsODfOwg5dkW0W4J9lMOSecywiPS uuzHel2iHYtQGU4X6WNFX3PwSMPTl7qDrfJ4O5omp84lm2k7TfZWVbWTgX++taOK Nygn/G2SgcNItlUPpLPNYqgBh0j76zZkVIvctq5tIPFDiVDVvPFlipjetD5Pg4QX +XWvHycewT7xdvwfAhXVQYrwVIjJe62heu5xqBB5l2GfIXrt7LVgaXeca1kXh/oQ W0e0CYHqoYcilbDaIRISBcnlB187TWgYf4x9emQ99Gei4/CVFnlbooDH620LAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUrTG2AmpcENvdHaV8Cp6S69HTmzQwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzIzNDMwMzEzYTMz MzQzODMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCQBNIAAMA0GCSqGSIb3DQEBCwUAA4IBAQCm9tQuAvFamrwzLE0Is1RijvV0 wLdXVVBptDdgqBL5rdpFS+rsdi17TLPAxU7LJyQjLxiwMA6Aa4tnbhk2DET4maim bPDkZKlxEzDR5GZbnXq9B835NVwb1INUhFGGciAFgUo09Ah6IOog7ByDqc6Li/Ni cAGfN79JbAIpInxs7rA/fYqohuXjLNOLCQaygc7CvZaHHEa/AY9ufFu+0WK22b31 FTwd3wVIQUAbez3WiWNsYu+XqS+SMHNeQ6fNP8OPzDML8r9QilCzfkrmr7w1wAQ4 jVQib0dJEOOx8uUmJLds4k3jM+yQOH4YsjJy8XCSoG+wFG/tSTD8SCs+YFUb -----END CERTIFICATE-----Generated at Wed Jan 21 04:24:27 2026 by rpki-client