This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/323430333a363338303a36303a3a2f34342d3438203d3e20323132323337.roa File: 323430333a363338303a36303a3a2f34342d3438203d3e20323132323337.roa (raw, json) Hash identifier: WfMQtEanWmZu8DFVSnZby4cxZZeJP2UusVFlrkGgQ2Y= Subject key identifier: 8F:1C:CC:DA:5B:1C:6F:D6:A0:0C:BF:52:0B:0D:DF:6F:73:64:3A:88 Certificate issuer: /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Certificate serial: 6CA6526BEE68F93BACBD60494BD6EE9917C3C484 Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/323430333a363338303a36303a3a2f34342d3438203d3e20323132323337.roa Signing time: Tue 20 Jan 2026 02:08:19 +0000 ROA not before: Tue 20 Jan 2026 02:03:19 +0000 ROA not after: Tue 19 Jan 2027 02:08:19 +0000 asID: 212237 IP address blocks: 2403:6380:60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 13:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a6:52:6b:ee:68:f9:3b:ac:bd:60:49:4b:d6:ee:99:17:c3:c4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Validity Not Before: Jan 20 02:03:19 2026 GMT Not After : Jan 19 02:08:19 2027 GMT Subject: CN=8F1CCCDA5B1C6FD6A00CBF520B0DDF6F73643A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:24:0f:f9:86:59:57:da:1c:47:b6:89:c5: 96:f4:8e:71:51:78:b3:ff:50:1e:c6:9d:d5:05:22: 89:88:60:bd:97:19:cf:2d:40:b6:f3:80:d1:90:00: 37:d2:2f:0e:c9:d1:9e:40:b8:03:78:a2:36:8f:a8: c4:40:c3:0c:25:06:0b:af:8b:af:56:60:a7:49:a8: 15:a9:b0:5a:7d:83:10:76:c6:c9:1a:3b:09:3d:c9: dc:44:3c:38:04:48:c4:ec:23:a3:af:43:bb:98:9c: d4:59:1d:6a:00:a5:54:b3:37:c1:5d:83:b1:5b:a3: 41:d7:45:35:28:ba:b5:45:f0:80:d9:ee:c4:13:8a: 08:b5:4d:97:36:77:f5:5b:08:80:6b:c5:b6:64:2b: bc:cf:f3:57:cd:b3:4b:44:a1:76:d0:24:94:ae:55: d1:77:3a:4f:38:45:7c:98:28:03:8e:61:55:24:6a: 65:b0:d7:6a:69:34:73:4c:ba:47:ae:6e:8b:ef:25: 6a:8a:02:3f:4d:aa:1f:7c:5f:1b:df:94:c9:c4:62: 8a:84:c3:bf:d0:6c:0a:c3:35:69:50:e8:b5:d6:69: 35:9e:98:7c:02:a2:b4:94:ad:8b:be:87:d8:52:c9: c0:b5:fc:56:25:f9:6e:62:d4:22:9e:ce:14:cb:27: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1C:CC:DA:5B:1C:6F:D6:A0:0C:BF:52:0B:0D:DF:6F:73:64:3A:88 X509v3 Authority Key Identifier: keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/323430333a363338303a36303a3a2f34342d3438203d3e20323132323337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:6380:60::/44 Signature Algorithm: sha256WithRSAEncryption 25:ed:7d:19:de:1b:c1:4d:ec:a9:cb:19:4d:de:6a:0c:9f:ca: cf:25:ee:67:40:9c:98:f1:7c:bf:7d:99:21:84:dd:04:97:09: df:91:43:56:fc:41:5a:c6:ad:3e:ae:76:67:55:d3:fa:76:c2: 68:03:4b:a1:e2:39:24:f7:ca:c6:2a:7d:ae:98:b2:49:5f:42: 92:63:27:59:e5:ee:e6:26:b2:89:d5:04:37:02:db:a0:24:4f: e8:0d:c5:d6:c9:d6:bd:44:fd:83:0a:4d:3b:0d:d7:d0:de:97: 00:21:20:9d:4e:47:b5:dd:9d:ee:89:c7:4f:ed:1e:bb:76:22: c3:aa:ea:83:66:60:87:b6:29:b3:bf:2a:67:25:bf:a0:9e:34: 75:8e:e6:f3:c2:94:73:2e:90:82:cc:7a:56:a4:bd:d7:f3:99: 0e:00:1b:5b:a2:e5:8c:ff:ca:6f:29:ed:45:29:e0:b1:06:4a: a5:37:6d:a5:5a:1a:a0:5d:3f:e0:90:74:c9:9f:66:d0:32:dc: da:34:43:8f:6b:bb:6a:99:e0:68:5f:1f:ae:2d:57:42:c1:c1: 10:85:33:2f:4f:17:f9:68:f1:7a:64:ce:93:5d:90:ea:b3:77: 38:50:a6:d2:1f:80:8b:3c:d3:ce:c0:b3:da:d5:cd:93:cb:34: 73:74:40:ea -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUbKZSa+5o+TusvWBJS9bumRfDxIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMz OERCQzVDODAeFw0yNjAxMjAwMjAzMTlaFw0yNzAxMTkwMjA4MTlaMDMxMTAvBgNV BAMTKDhGMUNDQ0RBNUIxQzZGRDZBMDBDQkY1MjBCMERERjZGNzM2NDNBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKGCQP+YZZV9ocR7aJxZb0jnFR eLP/UB7GndUFIomIYL2XGc8tQLbzgNGQADfSLw7J0Z5AuAN4ojaPqMRAwwwlBguv i69WYKdJqBWpsFp9gxB2xskaOwk9ydxEPDgESMTsI6OvQ7uYnNRZHWoApVSzN8Fd g7Fbo0HXRTUourVF8IDZ7sQTigi1TZc2d/VbCIBrxbZkK7zP81fNs0tEoXbQJJSu VdF3Ok84RXyYKAOOYVUkamWw12ppNHNMukeubovvJWqKAj9Nqh98XxvflMnEYoqE w7/QbArDNWlQ6LXWaTWemHwCorSUrYu+h9hSycC1/FYl+W5i1CKezhTLJ90zAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUjxzM2lscb9agDL9SCw3fb3NkOogwHwYDVR0j BBgwFoAUnnvrgQIzNppH1C2Bp/UIQzjbxcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTgyMTY5OC8wLzlFN0JFQjgxMDIzMzM2OUE0N0Q0MkQ4MUE3RjUw ODQzMzhEQkM1QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxODIxNjk4LzAvMzIzNDMwMzMz YTM2MzMzODMwM2EzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzIz MzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcEJANjgABgMA0GCSqGSIb3DQEBCwUAA4IBAQAl7X0Z3hvB TeypyxlN3moMn8rPJe5nQJyY8Xy/fZkhhN0ElwnfkUNW/EFaxq0+rnZnVdP6dsJo A0uh4jkk98rGKn2umLJJX0KSYydZ5e7mJrKJ1QQ3AtugJE/oDcXWyda9RP2DCk07 DdfQ3pcAISCdTke13Z3uicdP7R67diLDquqDZmCHtimzvypnJb+gnjR1jubzwpRz LpCCzHpWpL3X85kOABtbouWM/8pvKe1FKeCxBkqlN22lWhqgXT/gkHTJn2bQMtza NEOPa7tqmeBoXx+uLVdCwcEQhTMvTxf5aPF6ZM6TXZDqs3c4UKbSH4CLPNPOwLPa 1c2TyzRzdEDq -----END CERTIFICATE-----Generated at Fri Jan 23 02:21:04 2026 by rpki-client