This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/323430333a363338303a3a2f34342d3438203d3e20323132323337.roa File: 323430333a363338303a3a2f34342d3438203d3e20323132323337.roa (raw, json) Hash identifier: b7P7sQQ919iumcSB62PzdoHBsgJ1DRgIsQb1Nb/Dw3g= Subject key identifier: 2C:D8:E2:E4:27:58:AD:85:FF:08:11:7C:FD:34:8E:86:6E:23:9B:09 Certificate issuer: /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Certificate serial: 187654B2ABD52752BD04826C6F2EF37D61854C8B Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/323430333a363338303a3a2f34342d3438203d3e20323132323337.roa Signing time: Tue 20 Jan 2026 02:08:21 +0000 ROA not before: Tue 20 Jan 2026 02:03:21 +0000 ROA not after: Tue 19 Jan 2027 02:08:21 +0000 asID: 212237 IP address blocks: 2403:6380::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 13:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:76:54:b2:ab:d5:27:52:bd:04:82:6c:6f:2e:f3:7d:61:85:4c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Validity Not Before: Jan 20 02:03:21 2026 GMT Not After : Jan 19 02:08:21 2027 GMT Subject: CN=2CD8E2E42758AD85FF08117CFD348E866E239B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:33:ed:fd:f3:e6:7a:be:16:f3:62:bd:82:12: 87:c0:b0:73:f5:70:94:dd:75:90:0c:0d:fe:59:88: e2:00:f6:9c:6a:13:4e:b8:3c:c9:45:49:76:98:ec: ba:51:b2:4b:c2:72:7e:7b:90:7b:ef:b1:d1:37:48: c8:4b:62:2f:d0:30:5b:de:c8:70:ce:b2:16:05:15: c0:99:f2:da:47:70:b6:1e:5f:56:37:13:af:46:89: b3:07:f1:7b:c2:91:3f:ac:f0:d4:19:29:27:1b:90: 68:5a:51:ae:b7:69:19:4f:30:76:35:3d:36:94:fb: c8:21:97:39:00:1e:76:6f:53:cc:d3:e4:b0:0f:3d: 01:37:2a:e6:f9:c2:df:cc:8a:7c:16:45:73:9e:14: ee:32:55:82:f3:31:0f:3a:55:00:4a:ca:7a:73:66: b5:8c:99:23:04:96:af:a5:5e:4a:48:ef:a5:4d:1c: c3:8c:07:6b:8a:3c:5b:31:b8:0b:0c:9f:eb:97:cf: cf:38:60:b7:93:c7:bc:1d:97:62:cc:fe:79:ef:f4: 20:4a:63:73:ba:e8:36:18:6f:48:36:90:db:9e:5f: d8:ab:df:cd:ca:8f:ef:95:e3:bf:1c:58:5e:01:d0: ce:18:fa:49:5e:c2:81:c6:42:85:4e:ed:24:87:4f: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D8:E2:E4:27:58:AD:85:FF:08:11:7C:FD:34:8E:86:6E:23:9B:09 X509v3 Authority Key Identifier: keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/323430333a363338303a3a2f34342d3438203d3e20323132323337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:6380::/44 Signature Algorithm: sha256WithRSAEncryption b1:da:24:a7:64:87:5d:b4:0d:c9:3a:de:f9:96:0d:fd:04:dc: ed:55:9f:99:64:7f:83:84:70:db:71:ff:63:87:f3:87:c8:39: 07:84:fc:88:fe:7b:ff:92:db:cb:93:51:80:b5:7e:6b:ac:e8: ae:e3:62:d8:4f:1e:26:0a:c5:9a:76:58:7b:b0:2e:fc:ff:33: c4:29:fb:ab:ff:b7:b5:ab:98:16:8b:d5:52:1f:9b:27:11:79: 67:8c:5d:e5:61:34:67:5b:cd:c0:21:7c:2e:09:c7:2f:7f:e2: 26:75:ca:65:3e:bf:f0:81:fb:14:00:f0:96:b3:5e:97:28:e2: 71:12:3f:ab:d0:23:34:40:ee:1e:75:82:83:a9:c4:13:26:c0: 55:59:bf:1e:e9:e7:3a:ad:25:03:bb:79:d8:d3:f4:5d:bc:8f: c9:b7:ba:cb:d8:f9:af:ef:1f:89:cb:c7:e9:de:52:f8:6a:3e: 9c:32:de:a3:a4:94:cd:77:a0:ed:2c:e1:e5:2c:6a:18:99:50: b8:53:fa:2b:6e:0d:2e:4e:bc:1a:9a:52:8f:44:a5:3a:4c:4d: a8:3d:72:6c:2e:49:72:8f:7f:c4:05:55:15:f5:fb:2c:b9:88: 93:07:6f:1b:1b:ec:0e:32:82:c2:ff:77:4b:ad:7c:00:29:2b: 4c:f9:b2:1b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUGHZUsqvVJ1K9BIJsby7zfWGFTIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMz OERCQzVDODAeFw0yNjAxMjAwMjAzMjFaFw0yNzAxMTkwMjA4MjFaMDMxMTAvBgNV BAMTKDJDRDhFMkU0Mjc1OEFEODVGRjA4MTE3Q0ZEMzQ4RTg2NkUyMzlCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTM+398+Z6vhbzYr2CEofAsHP1 cJTddZAMDf5ZiOIA9pxqE064PMlFSXaY7LpRskvCcn57kHvvsdE3SMhLYi/QMFve yHDOshYFFcCZ8tpHcLYeX1Y3E69GibMH8XvCkT+s8NQZKScbkGhaUa63aRlPMHY1 PTaU+8ghlzkAHnZvU8zT5LAPPQE3Kub5wt/MinwWRXOeFO4yVYLzMQ86VQBKynpz ZrWMmSMElq+lXkpI76VNHMOMB2uKPFsxuAsMn+uXz884YLeTx7wdl2LM/nnv9CBK Y3O66DYYb0g2kNueX9ir383Kj++V478cWF4B0M4Y+klewoHGQoVO7SSHTx6VAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQULNji5CdYrYX/CBF8/TSOhm4jmwkwHwYDVR0j BBgwFoAUnnvrgQIzNppH1C2Bp/UIQzjbxcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTgyMTY5OC8wLzlFN0JFQjgxMDIzMzM2OUE0N0Q0MkQ4MUE3RjUw ODQzMzhEQkM1QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTgyMTY5OC8wLzMyMzQzMDMzM2Ez NjMzMzgzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzMjMyMzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHBCQDY4AAADANBgkqhkiG9w0BAQsFAAOCAQEAsdokp2SHXbQNyTre+ZYN /QTc7VWfmWR/g4Rw23H/Y4fzh8g5B4T8iP57/5Lby5NRgLV+a6zoruNi2E8eJgrF mnZYe7Au/P8zxCn7q/+3tauYFovVUh+bJxF5Z4xd5WE0Z1vNwCF8LgnHL3/iJnXK ZT6/8IH7FADwlrNelyjicRI/q9AjNEDuHnWCg6nEEybAVVm/HunnOq0lA7t52NP0 XbyPybe6y9j5r+8ficvH6d5S+Go+nDLeo6SUzXeg7Szh5SxqGJlQuFP6K24NLk68 GppSj0SlOkxNqD1ybC5Jco9/xAVVFfX7LLmIkwdvGxvsDjKCwv93S618ACkrTPmy Gw== -----END CERTIFICATE-----Generated at Fri Jan 23 02:20:48 2026 by rpki-client