This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430383a343031363a3a2f33322d3332203d3e203234343239.roa File: 323430383a343031363a3a2f33322d3332203d3e203234343239.roa (raw, json) Hash identifier: JY6EyEHObFN70WtIyyCcgFcMUMI20Yh+7uSNKIo60Bg= Subject key identifier: 64:86:12:D4:E8:28:2C:EA:57:46:EC:4D:EC:2F:EB:0F:8D:8F:4B:10 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 2ADAE4E1B1B6A486FA1E5041398120F006504DF4 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430383a343031363a3a2f33322d3332203d3e203234343239.roa Signing time: Tue 20 Jan 2026 07:00:31 +0000 ROA not before: Tue 20 Jan 2026 06:55:31 +0000 ROA not after: Tue 19 Jan 2027 07:00:31 +0000 asID: 24429 IP address blocks: 2408:4016::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 02:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:da:e4:e1:b1:b6:a4:86:fa:1e:50:41:39:81:20:f0:06:50:4d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Jan 20 06:55:31 2026 GMT Not After : Jan 19 07:00:31 2027 GMT Subject: CN=648612D4E8282CEA5746EC4DEC2FEB0F8D8F4B10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b1:40:a8:4a:ff:2f:47:6c:b4:f0:29:55:e2: 17:61:ea:21:6b:75:43:50:28:ce:9f:95:0a:7d:65: ec:78:b7:e8:4a:42:f9:9b:90:d9:b1:bf:d1:31:13: 20:ed:d1:0b:11:c7:8e:c3:07:54:09:8e:c9:2d:c7: fb:95:78:ba:d3:76:81:4b:a4:a7:76:a3:5a:20:df: bd:e0:eb:f2:8e:f9:8f:8e:41:3f:a3:56:50:47:06: c6:59:ee:5f:58:c0:6a:7c:ae:1f:bd:cd:26:dd:ac: 38:8d:62:5a:f5:1e:98:c3:3d:6a:7b:5d:f5:5b:e4: 5b:67:d6:e9:8d:12:37:c0:21:3b:bd:76:c4:89:ae: e6:04:4b:31:56:f8:89:4e:83:d5:f8:32:7f:c6:5a: 21:7a:30:87:16:a7:12:f1:61:0c:52:21:78:69:ed: 8f:bd:e4:4f:2b:c6:57:d1:12:15:00:cd:a3:d6:03: 5e:82:d1:9e:7b:b0:cf:aa:ce:b6:c4:61:c8:44:b0: 02:e2:6a:fa:54:b0:c7:d1:6c:61:f6:54:28:55:9a: d2:15:a0:d9:ce:07:59:f6:5a:43:48:66:00:1b:a8: 0d:ea:15:16:e8:e3:c8:7e:d9:e6:1d:08:ef:a9:ac: 60:8a:38:76:8d:a8:ce:e8:81:19:4c:19:50:d6:5f: 96:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:86:12:D4:E8:28:2C:EA:57:46:EC:4D:EC:2F:EB:0F:8D:8F:4B:10 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430383a343031363a3a2f33322d3332203d3e203234343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2408:4016::/32 Signature Algorithm: sha256WithRSAEncryption 77:f6:ed:1e:32:ab:a9:e3:56:5e:59:6d:c3:71:dd:be:23:94: e5:fb:41:0c:02:e2:d2:24:bd:cb:87:38:21:d1:e4:89:ee:c2: 55:95:8a:03:09:5d:2d:f2:49:43:1f:75:48:90:9c:83:9e:85: 6b:31:14:dc:43:a3:d9:bd:83:6d:0c:d9:05:2c:8a:b7:e3:a4: 98:dc:85:4c:86:ec:af:a9:4d:af:7e:e0:77:a6:e0:a7:2f:32: 43:cd:22:b9:d7:cc:48:43:42:c7:77:b1:c7:d1:a2:13:03:7e: ba:3e:8d:7d:17:69:26:75:06:e8:c0:ae:fb:19:ef:1c:c6:c9: 68:20:69:17:eb:67:99:cd:e1:f9:5c:ac:45:9e:1b:65:b6:7d: 75:76:07:0f:69:15:53:03:04:d6:3f:4c:5a:5d:a3:7a:82:cb: c9:27:fa:f0:06:c4:f8:27:dc:b4:80:e1:7f:33:3b:8c:6d:96: a5:c8:a5:29:a2:99:b1:bf:b5:ae:06:14:c5:73:66:9c:1a:f2: 4a:f4:5d:a0:cd:ef:47:bf:33:5b:85:05:c4:d5:81:09:b3:74: 46:27:48:1f:14:8c:d5:65:5a:ae:7a:7e:cf:0e:12:46:7b:9d: ca:b3:85:ad:34:48:42:27:82:71:d1:56:89:ae:a8:22:f7:aa: b2:a3:3e:17 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUKtrk4bG2pIb6HlBBOYEg8AZQTfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAxMjAwNjU1MzFaFw0yNzAxMTkwNzAwMzFaMDMxMTAvBgNV BAMTKDY0ODYxMkQ0RTgyODJDRUE1NzQ2RUM0REVDMkZFQjBGOEQ4RjRCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmsUCoSv8vR2y08ClV4hdh6iFr dUNQKM6flQp9Zex4t+hKQvmbkNmxv9ExEyDt0QsRx47DB1QJjsktx/uVeLrTdoFL pKd2o1og373g6/KO+Y+OQT+jVlBHBsZZ7l9YwGp8rh+9zSbdrDiNYlr1HpjDPWp7 XfVb5Ftn1umNEjfAITu9dsSJruYESzFW+IlOg9X4Mn/GWiF6MIcWpxLxYQxSIXhp 7Y+95E8rxlfREhUAzaPWA16C0Z57sM+qzrbEYchEsALiavpUsMfRbGH2VChVmtIV oNnOB1n2WkNIZgAbqA3qFRbo48h+2eYdCO+prGCKOHaNqM7ogRlMGVDWX5YbAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUZIYS1OgoLOpXRuxN7C/rD42PSxAwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzIzNDMwMzgzYTM0 MzAzMTM2M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNDM0MzIzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQIQBYwDQYJKoZIhvcNAQELBQADggEBAHf27R4yq6njVl5ZbcNx3b4jlOX7 QQwC4tIkvcuHOCHR5InuwlWVigMJXS3ySUMfdUiQnIOehWsxFNxDo9m9g20M2QUs irfjpJjchUyG7K+pTa9+4Hem4KcvMkPNIrnXzEhDQsd3scfRohMDfro+jX0XaSZ1 BujArvsZ7xzGyWggaRfrZ5nN4flcrEWeG2W2fXV2Bw9pFVMDBNY/TFpdo3qCy8kn +vAGxPgn3LSA4X8zO4xtlqXIpSmimbG/ta4GFMVzZpwa8kr0XaDN70e/M1uFBcTV gQmzdEYnSB8UjNVlWq56fs8OEkZ7ncqzha00SEIngnHRVomuqCL3qrKjPhc= -----END CERTIFICATE-----Generated at Wed Jan 21 17:52:59 2026 by rpki-client