This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e34372e3131302e302f32342d3234203d3e2034383132.roa File: 3230322e34372e3131302e302f32342d3234203d3e2034383132.roa (raw, json) Hash identifier: 9s3ic0lfpCLrK4v9PnYYThNn4W+qc6cqILtlqEH+bh8= Subject key identifier: E1:A8:D1:B4:6B:B2:43:29:2B:8F:05:6D:DF:27:93:20:66:E6:CF:97 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 41710515F7912173C60E596DE2AC8FE4E7170DDE Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e34372e3131302e302f32342d3234203d3e2034383132.roa Signing time: Tue 20 Jan 2026 01:19:12 +0000 ROA not before: Tue 20 Jan 2026 01:14:12 +0000 ROA not after: Tue 19 Jan 2027 01:19:12 +0000 asID: 4812 IP address blocks: 202.47.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:71:05:15:f7:91:21:73:c6:0e:59:6d:e2:ac:8f:e4:e7:17:0d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jan 20 01:14:12 2026 GMT Not After : Jan 19 01:19:12 2027 GMT Subject: CN=E1A8D1B46BB243292B8F056DDF27932066E6CF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:64:95:7a:ee:01:2c:5d:3e:0c:5a:a8:7b: d2:e3:b6:d1:6f:c2:64:8a:89:34:64:67:32:9d:58: d7:32:c5:32:84:94:1a:09:03:77:dd:39:35:bd:56: d8:26:79:32:35:53:c4:63:6c:99:3a:7a:dc:0e:89: 2e:50:98:ad:e1:8c:fe:a6:f5:87:dc:47:90:71:55: 7b:1c:c6:37:f8:62:98:e5:a6:db:a7:28:68:05:fe: 8d:fe:a2:84:ee:9e:3e:19:55:de:6e:90:28:20:e2: 76:59:24:7a:ea:c9:21:11:7d:9e:a5:5e:d2:02:58: f5:64:ce:17:a5:29:68:bd:e1:d7:f7:6a:14:cf:4c: 2a:20:bb:6c:31:6e:f1:da:4c:46:6b:d7:bc:ad:3b: 9d:a1:c7:ed:c0:a4:b5:89:a0:a3:71:22:d4:f7:41: 7a:f7:88:23:ed:53:73:3d:5c:16:87:13:1c:bc:5d: d6:9c:58:da:93:7d:f9:19:02:c5:8b:e1:b8:c9:69: 9f:d8:c0:b5:b9:fc:3c:a9:b4:79:5a:9c:9a:8e:2e: 6b:c6:8c:37:09:3d:80:1c:eb:fa:95:72:9a:43:4c: 16:f6:78:a7:51:af:5e:7c:37:33:c9:b9:3f:97:36: 4b:92:97:50:25:0c:2b:79:c8:43:b3:4e:37:d9:15: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A8:D1:B4:6B:B2:43:29:2B:8F:05:6D:DF:27:93:20:66:E6:CF:97 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e34372e3131302e302f32342d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.110.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:47:2f:03:53:7e:ec:d7:1f:6b:26:2e:c4:fe:10:78:5f:ca: 26:53:be:5f:48:8c:9a:f7:76:e2:c8:74:f4:8a:5e:46:66:19: 62:69:fd:57:94:c7:b2:00:0c:81:71:8f:73:bc:6e:c5:26:10: 32:66:31:d7:45:2f:7c:89:af:df:2f:aa:59:6c:8d:47:ed:61: 9c:c1:16:51:36:19:24:3c:9c:9a:73:cc:23:7c:9f:d3:bd:38: 8f:41:3f:d0:3d:e4:fe:25:a8:8d:f2:5a:4a:9d:bf:b8:ce:04: ca:13:41:12:79:66:33:90:38:68:97:54:99:63:0e:bb:c3:a1: fe:35:18:69:d8:71:d9:7c:f4:ac:2a:f9:55:8c:39:86:3f:f0: eb:ad:ef:4b:ae:91:bb:0a:35:bb:69:a3:3e:ea:4f:c6:ca:aa: 28:32:a4:ef:af:5a:30:05:94:a7:e6:e8:a5:ef:94:9e:c7:89: 74:8c:b8:8e:74:b5:42:0b:e7:79:8c:1e:c8:52:33:d2:9c:e9: 6e:a7:14:63:76:19:4b:a4:de:7c:b1:2a:58:5e:8d:01:7c:b9: 67:d7:c4:c4:54:d0:60:3c:eb:aa:18:ee:ee:71:12:fb:df:e2: a0:10:5e:4e:90:4d:36:04:63:24:4c:6d:6c:3f:11:91:f1:89: c4:f8:1d:8f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUQXEFFfeRIXPGDllt4qyP5OcXDd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAxMjAwMTE0MTJaFw0yNzAxMTkwMTE5MTJaMDMxMTAvBgNV BAMTKEUxQThEMUI0NkJCMjQzMjkyQjhGMDU2RERGMjc5MzIwNjZFNkNGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOf2SVeu4BLF0+DFqoe9LjttFv wmSKiTRkZzKdWNcyxTKElBoJA3fdOTW9VtgmeTI1U8RjbJk6etwOiS5QmK3hjP6m 9YfcR5BxVXscxjf4YpjlptunKGgF/o3+ooTunj4ZVd5ukCgg4nZZJHrqySERfZ6l XtICWPVkzhelKWi94df3ahTPTCogu2wxbvHaTEZr17ytO52hx+3ApLWJoKNxItT3 QXr3iCPtU3M9XBaHExy8XdacWNqTffkZAsWL4bjJaZ/YwLW5/DyptHlanJqOLmvG jDcJPYAc6/qVcppDTBb2eKdRr158NzPJuT+XNkuSl1AlDCt5yEOzTjfZFVvlAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU4ajRtGuyQykrjwVt3yeTIGbmz5cwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTc5NDU4LzAvMzIzMDMyMmUzNDM3 MmUzMTMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMovbjANBgkqhkiG9w0BAQsFAAOCAQEAHEcvA1N+7NcfayYuxP4QeF/KJlO+ X0iMmvd24sh09IpeRmYZYmn9V5THsgAMgXGPc7xuxSYQMmYx10UvfImv3y+qWWyN R+1hnMEWUTYZJDycmnPMI3yf0704j0E/0D3k/iWojfJaSp2/uM4EyhNBEnlmM5A4 aJdUmWMOu8Oh/jUYadhx2Xz0rCr5VYw5hj/w663vS66Ruwo1u2mjPupPxsqqKDKk 769aMAWUp+bope+UnseJdIy4jnS1QgvneYweyFIz0pzpbqcUY3YZS6TefLEqWF6N AXy5Z9fExFTQYDzrqhju7nES+9/ioBBeTpBNNgRjJExtbD8RkfGJxPgdjw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:48 2026 by rpki-client