This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3230332e38382e33322e302f31392d3234203d3e203137393632.roa File: 3230332e38382e33322e302f31392d3234203d3e203137393632.roa (raw, json) Hash identifier: R5moh4Q8PvGj+dpFkP4txni5P7rMovpRrsPU8yocAVw= Subject key identifier: C2:DE:D8:A2:D2:41:A6:0F:73:F4:73:68:0F:75:6E:A9:3B:E8:8E:E0 Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Certificate serial: 27DB53160BC907EC663DDA915C92795DC20BA467 Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3230332e38382e33322e302f31392d3234203d3e203137393632.roa Signing time: Tue 20 Jan 2026 02:14:15 +0000 ROA not before: Tue 20 Jan 2026 02:09:15 +0000 ROA not after: Tue 19 Jan 2027 02:14:15 +0000 asID: 17962 IP address blocks: 203.88.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:db:53:16:0b:c9:07:ec:66:3d:da:91:5c:92:79:5d:c2:0b:a4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426 Validity Not Before: Jan 20 02:09:15 2026 GMT Not After : Jan 19 02:14:15 2027 GMT Subject: CN=C2DED8A2D241A60F73F473680F756EA93BE88EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:10:81:02:7f:a0:da:0a:00:42:0f:cb:01: 8b:28:1c:3f:c9:99:7c:4c:70:c5:cd:a1:a6:cc:03: 25:23:c8:61:c2:f3:a2:e2:df:ee:ca:fd:d7:f3:46: 59:e7:85:55:cd:5f:14:92:36:9e:51:9d:5c:29:5e: 97:8d:f7:0d:e8:32:5f:1f:ec:15:c0:4f:fe:ab:28: f5:ea:92:96:b8:00:ae:f8:3a:2c:a1:22:e5:a2:f8: c1:08:bf:59:23:08:db:62:b5:6d:bc:af:92:63:16: aa:28:96:48:df:ae:57:9a:20:a0:14:cf:10:8f:01: 43:bd:15:65:68:68:56:b0:66:67:1d:48:94:44:45: 30:0b:93:63:0d:c0:47:73:26:67:26:c4:63:a5:e6: da:1e:eb:c8:e1:5f:de:49:24:f5:c2:be:9a:16:d0: 6d:fd:84:96:e3:96:87:9f:7e:5b:de:a6:cb:d5:17: a3:ee:e9:e0:f4:00:82:df:f6:15:5c:ba:66:14:e4: b2:f6:01:42:97:47:62:bd:b0:1b:23:6b:44:70:9d: c0:87:f0:58:9a:1e:2b:39:59:91:29:bb:93:e1:27: 6b:d9:96:90:fa:40:89:84:70:38:04:de:60:e2:a1: 0e:d0:f5:19:5c:55:67:f1:9d:5a:3a:01:12:ae:51: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DE:D8:A2:D2:41:A6:0F:73:F4:73:68:0F:75:6E:A9:3B:E8:8E:E0 X509v3 Authority Key Identifier: keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/3230332e38382e33322e302f31392d3234203d3e203137393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.88.32.0/19 Signature Algorithm: sha256WithRSAEncryption 61:a2:38:b3:74:9c:5d:4f:34:a3:06:6c:ff:78:3f:69:76:ef: 94:4a:ae:ab:3f:80:11:6f:72:aa:b5:d4:42:d8:4a:31:84:1b: 87:39:9f:d2:e6:9d:fd:a2:40:32:69:60:9e:ea:69:db:8d:7a: 82:b2:fd:ed:ec:92:bf:1b:30:d4:88:da:0f:e1:81:80:e7:3d: 7a:f9:b1:a1:3a:58:1a:d3:dc:4f:53:de:e0:c3:37:9c:df:34: 43:ca:1d:45:22:e7:2f:b9:f8:c9:7f:35:f4:d1:c7:5a:1e:8e: c1:88:ad:19:8f:9b:40:82:37:20:89:3e:1a:3e:6a:27:30:c3: 7e:38:c2:7e:da:20:db:45:a7:3e:6b:31:29:de:de:d3:56:17: b3:ce:c1:c7:bf:0d:28:b0:5c:9b:d1:db:68:aa:28:c7:ae:33: c5:05:07:99:73:7c:b2:da:63:ca:80:b4:f7:4c:d0:c1:00:9e: 88:bb:ee:30:ea:f6:81:8d:44:2b:8e:52:9b:07:4b:47:70:83: 04:d8:87:d3:06:7a:bd:92:b9:77:34:40:67:10:fb:d0:e6:f5: 5e:09:56:94:df:7b:eb:1c:76:c3:b8:3c:8f:08:0a:c5:6b:22: b8:3a:30:80:08:b2:46:bf:b6:30:4b:4d:4e:d4:39:d5:04:3c: 29:76:a5:33 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUJ9tTFgvJB+xmPdqRXJJ5XcILpGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0 QjRCRDQyNjAeFw0yNjAxMjAwMjA5MTVaFw0yNzAxMTkwMjE0MTVaMDMxMTAvBgNV BAMTKEMyREVEOEEyRDI0MUE2MEY3M0Y0NzM2ODBGNzU2RUE5M0JFODhFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rhCBAn+g2goAQg/LAYsoHD/J mXxMcMXNoabMAyUjyGHC86Li3+7K/dfzRlnnhVXNXxSSNp5RnVwpXpeN9w3oMl8f 7BXAT/6rKPXqkpa4AK74OiyhIuWi+MEIv1kjCNtitW28r5JjFqoolkjfrleaIKAU zxCPAUO9FWVoaFawZmcdSJRERTALk2MNwEdzJmcmxGOl5toe68jhX95JJPXCvpoW 0G39hJbjloefflvepsvVF6Pu6eD0AILf9hVcumYU5LL2AUKXR2K9sBsja0RwncCH 8FiaHis5WZEpu5PhJ2vZlpD6QImEcDgE3mDioQ7Q9RlcVWfxnVo6ARKuUSa/AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUwt7YotJBpg9z9HNoD3VuqTvojuAwHwYDVR0j BBgwFoAUrdeakGE8n6LtEpTHf9uwh0tL1CYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzE0NDE5My8wL0FERDc5QTkwNjEzQzlGQTJFRDEyOTRDNzdGREJC MDg3NEI0QkQ0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQURENzlBOTA2MTNDOUZBMkVEMTI5NEM3N0ZEQkIwODc0QjRCRDQyNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MTQ0MTkzLzAvMzIzMDMzMmUzODM4 MmUzMzMyMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzNzM5MzYzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBctYIDANBgkqhkiG9w0BAQsFAAOCAQEAYaI4s3ScXU80owZs/3g/aXbvlEqu qz+AEW9yqrXUQthKMYQbhzmf0uad/aJAMmlgnupp2416grL97eySvxsw1IjaD+GB gOc9evmxoTpYGtPcT1Pe4MM3nN80Q8odRSLnL7n4yX819NHHWh6OwYitGY+bQII3 IIk+Gj5qJzDDfjjCftog20WnPmsxKd7e01YXs87Bx78NKLBcm9HbaKoox64zxQUH mXN8stpjyoC090zQwQCeiLvuMOr2gY1EK45SmwdLR3CDBNiH0wZ6vZK5dzRAZxD7 0Ob1XglWlN976xx2w7g8jwgKxWsiuDowgAiyRr+2MEtNTtQ51QQ8KXalMw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:56 2026 by rpki-client