This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232302e302f32342d3332203d3e203234343237.roa File: 3230322e3137302e3232302e302f32342d3332203d3e203234343237.roa (raw, json) Hash identifier: 0TeDafE41i2d4QLC5hOPZb7MUJrvUFIXOE/K9ScN3/I= Subject key identifier: F6:CD:63:5A:F2:C4:41:16:89:AB:9F:90:78:0E:42:20:CD:19:37:18 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 7AB2B0AD32FA1A5609CF5F0C8EF8E88924A839AC Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232302e302f32342d3332203d3e203234343237.roa Signing time: Tue 20 Jan 2026 02:27:20 +0000 ROA not before: Tue 20 Jan 2026 02:22:20 +0000 ROA not after: Tue 19 Jan 2027 02:27:20 +0000 asID: 24427 IP address blocks: 202.170.220.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b2:b0:ad:32:fa:1a:56:09:cf:5f:0c:8e:f8:e8:89:24:a8:39:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Jan 20 02:22:20 2026 GMT Not After : Jan 19 02:27:20 2027 GMT Subject: CN=F6CD635AF2C4411689AB9F90780E4220CD193718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:28:a6:a4:04:18:3a:03:e9:9c:6a:19:44: 80:4a:99:f4:ac:bd:f0:c1:a8:b3:23:d4:e8:74:d9: c8:46:4d:55:c3:ec:58:10:fc:e1:a2:e4:34:94:f4: a1:00:de:ad:1f:7e:62:49:b5:08:c6:c9:12:6f:70: 29:45:92:33:0a:9a:06:06:21:13:f0:7c:13:5d:b9: 32:5d:f8:0b:b6:1d:f4:e5:5c:61:6c:54:80:eb:db: 73:87:e0:87:95:80:bc:d3:e8:48:6a:f8:6c:58:49: 40:05:ce:ad:8c:01:1d:ac:33:56:95:30:0f:9a:48: fd:a2:e3:2f:42:d9:91:90:86:44:6c:63:48:8c:da: e6:21:ac:a8:e8:2d:2b:71:7f:52:5c:7c:7e:57:32: 5b:59:1f:60:7f:e8:5f:69:3c:b2:d4:df:77:62:7a: 00:c8:be:c2:0f:e3:16:e2:b4:21:66:49:6c:06:9c: 92:87:8f:3e:6e:4e:4a:00:1b:1e:09:0d:e2:15:b8: f3:16:5c:e1:9f:de:71:c7:b4:2c:2a:64:83:80:17: 93:57:af:eb:0f:cc:6d:0a:c6:0d:1c:34:14:de:99: 19:59:59:8e:d0:93:35:5f:e4:2f:74:e9:12:9c:35: 54:82:ad:7c:c3:af:6e:45:ab:c5:3e:c2:fb:15:42: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CD:63:5A:F2:C4:41:16:89:AB:9F:90:78:0E:42:20:CD:19:37:18 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232302e302f32342d3332203d3e203234343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.170.220.0/24 Signature Algorithm: sha256WithRSAEncryption 56:2d:01:a4:a7:78:cc:bb:37:24:db:f9:f6:ef:6e:e9:1d:af: 92:e0:4e:bb:75:5a:e1:3e:50:94:8d:91:6a:70:1a:13:42:7b: 2e:a4:d6:df:0d:bd:c4:c9:e4:4d:9d:3a:5f:35:42:ed:ed:b0: fd:db:99:77:a7:88:1a:17:a8:6e:fa:50:a1:69:b4:55:1a:0d: 83:cf:ae:00:ab:db:7a:ae:a0:5d:d1:2a:c1:1b:57:72:57:09: 46:99:4d:5d:88:39:64:6f:70:d6:fe:0c:5a:32:22:3f:27:e1: a3:52:18:0a:88:88:3f:c2:fd:ea:78:03:02:e3:b4:2b:79:10: 17:1e:26:de:2d:29:79:cd:77:a9:fc:aa:7b:40:3a:13:52:c8: 66:03:0b:cf:11:1a:b3:d6:ae:d4:43:06:73:0b:f0:a3:e4:8a: 9c:80:38:2d:5a:8a:81:7e:e9:cf:03:95:1a:af:5a:e2:e4:83: c3:d7:aa:be:cd:2f:c1:d3:2f:38:49:62:20:51:1c:61:16:9e: aa:b7:3a:e4:0d:38:11:b0:90:c3:dc:db:da:71:29:ba:7a:2d: 4d:d1:61:34:21:19:88:17:17:11:dd:e4:0a:2e:36:8c:59:b4: 9c:79:9d:3f:8f:41:0e:5e:16:23:73:23:c4:f8:00:a8:4e:1c: ba:44:9e:ad -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUerKwrTL6GlYJz18MjvjoiSSoOawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjAxMjAwMjIyMjBaFw0yNzAxMTkwMjI3MjBaMDMxMTAvBgNV BAMTKEY2Q0Q2MzVBRjJDNDQxMTY4OUFCOUY5MDc4MEU0MjIwQ0QxOTM3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zCimpAQYOgPpnGoZRIBKmfSs vfDBqLMj1Oh02chGTVXD7FgQ/OGi5DSU9KEA3q0ffmJJtQjGyRJvcClFkjMKmgYG IRPwfBNduTJd+Au2HfTlXGFsVIDr23OH4IeVgLzT6Ehq+GxYSUAFzq2MAR2sM1aV MA+aSP2i4y9C2ZGQhkRsY0iM2uYhrKjoLStxf1JcfH5XMltZH2B/6F9pPLLU33di egDIvsIP4xbitCFmSWwGnJKHjz5uTkoAGx4JDeIVuPMWXOGf3nHHtCwqZIOAF5NX r+sPzG0Kxg0cNBTemRlZWY7QkzVf5C906RKcNVSCrXzDr25Fq8U+wvsVQhztAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU9s1jWvLEQRaJq5+QeA5CIM0ZNxgwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMjMwMzIyZTMx MzczMDJlMzIzMjMwMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNDM0MzIzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqq3DANBgkqhkiG9w0BAQsFAAOCAQEAVi0BpKd4zLs3JNv59u9u 6R2vkuBOu3Va4T5QlI2RanAaE0J7LqTW3w29xMnkTZ06XzVC7e2w/duZd6eIGheo bvpQoWm0VRoNg8+uAKvbeq6gXdEqwRtXclcJRplNXYg5ZG9w1v4MWjIiPyfho1IY CoiIP8L96ngDAuO0K3kQFx4m3i0pec13qfyqe0A6E1LIZgMLzxEas9au1EMGcwvw o+SKnIA4LVqKgX7pzwOVGq9a4uSDw9eqvs0vwdMvOEliIFEcYRaeqrc65A04EbCQ w9zb2nEpunotTdFhNCEZiBcXEd3kCi42jFm0nHmdP49BDl4WI3MjxPgAqE4cukSe rQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:36 2026 by rpki-client