This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232322e302f32342d3332203d3e203234343237.roa
File: 3230322e3137302e3232322e302f32342d3332203d3e203234343237.roa (raw, json)
Hash identifier: c/V9C/LDSLsX3ipXcneziAHRUZXaaPLA6P0kk/Q1q+w=
Subject key identifier: 42:96:05:2A:97:E2:CC:3A:2C:71:06:C2:73:FC:45:38:3E:1A:60:F3
Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial: 44DC8824D03096CE3C8E3DAE89204ED314601500
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232322e302f32342d3332203d3e203234343237.roa
Signing time: Tue 20 Jan 2026 02:27:20 +0000
ROA not before: Tue 20 Jan 2026 02:22:20 +0000
ROA not after: Tue 19 Jan 2027 02:27:20 +0000
asID: 24427
IP address blocks: 202.170.222.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:dc:88:24:d0:30:96:ce:3c:8e:3d:ae:89:20:4e:d3:14:60:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Validity
Not Before: Jan 20 02:22:20 2026 GMT
Not After : Jan 19 02:27:20 2027 GMT
Subject: CN=4296052A97E2CC3A2C7106C273FC45383E1A60F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:ed:1a:08:d8:14:32:a6:87:15:94:82:23:
7e:e0:a2:e5:09:44:00:68:93:19:ab:cd:b6:d5:b2:
9f:b1:3a:37:ec:e0:4c:ba:ec:e8:13:b2:3b:6f:e5:
da:e4:74:a7:cf:4a:ff:f8:81:d2:64:fc:60:66:9d:
34:4b:42:e2:d1:6f:1a:de:79:71:ce:78:26:d5:ac:
60:66:ef:85:2b:d4:40:5c:9b:59:ee:5c:d5:2b:ea:
7a:c0:2e:37:81:b3:41:de:8e:d7:a0:22:a9:0b:e0:
fd:ff:40:6e:62:d8:04:96:bf:5f:ab:e4:60:eb:87:
20:96:96:f0:8f:8f:42:df:da:f5:09:27:5f:b3:d4:
44:82:ad:d0:77:55:c3:fd:4e:b7:4c:1f:06:21:e8:
59:59:51:c2:49:84:37:8d:4b:d9:2e:4e:1a:9f:1f:
d6:8f:0c:71:a4:fe:a3:4e:29:83:06:8c:7a:78:3f:
cd:ee:ba:8f:20:38:8c:54:ba:de:a9:45:7b:20:5a:
80:aa:6b:cf:e5:c2:05:2f:d7:da:f6:00:e1:5b:18:
6e:f7:15:49:dd:7b:31:b8:29:78:04:3d:5c:64:85:
5b:5b:51:4b:f7:c3:ca:52:7e:82:80:0c:16:04:8e:
84:1e:7c:4f:25:f6:c0:6c:85:9f:3b:c7:73:d8:11:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:96:05:2A:97:E2:CC:3A:2C:71:06:C2:73:FC:45:38:3E:1A:60:F3
X509v3 Authority Key Identifier:
keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232322e302f32342d3332203d3e203234343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.170.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:04:33:e5:d6:10:fb:52:b2:1c:07:78:85:6a:8e:7f:2f:f5:
ef:15:53:b6:b7:48:0b:6d:55:bf:1e:35:fb:61:cd:17:8c:85:
27:02:e7:0a:df:f3:5a:6c:3d:67:ef:31:d3:d5:96:cd:90:06:
de:f5:2d:7d:73:2b:64:74:1e:f5:c5:b8:df:ee:23:2e:f3:64:
16:00:56:c4:b0:bb:d8:a0:71:e6:28:e1:be:d6:a4:77:52:3e:
83:84:e8:36:7d:38:f9:53:2c:4c:a3:e4:84:d5:63:f3:d8:15:
27:7f:80:b2:f5:59:77:80:f2:97:5d:88:ff:9b:d7:65:d3:02:
c3:cd:b8:54:9f:47:50:93:5d:01:34:2b:19:01:75:69:59:5a:
a5:e2:0a:ac:eb:11:5c:72:00:54:66:d6:55:b3:2f:f9:59:c4:
48:54:c4:3f:26:74:43:de:3e:a7:28:fd:6e:9a:a2:13:0e:38:
7e:4c:1f:83:2c:d2:5f:d5:d2:c8:8e:1f:cd:c9:5e:60:2d:76:
04:b5:7a:75:9e:96:93:df:0b:91:6b:60:7a:ec:33:4b:35:61:
07:be:2b:18:a2:9a:0a:9b:2c:92:a1:4c:e7:9a:4e:b2:ce:d8:
d1:20:15:cc:7e:79:ec:5d:2c:02:45:84:78:3f:ec:e4:b2:2f:
f8:bf:a3:e0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIURNyIJNAwls48jj2uiSBO0xRgFQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG
NDgyRDhENTAeFw0yNjAxMjAwMjIyMjBaFw0yNzAxMTkwMjI3MjBaMDMxMTAvBgNV
BAMTKDQyOTYwNTJBOTdFMkNDM0EyQzcxMDZDMjczRkM0NTM4M0UxQTYwRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXe0aCNgUMqaHFZSCI37gouUJ
RABokxmrzbbVsp+xOjfs4Ey67OgTsjtv5drkdKfPSv/4gdJk/GBmnTRLQuLRbxre
eXHOeCbVrGBm74Ur1EBcm1nuXNUr6nrALjeBs0HejtegIqkL4P3/QG5i2ASWv1+r
5GDrhyCWlvCPj0Lf2vUJJ1+z1ESCrdB3VcP9TrdMHwYh6FlZUcJJhDeNS9kuThqf
H9aPDHGk/qNOKYMGjHp4P83uuo8gOIxUut6pRXsgWoCqa8/lwgUv19r2AOFbGG73
FUndezG4KXgEPVxkhVtbUUv3w8pSfoKADBYEjoQefE8l9sBshZ87x3PYERpJAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUQpYFKpfizDoscQbCc/xFOD4aYPMwHwYDVR0j
BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB
RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMjMwMzIyZTMx
MzczMDJlMzIzMjMyMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNDM0MzIzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMqq3jANBgkqhkiG9w0BAQsFAAOCAQEAnQQz5dYQ+1KyHAd4hWqO
fy/17xVTtrdIC21Vvx41+2HNF4yFJwLnCt/zWmw9Z+8x09WWzZAG3vUtfXMrZHQe
9cW43+4jLvNkFgBWxLC72KBx5ijhvtakd1I+g4ToNn04+VMsTKPkhNVj89gVJ3+A
svVZd4Dyl12I/5vXZdMCw824VJ9HUJNdATQrGQF1aVlapeIKrOsRXHIAVGbWVbMv
+VnESFTEPyZ0Q94+pyj9bpqiEw44fkwfgyzSX9XSyI4fzcleYC12BLV6dZ6Wk98L
kWtgeuwzSzVhB74rGKKaCpsskqFM55pOss7Y0SAVzH557F0sAkWEeD/s5LIv+L+j
4A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:30 2026 by rpki-client