This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232332e302f32342d3332203d3e203234343237.roa File: 3230322e3137302e3232332e302f32342d3332203d3e203234343237.roa (raw, json) Hash identifier: HDVqXdA4D8OhtaouQqSuZCb+F1lHRss6pFhHi0qkluk= Subject key identifier: EF:25:92:81:DB:4E:83:2E:96:73:F8:50:37:C4:83:8D:EF:C4:2D:B2 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 197272B00452956A794A54FC74A86DF786ADF81A Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232332e302f32342d3332203d3e203234343237.roa Signing time: Tue 20 Jan 2026 02:27:20 +0000 ROA not before: Tue 20 Jan 2026 02:22:20 +0000 ROA not after: Tue 19 Jan 2027 02:27:20 +0000 asID: 24427 IP address blocks: 202.170.223.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:72:72:b0:04:52:95:6a:79:4a:54:fc:74:a8:6d:f7:86:ad:f8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Jan 20 02:22:20 2026 GMT Not After : Jan 19 02:27:20 2027 GMT Subject: CN=EF259281DB4E832E9673F85037C4838DEFC42DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:59:74:5e:14:f6:de:3e:ff:9e:da:2b:f8:08: 0e:71:01:bb:b6:f4:83:fa:9e:16:94:a3:95:19:83: 30:4e:34:b2:ff:72:5c:c0:ab:74:a8:49:08:48:ef: 8f:28:5a:aa:b1:68:12:e1:9b:dd:e4:68:86:b5:a7: 51:6c:f1:56:78:f0:1d:3f:e6:ef:c8:d9:f9:23:19: f4:06:4c:2f:c5:50:48:6d:df:e3:75:7d:3b:24:ff: 39:62:53:d1:fa:5f:eb:d4:dd:f4:a0:c6:41:50:c1: f4:81:80:58:41:1b:33:85:e6:29:d1:60:99:12:58: d6:dd:40:75:9b:14:56:a3:c5:38:4d:e7:c5:b3:34: d6:84:17:36:3e:1f:f2:24:bf:8d:69:c2:fb:8a:d1: 27:aa:1e:bd:b3:4e:49:15:eb:83:13:db:61:d5:65: a0:59:f7:1c:b0:b4:21:eb:68:5e:c2:eb:8e:a1:44: 7f:45:ed:3d:9a:58:bd:20:81:94:0f:62:16:94:f3: 62:96:b4:6f:f7:59:27:9a:92:f2:1a:21:60:4a:87: 7f:89:64:f7:1d:2c:bb:fa:6f:da:4c:08:c0:5d:02: ef:fb:59:31:c4:37:bf:07:69:a5:29:7a:3a:20:85: 98:db:31:22:82:e9:eb:d6:cb:5a:4b:56:99:d1:9a: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:25:92:81:DB:4E:83:2E:96:73:F8:50:37:C4:83:8D:EF:C4:2D:B2 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232332e302f32342d3332203d3e203234343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.170.223.0/24 Signature Algorithm: sha256WithRSAEncryption 00:3b:5a:06:2b:86:12:ad:09:d2:b2:e8:23:6a:a0:ef:13:ac: 7b:66:05:96:ba:22:60:ca:bb:90:35:7d:01:4a:93:17:03:7a: 65:2c:01:e6:5b:fb:40:c3:bb:d7:1f:13:42:ce:39:fc:d3:35: 93:22:88:3c:fc:12:6d:0c:3b:03:04:65:44:dc:b6:cb:5c:76: 72:37:bd:c1:c5:17:64:75:94:4b:43:5f:10:8e:02:35:05:fe: 90:2e:94:c9:70:ce:4b:bc:f0:69:6a:b8:91:c6:11:a7:7a:8b: 76:78:6e:7b:84:ad:b3:0c:ab:2d:7d:ee:06:18:85:8b:94:cc: a7:7e:06:45:4d:79:a1:5f:14:be:96:96:e0:fa:94:77:b1:0a: 3e:24:14:f8:40:9d:96:20:8b:8d:38:1d:72:5e:6a:ee:b0:e1: a1:cb:09:99:ac:1c:08:06:ae:e7:6b:71:15:75:f5:db:f9:26: 0e:37:a8:96:de:44:ea:c6:35:ff:d3:c0:85:3c:9a:97:c4:bf: e1:60:dc:0f:f1:65:25:d3:9c:98:a5:8e:2d:72:b5:e8:e3:b3: e6:cc:af:47:19:86:f5:cf:9a:55:c1:c5:b6:f9:a0:57:1e:5c: df:71:67:b8:59:7d:d0:6d:70:cd:5e:ec:8b:d0:54:39:e6:8f: fd:f0:f3:ed -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUGXJysARSlWp5SlT8dKht94at+BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjAxMjAwMjIyMjBaFw0yNzAxMTkwMjI3MjBaMDMxMTAvBgNV BAMTKEVGMjU5MjgxREI0RTgzMkU5NjczRjg1MDM3QzQ4MzhERUZDNDJEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRWXReFPbePv+e2iv4CA5xAbu2 9IP6nhaUo5UZgzBONLL/clzAq3SoSQhI748oWqqxaBLhm93kaIa1p1Fs8VZ48B0/ 5u/I2fkjGfQGTC/FUEht3+N1fTsk/zliU9H6X+vU3fSgxkFQwfSBgFhBGzOF5inR YJkSWNbdQHWbFFajxThN58WzNNaEFzY+H/Ikv41pwvuK0SeqHr2zTkkV64MT22HV ZaBZ9xywtCHraF7C646hRH9F7T2aWL0ggZQPYhaU82KWtG/3WSeakvIaIWBKh3+J ZPcdLLv6b9pMCMBdAu/7WTHEN78HaaUpejoghZjbMSKC6evWy1pLVpnRmvplAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU7yWSgdtOgy6Wc/hQN8SDje/ELbIwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMjMwMzIyZTMx MzczMDJlMzIzMjMzMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNDM0MzIzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqq3zANBgkqhkiG9w0BAQsFAAOCAQEAADtaBiuGEq0J0rLoI2qg 7xOse2YFlroiYMq7kDV9AUqTFwN6ZSwB5lv7QMO71x8TQs45/NM1kyKIPPwSbQw7 AwRlRNy2y1x2cje9wcUXZHWUS0NfEI4CNQX+kC6UyXDOS7zwaWq4kcYRp3qLdnhu e4StswyrLX3uBhiFi5TMp34GRU15oV8UvpaW4PqUd7EKPiQU+ECdliCLjTgdcl5q 7rDhocsJmawcCAau52txFXX12/kmDjeolt5E6sY1/9PAhTyal8S/4WDcD/FlJdOc mKWOLXK16OOz5syvRxmG9c+aVcHFtvmgVx5c33FnuFl90G1wzV7si9BUOeaP/fDz 7Q== -----END CERTIFICATE-----Generated at Sun Jan 25 09:11:33 2026 by rpki-client