This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32322d3234203d3e20313332313638.roa File: 3230322e3136302e3134302e302f32322d3234203d3e20313332313638.roa (raw, json) Hash identifier: NH7Mke0mZGLwXUIss+u1BcLDUcjoOG+49ol1NUd8gYY= Subject key identifier: B9:C9:8F:0D:F8:F3:F2:78:A3:F2:1D:EB:3E:E0:DC:84:39:89:E9:F8 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 4411B097131773FF14FCFA91A266B31DDC557EB1 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32322d3234203d3e20313332313638.roa Signing time: Tue 20 Jan 2026 02:16:43 +0000 ROA not before: Tue 20 Jan 2026 02:11:43 +0000 ROA not after: Tue 19 Jan 2027 02:16:43 +0000 asID: 132168 IP address blocks: 202.160.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:11:b0:97:13:17:73:ff:14:fc:fa:91:a2:66:b3:1d:dc:55:7e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:43 2026 GMT Not After : Jan 19 02:16:43 2027 GMT Subject: CN=B9C98F0DF8F3F278A3F21DEB3EE0DC843989E9F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:40:bb:83:8d:c7:68:22:02:cc:ed:b2:f7: bb:67:cb:d5:86:bd:81:fb:68:f7:c3:3d:75:4e:6f: 1d:bc:28:5c:5d:2d:67:75:94:ff:19:77:5e:d4:43: 74:88:aa:80:2e:26:77:88:38:d8:25:54:2c:a7:6a: 22:6a:9e:1c:ce:16:07:77:9a:7c:44:23:e4:25:58: 8b:5f:45:c8:e7:31:2e:ee:85:f2:28:0c:f8:50:00: 88:f1:60:d3:74:b8:05:93:b2:3e:12:0b:23:06:70: c2:f8:cb:98:3d:93:79:0a:36:d2:40:96:8d:6f:17: 3e:73:f1:eb:0c:ea:1f:d9:b0:9d:af:94:61:05:0b: e7:5b:0e:c8:1a:94:f8:8f:1a:11:d7:36:15:7e:38: c8:38:3a:f1:b5:2b:eb:4e:b8:6d:c8:00:0f:0f:d0: 61:42:ec:34:35:23:1d:ca:ac:68:8b:a3:76:b7:75: 2a:04:c0:7a:75:32:f9:37:3d:ea:ff:50:80:ab:49: e5:0c:71:6e:e7:31:c1:b8:f8:c6:bd:41:c9:af:00: 9a:c3:6e:18:67:25:fb:7d:27:0f:17:96:1b:cd:75: c4:81:82:e2:b7:32:af:42:a5:fd:c1:bd:15:21:0d: ed:c1:82:d8:4e:7e:56:ee:67:79:aa:a5:ef:61:93: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C9:8F:0D:F8:F3:F2:78:A3:F2:1D:EB:3E:E0:DC:84:39:89:E9:F8 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32322d3234203d3e20313332313638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.140.0/22 Signature Algorithm: sha256WithRSAEncryption 98:ae:85:72:06:44:f6:f4:f9:5d:a8:f4:a9:61:cb:ec:7b:e0: 70:22:ff:6a:ac:e9:f4:ef:4e:60:03:ea:bc:8f:96:d3:8c:e5: 8e:3b:8d:b4:9c:12:4e:6c:90:06:ca:15:c9:a1:4e:af:f0:3b: e4:2e:78:26:13:2b:5d:d9:ee:ed:1c:bc:f1:dc:d1:80:b8:aa: 2a:80:28:65:4c:8c:69:f5:02:b6:37:a7:27:29:ce:60:74:5a: 12:22:70:c0:0c:f2:7f:9d:0f:e0:73:dc:b9:6e:56:2c:ba:9d: fd:e9:d5:73:e2:33:da:e2:55:3f:b2:73:69:90:6f:39:ed:06: 40:59:02:62:67:07:c3:fe:d6:53:19:88:a1:fa:66:fd:98:cf: cb:eb:06:8b:a6:5b:ca:d0:b5:06:70:7e:b6:a1:b2:58:33:78: ab:32:3e:e0:f5:5b:8b:cb:4d:57:10:e2:78:95:c9:a7:f6:93: 64:92:54:09:4b:84:34:94:04:58:10:e1:21:ad:5b:60:a4:4e: ce:78:36:82:c8:f9:35:10:36:12:57:38:07:77:2f:b8:31:37: ee:36:e5:a7:53:2e:82:24:65:5c:04:59:fb:8e:e1:63:4d:00: 6f:65:98:cc:9a:cd:0c:1d:8f:fb:1d:82:1c:34:9f:c2:f0:6a: 02:9d:49:65 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIURBGwlxMXc/8U/PqRomazHdxVfrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDNaFw0yNzAxMTkwMjE2NDNaMDMxMTAvBgNV BAMTKEI5Qzk4RjBERjhGM0YyNzhBM0YyMURFQjNFRTBEQzg0Mzk4OUU5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC970C7g43HaCICzO2y97tny9WG vYH7aPfDPXVObx28KFxdLWd1lP8Zd17UQ3SIqoAuJneIONglVCynaiJqnhzOFgd3 mnxEI+QlWItfRcjnMS7uhfIoDPhQAIjxYNN0uAWTsj4SCyMGcML4y5g9k3kKNtJA lo1vFz5z8esM6h/ZsJ2vlGEFC+dbDsgalPiPGhHXNhV+OMg4OvG1K+tOuG3IAA8P 0GFC7DQ1Ix3KrGiLo3a3dSoEwHp1Mvk3Per/UICrSeUMcW7nMcG4+Ma9QcmvAJrD bhhnJft9Jw8XlhvNdcSBguK3Mq9Cpf3BvRUhDe3BgthOflbuZ3mqpe9hkyvRAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUucmPDfjz8nij8h3rPuDchDmJ6fgwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3LzAvMzIzMDMyMmUz MTM2MzAyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMjMxMzYz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAsqgjDANBgkqhkiG9w0BAQsFAAOCAQEAmK6FcgZE9vT5Xaj0 qWHL7HvgcCL/aqzp9O9OYAPqvI+W04zljjuNtJwSTmyQBsoVyaFOr/A75C54JhMr Xdnu7Ry88dzRgLiqKoAoZUyMafUCtjenJynOYHRaEiJwwAzyf50P4HPcuW5WLLqd /enVc+Iz2uJVP7JzaZBvOe0GQFkCYmcHw/7WUxmIofpm/ZjPy+sGi6ZbytC1BnB+ tqGyWDN4qzI+4PVbi8tNVxDieJXJp/aTZJJUCUuENJQEWBDhIa1bYKROzng2gsj5 NRA2Elc4B3cvuDE37jblp1MugiRlXARZ+47hY00Ab2WYzJrNDB2P+x2CHDSfwvBq Ap1JZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:43 2026 by rpki-client