This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32322d3234203d3e203633363839.roa File: 3230322e3136302e3134302e302f32322d3234203d3e203633363839.roa (raw, json) Hash identifier: edkZbpz1EDRx2QORTiwSc1qBTzo/aNJlS6kseyKu6Ck= Subject key identifier: 82:99:75:3C:5C:27:22:6F:25:8F:EC:27:9B:72:14:FD:D7:34:53:4F Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 15A2B80DBD70005D5573330819A619848E32B509 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32322d3234203d3e203633363839.roa Signing time: Tue 20 Jan 2026 02:16:45 +0000 ROA not before: Tue 20 Jan 2026 02:11:45 +0000 ROA not after: Tue 19 Jan 2027 02:16:45 +0000 asID: 63689 IP address blocks: 202.160.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a2:b8:0d:bd:70:00:5d:55:73:33:08:19:a6:19:84:8e:32:b5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:45 2026 GMT Not After : Jan 19 02:16:45 2027 GMT Subject: CN=8299753C5C27226F258FEC279B7214FDD734534F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:73:24:9c:c5:0c:a0:08:87:75:30:bf:6e: 57:65:85:14:64:66:f0:50:62:3c:e8:13:66:a7:5e: 06:50:4c:bb:1e:66:e1:dc:dd:43:c0:80:c4:be:00: 78:be:92:08:b1:1d:70:02:45:a3:68:ab:c5:d1:a8: af:58:27:45:30:df:fc:a4:9d:ab:23:d1:fb:48:ce: 1b:ac:1d:5d:bc:eb:f9:4a:0e:6d:5e:79:dc:d7:14: d8:d4:22:bf:aa:aa:fc:c6:fc:a4:a4:79:fe:0d:15: 80:bb:f2:9e:44:ba:02:33:bf:93:5b:b6:85:b6:30: dc:07:ee:8d:f2:60:af:27:cf:5e:af:c1:c1:8f:b6: 23:09:97:51:57:a8:31:ba:ef:56:ba:aa:db:2b:9b: 45:15:ce:de:47:fd:6e:1c:9e:59:c5:f9:e2:ef:78: a1:1b:b0:54:77:48:a3:fa:16:4f:29:30:fc:15:78: 7c:89:67:5e:85:70:5a:19:dc:8b:9e:95:12:93:ed: 48:25:ba:b1:6b:1b:7c:58:d7:b5:cb:a1:bc:95:1e: 73:ba:87:5a:88:0a:65:1e:16:31:49:a2:3a:f0:c4: 49:5c:b8:d7:da:99:b3:ab:e0:bc:e0:00:42:3e:c0: e6:36:20:09:c5:69:aa:8a:b1:87:0a:33:92:53:1b: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:99:75:3C:5C:27:22:6F:25:8F:EC:27:9B:72:14:FD:D7:34:53:4F X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32322d3234203d3e203633363839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.140.0/22 Signature Algorithm: sha256WithRSAEncryption 72:73:29:42:2e:d1:c5:e5:2a:a5:3a:16:de:70:5c:53:4f:0c: ec:ce:5a:18:04:90:3e:b4:ad:7e:19:c3:a2:b2:7b:c2:6b:b3: ed:8c:b8:3a:d1:c7:a1:78:f9:61:ee:81:60:ba:0a:f8:52:b9: f3:91:bd:fb:85:c6:91:ea:6b:b9:a7:0e:0e:59:b8:3c:9e:68: 23:69:78:c2:3c:3b:91:b2:62:3b:d2:bc:d7:e3:87:a0:12:80: d8:8b:cb:f9:c5:78:ad:32:f2:0a:35:e0:1a:d9:cb:ff:fc:0c: 11:ab:e7:c9:7f:8d:8d:c7:3a:aa:4d:66:3f:ce:c6:3e:2a:be: 6d:04:f3:12:be:68:f0:c9:5b:5e:e1:06:34:a7:27:ed:88:ea: 6b:21:46:95:ad:c6:4c:a5:f2:a9:c3:3d:96:fb:e5:bb:ec:67: a3:ba:3d:46:7e:7e:43:e7:ef:c1:87:f8:a5:b4:57:1c:13:e0: fd:49:8a:eb:45:d1:45:84:56:ba:0e:cd:18:0d:99:b8:c0:41: 3e:46:c5:48:76:1c:06:99:dd:b3:b1:84:e6:b8:99:f3:e3:bd: 2f:2a:3f:90:93:8a:bc:91:87:1a:93:e3:9f:ce:44:a9:2e:c5: 7f:2c:eb:d1:e6:d6:56:1a:94:f4:57:ef:80:67:c3:0d:28:05: 8c:aa:21:53 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFaK4Db1wAF1VczMIGaYZhI4ytQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDVaFw0yNzAxMTkwMjE2NDVaMDMxMTAvBgNV BAMTKDgyOTk3NTNDNUMyNzIyNkYyNThGRUMyNzlCNzIxNEZERDczNDUzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy93MknMUMoAiHdTC/bldlhRRk ZvBQYjzoE2anXgZQTLseZuHc3UPAgMS+AHi+kgixHXACRaNoq8XRqK9YJ0Uw3/yk nasj0ftIzhusHV286/lKDm1eedzXFNjUIr+qqvzG/KSkef4NFYC78p5EugIzv5Nb toW2MNwH7o3yYK8nz16vwcGPtiMJl1FXqDG671a6qtsrm0UVzt5H/W4cnlnF+eLv eKEbsFR3SKP6Fk8pMPwVeHyJZ16FcFoZ3IuelRKT7UglurFrG3xY17XLobyVHnO6 h1qICmUeFjFJojrwxElcuNfambOr4LzgAEI+wOY2IAnFaaqKsYcKM5JTG693AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUgpl1PFwnIm8lj+wnm3IU/dc0U08wHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5MTY4NjcvMC8zMjMwMzIyZTMx MzYzMDJlMzEzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMzM2MzgzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsqgjDANBgkqhkiG9w0BAQsFAAOCAQEAcnMpQi7RxeUqpToW3nBc U08M7M5aGASQPrStfhnDorJ7wmuz7Yy4OtHHoXj5Ye6BYLoK+FK585G9+4XGkepr uacODlm4PJ5oI2l4wjw7kbJiO9K81+OHoBKA2IvL+cV4rTLyCjXgGtnL//wMEavn yX+Njcc6qk1mP87GPiq+bQTzEr5o8MlbXuEGNKcn7YjqayFGla3GTKXyqcM9lvvl u+xno7o9Rn5+Q+fvwYf4pbRXHBPg/UmK60XRRYRWug7NGA2ZuMBBPkbFSHYcBpnd s7GE5riZ8+O9Lyo/kJOKvJGHGpPjn85EqS7Ffyzr0ebWVhqU9FfvgGfDDSgFjKoh Uw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:16 2026 by rpki-client