This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e20313332313638.roa File: 3230322e3136302e3134302e302f32332d3233203d3e20313332313638.roa (raw, json) Hash identifier: dyiZYT/cQc0HTDPkZD3MAOvYpCKJC9yPqsbY4Bh07sI= Subject key identifier: 2A:C5:D5:E5:60:2C:C1:F8:B3:DB:E0:0A:60:A3:76:BE:32:17:E7:B4 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 203FDF189FE294D1EE5BC8BAD0857C36E3F7BE37 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e20313332313638.roa Signing time: Tue 20 Jan 2026 02:16:46 +0000 ROA not before: Tue 20 Jan 2026 02:11:46 +0000 ROA not after: Tue 19 Jan 2027 02:16:46 +0000 asID: 132168 IP address blocks: 202.160.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3f:df:18:9f:e2:94:d1:ee:5b:c8:ba:d0:85:7c:36:e3:f7:be:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:46 2026 GMT Not After : Jan 19 02:16:46 2027 GMT Subject: CN=2AC5D5E5602CC1F8B3DBE00A60A376BE3217E7B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:b6:66:60:a9:d1:e5:d5:cd:01:49:3c:ec: d4:7f:3b:aa:5e:f8:e9:b7:4a:78:ce:fb:9b:81:93: a9:8d:5f:bd:61:25:f5:70:7e:35:cc:c4:ff:ed:c9: 15:f0:e3:1d:7c:85:ad:8c:cf:b7:2f:bc:75:60:e6: dc:a9:2c:67:22:1c:4d:c3:52:c8:dd:51:27:15:bb: 77:78:b7:ee:a4:91:6c:28:70:6e:59:f1:4a:be:45: b6:e1:c9:e3:bc:7e:f7:74:43:e0:a5:0b:3e:e8:23: 75:fb:a7:4c:5e:f3:c8:67:c4:99:9c:85:32:6f:9d: 0c:74:c2:85:c7:1c:8e:6f:19:ab:36:94:8c:74:7c: d0:ae:e7:db:5f:c4:26:01:da:23:87:19:8e:64:6a: 6f:11:e4:a3:81:c1:e1:6c:fd:7a:6f:c8:58:a1:59: 0e:45:87:9b:a4:27:61:02:e5:b3:1e:89:0a:9d:9c: 0c:21:a0:8a:57:ac:0d:fd:f3:81:cd:92:16:76:6e: 93:a8:ef:08:72:80:5b:a8:94:45:39:17:ca:04:b1: 1a:2d:4c:32:aa:1a:c9:5b:04:2f:0b:54:ed:9b:05: c7:07:1f:25:d1:c0:0e:57:26:fb:e3:6b:c2:78:55: 80:14:96:09:28:b8:17:7b:b8:86:9f:7d:b5:c1:56: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:D5:E5:60:2C:C1:F8:B3:DB:E0:0A:60:A3:76:BE:32:17:E7:B4 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e20313332313638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.140.0/23 Signature Algorithm: sha256WithRSAEncryption 64:1e:26:08:b4:3c:8f:a4:40:e6:9b:c7:d4:c6:03:c1:76:75: 1a:ac:b8:85:15:11:03:c7:0c:6b:d1:a1:b1:ec:1d:2d:1e:c5: 5c:9d:23:b8:8d:59:9d:32:e2:24:83:5f:2a:3d:a4:33:cd:65: ff:b2:13:be:06:c3:37:1d:31:7d:a2:2a:7c:23:43:95:d8:5b: 4f:14:18:32:5a:05:39:ac:37:09:00:29:f7:d9:78:20:bb:23: 0b:37:72:2f:13:6e:d4:24:c7:93:67:fe:f4:a0:d3:4e:97:7b: 78:88:06:83:29:a5:2f:90:c5:39:f1:ad:f5:f6:ba:3d:b0:c3: cd:ec:ba:08:9f:5b:17:ab:b1:60:83:34:1f:4e:e4:15:ee:69: 15:6c:36:8a:d3:ef:a3:ca:85:b7:be:1e:40:50:67:38:c0:71: 8b:12:dd:f7:ed:e1:50:74:f2:15:cf:13:3c:ff:50:35:09:36: 29:f7:86:72:d3:5c:fa:ff:25:55:70:91:67:d3:d8:7d:ed:3a: 9b:e5:fe:e8:d3:c5:b6:fc:8a:5b:64:f2:80:ed:c3:a4:13:90: 14:72:7e:f6:65:5a:58:5f:91:3c:2e:7f:46:45:6a:07:85:29: b5:58:80:90:5f:6b:47:5d:bc:ba:21:81:e1:ff:26:db:57:b5: ac:47:33:d5 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUID/fGJ/ilNHuW8i60IV8NuP3vjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDZaFw0yNzAxMTkwMjE2NDZaMDMxMTAvBgNV BAMTKDJBQzVENUU1NjAyQ0MxRjhCM0RCRTAwQTYwQTM3NkJFMzIxN0U3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8e7ZmYKnR5dXNAUk87NR/O6pe +Om3SnjO+5uBk6mNX71hJfVwfjXMxP/tyRXw4x18ha2Mz7cvvHVg5typLGciHE3D UsjdUScVu3d4t+6kkWwocG5Z8Uq+RbbhyeO8fvd0Q+ClCz7oI3X7p0xe88hnxJmc hTJvnQx0woXHHI5vGas2lIx0fNCu59tfxCYB2iOHGY5kam8R5KOBweFs/XpvyFih WQ5Fh5ukJ2EC5bMeiQqdnAwhoIpXrA3984HNkhZ2bpOo7whygFuolEU5F8oEsRot TDKqGslbBC8LVO2bBccHHyXRwA5XJvvja8J4VYAUlgkouBd7uIaffbXBVlTBAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUKsXV5WAswfiz2+AKYKN2vjIX57QwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3LzAvMzIzMDMyMmUz MTM2MzAyZTMxMzQzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzMjMxMzYz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcqgjDANBgkqhkiG9w0BAQsFAAOCAQEAZB4mCLQ8j6RA5pvH 1MYDwXZ1Gqy4hRURA8cMa9GhsewdLR7FXJ0juI1ZnTLiJINfKj2kM81l/7ITvgbD Nx0xfaIqfCNDldhbTxQYMloFOaw3CQAp99l4ILsjCzdyLxNu1CTHk2f+9KDTTpd7 eIgGgymlL5DFOfGt9fa6PbDDzey6CJ9bF6uxYIM0H07kFe5pFWw2itPvo8qFt74e QFBnOMBxixLd9+3hUHTyFc8TPP9QNQk2KfeGctNc+v8lVXCRZ9PYfe06m+X+6NPF tvyKW2TygO3DpBOQFHJ+9mVaWF+RPC5/RkVqB4UptViAkF9rR128uiGB4f8m21e1 rEcz1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:00 2026 by rpki-client