This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e203539303333.roa File: 3230322e3136302e3134302e302f32332d3233203d3e203539303333.roa (raw, json) Hash identifier: w06CZ1Ejn3f4X9kAdbajlRvO+/GNJX+PLCq2xpiRoJg= Subject key identifier: 39:0F:8B:8B:D8:59:F3:3F:91:F3:9A:4F:31:A4:58:66:6A:1D:7A:2B Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 7788A5480F3F86179876CAD38C8A590D9CABCC39 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e203539303333.roa Signing time: Tue 20 Jan 2026 02:16:44 +0000 ROA not before: Tue 20 Jan 2026 02:11:44 +0000 ROA not after: Tue 19 Jan 2027 02:16:44 +0000 asID: 59033 IP address blocks: 202.160.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:88:a5:48:0f:3f:86:17:98:76:ca:d3:8c:8a:59:0d:9c:ab:cc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:44 2026 GMT Not After : Jan 19 02:16:44 2027 GMT Subject: CN=390F8B8BD859F33F91F39A4F31A458666A1D7A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:8e:84:ac:63:6b:77:c8:93:d4:fb:86:9f: 91:6c:6e:17:39:f9:0f:76:b8:52:b6:e7:eb:f8:82: 60:a4:85:3e:09:b2:e3:5c:68:ca:02:98:62:14:fe: f0:22:76:6c:c5:2a:2b:0d:a0:93:c7:ea:80:e0:21: 24:13:ff:4e:05:49:a7:33:4b:7f:5b:c8:d9:c9:cd: 0a:b5:41:a8:ff:c0:24:57:b6:36:3b:a8:ae:0d:51: 0d:bf:69:ac:ae:6a:73:0c:a1:15:0b:48:73:df:b6: fa:f8:46:a6:4d:f0:74:f8:6e:75:ba:ad:54:5d:f6: bb:37:ea:55:71:e2:10:ea:34:c7:30:23:ad:98:55: 04:c9:57:d2:68:31:fe:a2:7d:81:3d:ba:85:8d:c3: c4:37:e7:7d:ac:5c:c4:85:2c:3e:8d:8d:58:1b:00: 1a:9c:fa:19:df:c1:43:b1:5f:a0:f4:c1:bf:6c:c8: 1e:c7:41:f1:13:6f:2e:c1:1b:69:85:72:6e:69:ef: 3b:97:a2:23:96:7b:f2:d9:b9:ab:4a:74:73:b1:8c: e7:9d:00:ec:05:6f:47:b5:51:32:ac:05:60:8b:95: ad:97:0d:5b:a3:95:27:ca:04:e9:25:9a:04:7a:67: 09:07:92:a4:b4:ee:9f:9f:44:19:81:e0:bf:1b:a9: 43:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0F:8B:8B:D8:59:F3:3F:91:F3:9A:4F:31:A4:58:66:6A:1D:7A:2B X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e203539303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.140.0/23 Signature Algorithm: sha256WithRSAEncryption b2:0b:c5:a2:47:d6:c3:82:62:c3:a5:9c:a1:7b:d9:81:07:bb: eb:72:d4:5a:af:12:1b:fd:f4:25:15:02:fe:08:ec:ec:32:ff: 7b:6e:ef:bb:f2:41:c1:2a:dd:15:4d:93:55:c2:f2:81:3b:7a: 6f:e2:fe:0e:d3:ad:31:a8:67:23:d9:73:fb:59:be:a2:1b:eb: e7:60:61:2f:9e:f7:9d:91:fd:6c:8a:dd:d5:3a:b8:c4:33:24: 33:8b:dd:a4:1a:3b:6a:ac:f6:a6:d7:cd:78:10:d7:6f:bc:29: e1:ab:cc:bf:94:73:57:06:86:73:74:d1:b4:4c:19:57:21:9c: 92:a5:38:aa:76:68:63:f5:72:b1:99:e7:16:bb:1f:12:e8:84: e7:6f:d1:25:fc:83:3a:81:90:d1:6e:94:4d:dc:c8:50:29:52: 70:1f:39:cd:88:aa:50:d6:b2:33:1e:be:51:17:e0:49:dd:9d: 76:0b:de:c4:94:f5:21:c3:6d:ba:1a:60:f1:3f:d5:ed:a7:a9: 20:dd:e3:23:95:2a:61:9d:cd:7f:a2:80:59:73:e4:42:d8:e8: 85:dd:4d:57:a4:04:0b:24:19:1e:48:e2:17:16:7d:27:1b:38: 36:2b:19:72:26:23:82:56:2b:9e:a3:99:08:a6:34:17:62:04: ea:52:b9:79 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUd4ilSA8/hheYdsrTjIpZDZyrzDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDRaFw0yNzAxMTkwMjE2NDRaMDMxMTAvBgNV BAMTKDM5MEY4QjhCRDg1OUYzM0Y5MUYzOUE0RjMxQTQ1ODY2NkExRDdBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1Y6ErGNrd8iT1PuGn5Fsbhc5 +Q92uFK25+v4gmCkhT4JsuNcaMoCmGIU/vAidmzFKisNoJPH6oDgISQT/04FSacz S39byNnJzQq1Qaj/wCRXtjY7qK4NUQ2/aayuanMMoRULSHPftvr4RqZN8HT4bnW6 rVRd9rs36lVx4hDqNMcwI62YVQTJV9JoMf6ifYE9uoWNw8Q3532sXMSFLD6NjVgb ABqc+hnfwUOxX6D0wb9syB7HQfETby7BG2mFcm5p7zuXoiOWe/LZuatKdHOxjOed AOwFb0e1UTKsBWCLla2XDVujlSfKBOklmgR6ZwkHkqS07p+fRBmB4L8bqUNVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUOQ+Li9hZ8z+R85pPMaRYZmodeiswHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5MTY4NjcvMC8zMjMwMzIyZTMx MzYzMDJlMzEzNDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzOTMwMzMzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcqgjDANBgkqhkiG9w0BAQsFAAOCAQEAsgvFokfWw4Jiw6WcoXvZ gQe763LUWq8SG/30JRUC/gjs7DL/e27vu/JBwSrdFU2TVcLygTt6b+L+DtOtMahn I9lz+1m+ohvr52BhL573nZH9bIrd1Tq4xDMkM4vdpBo7aqz2ptfNeBDXb7wp4avM v5RzVwaGc3TRtEwZVyGckqU4qnZoY/VysZnnFrsfEuiE52/RJfyDOoGQ0W6UTdzI UClScB85zYiqUNayMx6+URfgSd2ddgvexJT1IcNtuhpg8T/V7aepIN3jI5UqYZ3N f6KAWXPkQtjohd1NV6QECyQZHkjiFxZ9Jxs4NisZciYjglYrnqOZCKY0F2IE6lK5 eQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:47 2026 by rpki-client