This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32342d3234203d3e20313332313638.roa File: 3230322e3136302e3134302e302f32342d3234203d3e20313332313638.roa (raw, json) Hash identifier: zH4gBJrPk/JXeej0iYkN5ZWW9+wZzHlhcjkpFSqi+Tw= Subject key identifier: 9B:84:B7:8D:0D:4B:C2:F2:9B:CE:FC:44:CA:00:42:D4:21:31:94:4D Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 645F945CC6266D8183A9ACDA7A667957622F3993 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32342d3234203d3e20313332313638.roa Signing time: Tue 20 Jan 2026 02:16:43 +0000 ROA not before: Tue 20 Jan 2026 02:11:43 +0000 ROA not after: Tue 19 Jan 2027 02:16:43 +0000 asID: 132168 IP address blocks: 202.160.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5f:94:5c:c6:26:6d:81:83:a9:ac:da:7a:66:79:57:62:2f:39:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:43 2026 GMT Not After : Jan 19 02:16:43 2027 GMT Subject: CN=9B84B78D0D4BC2F29BCEFC44CA0042D42131944D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:81:b6:2f:cf:b1:9b:35:c2:b1:c7:1e:52: e4:b6:ae:aa:26:b1:59:2c:b7:d9:2e:41:34:79:33: b3:4e:54:7b:03:d1:ea:37:cb:e8:de:1e:7b:9e:c4: 81:f2:b7:25:fe:ed:56:cc:06:4b:42:14:ff:ba:08: 7f:37:1b:7a:24:f7:1c:8e:bd:47:38:f9:14:b2:b3: ad:e9:cf:0f:c8:7c:70:dd:7f:28:6b:e4:a9:32:8c: 9c:ba:f3:c2:00:f9:10:29:a6:dc:c2:3b:4c:c2:23: 1d:43:a3:48:83:e2:ee:39:d0:a6:bb:28:a1:13:e8: a6:33:21:1d:c2:d8:0c:41:c5:54:70:2b:bf:4a:4d: 4d:11:e4:31:14:b2:72:d4:28:ca:a3:45:af:8c:ab: b5:c0:e8:61:ea:71:f1:8a:bc:b1:64:40:8c:34:2f: 21:de:44:bf:28:30:df:18:72:17:f0:89:5e:28:2a: 42:67:f4:a6:75:55:7a:1e:9f:9f:41:e3:a3:e1:c4: b1:1d:22:c8:a2:b5:88:68:27:95:19:ae:a1:93:12: c1:a2:d1:5d:65:0d:c5:2c:7a:96:ba:a7:9f:1e:6e: 1b:88:8e:60:d3:82:76:a3:83:97:60:d8:43:d7:9e: 25:81:1f:19:c0:80:09:cd:0e:be:8e:12:6d:85:94: 02:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:84:B7:8D:0D:4B:C2:F2:9B:CE:FC:44:CA:00:42:D4:21:31:94:4D X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32342d3234203d3e20313332313638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.140.0/24 Signature Algorithm: sha256WithRSAEncryption b0:b3:fc:0f:72:f9:83:63:6e:c9:66:60:0e:5e:1d:6f:c6:17: 06:eb:46:1e:5f:e6:f9:73:3d:1c:95:bd:1b:6a:f6:06:cd:84: 02:cc:88:7e:24:cc:52:38:6d:8a:99:8c:54:f1:80:b2:11:07: ee:2e:9a:8a:c5:6f:a2:f4:0b:fe:5a:c4:1a:61:26:fb:1c:d7: dc:a9:52:63:71:63:5e:1e:a9:2b:5f:c7:d0:c2:ba:39:87:6d: b6:82:d5:4a:3f:fc:a1:66:d4:31:b1:29:6e:df:99:65:39:a6: 2e:68:d7:db:5d:06:3f:27:ee:17:fb:d7:ca:9f:bc:81:de:cc: a4:b9:ac:6f:50:7a:e8:a9:5f:f8:5b:fa:fb:d5:cc:7a:e8:6c: 91:71:a8:05:7b:11:23:2e:d8:2e:0f:af:1b:d7:0d:c7:35:c6: 4e:64:17:91:18:93:9e:da:37:93:86:fc:ae:2f:ec:89:47:81: e5:f0:8f:10:57:36:9e:f7:bf:5a:9c:25:31:f4:ad:b1:11:87: dc:1c:1b:82:0f:ae:c0:39:b9:81:87:38:6a:4a:cb:7f:e8:73: 7f:b5:4c:17:27:5e:6b:5b:af:91:9a:6c:1e:62:32:fd:cb:71: 58:30:76:66:96:62:55:64:2c:7e:ef:6d:9b:88:66:fd:6b:a3: 50:59:2f:4b -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUZF+UXMYmbYGDqazaemZ5V2IvOZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDNaFw0yNzAxMTkwMjE2NDNaMDMxMTAvBgNV BAMTKDlCODRCNzhEMEQ0QkMyRjI5QkNFRkM0NENBMDA0MkQ0MjEzMTk0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsr4G2L8+xmzXCscceUuS2rqom sVkst9kuQTR5M7NOVHsD0eo3y+jeHnuexIHytyX+7VbMBktCFP+6CH83G3ok9xyO vUc4+RSys63pzw/IfHDdfyhr5KkyjJy688IA+RApptzCO0zCIx1Do0iD4u450Ka7 KKET6KYzIR3C2AxBxVRwK79KTU0R5DEUsnLUKMqjRa+Mq7XA6GHqcfGKvLFkQIw0 LyHeRL8oMN8YchfwiV4oKkJn9KZ1VXoen59B46PhxLEdIsiitYhoJ5UZrqGTEsGi 0V1lDcUsepa6p58ebhuIjmDTgnajg5dg2EPXniWBHxnAgAnNDr6OEm2FlAJPAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUm4S3jQ1LwvKbzvxEygBC1CExlE0wHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3LzAvMzIzMDMyMmUz MTM2MzAyZTMxMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjMxMzYz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMqgjDANBgkqhkiG9w0BAQsFAAOCAQEAsLP8D3L5g2NuyWZg Dl4db8YXButGHl/m+XM9HJW9G2r2Bs2EAsyIfiTMUjhtipmMVPGAshEH7i6aisVv ovQL/lrEGmEm+xzX3KlSY3FjXh6pK1/H0MK6OYdttoLVSj/8oWbUMbEpbt+ZZTmm LmjX210GPyfuF/vXyp+8gd7MpLmsb1B66Klf+Fv6+9XMeuhskXGoBXsRIy7YLg+v G9cNxzXGTmQXkRiTnto3k4b8ri/siUeB5fCPEFc2nve/WpwlMfStsRGH3Bwbgg+u wDm5gYc4akrLf+hzf7VMFydea1uvkZpsHmIy/ctxWDB2ZpZiVWQsfu9tm4hm/Wuj UFkvSw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:53 2026 by rpki-client