This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32342d3234203d3e203539303333.roa File: 3230322e3136302e3134302e302f32342d3234203d3e203539303333.roa (raw, json) Hash identifier: 2yIwEX/2CTeIMhzW6cRHpbOeZqd/RVKc427hFzrTr6k= Subject key identifier: 43:8A:9F:5C:3B:05:F8:D7:A3:7D:F9:9A:8F:E7:47:72:3E:EF:9B:C5 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 58FA05187285043B8C71ABBE2548B2CF6CFFF172 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32342d3234203d3e203539303333.roa Signing time: Tue 20 Jan 2026 02:16:45 +0000 ROA not before: Tue 20 Jan 2026 02:11:45 +0000 ROA not after: Tue 19 Jan 2027 02:16:45 +0000 asID: 59033 IP address blocks: 202.160.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fa:05:18:72:85:04:3b:8c:71:ab:be:25:48:b2:cf:6c:ff:f1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:45 2026 GMT Not After : Jan 19 02:16:45 2027 GMT Subject: CN=438A9F5C3B05F8D7A37DF99A8FE747723EEF9BC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:9b:6b:f7:c9:8e:d5:6a:1f:bb:4b:6a:24: 1d:d0:7f:bc:f0:27:a2:9a:92:05:c4:a0:60:e6:12: 05:fa:9d:86:51:85:87:e9:ff:3f:3a:c8:e8:a9:c4: 5b:22:80:0c:a5:3c:ee:52:d2:42:e9:ba:ee:c5:c1: ba:2f:cc:52:16:d5:0a:de:3e:08:ce:13:a5:3b:75: d2:f1:f3:49:a4:0f:b3:9f:37:f9:cc:07:ef:f8:02: bb:ab:ef:c0:25:57:7c:03:d2:20:b7:92:23:4a:1e: d1:17:a3:b7:96:2d:44:c9:51:5b:78:a7:46:a0:90: 3b:28:f3:30:f6:40:a6:19:56:0d:f5:18:27:cc:e2: b4:29:e2:65:01:a9:1b:4e:11:06:cd:5a:4b:c9:87: 0f:54:f9:98:8d:f8:b8:ec:04:be:bc:03:d5:66:a3: 03:78:79:13:7e:20:64:dd:a9:9e:c9:56:28:83:53: 0e:43:7d:7b:49:d6:02:01:e2:df:72:78:82:a3:3c: f4:90:0f:d1:78:cc:a3:d4:52:8d:26:e8:d7:a2:24: 77:fb:6a:79:6c:38:99:d9:34:f1:98:90:1f:5f:66: 1c:c3:72:c2:c1:dc:10:63:49:21:51:2a:79:3c:db: 40:6d:5e:34:21:09:b6:f7:a2:ec:a9:29:c0:da:dd: 6d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8A:9F:5C:3B:05:F8:D7:A3:7D:F9:9A:8F:E7:47:72:3E:EF:9B:C5 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32342d3234203d3e203539303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.140.0/24 Signature Algorithm: sha256WithRSAEncryption 74:ff:dd:73:72:d2:69:b0:e3:25:47:dd:94:ff:f3:3e:ad:1f: 94:b9:29:76:a7:61:de:14:2c:13:9e:e3:c2:5c:5e:20:4f:55: 24:2d:06:7c:70:66:e6:e6:c5:db:2f:ef:06:7d:e8:e6:12:2c: bd:bf:35:6c:a7:23:9a:a0:28:fc:b3:6e:d7:83:3b:9a:5e:5f: 43:1e:e1:b5:f4:48:09:e5:8a:5f:41:42:b9:dd:e7:36:d4:f2: 1d:2a:8b:dd:72:6e:30:79:e7:0e:81:a0:2a:5e:2d:67:51:49: 68:d6:02:c4:af:55:b0:1d:2d:30:6f:64:0a:dd:9a:45:b6:84: ba:56:7c:bc:e5:85:38:2e:af:5f:df:7e:d2:9b:76:9d:11:53: 29:32:2a:17:5b:02:74:f2:a1:99:f0:10:88:f2:48:1b:d0:7b: 0a:f7:f5:1d:b6:9d:cf:c7:d0:1b:69:bb:ef:34:72:87:94:38: 58:bb:dd:9b:55:6a:c8:e3:12:5e:33:cf:79:56:4e:ba:10:a1: ed:f6:96:9f:2c:5c:5a:e0:01:e4:7c:d0:2c:2d:d5:ec:bc:ff: 66:19:38:df:e0:6f:50:30:78:ed:bf:47:a9:bf:68:6f:87:1e: 3b:50:87:94:3d:2f:72:cf:b2:f2:d4:e4:00:02:29:94:12:c8: 74:0c:69:4f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWPoFGHKFBDuMcau+JUiyz2z/8XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDVaFw0yNzAxMTkwMjE2NDVaMDMxMTAvBgNV BAMTKDQzOEE5RjVDM0IwNUY4RDdBMzdERjk5QThGRTc0NzcyM0VFRjlCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4ptr98mO1Wofu0tqJB3Qf7zw J6KakgXEoGDmEgX6nYZRhYfp/z86yOipxFsigAylPO5S0kLpuu7FwbovzFIW1Qre PgjOE6U7ddLx80mkD7OfN/nMB+/4Arur78AlV3wD0iC3kiNKHtEXo7eWLUTJUVt4 p0agkDso8zD2QKYZVg31GCfM4rQp4mUBqRtOEQbNWkvJhw9U+ZiN+LjsBL68A9Vm owN4eRN+IGTdqZ7JViiDUw5DfXtJ1gIB4t9yeIKjPPSQD9F4zKPUUo0m6NeiJHf7 anlsOJnZNPGYkB9fZhzDcsLB3BBjSSFRKnk820BtXjQhCbb3ouypKcDa3W2JAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUQ4qfXDsF+Nejffmaj+dHcj7vm8UwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5MTY4NjcvMC8zMjMwMzIyZTMx MzYzMDJlMzEzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzMzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqgjDANBgkqhkiG9w0BAQsFAAOCAQEAdP/dc3LSabDjJUfdlP/z Pq0flLkpdqdh3hQsE57jwlxeIE9VJC0GfHBm5ubF2y/vBn3o5hIsvb81bKcjmqAo /LNu14M7ml5fQx7htfRICeWKX0FCud3nNtTyHSqL3XJuMHnnDoGgKl4tZ1FJaNYC xK9VsB0tMG9kCt2aRbaEulZ8vOWFOC6vX99+0pt2nRFTKTIqF1sCdPKhmfAQiPJI G9B7Cvf1Hbadz8fQG2m77zRyh5Q4WLvdm1VqyOMSXjPPeVZOuhCh7faWnyxcWuAB 5HzQLC3V7Lz/Zhk43+BvUDB47b9Hqb9ob4ceO1CHlD0vcs+y8tTkAAIplBLIdAxp Tw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:16 2026 by rpki-client