This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134312e302f32342d3234203d3e203633363839.roa File: 3230322e3136302e3134312e302f32342d3234203d3e203633363839.roa (raw, json) Hash identifier: z7AxO/7k0bgIrcI/dfFhXUYc7seM36sx2+4Mt5WV2/g= Subject key identifier: 34:C9:84:4E:A3:EE:05:F2:3D:F6:CB:AF:4E:5E:5C:15:E7:6D:78:8D Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 5F404D961ED2B0479068726C2745DD4824292DC7 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134312e302f32342d3234203d3e203633363839.roa Signing time: Tue 20 Jan 2026 02:16:47 +0000 ROA not before: Tue 20 Jan 2026 02:11:47 +0000 ROA not after: Tue 19 Jan 2027 02:16:47 +0000 asID: 63689 IP address blocks: 202.160.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:40:4d:96:1e:d2:b0:47:90:68:72:6c:27:45:dd:48:24:29:2d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:47 2026 GMT Not After : Jan 19 02:16:47 2027 GMT Subject: CN=34C9844EA3EE05F23DF6CBAF4E5E5C15E76D788D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:d3:b2:b7:6c:4f:33:ea:9f:91:8c:eb:0c: cb:45:07:19:0b:c2:85:81:ae:6f:a9:b1:d3:4c:e4: 22:c8:19:42:43:11:b1:08:93:87:5b:e6:d7:55:14: a3:3c:5d:3a:f7:6c:d3:e1:77:46:3f:81:8d:3b:d3: 10:43:5c:36:b4:05:66:39:07:d6:11:66:15:5a:a3: 41:a4:eb:17:bf:f6:9a:a5:5f:50:c6:f8:2a:47:28: cc:f7:97:a2:36:65:c8:77:f5:2f:12:b5:cf:41:7a: d0:d1:88:fb:6f:13:7e:dc:6a:58:21:ce:d2:d7:e2: b7:4e:03:3f:e9:d0:5c:d5:22:e7:0d:10:2b:2b:e2: 59:04:0a:36:f7:bf:12:93:8a:93:27:83:98:ed:3f: 54:9f:ac:a7:bd:3f:0d:13:9f:58:06:ad:71:06:18: b3:18:76:a4:33:47:78:98:99:39:e5:44:e9:b3:2e: 4f:07:2b:63:0b:15:0a:08:fd:fd:90:cd:45:3e:29: 6b:74:3b:13:db:a2:37:a6:1f:73:7e:c0:54:e7:55: ea:1d:67:01:c2:9e:95:00:22:6d:7e:3c:29:b4:d3: 9b:21:f6:33:e8:88:7c:98:f8:50:21:cb:9c:6f:12: 91:54:b2:6b:ee:5f:ac:10:05:81:31:a5:c7:71:80: 9f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C9:84:4E:A3:EE:05:F2:3D:F6:CB:AF:4E:5E:5C:15:E7:6D:78:8D X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134312e302f32342d3234203d3e203633363839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.141.0/24 Signature Algorithm: sha256WithRSAEncryption 81:7d:04:27:0e:7e:9a:8d:a1:24:ec:0e:f4:3f:83:52:dd:79: 0b:4a:ec:d6:3b:60:ef:b1:4b:6b:1b:79:69:0d:66:cb:90:75: 28:43:92:cd:32:08:b6:35:a6:d3:09:17:e3:79:8a:69:9b:10: fc:49:34:af:d1:56:51:6d:9b:2f:3f:9c:b9:87:7d:df:21:32: ea:a6:37:7b:84:4e:33:a5:66:4c:1c:ac:21:bc:70:8e:54:f4: be:7c:c7:65:c7:48:03:b3:4d:57:7e:8a:16:7a:88:83:a5:41: 96:11:2f:23:f5:cf:68:b9:70:a7:c6:e1:f2:6c:a1:a8:2b:6b: 72:27:b1:86:30:1a:d9:46:b5:57:08:3b:e0:fe:b3:a1:26:16: ba:d7:17:1a:68:8e:40:1c:dc:e4:ae:f7:82:53:97:c9:7a:9a: 5f:9b:cc:08:65:9e:ed:24:81:a3:81:ba:88:7a:d4:3b:85:04: ef:00:3a:48:5e:6f:ba:ff:83:f9:7e:3b:7a:34:32:93:69:3b: a2:ca:39:a1:bb:5b:1e:12:77:6c:ee:0a:82:49:cc:54:4a:77: 2e:cd:fe:57:5d:b3:e3:2d:af:6a:e9:69:fb:b1:25:27:f2:f1: b9:61:24:9d:1f:7c:1f:38:72:2d:06:17:bc:ba:49:b5:cb:d7: 41:22:34:5b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUX0BNlh7SsEeQaHJsJ0XdSCQpLccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDdaFw0yNzAxMTkwMjE2NDdaMDMxMTAvBgNV BAMTKDM0Qzk4NDRFQTNFRTA1RjIzREY2Q0JBRjRFNUU1QzE1RTc2RDc4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLNOyt2xPM+qfkYzrDMtFBxkL woWBrm+psdNM5CLIGUJDEbEIk4db5tdVFKM8XTr3bNPhd0Y/gY070xBDXDa0BWY5 B9YRZhVao0Gk6xe/9pqlX1DG+CpHKMz3l6I2Zch39S8Stc9BetDRiPtvE37calgh ztLX4rdOAz/p0FzVIucNECsr4lkECjb3vxKTipMng5jtP1SfrKe9Pw0Tn1gGrXEG GLMYdqQzR3iYmTnlROmzLk8HK2MLFQoI/f2QzUU+KWt0OxPbojemH3N+wFTnVeod ZwHCnpUAIm1+PCm005sh9jPoiHyY+FAhy5xvEpFUsmvuX6wQBYExpcdxgJ+JAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUNMmETqPuBfI99suvTl5cFedteI0wHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5MTY4NjcvMC8zMjMwMzIyZTMx MzYzMDJlMzEzNDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzgzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqgjTANBgkqhkiG9w0BAQsFAAOCAQEAgX0EJw5+mo2hJOwO9D+D Ut15C0rs1jtg77FLaxt5aQ1my5B1KEOSzTIItjWm0wkX43mKaZsQ/Ek0r9FWUW2b Lz+cuYd93yEy6qY3e4ROM6VmTBysIbxwjlT0vnzHZcdIA7NNV36KFnqIg6VBlhEv I/XPaLlwp8bh8myhqCtrciexhjAa2Ua1Vwg74P6zoSYWutcXGmiOQBzc5K73glOX yXqaX5vMCGWe7SSBo4G6iHrUO4UE7wA6SF5vuv+D+X47ejQyk2k7oso5obtbHhJ3 bO4KgknMVEp3Ls3+V12z4y2vaulp+7ElJ/LxuWEknR98HzhyLQYXvLpJtcvXQSI0 Ww== -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:22 2026 by rpki-client