This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32332d3233203d3e20313332313638.roa File: 3230322e3136302e3134322e302f32332d3233203d3e20313332313638.roa (raw, json) Hash identifier: 4wfB3zets773wkafnOpqEZmeXhQcthssne+ybqsms4o= Subject key identifier: 32:B8:11:CB:4E:DD:E3:DB:87:9F:05:0C:01:6F:84:19:DD:A1:AA:A7 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 3CDF824B9BEA53C12FF19AB94067FBB6D2C0FE2E Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32332d3233203d3e20313332313638.roa Signing time: Tue 20 Jan 2026 02:16:46 +0000 ROA not before: Tue 20 Jan 2026 02:11:46 +0000 ROA not after: Tue 19 Jan 2027 02:16:46 +0000 asID: 132168 IP address blocks: 202.160.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:df:82:4b:9b:ea:53:c1:2f:f1:9a:b9:40:67:fb:b6:d2:c0:fe:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:46 2026 GMT Not After : Jan 19 02:16:46 2027 GMT Subject: CN=32B811CB4EDDE3DB879F050C016F8419DDA1AAA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:58:48:ef:9e:47:4a:22:3c:ca:b5:5c:e1: a2:9f:6c:02:36:9a:54:12:55:59:00:4b:ff:be:6e: a3:5e:28:b4:86:1b:d1:da:57:c1:89:b0:86:11:22: 54:4c:ea:82:af:34:93:15:62:70:6c:aa:2b:a1:1b: 02:64:92:99:87:18:55:61:a4:9c:e2:f2:03:b1:e7: fd:24:1f:6f:cc:bf:9a:e4:97:90:f5:8e:99:64:65: 6b:2c:c7:80:41:40:99:3f:4f:8f:d8:8d:1a:e2:73: ff:a1:30:05:df:0a:70:1c:07:1c:0e:7d:90:07:32: f2:b2:6b:bc:99:53:54:41:bb:62:95:73:79:ce:e6: 5a:bf:10:45:bc:27:06:aa:e9:cc:54:d8:05:7b:3c: 10:9d:8b:2a:96:bb:74:e1:20:9a:f4:c8:9d:fc:54: ff:9b:13:88:39:f3:c8:65:ad:a1:2a:b0:e7:6a:54: a9:de:27:c2:03:43:0d:0f:b4:9b:00:d0:df:5d:96: 37:b9:a8:ba:db:be:c3:63:9f:7a:b3:c5:28:18:20: 3f:ce:4b:ee:3c:89:d6:18:ab:7d:5f:25:b9:6d:cf: 65:bd:46:95:e4:f3:87:da:aa:07:da:4d:6f:fc:c2: b6:9c:36:30:8a:3a:48:62:d8:07:78:1f:e9:79:af: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B8:11:CB:4E:DD:E3:DB:87:9F:05:0C:01:6F:84:19:DD:A1:AA:A7 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32332d3233203d3e20313332313638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.142.0/23 Signature Algorithm: sha256WithRSAEncryption 28:42:0d:27:db:1d:aa:73:06:27:ea:60:d8:19:f5:3c:15:89: fc:bc:06:82:50:33:79:25:b9:f9:bc:1f:74:d3:31:e5:1a:fd: a5:1e:79:2e:b0:34:39:5e:17:75:c6:bf:eb:55:18:a2:f8:6a: 76:ee:75:b2:27:51:a9:ec:03:48:97:fd:c9:c6:e2:42:85:32: c4:76:3b:8b:60:53:bf:94:7b:31:a4:e6:08:fe:d9:18:43:d1: e7:0a:51:40:8e:74:81:8e:8f:d2:35:45:29:89:f3:61:1c:31: 35:07:ad:61:5e:d0:26:20:7c:60:9b:f0:66:4d:8e:50:f2:f0: 8e:d5:96:01:77:cc:47:11:cd:9e:27:f2:c3:75:a9:15:16:58: 15:2f:ea:7f:6d:5d:0f:0d:02:67:ab:b6:3c:2c:f3:d2:51:2a: 8b:73:6f:90:4d:5b:dd:c2:0f:9f:6b:7e:4b:5c:1e:b8:67:28: 34:cc:ce:89:a4:2e:0c:a6:d8:15:f7:20:02:0d:09:9c:ed:cc: b8:a0:91:66:44:6f:09:eb:5f:75:af:8a:06:ef:87:5a:6c:62: f0:e1:3e:a3:19:68:fa:91:c6:3f:01:d0:a3:52:d2:1d:08:9d: c0:b2:2a:67:85:ae:d5:0f:2e:5d:82:0a:81:d5:2a:23:7e:13: 7c:3e:5d:8a -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUPN+CS5vqU8Ev8Zq5QGf7ttLA/i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDZaFw0yNzAxMTkwMjE2NDZaMDMxMTAvBgNV BAMTKDMyQjgxMUNCNEVEREUzREI4NzlGMDUwQzAxNkY4NDE5RERBMUFBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVX1hI755HSiI8yrVc4aKfbAI2 mlQSVVkAS/++bqNeKLSGG9HaV8GJsIYRIlRM6oKvNJMVYnBsqiuhGwJkkpmHGFVh pJzi8gOx5/0kH2/Mv5rkl5D1jplkZWssx4BBQJk/T4/YjRric/+hMAXfCnAcBxwO fZAHMvKya7yZU1RBu2KVc3nO5lq/EEW8Jwaq6cxU2AV7PBCdiyqWu3ThIJr0yJ38 VP+bE4g588hlraEqsOdqVKneJ8IDQw0PtJsA0N9dlje5qLrbvsNjn3qzxSgYID/O S+48idYYq31fJbltz2W9RpXk84faqgfaTW/8wracNjCKOkhi2Ad4H+l5rx/ZAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUMrgRy07d49uHnwUMAW+EGd2hqqcwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3LzAvMzIzMDMyMmUz MTM2MzAyZTMxMzQzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzMjMxMzYz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcqgjjANBgkqhkiG9w0BAQsFAAOCAQEAKEINJ9sdqnMGJ+pg 2Bn1PBWJ/LwGglAzeSW5+bwfdNMx5Rr9pR55LrA0OV4Xdca/61UYovhqdu51sidR qewDSJf9ycbiQoUyxHY7i2BTv5R7MaTmCP7ZGEPR5wpRQI50gY6P0jVFKYnzYRwx NQetYV7QJiB8YJvwZk2OUPLwjtWWAXfMRxHNnifyw3WpFRZYFS/qf21dDw0CZ6u2 PCzz0lEqi3NvkE1b3cIPn2t+S1weuGcoNMzOiaQuDKbYFfcgAg0JnO3MuKCRZkRv Cetfda+KBu+HWmxi8OE+oxlo+pHGPwHQo1LSHQidwLIqZ4Wu1Q8uXYIKgdUqI34T fD5dig== -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:09 2026 by rpki-client