This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32342d3234203d3e20313332313638.roa File: 3230322e3136302e3134322e302f32342d3234203d3e20313332313638.roa (raw, json) Hash identifier: KT34mIKmKFxh042n76RxbM/vfSL6vKmi3sjgXlVZ9ic= Subject key identifier: 20:0E:1B:4B:C7:A3:33:56:C1:0C:99:3F:DF:72:B0:4B:77:A3:AD:06 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 755C993374B0F3386D34CACEE5DD268B57C17653 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32342d3234203d3e20313332313638.roa Signing time: Tue 20 Jan 2026 02:16:44 +0000 ROA not before: Tue 20 Jan 2026 02:11:44 +0000 ROA not after: Tue 19 Jan 2027 02:16:44 +0000 asID: 132168 IP address blocks: 202.160.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5c:99:33:74:b0:f3:38:6d:34:ca:ce:e5:dd:26:8b:57:c1:76:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:44 2026 GMT Not After : Jan 19 02:16:44 2027 GMT Subject: CN=200E1B4BC7A33356C10C993FDF72B04B77A3AD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:67:8c:75:cf:7a:38:a6:ec:cd:72:09:4e: 1f:f2:74:94:73:2f:da:57:a1:9b:0b:08:09:10:8b: e1:a4:89:e4:57:72:c3:67:26:74:c9:3f:62:41:07: 51:9e:cd:dc:26:3d:9f:a5:f4:1a:76:41:87:1e:56: 25:df:2d:25:b1:19:46:1d:c2:83:69:f1:f2:3a:f2: 49:ba:f2:d9:b3:f1:4a:25:a8:eb:03:b3:7a:09:3e: bc:af:c7:89:ae:4e:5f:fe:5f:b4:43:b1:2a:fb:14: 18:52:86:a1:82:6b:ca:de:e1:c0:d6:7f:7d:49:e8: 28:64:8c:ce:60:f9:7d:9e:5a:74:88:7d:c6:4f:c9: 40:3d:a2:ec:0a:f9:c6:9e:a8:d9:6c:23:b8:c1:3b: cd:e2:69:7c:ca:c0:8e:c7:3e:ba:cd:e6:3d:84:dc: b2:a2:94:b5:d6:8e:21:b5:df:8f:c4:75:b6:cb:e3: af:a5:7e:fa:5e:0a:06:1f:ea:1d:02:4b:3b:2a:a3: f4:3b:29:71:c0:0d:5d:a3:0b:06:99:2d:75:b0:20: d3:14:6e:1d:0c:ac:2e:4d:7d:4b:d7:87:4a:65:d7: 26:ac:58:e1:fa:37:40:db:9c:7a:f7:c3:8c:e5:63: e2:39:e3:6b:ec:a9:cd:57:1a:c5:59:9a:24:60:64: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0E:1B:4B:C7:A3:33:56:C1:0C:99:3F:DF:72:B0:4B:77:A3:AD:06 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32342d3234203d3e20313332313638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.142.0/24 Signature Algorithm: sha256WithRSAEncryption 90:3e:80:e2:0a:95:10:2c:eb:27:34:32:61:20:f6:c9:05:f6: 5a:45:3d:77:de:87:62:60:67:89:e3:dc:e4:83:b5:c0:8c:01: f2:52:7e:a9:0e:9a:58:75:1b:1b:d6:9d:a3:4b:86:b2:eb:cc: 9f:89:5e:95:03:7e:46:73:5c:cf:76:c0:66:02:95:73:2f:c2: 28:6d:f3:2b:1f:f8:7c:53:22:7f:af:d3:51:3a:cd:fa:a0:4f: 0f:6d:48:57:79:13:41:95:7a:61:a0:4c:b9:cb:1f:61:56:92: 82:3a:c3:e7:84:86:55:ae:4c:fd:93:50:8f:79:ed:6d:71:e3: b8:01:a0:83:fd:09:4b:6b:b9:56:92:68:f7:05:e6:d3:d0:e6: 90:94:bc:8f:15:06:5c:d8:ee:9d:a8:46:76:a2:29:0f:fa:05: 3e:4a:b5:d5:04:9b:cf:a7:98:65:02:aa:e3:a8:63:cf:a6:f0: ad:3e:95:b6:c5:fa:f2:6b:2a:f0:c0:61:fc:7a:85:1a:72:27: b4:24:3f:49:e0:11:78:13:75:71:c6:90:a2:9e:08:87:5d:2d: fc:00:84:ad:53:40:ab:97:a0:0b:51:6f:02:8a:a4:4c:f3:d6: 20:d7:e5:36:75:8b:d1:c7:3d:35:c0:2a:32:5f:0c:5d:15:0c: 8b:28:94:e4 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUdVyZM3Sw8zhtNMrO5d0mi1fBdlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDRaFw0yNzAxMTkwMjE2NDRaMDMxMTAvBgNV BAMTKDIwMEUxQjRCQzdBMzMzNTZDMTBDOTkzRkRGNzJCMDRCNzdBM0FEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7WeMdc96OKbszXIJTh/ydJRz L9pXoZsLCAkQi+GkieRXcsNnJnTJP2JBB1GezdwmPZ+l9Bp2QYceViXfLSWxGUYd woNp8fI68km68tmz8UolqOsDs3oJPryvx4muTl/+X7RDsSr7FBhShqGCa8re4cDW f31J6ChkjM5g+X2eWnSIfcZPyUA9ouwK+caeqNlsI7jBO83iaXzKwI7HPrrN5j2E 3LKilLXWjiG134/EdbbL46+lfvpeCgYf6h0CSzsqo/Q7KXHADV2jCwaZLXWwINMU bh0MrC5NfUvXh0pl1yasWOH6N0DbnHr3w4zlY+I542vsqc1XGsVZmiRgZHPdAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUIA4bS8ejM1bBDJk/33KwS3ejrQYwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3LzAvMzIzMDMyMmUz MTM2MzAyZTMxMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjMxMzYz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMqgjjANBgkqhkiG9w0BAQsFAAOCAQEAkD6A4gqVECzrJzQy YSD2yQX2WkU9d96HYmBniePc5IO1wIwB8lJ+qQ6aWHUbG9ado0uGsuvMn4lelQN+ RnNcz3bAZgKVcy/CKG3zKx/4fFMif6/TUTrN+qBPD21IV3kTQZV6YaBMucsfYVaS gjrD54SGVa5M/ZNQj3ntbXHjuAGgg/0JS2u5VpJo9wXm09DmkJS8jxUGXNjunahG dqIpD/oFPkq11QSbz6eYZQKq46hjz6bwrT6VtsX68msq8MBh/HqFGnIntCQ/SeAR eBN1ccaQop4Ih10t/ACErVNAq5egC1FvAoqkTPPWINflNnWL0cc9NcAqMl8MXRUM iyiU5A== -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:59 2026 by rpki-client