This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e20313332313638.roa File: 3230322e3136302e3134332e302f32342d3234203d3e20313332313638.roa (raw, json) Hash identifier: k2MNntY/jbi7+u/FxOsDf7dJg22We6Uk0eTZ6NC6IKg= Subject key identifier: 00:4B:90:BA:6B:C2:E5:55:62:CD:3D:F5:74:DD:4C:6D:80:41:50:D2 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 5D9AC7200601CFA62CE31EA3842FAF5308547D76 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e20313332313638.roa Signing time: Tue 20 Jan 2026 02:16:45 +0000 ROA not before: Tue 20 Jan 2026 02:11:45 +0000 ROA not after: Tue 19 Jan 2027 02:16:45 +0000 asID: 132168 IP address blocks: 202.160.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9a:c7:20:06:01:cf:a6:2c:e3:1e:a3:84:2f:af:53:08:54:7d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:45 2026 GMT Not After : Jan 19 02:16:45 2027 GMT Subject: CN=004B90BA6BC2E55562CD3DF574DD4C6D804150D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:37:13:27:43:f3:dc:2e:22:88:39:39:33:c4: 86:83:aa:21:33:30:a3:a8:ba:52:9b:1c:28:95:f3: 13:14:50:60:3e:c9:4b:aa:0a:87:2d:f7:01:05:7b: 72:ba:d4:ea:37:66:82:b7:c8:df:9e:4f:00:0d:10: f6:db:99:ec:95:92:09:9b:df:8a:08:ed:e3:93:45: 2e:21:05:87:0a:c3:1e:3f:8b:77:c5:22:b8:46:f0: 7f:df:67:5c:6c:d5:23:cb:0b:3d:c1:eb:7a:0c:4b: bc:c5:0f:ae:70:1a:5a:f1:e3:04:e3:ee:ce:33:4c: 26:83:71:f3:31:ca:a6:4b:40:ae:eb:f7:9f:05:12: 7c:01:47:5f:cb:31:d7:02:da:08:d9:93:d4:81:7c: d4:62:5d:92:ee:2a:bb:0f:f2:88:a9:32:8f:c2:55: 16:0c:bb:e5:ee:1c:c8:12:91:ff:62:62:69:8a:c8: dd:ec:de:2f:b1:82:0d:39:43:c2:b4:b0:4f:73:14: f5:d5:9c:c5:a4:c8:b0:a4:3d:50:5e:b3:e3:55:40: 79:43:e2:7d:ba:ac:4a:af:ef:f0:2c:20:1c:3e:12: d2:6c:8f:ab:a3:14:f0:fb:67:49:5e:a3:57:5e:22: b7:da:40:fb:85:9c:99:73:ee:ed:d0:7d:fc:ec:66: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4B:90:BA:6B:C2:E5:55:62:CD:3D:F5:74:DD:4C:6D:80:41:50:D2 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e20313332313638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.143.0/24 Signature Algorithm: sha256WithRSAEncryption 49:de:d8:cd:86:77:a4:6e:57:5b:27:93:09:29:3a:9d:ad:33: 9b:4b:84:3c:a0:92:3a:23:87:58:9b:97:25:7e:cd:4e:48:11: 27:a1:06:9c:9b:9f:71:98:46:7d:29:a8:26:ac:e4:07:bb:7e: 0f:83:a1:95:8e:05:f2:b6:44:e6:0d:81:58:e4:af:7f:dd:0c: b0:63:ef:0b:a8:d2:a3:59:b7:29:7a:d3:1b:f8:71:48:a1:6d: ba:4d:f8:97:0a:d4:cc:da:1f:d7:0a:26:bd:6c:20:3a:a1:06: 6f:f8:df:4e:3b:0a:d1:0c:0e:39:95:7d:c4:d7:03:69:ac:39: 38:b1:1b:16:81:c3:86:94:58:cc:46:6c:49:ea:52:bf:c0:bf: f5:6d:1c:c4:86:3e:74:07:8c:20:7d:2b:a2:e6:fe:84:89:e6: fb:ca:f6:4c:cd:fb:60:b3:df:6c:72:d3:eb:c9:b3:20:6e:85: f2:39:93:b4:6b:4c:12:64:80:65:ee:e1:d7:64:6c:8b:33:94: 98:ef:41:71:b7:68:79:54:06:7a:e6:4e:9f:25:ab:41:14:4b: da:99:6b:e2:95:e7:6e:da:73:82:2e:9c:d9:d8:66:7d:ac:d6: b2:c6:04:b2:ac:71:44:21:42:99:78:d9:62:80:f5:80:3f:f8: c7:fb:77:bc -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUXZrHIAYBz6Ys4x6jhC+vUwhUfXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDVaFw0yNzAxMTkwMjE2NDVaMDMxMTAvBgNV BAMTKDAwNEI5MEJBNkJDMkU1NTU2MkNEM0RGNTc0REQ0QzZEODA0MTUwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6NxMnQ/PcLiKIOTkzxIaDqiEz MKOoulKbHCiV8xMUUGA+yUuqCoct9wEFe3K61Oo3ZoK3yN+eTwANEPbbmeyVkgmb 34oI7eOTRS4hBYcKwx4/i3fFIrhG8H/fZ1xs1SPLCz3B63oMS7zFD65wGlrx4wTj 7s4zTCaDcfMxyqZLQK7r958FEnwBR1/LMdcC2gjZk9SBfNRiXZLuKrsP8oipMo/C VRYMu+XuHMgSkf9iYmmKyN3s3i+xgg05Q8K0sE9zFPXVnMWkyLCkPVBes+NVQHlD 4n26rEqv7/AsIBw+EtJsj6ujFPD7Z0leo1deIrfaQPuFnJlz7u3QffzsZgA9AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUAEuQumvC5VVizT31dN1MbYBBUNIwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3LzAvMzIzMDMyMmUz MTM2MzAyZTMxMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjMxMzYz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMqgjzANBgkqhkiG9w0BAQsFAAOCAQEASd7YzYZ3pG5XWyeT CSk6na0zm0uEPKCSOiOHWJuXJX7NTkgRJ6EGnJufcZhGfSmoJqzkB7t+D4OhlY4F 8rZE5g2BWOSvf90MsGPvC6jSo1m3KXrTG/hxSKFtuk34lwrUzNof1womvWwgOqEG b/jfTjsK0QwOOZV9xNcDaaw5OLEbFoHDhpRYzEZsSepSv8C/9W0cxIY+dAeMIH0r oub+hInm+8r2TM37YLPfbHLT68mzIG6F8jmTtGtMEmSAZe7h12RsizOUmO9Bcbdo eVQGeuZOnyWrQRRL2plr4pXnbtpzgi6c2dhmfazWssYEsqxxRCFCmXjZYoD1gD/4 x/t3vA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:50 2026 by rpki-client