This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e203539303333.roa File: 3230322e3136302e3134332e302f32342d3234203d3e203539303333.roa (raw, json) Hash identifier: DLgoQiKU82T00ZS/JEqSmlASVZQk0mHAaQBaJXGsDEg= Subject key identifier: F5:39:27:5A:6E:0D:DF:DD:C3:36:31:75:25:4E:72:06:22:3C:D5:D1 Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Certificate serial: 01176897782514D1BCD680C7A4554EA2C1478A60 Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e203539303333.roa Signing time: Tue 20 Jan 2026 02:16:45 +0000 ROA not before: Tue 20 Jan 2026 02:11:45 +0000 ROA not after: Tue 19 Jan 2027 02:16:45 +0000 asID: 59033 IP address blocks: 202.160.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:17:68:97:78:25:14:d1:bc:d6:80:c7:a4:55:4e:a2:c1:47:8a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Validity Not Before: Jan 20 02:11:45 2026 GMT Not After : Jan 19 02:16:45 2027 GMT Subject: CN=F539275A6E0DDFDDC3363175254E7206223CD5D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:fd:b8:7b:9e:90:49:91:3c:a9:96:ae:d9: 2d:7f:2f:a9:ef:f7:79:fa:b8:a4:10:99:39:a7:d0: 72:7d:3b:84:3f:98:99:cb:be:d8:90:70:e0:be:02: fc:24:07:74:7d:d9:0c:18:05:a0:cc:cd:f4:e1:ab: d0:e5:2e:a1:d7:90:ef:1b:72:1f:0a:d0:46:bb:99: be:97:56:d9:44:82:b5:25:bd:64:9e:32:df:94:d6: 4c:3f:e7:f0:28:cf:00:b8:bf:17:24:19:43:58:21: 72:94:e6:14:04:64:d3:64:25:d2:d8:e8:cf:d1:7c: e7:b0:e2:e1:24:ea:76:b7:85:9d:45:d1:22:9d:7e: c2:92:c9:bc:99:de:d2:ee:cf:b7:de:ee:15:0b:86: 75:32:f5:56:79:0c:db:5d:0d:c7:25:ae:7b:ee:ac: 4a:73:5c:64:38:71:28:79:69:70:b4:aa:ff:68:57: 9b:bc:bb:9f:64:7e:46:02:ce:6d:73:77:f0:0a:aa: 24:9f:8e:ef:6d:06:1f:d3:f3:92:e2:5c:59:8a:bd: d7:54:38:64:91:fd:dc:34:b4:f8:39:8b:51:31:db: 46:3b:4f:32:18:61:db:73:e5:93:16:20:b9:97:6b: ee:d0:fb:35:56:e0:ab:e8:6f:99:37:6a:89:74:e7: 3d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:39:27:5A:6E:0D:DF:DD:C3:36:31:75:25:4E:72:06:22:3C:D5:D1 X509v3 Authority Key Identifier: keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e203539303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.143.0/24 Signature Algorithm: sha256WithRSAEncryption 92:05:60:37:1e:03:9e:dd:9b:fc:fb:d0:0b:6f:5d:c7:4d:a3: 7a:b4:5b:34:2b:94:13:f0:95:09:a6:8a:84:9e:f9:be:02:e0: 91:49:91:89:b5:8b:d8:e3:3a:6b:ef:83:1a:f3:e0:c0:1c:94: 13:78:68:87:cb:ec:22:7c:34:0c:0e:12:dd:0c:22:5c:fa:06: 54:70:bd:ab:d7:5a:4e:fc:c6:81:f7:ea:19:cd:eb:1e:b5:df: ac:b2:60:f1:e0:b3:b2:a4:15:3a:52:5f:c5:0e:1e:f7:d5:72: 11:04:8f:29:fb:d9:a1:63:11:9d:07:1e:88:e0:6d:5c:60:60: 26:65:3a:f5:69:2c:57:12:08:5d:8a:54:b4:f7:98:5b:a4:5f: 74:b7:6a:e9:85:52:e6:95:f5:59:ef:89:48:cd:60:82:b2:41: 9a:77:20:88:37:69:4c:d8:d1:52:f9:cc:96:4c:3f:c8:86:3e: 69:2f:44:d8:f1:a3:f0:80:98:ad:20:5e:70:9c:d2:ce:cb:18: 74:68:9a:ca:93:77:d6:b7:1d:44:0e:9b:47:3a:99:b4:20:f1: 32:4b:fc:ec:1e:b0:38:61:2d:64:c7:77:b4:34:22:a7:db:7c: 11:fe:b3:a3:48:59:65:b0:11:2c:37:c0:1e:f5:06:9f:9d:5a: 2e:2f:45:f3 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUARdol3glFNG81oDHpFVOosFHimAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3 RkU5MTM0RDAeFw0yNjAxMjAwMjExNDVaFw0yNzAxMTkwMjE2NDVaMDMxMTAvBgNV BAMTKEY1MzkyNzVBNkUwRERGRERDMzM2MzE3NTI1NEU3MjA2MjIzQ0Q1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eP24e56QSZE8qZau2S1/L6nv 93n6uKQQmTmn0HJ9O4Q/mJnLvtiQcOC+AvwkB3R92QwYBaDMzfThq9DlLqHXkO8b ch8K0Ea7mb6XVtlEgrUlvWSeMt+U1kw/5/AozwC4vxckGUNYIXKU5hQEZNNkJdLY 6M/RfOew4uEk6na3hZ1F0SKdfsKSybyZ3tLuz7fe7hULhnUy9VZ5DNtdDcclrnvu rEpzXGQ4cSh5aXC0qv9oV5u8u59kfkYCzm1zd/AKqiSfju9tBh/T85LiXFmKvddU OGSR/dw0tPg5i1Ex20Y7TzIYYdtz5ZMWILmXa+7Q+zVW4Kvob5k3aol05z3ZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU9TknWm4N393DNjF1JU5yBiI81dEwHwYDVR0j BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0 QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5MTY4NjcvMC8zMjMwMzIyZTMx MzYzMDJlMzEzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzMzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqgjzANBgkqhkiG9w0BAQsFAAOCAQEAkgVgNx4Dnt2b/PvQC29d x02jerRbNCuUE/CVCaaKhJ75vgLgkUmRibWL2OM6a++DGvPgwByUE3hoh8vsInw0 DA4S3QwiXPoGVHC9q9daTvzGgffqGc3rHrXfrLJg8eCzsqQVOlJfxQ4e99VyEQSP KfvZoWMRnQceiOBtXGBgJmU69WksVxIIXYpUtPeYW6RfdLdq6YVS5pX1We+JSM1g grJBmncgiDdpTNjRUvnMlkw/yIY+aS9E2PGj8ICYrSBecJzSzssYdGiaypN31rcd RA6bRzqZtCDxMkv87B6wOGEtZMd3tDQip9t8Ef6zo0hZZbARLDfAHvUGn51aLi9F 8w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:12 2026 by rpki-client