This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e33322e302f32312d3231203d3e203538383334.roa File: 3230332e3133322e33322e302f32312d3231203d3e203538383334.roa (raw, json) Hash identifier: yQZZStxsKS7FS4VtSZg71thTKA58Ogy0Qp1m26Cxlvc= Subject key identifier: 3E:9C:7E:F7:C5:F6:BE:AE:C6:F1:44:A8:EA:87:08:0C:83:22:6D:05 Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E Certificate serial: 2B4B92CA681DCD4639749CA722B16C56A6CC3520 Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e33322e302f32312d3231203d3e203538383334.roa Signing time: Tue 20 Jan 2026 02:13:06 +0000 ROA not before: Tue 20 Jan 2026 02:08:06 +0000 ROA not after: Tue 19 Jan 2027 02:13:06 +0000 asID: 58834 IP address blocks: 203.132.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4b:92:ca:68:1d:cd:46:39:74:9c:a7:22:b1:6c:56:a6:cc:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E Validity Not Before: Jan 20 02:08:06 2026 GMT Not After : Jan 19 02:13:06 2027 GMT Subject: CN=3E9C7EF7C5F6BEAEC6F144A8EA87080C83226D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0c:6b:af:1e:30:77:cf:2b:36:5a:7c:7f:85: 69:5a:3b:5f:a4:fc:76:16:80:36:de:51:23:05:57: 77:13:8d:04:c6:ac:c1:af:a8:93:91:d5:7a:68:0a: 4c:cb:3d:0f:87:10:cd:ad:ce:c0:5b:03:cf:47:34: 2e:35:0d:ed:b8:11:6f:f2:c6:54:0e:95:e1:47:2d: 57:b9:d0:77:c4:20:f3:7c:22:09:73:c9:a8:a1:d0: 1b:a5:01:a1:f9:4e:19:af:2b:15:ec:05:10:f0:d1: c8:f9:0d:f5:73:ee:88:31:26:02:33:c2:ee:df:45: 04:d2:61:d7:ca:1f:1d:30:dc:e6:30:7d:de:6f:d5: b3:96:33:ff:07:b7:57:9d:2d:6b:6f:e8:5e:60:a5: 8f:4f:31:b5:c9:12:fe:81:43:a7:29:9e:c0:02:c6: 7d:44:1c:85:8f:fa:a2:ab:31:0c:26:7c:fb:a0:8c: b9:d2:40:8a:b6:77:06:a1:8b:fc:73:19:f1:e5:64: d2:33:7d:98:03:95:bc:24:5b:ec:fb:39:53:4c:eb: fd:38:54:54:d6:d5:86:62:38:48:a2:02:6f:81:7e: 75:61:59:21:18:ea:2a:18:8f:bc:43:3b:74:1e:b2: 1d:7f:80:12:bf:19:73:02:9d:1c:9d:1a:65:27:6d: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:7E:F7:C5:F6:BE:AE:C6:F1:44:A8:EA:87:08:0C:83:22:6D:05 X509v3 Authority Key Identifier: keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e33322e302f32312d3231203d3e203538383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.132.32.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:d2:b0:2d:34:a8:93:a4:42:7a:26:7f:a6:60:25:ba:cf:cf: ed:a5:c1:db:bb:b3:5c:af:e9:4b:17:5b:9c:db:a6:1e:f9:b9: 38:b6:ef:84:07:4b:36:61:7a:6b:e0:c1:27:27:9b:40:1a:09: a6:0f:f6:55:e6:89:6d:95:28:a3:f2:aa:00:73:6a:92:1d:ab: 78:7e:b3:00:dc:72:a9:48:6e:b9:84:d9:f9:25:61:1a:32:56: 50:14:5f:fe:92:59:34:d3:cc:2f:05:97:72:25:c4:07:a5:b4: f4:b6:d1:82:59:39:f5:36:bf:20:3c:4d:0e:d8:64:ec:7c:f3: f3:05:98:b3:9a:70:45:d5:82:24:85:3f:26:9f:44:63:44:7d: c9:9f:3c:fe:fa:bd:a6:2e:15:5a:da:b5:dc:9a:69:2a:f8:33: ac:2d:31:81:f0:7f:6d:d0:c7:ea:eb:b1:43:a3:a1:63:f5:36: 06:8b:e6:1a:e5:c4:ec:39:63:de:c6:d0:de:8e:ba:62:2b:af: ce:72:28:cb:6f:28:f3:e3:91:67:ea:f0:bb:75:de:5b:0d:f3: db:f9:68:f7:a6:e3:62:ab:43:c9:0e:9c:c6:9d:4a:49:54:e9: 1b:08:8d:b1:27:d3:15:5a:de:8f:53:bc:0f:29:77:a0:4f:09: 4e:13:1a:57 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUK0uSymgdzUY5dJynIrFsVqbMNSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3 OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDZaFw0yNzAxMTkwMjEzMDZaMDMxMTAvBgNV BAMTKDNFOUM3RUY3QzVGNkJFQUVDNkYxNDRBOEVBODcwODBDODMyMjZEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDGuvHjB3zys2Wnx/hWlaO1+k /HYWgDbeUSMFV3cTjQTGrMGvqJOR1XpoCkzLPQ+HEM2tzsBbA89HNC41De24EW/y xlQOleFHLVe50HfEIPN8Iglzyaih0BulAaH5ThmvKxXsBRDw0cj5DfVz7ogxJgIz wu7fRQTSYdfKHx0w3OYwfd5v1bOWM/8Ht1edLWtv6F5gpY9PMbXJEv6BQ6cpnsAC xn1EHIWP+qKrMQwmfPugjLnSQIq2dwahi/xzGfHlZNIzfZgDlbwkW+z7OVNM6/04 VFTW1YZiOEiiAm+BfnVhWSEY6ioYj7xDO3Qesh1/gBK/GXMCnRydGmUnbVWXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUPpx+98X2vq7G8USo6ocIDIMibQUwHwYDVR0j BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDU1MzM0NS8wLzMyMzAzMzJlMzEz MzMyMmUzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzODM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA8uEIDANBgkqhkiG9w0BAQsFAAOCAQEAn9KwLTSok6RCeiZ/pmAlus/P 7aXB27uzXK/pSxdbnNumHvm5OLbvhAdLNmF6a+DBJyebQBoJpg/2VeaJbZUoo/Kq AHNqkh2reH6zANxyqUhuuYTZ+SVhGjJWUBRf/pJZNNPMLwWXciXEB6W09LbRglk5 9Ta/IDxNDthk7Hzz8wWYs5pwRdWCJIU/Jp9EY0R9yZ88/vq9pi4VWtq13JppKvgz rC0xgfB/bdDH6uuxQ6OhY/U2BovmGuXE7Dlj3sbQ3o66YiuvznIoy28o8+ORZ+rw u3XeWw3z2/lo96bjYqtDyQ6cxp1KSVTpGwiNsSfTFVrej1O8Dyl3oE8JThMaVw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:12 2026 by rpki-client