This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e31362e302f32322d3332203d3e20313337363930.roa File: 3230322e3138392e31362e302f32322d3332203d3e20313337363930.roa (raw, json) Hash identifier: IfoMH56XJ1hZmG6m81pyfga0KXHap9V3FsJ5JuGS2TU= Subject key identifier: 22:89:47:16:81:64:9B:7A:57:9F:8E:18:C9:13:36:23:66:9B:46:FD Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 5AB8D1ACB55BDD3DE167314951A1D511555BF655 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e31362e302f32322d3332203d3e20313337363930.roa Signing time: Tue 20 Jan 2026 02:20:16 +0000 ROA not before: Tue 20 Jan 2026 02:15:16 +0000 ROA not after: Tue 19 Jan 2027 02:20:16 +0000 asID: 137690 IP address blocks: 202.189.16.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b8:d1:ac:b5:5b:dd:3d:e1:67:31:49:51:a1:d5:11:55:5b:f6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jan 20 02:15:16 2026 GMT Not After : Jan 19 02:20:16 2027 GMT Subject: CN=2289471681649B7A579F8E18C9133623669B46FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:2a:24:f6:5e:0f:11:01:c9:76:7d:59:ca: f4:3b:86:c0:65:e1:4a:90:f6:7a:07:18:e8:0a:7e: 8e:ac:80:64:ff:c6:44:1c:06:40:65:ff:ae:64:75: 07:c5:5e:a0:7b:58:c3:ea:61:d1:3c:a9:62:d8:69: 2d:63:3f:a5:76:41:d3:63:ec:25:a6:54:a0:f8:fb: 5a:81:7d:43:29:c3:b0:e1:ba:bb:10:fa:9c:07:c5: 0a:2b:15:3d:a2:51:17:1f:4f:d4:25:29:ab:b8:1f: c4:c3:38:2b:6b:18:71:e2:1a:1f:31:24:d2:d1:18: 82:3e:13:3b:61:33:91:f1:68:88:f5:03:9d:86:26: ec:dd:b7:b3:da:71:ff:bc:cb:48:e9:de:e3:08:5e: 88:38:bc:71:52:75:0d:4f:99:ea:23:4f:3f:6d:a7: 71:59:13:ca:65:81:ae:de:44:9d:7e:28:1c:62:e8: 04:95:2b:60:18:cf:ee:90:2d:c5:db:de:a7:e8:cb: 81:83:3c:28:37:84:66:67:ef:d3:1a:fd:fe:69:e7: 7b:9f:e7:79:42:92:2c:76:72:8f:02:2b:99:a6:60: d4:66:b4:84:3c:1e:5e:d0:86:96:c0:4b:5d:9a:7a: 44:51:bc:45:74:44:5a:ae:a0:28:d4:61:cb:e5:0a: ba:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:89:47:16:81:64:9B:7A:57:9F:8E:18:C9:13:36:23:66:9B:46:FD X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e31362e302f32322d3332203d3e20313337363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.16.0/22 Signature Algorithm: sha256WithRSAEncryption af:d0:b6:5f:3b:c9:6c:ed:7e:a5:7d:12:04:a6:d4:41:e9:d0: 37:5f:e7:7b:2c:39:5f:4b:41:0d:de:3e:f5:19:66:20:54:d1: dc:93:62:1a:8b:ff:eb:2d:4f:62:68:f0:b7:6f:d5:e8:88:2c: d7:02:5b:0c:0b:fd:f7:e4:1c:8d:2a:f6:47:b3:ee:04:45:8c: 61:87:fe:25:58:7b:15:e3:e0:06:49:b8:de:4e:b8:ba:a6:38: 4b:06:73:3f:c6:23:2c:b1:66:8b:74:ed:b3:ea:79:ea:b6:69: a8:dc:10:ea:5a:e3:ce:d3:44:4e:7e:30:ce:a4:24:b2:05:b7: 70:ef:b3:cb:66:4b:14:a7:f8:18:44:1a:ba:a0:3b:c9:07:03: fb:62:7c:e1:56:33:dc:05:78:ef:b6:b0:b3:74:0e:bf:c8:c6: 09:86:c5:34:69:9d:28:ce:d2:18:c7:3c:bb:6f:af:52:01:34: 7a:f6:9e:b7:de:5a:ac:1e:c7:59:76:1d:c1:8b:71:68:78:63: cb:5b:30:8e:0a:56:d8:f5:7e:f3:bc:d5:7d:aa:98:80:87:ea: 08:eb:11:a2:e7:3c:fc:61:ac:59:c1:3f:5e:39:b6:5d:b7:c6: ef:c6:f5:32:2a:78:08:4e:59:d2:52:77:55:90:c3:55:09:7e: 80:31:5a:c9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWrjRrLVb3T3hZzFJUaHVEVVb9lUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjAxMjAwMjE1MTZaFw0yNzAxMTkwMjIwMTZaMDMxMTAvBgNV BAMTKDIyODk0NzE2ODE2NDlCN0E1NzlGOEUxOEM5MTMzNjIzNjY5QjQ2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rCok9l4PEQHJdn1ZyvQ7hsBl 4UqQ9noHGOgKfo6sgGT/xkQcBkBl/65kdQfFXqB7WMPqYdE8qWLYaS1jP6V2QdNj 7CWmVKD4+1qBfUMpw7DhursQ+pwHxQorFT2iURcfT9QlKau4H8TDOCtrGHHiGh8x JNLRGII+EzthM5HxaIj1A52GJuzdt7Pacf+8y0jp3uMIXog4vHFSdQ1PmeojTz9t p3FZE8plga7eRJ1+KBxi6ASVK2AYz+6QLcXb3qfoy4GDPCg3hGZn79Ma/f5p53uf 53lCkix2co8CK5mmYNRmtIQ8Hl7QhpbAS12aekRRvEV0RFquoCjUYcvlCrpVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUIolHFoFkm3pXn44YyRM2I2abRv0wHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM2MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsq9EDANBgkqhkiG9w0BAQsFAAOCAQEAr9C2XzvJbO1+pX0SBKbU QenQN1/neyw5X0tBDd4+9RlmIFTR3JNiGov/6y1PYmjwt2/V6Igs1wJbDAv99+Qc jSr2R7PuBEWMYYf+JVh7FePgBkm43k64uqY4SwZzP8YjLLFmi3Tts+p56rZpqNwQ 6lrjztNETn4wzqQksgW3cO+zy2ZLFKf4GEQauqA7yQcD+2J84VYz3AV477aws3QO v8jGCYbFNGmdKM7SGMc8u2+vUgE0evaet95arB7HWXYdwYtxaHhjy1swjgpW2PV+ 87zVfaqYgIfqCOsRouc8/GGsWcE/Xjm2XbfG78b1Mip4CE5Z0lJ3VZDDVQl+gDFa yQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:46 2026 by rpki-client