This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e32342e302f32322d3332203d3e20313337363930.roa File: 3230322e3138392e32342e302f32322d3332203d3e20313337363930.roa (raw, json) Hash identifier: WsDWFA3iyxP5XNWv/VrakU6bn8VOzvjFaYrEaa9kg7U= Subject key identifier: E1:06:2F:45:A2:63:B5:49:0C:B8:C3:CF:CF:D0:1E:90:48:51:9E:F9 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 253060E66FD65AE43D5B02640D3995E8CC75844A Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e32342e302f32322d3332203d3e20313337363930.roa Signing time: Tue 20 Jan 2026 02:20:16 +0000 ROA not before: Tue 20 Jan 2026 02:15:16 +0000 ROA not after: Tue 19 Jan 2027 02:20:16 +0000 asID: 137690 IP address blocks: 202.189.24.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:30:60:e6:6f:d6:5a:e4:3d:5b:02:64:0d:39:95:e8:cc:75:84:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jan 20 02:15:16 2026 GMT Not After : Jan 19 02:20:16 2027 GMT Subject: CN=E1062F45A263B5490CB8C3CFCFD01E9048519EF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:86:be:c4:ed:1e:e1:ba:82:93:74:e8:e1:28: 20:15:17:8a:30:6d:8f:2b:c9:84:c2:97:18:0b:47: 84:6b:86:55:61:e5:ed:b8:35:7c:6c:50:63:91:d0: d5:78:e3:05:d4:f9:eb:b8:c8:30:a0:52:48:51:1f: 73:1b:70:29:95:f2:80:b3:d8:5d:68:45:c2:dd:db: c9:e5:cc:e0:a3:7c:02:1e:e9:ab:a1:dc:08:0f:a0: d3:83:38:e8:44:53:7d:ab:ca:ae:8e:18:67:2e:79: 97:68:3c:98:56:38:a2:a8:a4:de:a6:db:d2:f0:46: b6:39:b0:ab:8e:dc:50:97:41:9a:d6:d5:ab:33:06: 33:ca:23:81:7a:c6:08:23:c6:f0:d1:49:3d:5b:a6: 6b:3d:62:0e:0a:16:47:5a:74:6d:36:c2:f8:45:e7: 64:1f:50:c7:01:2d:76:39:13:fe:ad:e9:77:a0:ee: 9a:fd:22:0e:75:8d:19:fd:d6:91:00:61:00:65:52: e2:54:92:71:a5:03:c7:8d:d8:20:da:ec:a9:bf:69: e8:88:f0:0b:38:3c:cb:ee:1d:ca:fc:75:65:af:12: d0:69:e3:51:17:b6:b9:14:f6:4b:69:c3:fd:d7:c5: cc:50:87:15:61:05:fa:6b:14:81:e8:df:c8:35:b7: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:06:2F:45:A2:63:B5:49:0C:B8:C3:CF:CF:D0:1E:90:48:51:9E:F9 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e32342e302f32322d3332203d3e20313337363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.24.0/22 Signature Algorithm: sha256WithRSAEncryption 25:18:d3:17:08:b3:52:e1:f8:7f:1c:4d:fa:3c:bc:f9:a1:71: b1:43:7f:bb:3c:c0:4a:0e:42:88:a1:56:fb:de:cb:ca:1e:2e: be:1a:58:26:18:5d:54:cf:25:32:c6:2a:93:0b:79:39:23:75: f8:12:10:ef:1d:18:80:65:35:e5:3f:ad:6b:18:ed:12:5c:f5: 43:e4:83:66:84:62:4d:66:e9:b5:b3:45:b7:75:bc:e5:76:94: 9e:57:c0:81:b7:23:67:68:aa:7d:39:1a:7e:44:fd:4d:28:e1: ab:4a:45:f4:22:47:70:b7:50:79:2b:a4:23:cb:63:68:8e:a5: bc:26:bc:7a:c5:80:53:c6:6f:4e:1c:44:3a:02:a3:38:be:ab: 94:03:9c:ad:75:1f:f2:0f:f9:d9:e5:0d:a4:ae:64:c8:ea:da: 64:9f:b3:3c:38:e5:72:c2:02:0c:4b:6a:dd:52:7b:c8:66:29: ae:cb:16:20:75:26:fb:2d:7a:87:15:d9:03:d6:35:d2:30:da: a4:a1:29:ee:5d:7e:11:bf:cd:7f:05:f0:98:2b:36:51:9a:b8: d2:26:84:fc:d3:b9:74:25:08:8e:3c:92:28:17:01:13:c0:12: ef:86:1c:e6:dc:a3:ae:33:3c:89:84:ec:a1:7f:fc:8f:17:a0: 81:f1:9a:43 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJTBg5m/WWuQ9WwJkDTmV6Mx1hEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjAxMjAwMjE1MTZaFw0yNzAxMTkwMjIwMTZaMDMxMTAvBgNV BAMTKEUxMDYyRjQ1QTI2M0I1NDkwQ0I4QzNDRkNGRDAxRTkwNDg1MTlFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShr7E7R7huoKTdOjhKCAVF4ow bY8ryYTClxgLR4RrhlVh5e24NXxsUGOR0NV44wXU+eu4yDCgUkhRH3MbcCmV8oCz 2F1oRcLd28nlzOCjfAIe6auh3AgPoNODOOhEU32ryq6OGGcueZdoPJhWOKKopN6m 29LwRrY5sKuO3FCXQZrW1aszBjPKI4F6xggjxvDRST1bpms9Yg4KFkdadG02wvhF 52QfUMcBLXY5E/6t6Xeg7pr9Ig51jRn91pEAYQBlUuJUknGlA8eN2CDa7Km/aeiI 8As4PMvuHcr8dWWvEtBp41EXtrkU9ktpw/3XxcxQhxVhBfprFIHo38g1t2D1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU4QYvRaJjtUkMuMPPz9AekEhRnvkwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzIzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM2MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsq9GDANBgkqhkiG9w0BAQsFAAOCAQEAJRjTFwizUuH4fxxN+jy8 +aFxsUN/uzzASg5CiKFW+97Lyh4uvhpYJhhdVM8lMsYqkwt5OSN1+BIQ7x0YgGU1 5T+taxjtElz1Q+SDZoRiTWbptbNFt3W85XaUnlfAgbcjZ2iqfTkafkT9TSjhq0pF 9CJHcLdQeSukI8tjaI6lvCa8esWAU8ZvThxEOgKjOL6rlAOcrXUf8g/52eUNpK5k yOraZJ+zPDjlcsICDEtq3VJ7yGYprssWIHUm+y16hxXZA9Y10jDapKEp7l1+Eb/N fwXwmCs2UZq40iaE/NO5dCUIjjySKBcBE8AS74Yc5tyjrjM8iYTsoX/8jxeggfGa Qw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:42 2026 by rpki-client