This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e32382e302f32322d3332203d3e20313337363930.roa File: 3230322e3138392e32382e302f32322d3332203d3e20313337363930.roa (raw, json) Hash identifier: 1NfYMuYmM23VWZnzSw96HJtYj4Lq8yKysAQ8JJZNoXw= Subject key identifier: 86:B6:EB:8B:4F:91:39:53:8B:57:CF:E7:8B:4C:A2:BC:70:FB:58:A6 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 1FE056A7997BCCAEDC008FD469527ED0F74AFEA1 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e32382e302f32322d3332203d3e20313337363930.roa Signing time: Tue 20 Jan 2026 02:20:16 +0000 ROA not before: Tue 20 Jan 2026 02:15:16 +0000 ROA not after: Tue 19 Jan 2027 02:20:16 +0000 asID: 137690 IP address blocks: 202.189.28.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e0:56:a7:99:7b:cc:ae:dc:00:8f:d4:69:52:7e:d0:f7:4a:fe:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jan 20 02:15:16 2026 GMT Not After : Jan 19 02:20:16 2027 GMT Subject: CN=86B6EB8B4F9139538B57CFE78B4CA2BC70FB58A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:b6:4f:63:29:91:bc:86:62:7c:ac:95:d4: 24:18:e2:4e:5d:ae:2f:b7:8b:fb:b7:1a:5c:1a:39: 3b:32:91:f6:2d:40:da:7a:a5:a5:7f:c9:d8:06:3f: 61:59:60:48:81:b0:13:7f:38:1c:c6:39:5a:b7:d2: 11:50:0f:64:54:88:f8:48:f1:c4:d3:00:9b:31:8a: c8:df:9e:6f:6c:9d:63:26:e9:e3:7e:a9:e0:a9:bf: 31:cf:0e:7e:d3:c5:57:4f:bc:b1:9e:e1:2a:4e:7d: 57:ba:37:1a:0f:0c:e8:56:a4:42:20:83:9b:73:5c: 7e:55:58:16:b3:49:2e:38:2a:c8:28:6a:fb:c2:3a: d4:f8:dd:c6:be:b1:59:8d:d2:4d:b4:ee:49:f1:9d: d9:e8:a0:31:3a:de:8a:44:b1:95:f6:f4:43:3c:3a: 17:63:57:95:15:95:19:51:a3:45:00:76:30:3d:cc: 5f:c3:db:f9:74:e8:fa:b9:79:08:7f:23:7c:6f:65: 4c:0a:91:5c:61:f4:4f:97:29:12:76:00:c4:85:40: 64:bd:59:a0:36:bf:e2:1d:e9:82:68:30:19:ca:59: 3a:49:d1:ea:b3:3c:e0:21:9c:25:75:0a:02:ec:a4: af:26:3c:cc:5b:f8:1a:4b:1e:b9:76:18:6c:07:11: eb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B6:EB:8B:4F:91:39:53:8B:57:CF:E7:8B:4C:A2:BC:70:FB:58:A6 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e32382e302f32322d3332203d3e20313337363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.28.0/22 Signature Algorithm: sha256WithRSAEncryption 44:01:62:5c:6d:a5:34:c5:74:1c:8a:c6:93:ca:42:b5:a5:e8: fa:94:e1:5d:6e:16:0c:d0:90:96:de:af:c8:0f:81:73:ea:d6: bd:55:84:6e:8c:9f:59:d5:df:38:47:af:59:db:15:86:60:71: b8:4c:c7:42:a7:40:81:e2:83:95:d6:bb:5b:9a:60:d8:2f:3f: 02:94:eb:22:1e:5a:29:07:80:e9:a2:8f:9b:2c:72:a9:65:a8: 3a:56:65:81:6e:83:90:2e:d0:a6:05:0e:38:66:7b:d2:4c:cc: 04:6d:4c:ea:cc:92:78:03:b1:5b:f3:0f:70:0d:31:c8:81:7f: 5a:8c:ef:93:61:ae:39:0f:6d:7b:e8:23:a9:d8:b4:59:6e:59: 42:34:01:bb:a5:55:94:65:8f:31:38:26:b8:6f:87:3f:a3:2a: b1:d0:fa:8f:a9:16:e8:94:df:4f:ee:da:16:45:f8:af:30:c5: f5:07:6c:6c:ec:87:b5:62:ae:6f:cb:f9:3c:90:9c:7f:e2:17: c0:2d:2a:56:f8:7a:6a:2d:89:93:86:78:5f:d5:6d:cb:38:33: ec:65:c7:53:09:6c:a5:28:32:7c:22:63:63:7c:dc:71:e3:92: f2:a7:37:bb:ff:0a:86:75:69:ae:7a:d5:a1:34:ae:ff:fe:86: c0:13:12:09 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUH+BWp5l7zK7cAI/UaVJ+0PdK/qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjAxMjAwMjE1MTZaFw0yNzAxMTkwMjIwMTZaMDMxMTAvBgNV BAMTKDg2QjZFQjhCNEY5MTM5NTM4QjU3Q0ZFNzhCNENBMkJDNzBGQjU4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzv7ZPYymRvIZifKyV1CQY4k5d ri+3i/u3GlwaOTsykfYtQNp6paV/ydgGP2FZYEiBsBN/OBzGOVq30hFQD2RUiPhI 8cTTAJsxisjfnm9snWMm6eN+qeCpvzHPDn7TxVdPvLGe4SpOfVe6NxoPDOhWpEIg g5tzXH5VWBazSS44KsgoavvCOtT43ca+sVmN0k207knxndnooDE63opEsZX29EM8 OhdjV5UVlRlRo0UAdjA9zF/D2/l06Pq5eQh/I3xvZUwKkVxh9E+XKRJ2AMSFQGS9 WaA2v+Id6YJoMBnKWTpJ0eqzPOAhnCV1CgLspK8mPMxb+BpLHrl2GGwHEetnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUhrbri0+ROVOLV8/ni0yivHD7WKYwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM2MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsq9HDANBgkqhkiG9w0BAQsFAAOCAQEARAFiXG2lNMV0HIrGk8pC taXo+pThXW4WDNCQlt6vyA+Bc+rWvVWEboyfWdXfOEevWdsVhmBxuEzHQqdAgeKD lda7W5pg2C8/ApTrIh5aKQeA6aKPmyxyqWWoOlZlgW6DkC7QpgUOOGZ70kzMBG1M 6sySeAOxW/MPcA0xyIF/Wozvk2GuOQ9te+gjqdi0WW5ZQjQBu6VVlGWPMTgmuG+H P6MqsdD6j6kW6JTfT+7aFkX4rzDF9QdsbOyHtWKub8v5PJCcf+IXwC0qVvh6ai2J k4Z4X9Vtyzgz7GXHUwlspSgyfCJjY3zcceOS8qc3u/8KhnVprnrVoTSu//6GwBMS CQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:49 2026 by rpki-client