This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e33322e302f32322d3332203d3e20313337363930.roa File: 3230322e3138392e33322e302f32322d3332203d3e20313337363930.roa (raw, json) Hash identifier: 4i4FSEybTioj1V2sTCq+7obB9sLuJf2pf8I6Vq9j4yk= Subject key identifier: B2:E5:F0:84:32:B5:A8:38:7A:A1:8A:F9:B4:52:18:E8:03:35:31:D1 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 0BC3A813E5E05EA6C9B6B3D60EB7A567EDF432EA Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e33322e302f32322d3332203d3e20313337363930.roa Signing time: Tue 20 Jan 2026 02:20:16 +0000 ROA not before: Tue 20 Jan 2026 02:15:16 +0000 ROA not after: Tue 19 Jan 2027 02:20:16 +0000 asID: 137690 IP address blocks: 202.189.32.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c3:a8:13:e5:e0:5e:a6:c9:b6:b3:d6:0e:b7:a5:67:ed:f4:32:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jan 20 02:15:16 2026 GMT Not After : Jan 19 02:20:16 2027 GMT Subject: CN=B2E5F08432B5A8387AA18AF9B45218E8033531D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:bd:df:db:19:00:85:c4:d3:1d:01:c7:cb: 37:fc:62:a9:76:aa:d0:4e:ed:b4:40:82:c7:c6:3b: fc:d0:0d:36:c1:f7:24:82:bf:4b:e4:b7:e0:ff:9b: 70:f5:1c:1e:18:fd:97:63:30:39:16:50:5c:3a:18: 0b:28:cc:85:92:26:78:11:82:64:ad:35:2b:b7:68: 6b:9c:55:87:f6:b0:9e:5e:f6:93:c8:a3:dc:04:a4: 40:3d:d7:1b:ca:86:97:45:78:4d:39:92:0b:c6:c2: 20:16:5b:70:79:90:5f:91:e5:eb:14:aa:7c:d7:bd: 9d:32:2f:d9:62:3a:f3:e2:2f:bb:81:34:35:5c:b4: 7c:33:01:33:94:48:70:c2:22:26:5a:68:b1:5e:b1: 8f:19:61:de:90:e1:f9:4b:97:ce:53:27:48:9a:71: 14:e4:35:fa:1b:f2:c9:99:c7:5b:ba:42:76:05:81: 9c:62:30:1c:bb:ee:98:80:05:d8:3a:e1:e9:3e:df: 2c:a8:07:f9:94:ca:9d:1c:51:5f:30:b2:90:74:cb: a7:0a:b2:af:ff:1d:48:db:34:bb:a4:ef:b1:14:8d: 96:47:5e:71:27:66:ad:a9:e2:b7:01:3e:69:78:b2: c6:bb:81:64:fe:f3:17:34:69:ce:b1:7a:d2:85:42: ca:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E5:F0:84:32:B5:A8:38:7A:A1:8A:F9:B4:52:18:E8:03:35:31:D1 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e33322e302f32322d3332203d3e20313337363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.32.0/22 Signature Algorithm: sha256WithRSAEncryption d1:13:eb:88:42:01:6b:be:45:3d:3e:41:ea:f5:eb:0d:a8:db: b3:2f:41:8f:08:d8:de:74:78:c1:2c:1a:4c:ac:fe:0e:fc:e9: d8:73:36:cb:72:94:1a:31:d6:ad:c0:89:a6:a3:7a:8c:25:5d: ac:35:1b:11:ac:f2:f9:4f:56:c4:8b:0b:59:35:8c:bc:97:8b: 4c:e4:01:47:0c:9b:02:20:81:b0:c7:15:83:3d:83:0f:3c:7f: bd:cd:e8:8a:9c:a3:a9:24:3f:7b:96:d3:3f:21:33:b5:a0:fa: 56:f8:ad:13:d4:db:20:c4:00:87:10:c9:dc:fd:29:6a:98:aa: 21:c4:f8:90:e8:9d:82:4e:52:c1:df:e2:b2:b6:f4:f9:25:c2: c7:9f:f7:a6:39:4f:20:1a:3a:30:89:6c:d5:28:f5:fa:d5:83: 59:4f:fc:79:c8:ec:00:a6:40:35:e6:da:32:9b:f9:9d:d4:64: ec:61:a6:62:4d:f2:78:b2:eb:e1:73:7e:b7:1c:5f:ec:dd:00: 9d:5a:71:c0:b7:e5:a1:11:73:4d:58:e3:7b:4c:3b:76:4e:6f: 1f:68:70:5c:66:21:1d:d0:06:d4:8a:88:4e:89:a0:de:3f:07: c1:9c:67:32:f6:aa:e3:30:01:7f:fe:93:53:52:87:3d:5d:3d: d1:7d:b6:74 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUC8OoE+XgXqbJtrPWDrelZ+30MuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjAxMjAwMjE1MTZaFw0yNzAxMTkwMjIwMTZaMDMxMTAvBgNV BAMTKEIyRTVGMDg0MzJCNUE4Mzg3QUExOEFGOUI0NTIxOEU4MDMzNTMxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRdb3f2xkAhcTTHQHHyzf8Yql2 qtBO7bRAgsfGO/zQDTbB9ySCv0vkt+D/m3D1HB4Y/ZdjMDkWUFw6GAsozIWSJngR gmStNSu3aGucVYf2sJ5e9pPIo9wEpEA91xvKhpdFeE05kgvGwiAWW3B5kF+R5esU qnzXvZ0yL9liOvPiL7uBNDVctHwzATOUSHDCIiZaaLFesY8ZYd6Q4flLl85TJ0ia cRTkNfob8smZx1u6QnYFgZxiMBy77piABdg64ek+3yyoB/mUyp0cUV8wspB0y6cK sq//HUjbNLuk77EUjZZHXnEnZq2p4rcBPml4ssa7gWT+8xc0ac6xetKFQspZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUsuXwhDK1qDh6oYr5tFIY6AM1MdEwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzMzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM2MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsq9IDANBgkqhkiG9w0BAQsFAAOCAQEA0RPriEIBa75FPT5B6vXr Dajbsy9BjwjY3nR4wSwaTKz+Dvzp2HM2y3KUGjHWrcCJpqN6jCVdrDUbEazy+U9W xIsLWTWMvJeLTOQBRwybAiCBsMcVgz2DDzx/vc3oipyjqSQ/e5bTPyEztaD6Vvit E9TbIMQAhxDJ3P0papiqIcT4kOidgk5Swd/isrb0+SXCx5/3pjlPIBo6MIls1Sj1 +tWDWU/8ecjsAKZANebaMpv5ndRk7GGmYk3yeLLr4XN+txxf7N0AnVpxwLfloRFz TVjje0w7dk5vH2hwXGYhHdAG1IqITomg3j8HwZxnMvaq4zABf/6TU1KHPV090X22 dA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:34 2026 by rpki-client