This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e33362e302f32322d3332203d3e20313337363930.roa File: 3230322e3138392e33362e302f32322d3332203d3e20313337363930.roa (raw, json) Hash identifier: tBDon7qwNeWrPA26OZBGPlmQowAGhGqE/GeAb1bpS10= Subject key identifier: 45:AB:69:32:51:27:56:B7:A9:AC:C5:82:34:98:AC:EA:A3:BA:C1:C7 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 1F4D39F4FA6F0BDF353976C580CD0174BAC6EFC9 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e33362e302f32322d3332203d3e20313337363930.roa Signing time: Tue 20 Jan 2026 02:20:16 +0000 ROA not before: Tue 20 Jan 2026 02:15:16 +0000 ROA not after: Tue 19 Jan 2027 02:20:16 +0000 asID: 137690 IP address blocks: 202.189.36.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4d:39:f4:fa:6f:0b:df:35:39:76:c5:80:cd:01:74:ba:c6:ef:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jan 20 02:15:16 2026 GMT Not After : Jan 19 02:20:16 2027 GMT Subject: CN=45AB6932512756B7A9ACC5823498ACEAA3BAC1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:f9:46:b6:de:9e:da:3e:ed:c6:89:46:df: 5d:a6:99:02:d7:23:fd:ff:25:48:44:47:78:d2:ad: d0:36:99:0e:a1:26:40:54:9c:9e:9b:2d:4c:1b:d7: 4e:59:d9:92:57:79:fa:e6:ad:c4:f1:4f:8e:f3:84: 0b:0a:23:23:4b:8d:5b:2e:79:cd:b1:34:d6:aa:51: 76:9a:c2:c0:de:00:e4:53:75:c0:32:36:6e:2f:54: d4:56:69:ec:f6:c6:8a:88:1f:bb:8a:09:10:f9:c6: 09:43:15:3a:20:09:69:1c:4b:13:87:85:9b:5b:e0: 05:08:e6:8e:98:58:d9:b2:d7:62:ed:31:25:42:b4: 11:0e:bf:ea:9b:d7:05:e6:b5:33:87:2a:bb:d4:47: b7:b8:37:0f:cc:c5:b1:1d:78:e4:45:9d:da:db:59: a5:e6:b0:44:b5:c3:db:76:7e:42:28:35:6b:61:a2: df:97:95:80:a2:bd:2f:5b:d7:a1:73:fe:9e:f4:ab: bc:72:4e:88:6e:b9:7b:e4:5b:30:1d:32:57:db:93: 60:6d:13:f8:e6:39:0d:74:a0:65:c8:0d:0e:a0:aa: 19:36:79:59:08:2d:7e:ce:e1:b9:3d:ce:a5:ed:94: 21:20:d3:60:ef:a7:d2:01:89:65:b6:c1:be:80:71: 2d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AB:69:32:51:27:56:B7:A9:AC:C5:82:34:98:AC:EA:A3:BA:C1:C7 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e33362e302f32322d3332203d3e20313337363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.36.0/22 Signature Algorithm: sha256WithRSAEncryption 15:11:6d:8f:1c:2b:8d:0a:ce:37:e4:04:37:01:02:67:b3:cf: c8:97:4c:ad:b8:33:a8:54:4c:c3:56:7e:05:89:ba:3e:b7:96: f6:73:25:60:04:01:69:88:54:c4:c5:ce:15:1b:5d:a0:5e:cd: 9f:69:7e:33:0e:ef:8b:5d:e4:f3:da:6b:be:09:59:c4:0c:a2: 6b:00:57:33:a7:9e:ec:4b:d1:5c:5b:7c:ac:27:b4:bf:f9:9d: ce:d1:af:d9:40:e2:2a:41:6c:58:65:38:59:ef:33:3a:b2:5d: b1:ba:80:52:61:e0:47:0d:5d:c9:91:a8:9d:8b:f7:71:82:57: 2b:d7:80:03:21:20:f7:13:34:b5:c0:c3:e9:04:20:9c:5a:1f: a8:99:e1:64:c5:ee:86:88:6e:fc:77:58:b8:ed:3e:b0:94:a5: 57:a2:7e:ed:8e:12:2e:1a:98:ad:4c:9f:6a:23:3a:4c:c3:bf: f6:b7:2e:a2:73:fa:9d:a5:88:62:07:b5:16:2c:5e:c0:d7:20: ed:eb:10:43:cf:94:c7:b3:76:a7:00:21:d3:0d:6e:e7:f0:09: 4b:30:cd:9f:34:41:bd:34:26:b9:9a:96:7f:b1:1c:5b:91:7a: c1:a4:45:f0:8d:cd:92:91:28:d3:29:ca:c0:73:d5:ad:19:c5: ae:46:68:37 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUH0059PpvC981OXbFgM0BdLrG78kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjAxMjAwMjE1MTZaFw0yNzAxMTkwMjIwMTZaMDMxMTAvBgNV BAMTKDQ1QUI2OTMyNTEyNzU2QjdBOUFDQzU4MjM0OThBQ0VBQTNCQUMxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0PlGtt6e2j7txolG312mmQLX I/3/JUhER3jSrdA2mQ6hJkBUnJ6bLUwb105Z2ZJXefrmrcTxT47zhAsKIyNLjVsu ec2xNNaqUXaawsDeAORTdcAyNm4vVNRWaez2xoqIH7uKCRD5xglDFTogCWkcSxOH hZtb4AUI5o6YWNmy12LtMSVCtBEOv+qb1wXmtTOHKrvUR7e4Nw/MxbEdeORFndrb WaXmsES1w9t2fkIoNWthot+XlYCivS9b16Fz/p70q7xyTohuuXvkWzAdMlfbk2Bt E/jmOQ10oGXIDQ6gqhk2eVkILX7O4bk9zqXtlCEg02Dvp9IBiWW2wb6AcS1pAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQURatpMlEnVreprMWCNJis6qO6wccwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzMzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM2MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsq9JDANBgkqhkiG9w0BAQsFAAOCAQEAFRFtjxwrjQrON+QENwEC Z7PPyJdMrbgzqFRMw1Z+BYm6PreW9nMlYAQBaYhUxMXOFRtdoF7Nn2l+Mw7vi13k 89prvglZxAyiawBXM6ee7EvRXFt8rCe0v/mdztGv2UDiKkFsWGU4We8zOrJdsbqA UmHgRw1dyZGonYv3cYJXK9eAAyEg9xM0tcDD6QQgnFofqJnhZMXuhohu/HdYuO0+ sJSlV6J+7Y4SLhqYrUyfaiM6TMO/9rcuonP6naWIYge1FixewNcg7esQQ8+Ux7N2 pwAh0w1u5/AJSzDNnzRBvTQmuZqWf7EcW5F6waRF8I3NkpEo0ynKwHPVrRnFrkZo Nw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:31 2026 by rpki-client