This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34302e302f32322d3332203d3e20313337363930.roa File: 3230322e3138392e34302e302f32322d3332203d3e20313337363930.roa (raw, json) Hash identifier: 7MLtgEQLgz8+JliMrgOq3UgS3iW+w2D5wOJJPHojtII= Subject key identifier: 9E:21:D7:47:AF:21:24:B0:4B:3A:B6:EE:58:D2:5A:5F:E6:41:90:F7 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 5E86FD933070EEF7FE5964EA74FA3F65AAB6E889 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34302e302f32322d3332203d3e20313337363930.roa Signing time: Tue 20 Jan 2026 02:20:15 +0000 ROA not before: Tue 20 Jan 2026 02:15:15 +0000 ROA not after: Tue 19 Jan 2027 02:20:15 +0000 asID: 137690 IP address blocks: 202.189.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:86:fd:93:30:70:ee:f7:fe:59:64:ea:74:fa:3f:65:aa:b6:e8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jan 20 02:15:15 2026 GMT Not After : Jan 19 02:20:15 2027 GMT Subject: CN=9E21D747AF2124B04B3AB6EE58D25A5FE64190F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:ae:fb:1d:b5:12:8e:f9:36:2c:05:aa:82: e4:8f:d0:03:49:f6:9c:68:f8:20:c2:3d:88:ce:07: 64:19:85:dd:dc:c1:24:da:02:6c:8e:5c:6f:22:f5: 8e:4d:17:39:62:9f:12:16:25:57:4a:bf:af:a2:30: 62:32:5a:12:17:03:e7:67:2f:3c:6a:50:9c:c9:9f: c4:01:bd:a4:34:c4:19:58:dc:0a:87:01:82:89:e6: 1e:09:31:7c:d4:bf:2f:82:d6:40:48:67:3e:79:e5: 47:bd:4f:e2:b8:73:25:50:4f:71:c6:13:f3:42:3a: 12:97:59:5d:2d:3a:4d:02:e5:22:ad:3b:1f:33:33: d2:1a:d3:1f:5d:30:4f:31:e8:30:c8:e2:45:4d:b3: aa:4b:00:07:9e:72:ad:bc:fd:41:37:f2:89:d5:30: 38:7a:81:0a:8b:ba:81:56:bd:62:b9:4b:7d:a5:23: 50:62:c3:d7:bf:67:bf:a6:ea:be:5f:a9:90:92:b0: 8c:a6:ca:bf:59:a5:b3:6b:5e:fa:46:a6:fe:d2:c1: ab:27:39:4d:61:ee:5b:2c:29:65:a0:12:89:09:a7: a6:c2:26:68:48:15:5e:e7:e1:35:8b:8f:d8:8a:4e: df:2c:ee:b0:7b:cf:ff:3a:f8:34:cc:c0:82:4c:a1: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:D7:47:AF:21:24:B0:4B:3A:B6:EE:58:D2:5A:5F:E6:41:90:F7 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34302e302f32322d3332203d3e20313337363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.40.0/22 Signature Algorithm: sha256WithRSAEncryption ae:20:94:06:69:08:26:06:be:aa:e6:eb:2d:58:1e:d1:3d:2c: 7a:3a:89:1e:8f:6c:a0:53:46:98:90:63:22:a3:fa:b5:58:e5: 2f:42:f5:a8:f9:92:34:7d:20:32:4f:a2:ef:5d:fb:0b:d9:98: db:09:f8:92:c0:d3:d6:d6:1f:82:54:84:11:95:51:ae:17:0e: 8d:03:1f:07:76:ef:9b:c2:bd:c3:28:4b:e2:b3:e0:cf:88:52: b7:c2:08:bb:9c:83:a6:db:6b:30:21:56:84:c0:85:3d:77:4a: ee:ee:e5:cb:43:73:74:68:c8:38:e3:f0:f4:93:92:33:0d:1e: bb:77:9e:83:40:e7:0e:47:81:c6:19:1a:ef:33:3a:16:dd:8b: f6:cf:25:d4:db:d7:be:7a:18:da:fc:ae:75:a3:4a:c0:71:9e: ba:1a:ca:30:92:27:61:a7:87:c8:16:d3:19:37:c6:4b:ad:dc: db:82:df:ca:b8:91:b5:0e:ca:22:ff:70:79:03:7e:0f:1e:82: e1:ee:e8:6e:16:d1:87:a5:02:16:67:58:ee:c6:d1:51:71:a3: b7:6b:95:86:5e:65:b9:c8:7e:10:df:af:ed:3e:a2:50:08:b4: 82:2e:1e:b7:2d:85:8b:cb:6c:39:64:f2:96:be:ad:08:8c:9f: 7a:31:69:d6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUXob9kzBw7vf+WWTqdPo/Zaq26IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjAxMjAwMjE1MTVaFw0yNzAxMTkwMjIwMTVaMDMxMTAvBgNV BAMTKDlFMjFENzQ3QUYyMTI0QjA0QjNBQjZFRTU4RDI1QTVGRTY0MTkwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNxa77HbUSjvk2LAWqguSP0ANJ 9pxo+CDCPYjOB2QZhd3cwSTaAmyOXG8i9Y5NFzlinxIWJVdKv6+iMGIyWhIXA+dn LzxqUJzJn8QBvaQ0xBlY3AqHAYKJ5h4JMXzUvy+C1kBIZz555Ue9T+K4cyVQT3HG E/NCOhKXWV0tOk0C5SKtOx8zM9Ia0x9dME8x6DDI4kVNs6pLAAeecq28/UE38onV MDh6gQqLuoFWvWK5S32lI1Biw9e/Z7+m6r5fqZCSsIymyr9ZpbNrXvpGpv7Swasn OU1h7lssKWWgEokJp6bCJmhIFV7n4TWLj9iKTt8s7rB7z/86+DTMwIJMofnHAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUniHXR68hJLBLOrbuWNJaX+ZBkPcwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM2MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsq9KDANBgkqhkiG9w0BAQsFAAOCAQEAriCUBmkIJga+qubrLVge 0T0sejqJHo9soFNGmJBjIqP6tVjlL0L1qPmSNH0gMk+i7137C9mY2wn4ksDT1tYf glSEEZVRrhcOjQMfB3bvm8K9wyhL4rPgz4hSt8IIu5yDpttrMCFWhMCFPXdK7u7l y0NzdGjIOOPw9JOSMw0eu3eeg0DnDkeBxhka7zM6Ft2L9s8l1NvXvnoY2vyudaNK wHGeuhrKMJInYaeHyBbTGTfGS63c24LfyriRtQ7KIv9weQN+Dx6C4e7obhbRh6UC FmdY7sbRUXGjt2uVhl5luch+EN+v7T6iUAi0gi4ety2Fi8tsOWTylr6tCIyfejFp 1g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:28 2026 by rpki-client