This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34342e302f32322d3332203d3e20313337363930.roa File: 3230322e3138392e34342e302f32322d3332203d3e20313337363930.roa (raw, json) Hash identifier: X++pwqsSWbzCsFfKHx63zaTXj3/7WcDlIS7dIyXvltA= Subject key identifier: 13:3A:12:9B:76:91:AF:4B:70:2C:D9:7F:FC:B1:6C:04:75:C2:C4:E9 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 6B3A14BA0DCF8C6AE5DD5B367F609BA26097DA22 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34342e302f32322d3332203d3e20313337363930.roa Signing time: Tue 20 Jan 2026 02:20:16 +0000 ROA not before: Tue 20 Jan 2026 02:15:16 +0000 ROA not after: Tue 19 Jan 2027 02:20:16 +0000 asID: 137690 IP address blocks: 202.189.44.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 13:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3a:14:ba:0d:cf:8c:6a:e5:dd:5b:36:7f:60:9b:a2:60:97:da:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jan 20 02:15:16 2026 GMT Not After : Jan 19 02:20:16 2027 GMT Subject: CN=133A129B7691AF4B702CD97FFCB16C0475C2C4E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:f9:46:a7:bb:bd:1c:e4:fb:b8:9a:0f:c6: 3c:b0:8f:a6:7e:a2:04:bb:bf:30:1a:dd:c9:e0:3e: ee:2f:d6:e1:76:7c:2d:16:07:ef:70:c5:22:3b:b7: e4:a0:4f:63:ba:b4:ba:17:a1:cb:31:eb:ad:c1:68: 75:e0:6d:39:ea:70:c1:0e:57:f5:b5:5b:c8:c0:25: fc:32:06:8b:5d:f1:7c:02:56:e8:6a:06:ce:69:19: d8:92:c0:2c:28:76:00:f8:f2:bc:bb:31:a6:24:85: 4f:91:89:c8:6e:9f:a1:6b:35:ff:0e:11:42:95:5d: de:de:47:8f:43:40:c2:68:96:92:88:7e:fb:87:dc: e0:0a:92:f7:b2:93:17:75:64:05:22:4f:59:2a:29: 30:fe:f2:2a:52:56:91:d8:11:1c:c5:33:91:75:83: 0d:4c:72:ee:de:5e:42:69:b6:5c:ea:1c:39:d4:05: 21:96:af:bd:3e:7c:9f:65:22:92:22:f1:9c:f7:67: 67:fe:3c:54:bd:f5:4b:5d:7a:21:60:1b:ee:58:a8: 41:8a:b6:a4:a9:ae:fa:41:34:61:9e:f1:35:00:10: 0f:d0:10:17:f2:4a:4c:83:66:dc:23:83:63:2e:7b: 32:cf:1d:f2:d5:9a:2a:c2:19:9a:b9:74:b4:11:87: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3A:12:9B:76:91:AF:4B:70:2C:D9:7F:FC:B1:6C:04:75:C2:C4:E9 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34342e302f32322d3332203d3e20313337363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.44.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:56:79:78:99:d5:06:93:49:80:e6:79:e9:88:27:aa:c4:c0: e6:cf:95:80:83:30:bb:05:4c:c1:86:94:73:6c:69:70:ca:c3: 1b:d8:e9:df:64:99:f1:38:9e:1f:89:e7:03:58:9e:83:5f:49: 75:ec:d6:ae:70:35:45:3e:03:eb:8c:c7:fd:16:92:6b:5a:16: 8a:38:20:84:aa:a2:67:57:e5:2f:6e:f4:e5:41:cc:81:4e:7d: 10:c7:ac:0a:1b:27:8f:57:ab:27:c5:38:4f:dd:12:c2:b4:9c: fe:82:83:f9:7d:22:d2:68:0b:e9:5b:94:0a:a6:a5:87:ba:08: 20:ee:a5:86:b7:7e:d4:20:51:fc:7b:82:98:59:f7:3c:0e:05: 90:e0:57:b6:1c:6a:07:aa:20:25:2c:eb:75:87:75:59:82:d3: f6:28:9b:42:b6:22:b3:8e:80:c5:14:7f:ab:cf:60:87:75:78: 84:d3:25:c0:c9:d7:ee:e7:8c:21:91:cf:b3:41:5e:f2:e7:15: 02:31:b1:48:83:0f:57:10:63:81:2e:23:8e:0c:8a:f3:dd:b4: 4b:a1:49:c7:c6:c1:7c:57:f5:27:67:08:d1:92:38:71:ac:3b: 69:68:ec:0c:e4:77:2d:0d:f8:11:a2:0d:03:94:3d:d4:e1:0a: 32:16:9e:e4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUazoUug3PjGrl3Vs2f2CbomCX2iIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjAxMjAwMjE1MTZaFw0yNzAxMTkwMjIwMTZaMDMxMTAvBgNV BAMTKDEzM0ExMjlCNzY5MUFGNEI3MDJDRDk3RkZDQjE2QzA0NzVDMkM0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcflGp7u9HOT7uJoPxjywj6Z+ ogS7vzAa3cngPu4v1uF2fC0WB+9wxSI7t+SgT2O6tLoXocsx663BaHXgbTnqcMEO V/W1W8jAJfwyBotd8XwCVuhqBs5pGdiSwCwodgD48ry7MaYkhU+Richun6FrNf8O EUKVXd7eR49DQMJolpKIfvuH3OAKkveykxd1ZAUiT1kqKTD+8ipSVpHYERzFM5F1 gw1Mcu7eXkJptlzqHDnUBSGWr70+fJ9lIpIi8Zz3Z2f+PFS99UtdeiFgG+5YqEGK tqSprvpBNGGe8TUAEA/QEBfySkyDZtwjg2MuezLPHfLVmirCGZq5dLQRh3u5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUEzoSm3aRr0twLNl//LFsBHXCxOkwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM2MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsq9LDANBgkqhkiG9w0BAQsFAAOCAQEAWlZ5eJnVBpNJgOZ56Ygn qsTA5s+VgIMwuwVMwYaUc2xpcMrDG9jp32SZ8TieH4nnA1ieg19JdezWrnA1RT4D 64zH/RaSa1oWijgghKqiZ1flL2705UHMgU59EMesChsnj1erJ8U4T90SwrSc/oKD +X0i0mgL6VuUCqalh7oIIO6lhrd+1CBR/HuCmFn3PA4FkOBXthxqB6ogJSzrdYd1 WYLT9iibQrYis46AxRR/q89gh3V4hNMlwMnX7ueMIZHPs0Fe8ucVAjGxSIMPVxBj gS4jjgyK8920S6FJx8bBfFf1J2cI0ZI4caw7aWjsDOR3LQ34EaINA5Q91OEKMhae 5A== -----END CERTIFICATE-----Generated at Sun Jan 25 20:02:54 2026 by rpki-client