This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e203337393638.roa File: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (raw, json) Hash identifier: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc= Subject key identifier: AB:D2:D3:5F:A2:D7:0F:70:65:E1:5F:47:16:6C:E2:1F:BD:36:F4:00 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 32297924EA0382B913BD4E56E11A0C480DDC60AC Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e203337393638.roa Signing time: Tue 20 Jan 2026 02:15:32 +0000 ROA not before: Tue 20 Jan 2026 02:10:32 +0000 ROA not after: Tue 19 Jan 2027 02:15:32 +0000 asID: 37968 IP address blocks: 202.46.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 07:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:29:79:24:ea:03:82:b9:13:bd:4e:56:e1:1a:0c:48:0d:dc:60:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Jan 20 02:10:32 2026 GMT Not After : Jan 19 02:15:32 2027 GMT Subject: CN=ABD2D35FA2D70F7065E15F47166CE21FBD36F400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:5e:91:9a:05:da:03:73:9b:db:69:60:98: 1e:09:19:fd:6f:35:42:74:49:9d:1b:10:a1:01:e4: 89:e7:75:3e:72:ad:3b:2c:46:d4:59:68:65:92:ab: 19:57:4d:1f:b6:d0:78:0a:d1:a9:e7:d3:05:2f:60: e3:18:a5:70:c3:b7:f2:e9:6a:33:4c:3c:76:97:01: ca:f7:70:38:d3:b9:76:99:b6:6f:12:79:78:80:e3: bc:90:3d:99:1e:9a:12:0f:0a:76:97:e4:c3:0a:f2: 64:67:07:0e:d5:6b:56:0c:56:a1:82:87:0f:43:35: fc:e3:2d:a0:36:3d:5b:c0:27:b8:3e:73:b7:dc:a3: 44:43:75:eb:71:d4:f6:b3:af:42:e2:08:8e:a8:48: 8b:fb:54:76:69:06:1b:86:44:c2:e1:36:b3:a4:ec: 7a:d1:a3:de:e7:85:62:d5:f5:91:1b:19:1f:45:56: 29:ac:19:af:be:eb:4d:9c:87:5c:2d:6d:14:29:4b: 3c:c9:d5:48:c2:db:e6:28:1b:a7:79:86:90:36:ec: 39:f1:1f:54:16:10:c5:b6:11:c3:28:0f:8e:dd:ae: 8d:b9:48:6c:ab:76:89:3f:e1:87:b9:cb:35:0e:fb: c5:f7:a9:5c:a3:e1:91:07:a7:fd:c8:23:dd:e7:74: ce:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D2:D3:5F:A2:D7:0F:70:65:E1:5F:47:16:6C:E2:1F:BD:36:F4:00 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e203337393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.224.0/20 Signature Algorithm: sha256WithRSAEncryption c5:16:a3:09:51:34:3e:ca:a0:73:6e:fc:c0:2d:2f:6d:9b:0c: 28:9a:0d:68:1e:e6:a0:71:9e:6c:cd:43:d2:61:88:d5:37:57: c6:5d:9c:54:da:bc:a2:d1:2c:14:1b:4b:00:89:5e:23:29:f5: 9a:c0:26:c7:e9:1d:25:30:35:f2:f7:8d:32:dd:14:49:99:92: 3e:aa:c8:be:0a:09:cb:f7:cb:a0:cb:e0:5b:08:6f:f7:fd:71: 6b:15:7a:27:00:68:da:20:d8:8b:7b:31:fc:ed:1d:84:77:f2: 00:88:0e:98:14:45:a0:d3:cd:ee:82:ce:88:23:ca:8a:f0:4b: 64:2d:8f:63:3e:56:39:8c:36:e0:0e:aa:dd:59:a2:91:a5:da: 86:cd:b7:fd:13:88:38:a4:a3:90:34:66:6d:97:f3:80:70:66: bb:c3:9d:b3:4d:7b:ab:dc:12:a6:a1:95:6c:ab:36:4e:ae:21: 3f:9a:ea:bc:11:dc:2f:b2:b6:18:14:f2:4b:8c:bf:ee:ba:12: 79:49:c7:96:24:2d:b2:f8:9a:93:99:a1:1f:ed:f6:b7:25:1e: b4:eb:0d:7b:c5:95:91:c5:23:72:69:22:12:30:2d:86:a9:3d: b4:bc:76:22:79:2a:82:70:6b:d8:dd:b9:2d:6b:37:2e:b1:89: dc:23:23:05 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUMil5JOoDgrkTvU5W4RoMSA3cYKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjAxMjAwMjEwMzJaFw0yNzAxMTkwMjE1MzJaMDMxMTAvBgNV BAMTKEFCRDJEMzVGQTJENzBGNzA2NUUxNUY0NzE2NkNFMjFGQkQzNkY0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncl6RmgXaA3Ob22lgmB4JGf1v NUJ0SZ0bEKEB5InndT5yrTssRtRZaGWSqxlXTR+20HgK0ann0wUvYOMYpXDDt/Lp ajNMPHaXAcr3cDjTuXaZtm8SeXiA47yQPZkemhIPCnaX5MMK8mRnBw7Va1YMVqGC hw9DNfzjLaA2PVvAJ7g+c7fco0RDdetx1Pazr0LiCI6oSIv7VHZpBhuGRMLhNrOk 7HrRo97nhWLV9ZEbGR9FVimsGa++602ch1wtbRQpSzzJ1UjC2+YoG6d5hpA27Dnx H1QWEMW2EcMoD47dro25SGyrdok/4Ye5yzUO+8X3qVyj4ZEHp/3II93ndM7zAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUq9LTX6LXD3Bl4V9HFmziH7029AAwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzE5Mjk2My8wLzMyMzAzMjJlMzQz NjJlMzIzMjM0MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBMou4DANBgkqhkiG9w0BAQsFAAOCAQEAxRajCVE0Psqgc278wC0vbZsM KJoNaB7moHGebM1D0mGI1TdXxl2cVNq8otEsFBtLAIleIyn1msAmx+kdJTA18veN Mt0USZmSPqrIvgoJy/fLoMvgWwhv9/1xaxV6JwBo2iDYi3sx/O0dhHfyAIgOmBRF oNPN7oLOiCPKivBLZC2PYz5WOYw24A6q3VmikaXahs23/ROIOKSjkDRmbZfzgHBm u8Ods017q9wSpqGVbKs2Tq4hP5rqvBHcL7K2GBTyS4y/7roSeUnHliQtsviak5mh H+32tyUetOsNe8WVkcUjcmkiEjAthqk9tLx2InkqgnBr2N25LWs3LrGJ3CMjBQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:09 2026 by rpki-client