This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e2034313334.roa File: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (raw, json) Hash identifier: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks= Subject key identifier: D2:6D:25:0A:F7:67:52:0C:7C:D9:CF:5B:C5:1C:1D:7A:96:55:A9:89 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 0F30B519ECD4B60341B57DEDA0B93CA365CA6D74 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e2034313334.roa Signing time: Tue 20 Jan 2026 02:15:32 +0000 ROA not before: Tue 20 Jan 2026 02:10:32 +0000 ROA not after: Tue 19 Jan 2027 02:15:32 +0000 asID: 4134 IP address blocks: 202.46.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:30:b5:19:ec:d4:b6:03:41:b5:7d:ed:a0:b9:3c:a3:65:ca:6d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Jan 20 02:10:32 2026 GMT Not After : Jan 19 02:15:32 2027 GMT Subject: CN=D26D250AF767520C7CD9CF5BC51C1D7A9655A989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:42:37:6c:ef:2c:83:07:28:d3:e5:62:d3: ed:c5:b2:6b:01:12:7a:23:d4:fe:6e:6f:17:59:b2: a1:54:b0:c6:c0:a1:b3:79:22:f9:41:23:4a:5a:9e: e4:94:f1:75:ea:08:87:b2:4c:4d:31:3d:3a:c4:14: ce:7f:bb:5b:aa:6c:27:75:de:57:3a:c1:ba:b2:ec: 8a:63:04:60:69:35:3a:55:9e:72:60:7c:c0:ec:42: b8:e7:26:a9:fa:35:6d:9f:a8:47:c1:ff:f6:1f:d4: cc:2f:3f:e7:02:fc:41:3b:c9:76:9e:15:50:73:5d: 39:43:14:b8:2f:99:9d:ab:1f:49:76:1d:f5:2e:c4: 7f:6a:7e:86:19:0b:25:a1:22:a2:49:dc:ba:fa:bb: 28:bd:e2:e9:98:b2:b0:dc:e7:8a:0a:07:49:45:47: 2e:63:a6:d7:aa:7c:cd:c0:bc:b0:a2:79:78:e7:87: 95:ac:6d:0a:9e:42:7d:ea:0e:00:a5:fb:34:e6:c1: 65:37:f1:28:d4:39:2e:78:2c:18:6a:be:a4:4f:03: 34:e4:69:b7:32:11:86:0f:1f:fc:1e:8c:57:1c:09: 61:b1:e8:21:e2:f5:8c:f4:65:70:21:90:1b:31:63: 0a:70:92:2b:da:9f:98:49:7e:9d:b6:31:b1:b4:eb: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6D:25:0A:F7:67:52:0C:7C:D9:CF:5B:C5:1C:1D:7A:96:55:A9:89 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.224.0/20 Signature Algorithm: sha256WithRSAEncryption 60:11:1a:ed:a8:ce:83:63:dd:da:dc:72:f3:69:35:78:82:42: b9:00:60:7d:a4:f5:5d:16:a5:8f:56:1a:32:78:22:2a:89:de: 28:71:8d:f9:4b:e0:36:4f:09:69:0c:30:be:98:3c:dc:c0:f9: c2:60:1b:1f:a4:8d:45:48:ce:6e:79:13:4d:3a:6a:57:57:d4: 0a:8c:62:06:9c:35:e5:18:2d:42:5c:64:a2:2d:bd:1c:56:4e: 5a:7c:b4:d7:a6:2d:c8:46:56:a0:d5:3b:66:73:08:a3:29:27: 3f:26:0b:9f:ba:29:d1:7f:f6:47:11:2e:42:33:b8:2e:fe:0d: 96:9c:6d:ba:cb:25:2a:40:5f:17:ff:67:a3:f7:78:9a:86:24: 7f:27:13:b5:27:e5:33:8b:71:47:8f:be:fd:ab:86:27:8f:dd: 59:af:8c:ef:0c:e4:bf:d8:d8:80:4a:2a:20:d5:ea:f4:60:6f: 07:e5:38:5a:41:46:b1:26:ed:01:45:26:f9:c9:e8:39:8e:32: ff:2c:18:e6:37:16:ae:9a:51:14:92:ff:d6:2d:15:ef:8e:f4: 4c:f0:e5:be:e9:d8:de:a6:43:d8:f5:ea:d1:11:02:bd:0d:44: 78:82:cc:af:a7:f3:86:d9:2d:3c:b7:65:96:6b:99:a9:76:17: be:75:7d:da -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDzC1GezUtgNBtX3toLk8o2XKbXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjAxMjAwMjEwMzJaFw0yNzAxMTkwMjE1MzJaMDMxMTAvBgNV BAMTKEQyNkQyNTBBRjc2NzUyMEM3Q0Q5Q0Y1QkM1MUMxRDdBOTY1NUE5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TkI3bO8sgwco0+Vi0+3FsmsB Enoj1P5ubxdZsqFUsMbAobN5IvlBI0panuSU8XXqCIeyTE0xPTrEFM5/u1uqbCd1 3lc6wbqy7IpjBGBpNTpVnnJgfMDsQrjnJqn6NW2fqEfB//Yf1MwvP+cC/EE7yXae FVBzXTlDFLgvmZ2rH0l2HfUuxH9qfoYZCyWhIqJJ3Lr6uyi94umYsrDc54oKB0lF Ry5jpteqfM3AvLCieXjnh5WsbQqeQn3qDgCl+zTmwWU38SjUOS54LBhqvqRPAzTk abcyEYYPH/wejFccCWGx6CHi9Yz0ZXAhkBsxYwpwkivan5hJfp22MbG065htAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU0m0lCvdnUgx82c9bxRwdepZVqYkwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MTkyOTYzLzAvMzIzMDMyMmUzNDM2 MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDMxMzMzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMou4DANBgkqhkiG9w0BAQsFAAOCAQEAYBEa7ajOg2Pd2txy82k1eIJCuQBg faT1XRalj1YaMngiKoneKHGN+UvgNk8JaQwwvpg83MD5wmAbH6SNRUjObnkTTTpq V1fUCoxiBpw15RgtQlxkoi29HFZOWny016YtyEZWoNU7ZnMIoyknPyYLn7op0X/2 RxEuQjO4Lv4NlpxtusslKkBfF/9no/d4moYkfycTtSflM4txR4++/auGJ4/dWa+M 7wzkv9jYgEoqINXq9GBvB+U4WkFGsSbtAUUm+cnoOY4y/ywY5jcWrppRFJL/1i0V 7470TPDlvunY3qZD2PXq0RECvQ1EeILMr6fzhtktPLdllmuZqXYXvnV92g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:44 2026 by rpki-client