This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e2039383038.roa File: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (raw, json) Hash identifier: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk= Subject key identifier: F9:6E:2E:FC:EB:00:04:D5:4B:C4:92:39:E4:2A:B8:5F:4C:33:11:E4 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 731BE6013259BC7AAFF3E8A250BD921D34CD3A59 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e2039383038.roa Signing time: Tue 20 Jan 2026 02:15:33 +0000 ROA not before: Tue 20 Jan 2026 02:10:33 +0000 ROA not after: Tue 19 Jan 2027 02:15:33 +0000 asID: 9808 IP address blocks: 202.46.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1b:e6:01:32:59:bc:7a:af:f3:e8:a2:50:bd:92:1d:34:cd:3a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Jan 20 02:10:33 2026 GMT Not After : Jan 19 02:15:33 2027 GMT Subject: CN=F96E2EFCEB0004D54BC49239E42AB85F4C3311E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:4c:3f:55:ca:5d:c1:98:67:62:31:a4:9d: 77:bd:32:b2:f1:9d:c2:88:09:01:83:6b:b4:51:03: ed:32:13:a9:ed:f4:5f:6f:cd:86:cb:98:e2:d9:e2: 8c:b0:3a:42:a6:00:2a:87:09:ab:37:5c:0e:3d:7f: cc:2c:20:69:4e:4d:57:c1:b4:17:aa:fa:5f:b8:7a: bb:d4:80:44:b6:f7:ff:67:5f:60:38:1f:5c:91:37: b6:04:cc:c3:99:85:24:18:80:b0:89:8f:bb:a9:17: 83:e0:9d:27:fe:02:4f:37:8c:4b:87:65:f3:d7:e7: 5d:20:c2:91:b1:6b:75:34:86:21:2b:6c:41:cd:ba: 81:35:92:76:cb:80:bc:06:42:6e:f8:71:3c:9d:3e: 3d:dd:e9:2d:f0:7d:21:69:e8:dd:f1:00:b7:ff:8f: 4f:88:a7:7b:ae:ab:3d:c7:dd:1e:f0:8a:02:cc:5e: 43:a4:e8:46:37:98:f0:82:00:9b:59:d1:3b:54:6b: 5b:4d:87:d2:e2:c6:14:57:27:1e:1a:db:94:e6:0a: 4a:b9:f6:dc:1f:46:a6:48:c2:cb:28:68:d1:cb:1f: 93:bf:06:2e:d8:5b:ec:d7:c2:45:51:26:7a:b3:7b: f3:13:68:d5:f5:c1:09:d1:9b:f2:0d:f8:a0:f2:c5: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6E:2E:FC:EB:00:04:D5:4B:C4:92:39:E4:2A:B8:5F:4C:33:11:E4 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.224.0/20 Signature Algorithm: sha256WithRSAEncryption b8:d6:06:ed:56:db:3d:45:40:1e:49:9a:f8:0f:45:9d:7d:6c: ad:e6:47:e6:7e:03:e0:33:a3:05:ad:8b:d7:bc:d9:4a:19:13: b0:95:f7:09:51:88:9b:8d:30:cd:f5:f7:bd:40:4a:67:19:b8: 31:64:bb:4f:8b:52:ac:d3:aa:7e:2a:a5:e1:2c:a4:bf:68:b6: d2:8b:bf:37:47:d2:ef:65:ab:27:60:28:77:7a:0a:49:f9:69: 3b:a0:37:c5:54:5c:90:b6:96:bc:56:00:18:d2:b0:bb:23:13: cb:b5:66:3f:66:b9:db:9c:59:bd:f6:7c:81:ad:9c:6c:72:5b: a6:5a:ba:f1:bd:b6:a2:02:9b:74:bd:74:a3:75:81:31:96:50: 19:bf:f6:35:2b:b7:70:d9:3d:e0:08:a5:8f:91:4f:d7:f7:81: a9:46:bb:aa:a7:1c:95:18:c8:de:a2:f4:2a:fd:0e:dd:17:2b: a5:4a:f5:d2:3f:e5:f2:3c:78:01:b2:55:a1:30:05:c6:68:d2: 15:d0:78:be:b4:4b:be:c9:6b:02:3c:38:81:52:6a:00:9a:0d: e7:a8:bf:55:b9:e1:cf:4a:42:c2:bd:d8:a0:70:71:b1:d4:60: 99:de:58:fd:be:c5:2a:e3:3c:2a:b8:bc:c7:22:37:ff:23:6e: e0:ad:ef:fa -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUcxvmATJZvHqv8+iiUL2SHTTNOlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjAxMjAwMjEwMzNaFw0yNzAxMTkwMjE1MzNaMDMxMTAvBgNV BAMTKEY5NkUyRUZDRUIwMDA0RDU0QkM0OTIzOUU0MkFCODVGNEMzMzExRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2Uw/VcpdwZhnYjGknXe9MrLx ncKICQGDa7RRA+0yE6nt9F9vzYbLmOLZ4oywOkKmACqHCas3XA49f8wsIGlOTVfB tBeq+l+4ervUgES29/9nX2A4H1yRN7YEzMOZhSQYgLCJj7upF4PgnSf+Ak83jEuH ZfPX510gwpGxa3U0hiErbEHNuoE1knbLgLwGQm74cTydPj3d6S3wfSFp6N3xALf/ j0+Ip3uuqz3H3R7wigLMXkOk6EY3mPCCAJtZ0TtUa1tNh9LixhRXJx4a25TmCkq5 9twfRqZIwssoaNHLH5O/Bi7YW+zXwkVRJnqze/MTaNX1wQnRm/IN+KDyxc8PAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU+W4u/OsABNVLxJI55Cq4X0wzEeQwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MTkyOTYzLzAvMzIzMDMyMmUzNDM2 MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMou4DANBgkqhkiG9w0BAQsFAAOCAQEAuNYG7VbbPUVAHkma+A9FnX1sreZH 5n4D4DOjBa2L17zZShkTsJX3CVGIm40wzfX3vUBKZxm4MWS7T4tSrNOqfiql4Syk v2i20ou/N0fS72WrJ2Aod3oKSflpO6A3xVRckLaWvFYAGNKwuyMTy7VmP2a525xZ vfZ8ga2cbHJbplq68b22ogKbdL10o3WBMZZQGb/2NSu3cNk94Ailj5FP1/eBqUa7 qqcclRjI3qL0Kv0O3RcrpUr10j/l8jx4AbJVoTAFxmjSFdB4vrRLvslrAjw4gVJq AJoN56i/Vbnhz0pCwr3YoHBxsdRgmd5Y/b7FKuM8Kri8xyI3/yNu4K3v+g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:27 2026 by rpki-client