This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa File: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (raw, json) Hash identifier: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE= Subject key identifier: F7:E1:E4:7D:13:A6:15:AF:EC:B0:75:57:0B:C2:FD:E9:AC:41:35:7A Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 5BAE6E4AE9751001C9F02EE068DED79A245623A5 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa Signing time: Tue 20 Jan 2026 02:26:06 +0000 ROA not before: Tue 20 Jan 2026 02:21:06 +0000 ROA not after: Tue 19 Jan 2027 02:26:06 +0000 asID: 151232 IP address blocks: 202.58.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ae:6e:4a:e9:75:10:01:c9:f0:2e:e0:68:de:d7:9a:24:56:23:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Jan 20 02:21:06 2026 GMT Not After : Jan 19 02:26:06 2027 GMT Subject: CN=F7E1E47D13A615AFECB075570BC2FDE9AC41357A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:74:5e:b4:29:25:3e:c1:5b:4c:53:75:f7: 6f:e2:3d:0a:0b:fa:25:e6:f1:1c:70:00:e8:c7:4a: 02:06:23:4a:b4:63:80:c6:37:8e:b3:f6:f0:37:87: e8:4f:9b:34:bd:67:97:47:a4:96:b5:ca:b3:07:71: d3:1f:d1:76:4d:1a:e6:a8:7f:f1:ac:ee:88:5c:d4: 35:0d:4b:e0:04:24:d5:b9:e3:c4:af:ed:b5:0c:0f: 01:13:cd:b3:56:87:45:07:6d:67:74:40:23:97:14: 82:76:a2:48:8d:89:e7:ba:62:df:df:51:20:72:f3: f6:c2:c0:b8:47:13:0d:96:a5:2b:61:ee:bc:cf:6d: 8b:96:88:0c:c7:06:cb:f3:49:f6:41:b1:1b:6b:fe: 5b:db:2a:43:a5:99:4b:85:72:b6:71:bf:fd:3a:f2: 17:42:23:db:c9:e2:02:8c:5e:3a:35:15:c8:e5:96: eb:99:d7:73:78:7d:73:d6:b4:53:b4:45:9e:83:03: 31:a3:a3:48:1d:6b:10:be:3d:d0:65:60:1c:3a:29: ba:a0:c5:09:95:29:82:0a:87:9f:00:6a:fd:be:c7: 9d:12:3f:4e:e9:29:ec:1f:ce:57:c6:b5:0e:aa:84: 5f:a0:33:3f:53:db:97:19:3e:a5:d9:87:d4:ff:63: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E1:E4:7D:13:A6:15:AF:EC:B0:75:57:0B:C2:FD:E9:AC:41:35:7A X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.58.122.0/23 Signature Algorithm: sha256WithRSAEncryption 38:41:2e:4d:2c:cf:bd:75:a1:93:86:0f:13:04:7c:7e:4a:93: e0:ee:06:4d:b7:aa:a9:28:e9:54:e7:8b:aa:21:03:cd:4e:f0: 1b:9c:51:d8:55:27:ee:70:bc:5d:5a:99:ae:9b:90:c2:af:b4: 7f:ae:5a:2b:7e:01:27:e7:01:d3:f7:b0:d9:df:2f:aa:0c:19: 01:5f:f5:04:ba:dd:09:6b:ec:40:e6:13:a3:63:0b:6d:23:22: 25:24:27:c2:a2:36:01:4b:27:e5:d3:f5:2a:c2:33:9f:e6:98: 51:5b:23:c0:76:ec:0d:29:7a:e5:b2:6a:35:58:0d:ae:24:19: 7d:f3:a6:1f:cb:f0:aa:00:4e:38:19:c2:19:11:32:24:9c:16: 51:05:76:79:d6:b3:f0:75:b0:98:3b:9f:70:0f:bc:58:ed:7f: 6e:57:14:77:b4:a0:14:97:fa:c9:ac:a3:45:4c:cf:24:05:1a: b9:44:1a:26:a9:b8:fd:e0:c0:52:08:ef:7d:53:1a:88:97:82: 91:87:d4:5d:3f:53:bb:e9:3e:0a:e6:ba:6b:2d:b1:8f:ee:68: e4:5c:ff:25:8f:fa:eb:3b:e0:bd:e6:8a:30:7c:cf:c8:fe:6f: af:24:0b:8e:17:be:2a:8c:51:e4:44:1b:d7:8e:eb:6a:7c:9d: 1b:2a:0d:37 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUW65uSul1EAHJ8C7gaN7XmiRWI6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjAxMjAwMjIxMDZaFw0yNzAxMTkwMjI2MDZaMDMxMTAvBgNV BAMTKEY3RTFFNDdEMTNBNjE1QUZFQ0IwNzU1NzBCQzJGREU5QUM0MTM1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KHRetCklPsFbTFN192/iPQoL +iXm8RxwAOjHSgIGI0q0Y4DGN46z9vA3h+hPmzS9Z5dHpJa1yrMHcdMf0XZNGuao f/Gs7ohc1DUNS+AEJNW548Sv7bUMDwETzbNWh0UHbWd0QCOXFIJ2okiNiee6Yt/f USBy8/bCwLhHEw2WpSth7rzPbYuWiAzHBsvzSfZBsRtr/lvbKkOlmUuFcrZxv/06 8hdCI9vJ4gKMXjo1FcjlluuZ13N4fXPWtFO0RZ6DAzGjo0gdaxC+PdBlYBw6Kbqg xQmVKYIKh58Aav2+x50SP07pKewfzlfGtQ6qhF+gMz9T25cZPqXZh9T/Y9ETAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU9+HkfROmFa/ssHVXC8L96axBNXowHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zMjMwMzIyZTM1 MzgyZTMxMzIzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAco6ejANBgkqhkiG9w0BAQsFAAOCAQEAOEEuTSzPvXWhk4YPEwR8 fkqT4O4GTbeqqSjpVOeLqiEDzU7wG5xR2FUn7nC8XVqZrpuQwq+0f65aK34BJ+cB 0/ew2d8vqgwZAV/1BLrdCWvsQOYTo2MLbSMiJSQnwqI2AUsn5dP1KsIzn+aYUVsj wHbsDSl65bJqNVgNriQZffOmH8vwqgBOOBnCGREyJJwWUQV2edaz8HWwmDufcA+8 WO1/blcUd7SgFJf6yayjRUzPJAUauUQaJqm4/eDAUgjvfVMaiJeCkYfUXT9Tu+k+ Cua6ay2xj+5o5Fz/JY/66zvgveaKMHzPyP5vryQLjhe+KoxR5EQb147ranydGyoN Nw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:40 2026 by rpki-client